Hi Carolyn
thanks for helping me out with this. Before I post the logs, I wanted to note a few things.
I cant use IE8 because each time I try getting to this website, Im brought to some other site. I also cant use Firefox because it simply wont open. So Im using Chrome which seems to be stable enough.
I also get a RUNDLL error message each time I boot the system and the dll changes. I had run several scans of malwarebytes thinking it had been cleaned but each time I ran it, it found more trojans. They are all Hiloti.gen, agent, and Vundo. They keep appearing even after rebooting.
When I first ran the GMER in regular mode, the system froze and the screen went blank so I did a hard boot and reran the scan in safe mode. Seems to have worked. Below are the logs you asked for. I hope the GMER log is right. The process just sort of ended abruptly and I wasnt sure if it had completed.
DDS log: DDS (Ver_10-03-17.01) - NTFSx86
Run by XXXXX XXXXX at 20:39:22.70 on Mon 09/06/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1534.900 [GMT -4:00]
AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Documents and Settings\XXXX XXXXX\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\XXXX XXXX\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\DOCUME~1\MANDEE~1\LOCALS~1\Temp\~nsu.tmp\Au_.exe
C:\Documents and Settings\XXXX XXXX\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\XXXX XXXX\My Documents\Downloads\dds.scr
============== Pseudo HJT Report ===============
uStart Page =
hxxp://www.planetf1.com/uSearch Page =
hxxp://ca.red.clientapps.yahoo.com/cust ... .yahoo.comuSearch Bar =
hxxp://ca.red.clientapps.yahoo.com/cust ... ch/ie.htmlmWinlogon: Userinit=c:\windows\system32\userinit.exe
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Google Update] "c:\documents and settings\XXXX XXXX\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [HNUIOOXRouqc] c:\docume~1\mandee~1\locals~1\temp\iexplarer.exe
uRun: [MKZSc] c:\windows\avp32.exe
uRun: [HNUIOOXRrvc] c:\docume~1\mandee~1\locals~1\temp\setup.exe
uRun: [HNUIOOXRre] c:\docume~1\mandee~1\locals~1\temp\user.exe
uRun: [HNUIOOXRsre] c:\docume~1\mandee~1\locals~1\temp\wininst.exe
uRun: [HNUIOOXRrxe] c:\docume~1\mandee~1\locals~1\temp\system.exe
uRun: [HNUIOOXRsa] c:\docume~1\mandee~1\locals~1\temp\win.exe
uRun: [HNUIOOXRota] c:\docume~1\mandee~1\locals~1\temp\install.exe
uRun: [MKaZ] c:\windows\cmd.exe
uRun: [HNUIOOXRmSc] c:\docume~1\mandee~1\locals~1\temp\avp32.exe
uRun: [HNUIOOXRsdZ] c:\docume~1\mandee~1\locals~1\temp\zcu6hmg.exe
uRun: [HNUIOOXRmwc] c:\docume~1\mandee~1\locals~1\temp\awuoejhr.exe
uRun: [HNUIOOXRohi] c:\docume~1\mandee~1\locals~1\temp\hl6pryum.exe
uRun: [HNUIOOXRnZ] c:\docume~1\mandee~1\locals~1\temp\cmd.exe
uRun: [HNUIOOXRotc] c:\docume~1\mandee~1\locals~1\temp\hexdump.exe
uRun: [MKevc] c:\windows\setup.exe
uRun: [MKee] c:\windows\user.exe
uRun: [HNUIPOXRpZ] c:\docume~1\karenb~1\locals~1\temp\mdm.exe
uRun: [MKZe] c:\windows\avp.exe
uRun: [ljkjjgaudio] rundll32.exe "qopmji.dll",s
uRun: [geefcaaudio] rundll32.exe "xxywww.dll",s
mRun: [dla] c:\windows\system32\dla\tfswctrl.exe
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [vptray] c:\progra~1\symant~1\VPTray.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [HNUIOOXRouqc] c:\docume~1\mandee~1\locals~1\temp\iexplarer.exe
mRun: [MKZSc] c:\windows\avp32.exe
mRun: [HNUIOOXRrvc] c:\docume~1\mandee~1\locals~1\temp\setup.exe
mRun: [HNUIOOXRre] c:\docume~1\mandee~1\locals~1\temp\user.exe
mRun: [HNUIOOXRsre] c:\docume~1\mandee~1\locals~1\temp\wininst.exe
mRun: [HNUIOOXRrxe] c:\docume~1\mandee~1\locals~1\temp\system.exe
mRun: [HNUIOOXRsa] c:\docume~1\mandee~1\locals~1\temp\win.exe
mRun: [HNUIOOXRota] c:\docume~1\mandee~1\locals~1\temp\install.exe
mRun: [MKaZ] c:\windows\cmd.exe
mRun: [HNUIOOXRmSc] c:\docume~1\mandee~1\locals~1\temp\avp32.exe
