%WINDIR%\AGRSMMSG.exe XP (L) %WINDIR%\ALCXMNTR.EXE XP (L) %WINDIR%\BCMSMMSG.exe XP (L) %WINDIR%\CARPSERV.EXE ME (L) %WINDIR%\CDPLAYER.EXE 98 (L) %WINDIR%\CNYHKey.exe XP (L) %WINDIR%\DESKTOP\HIJACKTHIS.EXE 98 (L) %WINDIR%\DESKTOP\PERSONAL WEBSITES\FREESERVE SITE\ANGOID\HIJACKTHIS.EXE 98 (L) %WINDIR%\EXPLORER.EXE 98,XP,ME (L) %WINDIR%\Explorer.EXE XP,2000,NT (L) %WINDIR%\Explorer.exe 2000 (L) %WINDIR%\GWMDMMSG.exe XP (L) %WINDIR%\LOADQM.EXE 98 (L) %WINDIR%\NOTEPAD.EXE 98 (L) %WINDIR%\Profiles\angus.cook\Desktop\HijackThis.exe NT (L) %WINDIR%\SKRIVBORD\HIJACKMAPP\HIJACKTHIS1982.EXE 98 (L) %WINDIR%\SOUNDMAN.EXE XP (L) %WINDIR%\TASKMON.EXE 98 (L) %WINDIR%\TEMP\FU9277.EXE 2000 (L) %WINDIR%\loadqm.exe 2000 (L) %WINDIR%\mHotkey.exe XP (L) %WINDIR%\msagent\AgentSvr.exe XP (L) %WINDIR%\wanmpsvc.exe XP (L) %WINDIR%\webshots.scr XP (L) %SYSDIR%\ATICWD32.EXE 98 (L) %SYSDIR%\ATIPTAXX.EXE 98 (L) %SYSDIR%\ATITASK.EXE 98 (L) %SYSDIR%\Ati2evxx.exe XP (L) %SYSDIR%\BacsTray.exe XP (L) %SYSDIR%\CHKADMIN.EXE NT (L) %SYSDIR%\CMMON32.EXE 98 (L) %SYSDIR%\CPQAlert.exe NT (L) %SYSDIR%\CPQDMI.exe NT (L) %SYSDIR%\CTFMON.EXE XP (L) %SYSDIR%\CTHELPER.EXE XP (L) %SYSDIR%\CTSvcCDA.EXE XP (L) %SYSDIR%\CTsvcCDA.EXE XP (L) %SYSDIR%\CTsvcCDA.exe XP (L) %SYSDIR%\DDHELP.EXE 98,ME (L) %SYSDIR%\DSentry.exe XP (L) %SYSDIR%\DWRCS.EXE NT (L) %SYSDIR%\Drivers\XPMON.EXE 2000 (L) %SYSDIR%\GEARSEC.EXE XP (L) %SYSDIR%\HPConfig.exe XP (L) %SYSDIR%\Hummbird\inetd32.exe NT (L) %SYSDIR%\INETSRV\INETINFO.EXE 98 (L) %SYSDIR%\INTERNAT.EXE 98 (L) %SYSDIR%\KERNEL32.DLL 98,ME (L) %SYSDIR%\LEXBCES.EXE XP (L) %SYSDIR%\LEXPPS.EXE XP (L) %SYSDIR%\MGAHOOK.EXE NT (L) %SYSDIR%\MPREXE.EXE 98,ME (L) %SYSDIR%\MSDTCW.EXE 98 (L) %SYSDIR%\MSGSRV32.EXE 98,ME (L) %SYSDIR%\MSTASK.EXE 98 (L) %SYSDIR%\MSTask.exe 2000,NT (L) %SYSDIR%\MsPMSPSv.exe XP (L) %SYSDIR%\MsgSys.EXE 2000 (L) %SYSDIR%\NMSSvc.exe XP (L) %SYSDIR%\NOTEPAD.EXE XP (L) %SYSDIR%\P2P NETWORKING\P2P NETWORKING.EXE 98 (L) %SYSDIR%\PSTORES.EXE 98 (L) %SYSDIR%\PWSTRAY.EXE 98 (L) %SYSDIR%\QCONSVC.EXE XP (L) %SYSDIR%\RESTORE\STMGR.EXE ME (L) %SYSDIR%\RNAAPP.EXE 98,ME (L) %SYSDIR%\RPCSS.EXE 98 (L) %SYSDIR%\RUNDLL32.EXE 2000,XP (L) %SYSDIR%\RpcSs.exe NT (L) %SYSDIR%\RunDll32.exe XP (L) %SYSDIR%\S3tray2.exe XP (L) %SYSDIR%\SA3DSRV.EXE 98 (L) %SYSDIR%\SCardSvr.exe XP (L) %SYSDIR%\SK9910DM.EXE XP (L) %SYSDIR%\SPOOL32.EXE 98 (L) %SYSDIR%\STIMON.EXE 98 (L) %SYSDIR%\SYSTRAY.EXE 98,ME (L) %SYSDIR%\SysTray.Exe NT (L) %SYSDIR%\TAPISRV.EXE 98,ME (L) %SYSDIR%\TCAUDIAG.exe XP (L) %SYSDIR%\TSIRCSRV.exe NT (L) %SYSDIR%\WBEM\CIMOM.EXE 98 (L) %SYSDIR%\WBEM\WINMGMT.EXE ME (L) %SYSDIR%\WBEM\WinMgmt.exe 2000 (L) %SYSDIR%\WBEM\winmgmt.exe NT (L) %SYSDIR%\WINOA386.MOD 98 (L) %SYSDIR%\WLTRYSVC.EXE XP (L) %SYSDIR%\WMIEXE.EXE 98,ME (L) %SYSDIR%\ZONELABS\VSMON.EXE 98 (L) %SYSDIR%\ZoneLabs\isafe.exe XP (L) %SYSDIR%\ZoneLabs\vsmon.exe XP,2000 (L) %SYSDIR%\alg.exe XP (L) %SYSDIR%\bcmwltry.exe XP (L) %SYSDIR%\carpserv.exe XP (L) %SYSDIR%\cidaemon.exe XP (L) %SYSDIR%\cisvc.exe XP (L) %SYSDIR%\csrss.exe XP (L) %SYSDIR%\ctfmon.exe XP (L) %SYSDIR%\dla\tfswctrl.exe XP (L) %SYSDIR%\dslagent.exe XP (L) %SYSDIR%\ezSP_Px.exe 2000 (L) %SYSDIR%\fxssvc.exe XP (L) %SYSDIR%\gsicon.exe XP (L) %SYSDIR%\hidserv.exe 2000 (L) %SYSDIR%\hkcmd.exe XP (L) %SYSDIR%\hpoipm07.exe XP (L) %SYSDIR%\ibmpmsvc.exe XP (L) %SYSDIR%\igfxtray.exe XP (L) %SYSDIR%\inetsrv\inetinfo.exe XP (L) %SYSDIR%\khooker.exe 2000 (L) %SYSDIR%\loadwc.exe NT (L) %SYSDIR%\lsass.exe XP,2000,NT (L) %SYSDIR%\mgactrl.exe NT (L) %SYSDIR%\mgasc.exe NT (L) %SYSDIR%\mmtask.tsk 98,ME (L) %SYSDIR%\mrtMngr.EXE XP (L) %SYSDIR%\nddeagnt.exe NT (L) %SYSDIR%\ns.exe XP (L) %SYSDIR%\nvsvc32.exe XP,2000 (L) %SYSDIR%\oodag.exe XP (L) %SYSDIR%\pstores.exe NT (L) %SYSDIR%\rasman.exe NT (L) %SYSDIR%\regsvc.exe 2000 (L) %SYSDIR%\rundll32.exe XP (L) %SYSDIR%\savedump.exe XP (L) %SYSDIR%\services.exe XP,2000,NT (L) %SYSDIR%\sistray.EXE XP (L) %SYSDIR%\smss.exe XP,2000,NT (L) %SYSDIR%\spool\DRIVERS\W32X86\2\RPDFLchr.exe XP (L) %SYSDIR%\spool\DRIVERS\W32X86\3\fppdis2a.exe 2000 (L) %SYSDIR%\spool\DRIVERS\W32X86\E_S10IC1.EXE XP (L) %SYSDIR%\spool\drivers\w32x86\3\hpztsb09.exe XP (L) %SYSDIR%\spoolss.exe NT (L) %SYSDIR%\spoolsv.exe XP,2000 (L) %SYSDIR%\starter.exe NT (L) %SYSDIR%\stisvc.exe 2000 (L) %SYSDIR%\svchost.exe XP,2000 (L) %SYSDIR%\tapisrv.exe NT (L) %SYSDIR%\taskmgr.exe XP (L) %SYSDIR%\tbctray.exe XP (L) %SYSDIR%\tp4serv.exe XP (L) %SYSDIR%\wbem\wmiapsrv.exe XP (L) %SYSDIR%\winlogon.exe XP,2000,NT (L) %SYSDIR%\wltrysvc.exe XP (L) %SYSDIR%\wuauclt.exe XP,2000 (L) C:\ATI\ATIDESK\ATISCHED.EXE ALL (L) C:\COMPAQ\INTERNET\WATCHDOG.EXE ALL (L) C:\Centenn.ial\Audit\CAgent32.exe ALL (L) C:\Centenn.ial\Audit\xferwan.exe ALL (L) C:\DMINT40\WIN32\bin\Win32SL.exe ALL (L) C:\Documents and Settings\ANNMARIE\Desktop\scanalyser\hjtscan.exe ALL (L) C:\Documents and Settings\Alison\Desktop\Appz\HijackThis.exe ALL (L) C:\Documents and Settings\All Users\Start Menu\Programs\Startup\msoffice.exe ALL (L) C:\Documents and Settings\Anthony\Desktop\HJT\hijackthis1982.exe ALL (L) C:\Documents and Settings\Brian\Desktop\hijackthis\HijackThis.exe ALL (L) C:\Documents and Settings\David L. Curry\Desktop\HijackThis.exe ALL (L) C:\Documents and Settings\Downunder\Desktop\HijackThis.exe ALL (L) C:\Documents and Settings\Jim\Application Data\latt.exe ALL (L) C:\Documents and Settings\Katie\Desktop\HijackThis.exe ALL (L) C:\Documents and Settings\Kieran Roy\Local Settings\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe ALL (L) C:\Documents and Settings\M Minchew\Desktop\HijackThis.exe ALL (L) C:\Documents and Settings\Mr & Mrs Gray\My Documents\HIJACKTHIS\HijackThis.exe ALL (L) C:\Documents and Settings\Passas\Desktop\Nathan Stuff\Virus Fixing\HijackThis.exe ALL (L) C:\Documents and Settings\Stephen\My Documents\My Music\MP3s\moremp3s\hijackthis\hijackthis.exe ALL (L) C:\ESM2\EBRR.EXE ALL (L) C:\ESM2\STMS.EXE ALL (L) C:\HJT\HijackThis.exe ALL (L) C:\HiJackThis\hijackthis\HijackThis.exe ALL (L) C:\Hijack This\HijackThis.exe ALL (L) C:\HijackThis.exe ALL (L) C:\KMaestro\KMaestro.exe ALL (L) C:\LCC\BIN\WEDIT.EXE ALL (L) C:\LiveJournal\Semagic\LiveJournal.exe ALL (L) C:\MOUSE\SYSTEM\EM_EXEC.EXE ALL (L) C:\MY DOCUMENTS\BRADS STUFF\HIJACK THIS.EXE ALL (L) C:\MY DOCUMENTS\DOWNLOADS\FIXCELLANEOUS DISK\HIJACKTHIS\HIJACKTHIS.EXE ALL (L) C:\OfficeScan NT\OfcPfwSvc.exe ALL (L) C:\OfficeScan NT\ntrtscan.exe ALL (L) C:\OfficeScan NT\pccntmon.exe ALL (L) C:\OfficeScan NT\tmlisten.exe ALL (L) C:\PROGRAM FILES\AIM95\AIM.EXE ALL (L) C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE ALL