mRun: [HNUIOOXRnZ] c:\docume~1\mandee~1\locals~1\temp\cmd.exe
mRun: [HNUIOOXRotc] c:\docume~1\mandee~1\locals~1\temp\hexdump.exe
mRun: [MKevc] c:\windows\setup.exe
mRun: [MKee] c:\windows\user.exe
mRun: [HNUIPOXRpZ] c:\docume~1\karenb~1\locals~1\temp\mdm.exe
mRun: [MKZe] c:\windows\avp.exe
mRun: [vttrrpsys] rundll32.exe "qonnki.dll",s
mRun: [tuvvvsaudio] rundll32.exe "qopmji.dll",s
mRun: [opqromaudio] rundll32.exe "xxywww.dll",s
dRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
dRun: [awwxyxsys] rundll32.exe "qonnki.dll",s
dRun: [nnmjkkaudio] rundll32.exe "qopmji.dll",s
dRun: [xxvutraudio] rundll32.exe "xxywww.dll",s
dRunOnce: [IETI] c:\program files\skype\phone\ieplugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
Trusted Zone: athabascau.ca\priorlearning
DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} -
hxxp://support.dell.com/systemprofiler/SysPro.CABDPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} -
hxxp://download.microsoft.com/download/ ... ontrol.cabDPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} -
hxxp://upload.facebook.com/controls/200 ... oader5.cabDPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} -
hxxp://pcpitstop.com/betapit/PCPitStop.CABDPF: {166B1BCA-3F9C-11CF-8075-444553540000} -
hxxp://download.macromedia.com/pub/shoc ... tor/sw.cabDPF: {2019DC25-D1C0-11D6-97B3-0008A124F542} -
hxxp://www.streamplug.com/StreamPlug/beta/SP.cabDPF: {268DE217-09FD-424F-8609-D22BE2B00076} -
hxxp://images.travelpod.com/includes/ImageUploader4.cabDPF: {2AB1C516-D654-4D3A-B3D6-2185BBCEB409} -
hxxps://myoffice.idrc.ca/+CSCOL+/relayp.cabDPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} -
hxxp://office.microsoft.com/officeupdat ... /opuc3.cabDPF: {406B5949-7190-4245-91A9-30A17DE16AD0} -
hxxp://www1.snapfish.com/SnapfishActivia.cabDPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} -
hxxp://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cabDPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} -
hxxp://upload.facebook.com/controls/Fac ... oader3.cabDPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} -
hxxp://upload.facebook.com/controls/Fac ... loader.cabDPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} -
hxxp://download.divx.com/player/DivXBrowserPlugin.cabDPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} -
hxxp://update.microsoft.com/microsoftup ... 0520114593DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} -
hxxp://www.photolab.ca/Upload/ImageUploader4.cabDPF: {8100D56A-5661-482C-BEE8-AFECE305D968} -
hxxp://upload.facebook.com/controls/200 ... ader55.cabDPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cabDPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} -
hxxp://fpdownload.macromedia.com/get/fl ... rashim.cabDPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} -
hxxp://otter1.vanaqua.org/activex/AxisCamControl.cabDPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} -
hxxp://web1.shutterfly.com/downloads/Uploader.cabDPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} -
hxxp://www.crucial.com/controls/cpcScanner.cabDPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} -
hxxp://cdn2.zone.msn.com/binFramework/v ... b56649.cabDPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} -
hxxp://office.microsoft.com/officeupdat ... /opuc4.cabDPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cabDPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -
hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cabDPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} -
hxxp://fpdownload.macromedia.com/get/fl ... wflash.cabDPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} -
hxxp://upload.facebook.com/controls/Fac ... der4_5.cabDPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} -
hxxp://plagenapoleon.homeip.net:3333/activex/AMC.cabDPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} -
hxxp://arcade.games.myway.com/online2/b ... der_v6.cabDPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -
hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cabDPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} -
hxxp://gfx1.hotmail.com/mail/w4/pr01/ph ... NPUpld.cabDPF: {E856B973-45FD-4559-8F82-EAB539144667} -
hxxp://pccheckup.dellfix.com/rel/35/ins ... downde.cabDPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} -
hxxp://by109fd.bay109.hotmail.msn.com/a ... Atchmt.ocxHandler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: NavLogon - c:\windows\system32\NavLogon.dll
AppInit_DLLs: c:\documents and settings\XXXX XXXX\local settings\application data\desktop cleanup wizard\dskclnwiz.dll,c:\windows\system32\winamnc.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: ShellHook Class: {88485281-8b4b-4f8d-9ede-82e29a064277} - c:\progra~1\markany\conten~1\MACSMA~1.DLL
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
LSA: Authentication Packages = msv1_0 qonnki.dll
================= FIREFOX ===================
FF - ProfilePath - c:\docume~1\mandee~1\applic~1\mozilla\firefox\profiles\4kj9kdwo.default\
FF - component: c:\documents and settings\XXXX XXXX\application data\mozilla\firefox\profiles\4kj9kdwo.default\extensions\{b042753d-f57e-4e8e-a01b-7379a6d4cefb}\components\IBitCometExtension.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
============= SERVICES / DRIVERS ===============
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2009-8-5 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2009-8-5 67656]
R1 SAVRT;SAVRT;c:\program files\symantec antivirus\savrt.sys [2008-5-28 337280]
R1 SAVRTPEL;SAVRTPEL;c:\program files\symantec antivirus\Savrtpel.sys [2008-5-28 54656]
R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccEvtMgr.exe [2008-6-24 191848]
R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSetMgr.exe [2008-6-24 169320]
R2 Symantec AntiVirus;Symantec AntiVirus;c:\program files\symantec antivirus\Rtvscan.exe [2008-9-30 1956792]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2010-10-5 102448]
R3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20100905.003\naveng.sys [2010-9-5 85424]
R3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20100905.003\navex15.sys [2010-9-5 1362608]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-3-19 136176]
S3 nuvaudio;NUVision Audio Service;c:\windows\system32\drivers\nuvaudio.sys [2001-9-16 21152]
S3 NUVision;%ServiceDescription%;c:\windows\system32\drivers\NUVision.sys [2001-9-16 154976]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2009-8-5 12872]
S3 SavRoam;SAVRoam;c:\program files\symantec antivirus\SavRoam.exe [2008-9-30 116664]
=============== Created Last 30 ================
2010-10-06 15:19:31 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-06 15:19:30 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-06 12:54:33 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-06 03:19:51 83968 ---ha-w- c:\windows\system32\qonnki.dll
2010-10-06 03:19:40 39936 ----a-w- c:\windows\system32\winamnc_backup.dll
2010-10-06 03:19:39 140288 ----a-w- c:\windows\system32\pcre3.dll
2010-09-06 00:40:51 93696 ---ha-w- c:\windows\system32\xxywww.dll
2010-09-05 18:22:14 0 d-----w- C:\TDSSKiller_Quarantine
2010-08-21 03:55:08 0 d-----w- C:\Downloads
==================== Find3M ====================
2010-06-30 12:31:35 149504 ----a-w- c:\windows\system32\schannel.dll
2010-06-24 12:22:03 916480 ----a-w- c:\windows\system32\wininet.dll
2010-06-23 13:44:04 1851904 ----a-w- c:\windows\system32\win32k.sys
2010-06-17 14:03:00 80384 ----a-w- c:\windows\system32\iccvid.dll
2010-06-14 07:41:45 1172480 ----a-w- c:\windows\system32\msxml3.dll
2010-06-10 19:26:34 68380 ----a-w- c:\windows\fonts\ChalkDust.TTF
2009-08-13 15:00:08 4331 ----a-w- c:\program files\INSTALL.LOG
2007-03-21 01:27:35 197247 ----a-w- c:\program files\XXXX XXXX2006 return.pdf
2008-05-07 02:17:55 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008050620080507\index.dat
2009-08-22 19:05:40 5318688 --sha-w- c:\windows\system32\drivers\fidbox.dat
2009-08-22 19:05:40 145952 --sha-w- c:\windows\system32\drivers\fidbox2.dat
2008-03-08 17:20:55 16384 --sha-w- c:\windows\temp\cookies\index.dat
2008-03-08 17:20:55 16384 --sha-w- c:\windows\temp\history\history.ie5\index.dat
2008-03-08 17:20:55 32768 --sha-w- c:\windows\temp\temporary internet files\content.ie5\index.dat
============= FINISH: 20:40:00.96 ===============
Attach log:UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-03-17.01)
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume2
Install Date: 6/16/2006 10:41:51 PM
System Uptime: 9/6/2010 8:27:53 PM (0 hours ago)
Motherboard: Dell Inc. | | 0J3492
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | Microprocessor | 2992/800mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 230 GiB total, 105.856 GiB free.
D: is CDROM ()
E: is CDROM ()
H: is CDROM ()
==== Disabled Device Manager Items =============
==== System Restore Points ===================
No restore point in system.
==== Installed Programs ======================
7-Zip 4.65
Acrobat.com
Adobe AIR
Adobe Digital Editions
Adobe Download Manager
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Photoshop 7.0
Adobe Reader 9.3.4
Adobe Shockwave Player 11
Adobe SVG Viewer
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft PhotoImpression 5
ATI Display Driver
AXIS Media Control Embedded
Bonjour
Canon Camera Access Library
Canon Camera Support Core Library
Canon G.726 WMP-Decoder
Canon MovieEdit Task for ZoomBrowser EX
Canon RAW Image Task for ZoomBrowser EX
Canon Utilities CameraWindow
Canon Utilities CameraWindow DC
Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX
Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
Canon Utilities EOS Utility
Canon Utilities MyCamera
Canon Utilities MyCamera DC
Canon Utilities PhotoStitch
Canon Utilities RemoteCapture DC
Canon Utilities RemoteCapture Task for ZoomBrowser EX
Canon Utilities ZoomBrowser EX
Canon ZoomBrowser EX Memory Card Utility
Compatibility Pack for the 2007 Office system
ContentSAFER for Wizmax
Creative MediaSource
Critical Update for Windows Media Player 11 (KB959772)
CutePDF Writer 2.7
DivX Web Player
DVD Shrink 3.2
EPSON CX5000 Series User's Guide
EPSON PhotoCenter
EPSON Printer Software
EPSON Scan
EPSON Stylus CX5000 Scanner Driver Update
ffdshow [rev 1972] [2008-05-24]
FinePixViewer Ver.4.2
FlashFXP v3
FUJIFILM USB Driver
Google Chrome
Google Earth
Google Update Helper
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Format SDK (KB902344)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
ImageMixer VCD2 for FinePix
Intel(R) 537EP V9x DF PCI Modem
iTunes
Java(TM) 6 Update 15
LeechFTP
LiveUpdate (Symantec Corporation)
LiveUpdate 3.2 (Symantec Corporation)
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Standard Edition 2003
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Works 6-9 Converter
MicroStaff WINASPI
Mozilla Firefox (2.0.0.4)
Mozilla Thunderbird (2.0.0.24)
MSN
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML4SP2
Nero 6 Ultra Edition
OpenSource Flash Video Splitter (remove only)
OverDrive Media Console
PeerGuardian 2.0
Power Tab Editor 1.7
PowerDVD 5.3
QuickTime
RAW FILE CONVERTER LE
Revo Uninstaller 1.89
Rhapsody Player Engine
RPS CRT
Samsung Media Studio 5
Security Status
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB913433)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Skype™ 4.1
Soap 3.0 Toolkit
Sonic DLA
Sonic MyDVD
Sonic RecordNow!
Sonic Update Manager
Sound Blaster Audigy 2 ZS
StudioTax 2009
SUPERAntiSpyware Free Edition
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB972636)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
User Profile Hive Cleanup Service
VC80CRTRedist - 8.0.50727.762
VirtualCloneDrive
WebCyberCoach 3.2 Dell
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Installer Clean Up
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Live installer
Windows Live Mail
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Writer
Windows Media Connect
Windows Media Format 11 runtime
Windows Media Format SDK Hotfix - KB891122
Windows Media Player 11
Windows Rights Management Client Backwards Compatibility SP2
Windows Rights Management Client with Service Pack 2
Windows XP Service Pack 3
XviD MPEG-4 Video Codec
==== Event Viewer Messages From Past Week ========
9/5/2010 8:19:52 PM, error: Service Control Manager [7000] - The SASDIFSV service failed to start due to the following error: Cannot create a file when that file already exists.
9/5/2010 3:43:03 PM, error: System Error [1003] - Error code 00000024, parameter1 001902fe, parameter2 af201fb8, parameter3 af201cb4, parameter4 00000000.
9/5/2010 3:20:58 PM, error: System Error [1003] - Error code 00000024, parameter1 001902fe, parameter2 b96813b4, parameter3 b96810b0, parameter4 00000000.
9/5/2010 1:57:42 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: PCIIde
9/29/2010 1:36:58 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Canon Camera Access Library 8 service to connect.
9/29/2010 1:36:58 PM, error: Service Control Manager [7000] - The Security Services Driver (x86) service failed to start due to the following error: The system cannot find the file specified.
9/29/2010 1:36:58 PM, error: Service Control Manager [7000] - The Canon Camera Access Library 8 service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
9/28/2010 11:02:14 PM, error: W32Time [34] - The time service has detected that the system time needs to be changed by -2678405 seconds. The time service will not change the system time by more than -54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com (ntp.m|0x1|192.168.2.10:123->207.46.197.32:123) is working properly.
10/6/2010 12:58:00 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD eeCtrl ElbyCDIO Fips intelppm IPSec MRxSmb NetBIOS NetBT ohci1394 PCIIde RasAcd Rdbss SASDIFSV SASKUTIL SAVRT SAVRTPEL SPBBCDrv SYMTDI Tcpip
10/6/2010 12:22:37 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service MDM with arguments "" in order to run the server: {0C0A3666-30C9-11D0-8F20-00805F2CD064}
10/6/2010 12:14:35 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
10/6/2010 12:04:00 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD eeCtrl ElbyCDIO Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss SASDIFSV SASKUTIL SAVRT SAVRTPEL SYMTDI Tcpip
10/6/2010 12:04:00 AM, error: Service Control Manager [7001] - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error: A device attached to the system is not functioning.
10/6/2010 12:04:00 AM, error: Service Control Manager [7001] - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: A device attached to the system is not functioning.
10/6/2010 12:04:00 AM, error: Service Control Manager [7001] - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
10/6/2010 12:04:00 AM, error: Service Control Manager [7001] - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error: A device attached to the system is not functioning.
10/6/2010 12:04:00 AM, error: Service Control Manager [7001] - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
10/6/2010 12:04:00 AM, error: Service Control Manager [7001] - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error: A device attached to the system is not functioning.
10/6/2010 12:03:23 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
10/6/2010 12:03:08 AM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
10/6/2010 10:44:28 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: eeCtrl ElbyCDIO Fips intelppm SASDIFSV SASKUTIL SAVRT SAVRTPEL SPBBCDrv SYMTDI
10/6/2010 10:30:24 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the Symantec AntiVirus service to connect.
10/6/2010 1:00:46 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AFD eeCtrl ElbyCDIO Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss SASDIFSV SASKUTIL SAVRT SAVRTPEL SPBBCDrv SYMTDI Tcpip
10/5/2010 11:26:56 PM, error: System Error [1003] - Error code 1000007e, parameter1 c0000005, parameter2 b9dd79cc, parameter3 ba547c4c, parameter4 ba547948.
10/5/2010 11:24:06 PM, error: W32Time [34] - The time service has detected that the system time needs to be changed by -2678415 seconds. The time service will not change the system time by more than -54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com (ntp.m|0x1|192.168.2.10:123->207.46.197.32:123) is working properly.
10/5/2010 11:01:55 PM, error: W32Time [34] - The time service has detected that the system time needs to be changed by -2678414 seconds. The time service will not change the system time by more than -54000 seconds. Verify that your time and time zone are correct, and that the time source time.windows.com (ntp.m|0x1|192.168.2.10:123->207.46.232.182:123) is working properly.
10/3/2010 10:28:07 PM, error: MRxSmb [8003] - The master browser has received a server announcement from the computer ANALOG that believes that it is the master browser for the domain on transport NetBT_Tcpip_{9EECE2C9-BB36-41CD-95. The master browser is stopping or an election is being forced.
==== End Of File ===========================
GMER log:GMER 1.0.15.15281 -
http://www.gmer.netRootkit scan 2010-09-06 23:49:28
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver: C:\DOCUME~1\MANDEE~1\LOCALS~1\Temp\awloqpow.sys
---- Devices - GMER 1.0.15 ----
Device \FileSystem\Fastfat \Fat B9E73D20
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\NdisWanIp@LLInterface WANARP
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\NdisWanIp@IpConfig Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}?Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}?Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}?Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\NdisWanIp@NumInterfaces 4
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@LLInterface ARP1394
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@IpConfig Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\{9EECE2C9-BB36-41CD-95E6-2D39EE05C23F}@LLInterface
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\{9EECE2C9-BB36-41CD-95E6-2D39EE05C23F}@IpConfig Tcpip\Parameters\Interfaces\{9EECE2C9-BB36-41CD-95E6-2D39EE05C23F}?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@LLInterface
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@IpConfig Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@EnableDHCP 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@DefaultGateway ?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@DefaultGatewayMetric
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@NameServer
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@Domain
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@RegistrationEnabled 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@RegisterAdapterName 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@TCPAllowedPorts 0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@UDPAllowedPorts 0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@RawIPAllowedProtocols 0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@EnableDHCP 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@DefaultGateway
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@EnableDeadGWDetect 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@DontAddDefaultGateway 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@EnableDHCP 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@DefaultGateway
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@EnableDeadGWDetect 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@DontAddDefaultGateway 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@NTEContextList
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@DhcpIPAddress 0.0.0.0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@DhcpSubnetMask 0.0.0.0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@Domain
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@NameServer
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@RegistrationEnabled 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@RegisterAdapterName 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@EnableDHCP 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@DefaultGateway
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@EnableDeadGWDetect 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@DontAddDefaultGateway 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@RegisterAdapterName 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@RegistrationEnabled 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@DhcpIPAddress 0.0.0.0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@DhcpSubnetMask 0.0.0.0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@Domain
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@NameServer
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@EnableDeadGWDetect 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@EnableDHCP 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@DefaultGateway
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@DefaultGatewayMetric
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@NameServer
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@Domain
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@RegistrationEnabled 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@RegisterAdapterName 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@TCPAllowedPorts 0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@UDPAllowedPorts 0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@RawIPAllowedProtocols 0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@NTEContextList 0x00000003?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@EnableDHCP 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@DefaultGateway
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@EnableDeadGWDetect 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@DontAddDefaultGateway 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@NTEContextList
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@DhcpIPAddress 0.0.0.0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@DhcpSubnetMask 0.0.0.0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@Domain
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@NameServer
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@RegistrationEnabled 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@RegisterAdapterName 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Adapters\NdisWanIp@LLInterface WANARP
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Adapters\NdisWanIp@IpConfig Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}?Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}?Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}?Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Adapters\NdisWanIp@NumInterfaces 4
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Adapters\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@LLInterface ARP1394
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Adapters\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@IpConfig Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Adapters\{9EECE2C9-BB36-41CD-95E6-2D39EE05C23F}@LLInterface
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Adapters\{9EECE2C9-BB36-41CD-95E6-2D39EE05C23F}@IpConfig Tcpip\Parameters\Interfaces\{9EECE2C9-BB36-41CD-95E6-2D39EE05C23F}?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Adapters\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@LLInterface
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Adapters\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@IpConfig Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@EnableDHCP 1
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@DefaultGateway ?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@DefaultGatewayMetric
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@NameServer
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@Domain
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@RegistrationEnabled 1
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@RegisterAdapterName 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@TCPAllowedPorts 0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@UDPAllowedPorts 0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{525BF359-2949-42D7-8EB1-AFB4A7F6404D}@RawIPAllowedProtocols 0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@EnableDHCP 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@DefaultGateway
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@EnableDeadGWDetect 1
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{56697430-E232-45B4-AA9D-0C2315C93EE9}@DontAddDefaultGateway 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@EnableDHCP 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@DefaultGateway
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@EnableDeadGWDetect 1
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@DontAddDefaultGateway 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@NTEContextList
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@DhcpIPAddress 0.0.0.0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@DhcpSubnetMask 0.0.0.0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@Domain
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@NameServer
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@RegistrationEnabled 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{77E626C9-849B-4B53-AF56-7A42A6AA4F66}@RegisterAdapterName 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@EnableDHCP 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@DefaultGateway
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@EnableDeadGWDetect 1
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@DontAddDefaultGateway 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@RegisterAdapterName 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@RegistrationEnabled 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@DhcpIPAddress 0.0.0.0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@DhcpSubnetMask 0.0.0.0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@Domain
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{83A58F40-C72A-46E7-AC55-121929CFF3CE}@NameServer
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@EnableDeadGWDetect 1
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@EnableDHCP 1
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@DefaultGateway
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@DefaultGatewayMetric
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@NameServer
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@Domain
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@RegistrationEnabled 1
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@RegisterAdapterName 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@TCPAllowedPorts 0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@UDPAllowedPorts 0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@RawIPAllowedProtocols 0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{AB6826FB-AA4E-4720-A43F-5A7F5CDFFCB6}@NTEContextList 0x00000003?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@UseZeroBroadcast 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@EnableDHCP 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@IPAddress 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@SubnetMask 0.0.0.0?
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@DefaultGateway
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@EnableDeadGWDetect 1
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@DontAddDefaultGateway 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@NTEContextList
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@DhcpIPAddress 0.0.0.0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@DhcpSubnetMask 0.0.0.0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@Domain
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@NameServer
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@RegistrationEnabled 0
Reg HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{DC48C0A8-A0FE-4140-9693-4AC4CB693D73}@RegisterAdapterName 0
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL@
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL@Installed 1
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI@
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI@Installed 1
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI@NoChange 1
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS@
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS@Installed 1
Reg HKLM\SOFTWARE\Classes\CLSID\{114E2C3D-CC33-DA46-A1A8-3A0364D0BF84}\LocalServer32@ "C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"
Reg HKLM\SOFTWARE\Classes\CLSID\{114E2C3D-CC33-DA46-A1A8-3A0364D0BF84}\ProgID@ Symantec.stCallbackManager.1
Reg HKLM\SOFTWARE\Classes\CLSID\{114E2C3D-CC33-DA46-A1A8-3A0364D0BF84}\TypeLib@ {51B9BCA6-4A06-11D3-B538-00902771A435}
Reg HKLM\SOFTWARE\Classes\CLSID\{114E2C3D-CC33-DA46-A1A8-3A0364D0BF84}\VersionIndependentProgID@ Symantec.stCallbackManager
---- EOF - GMER 1.0.15 ----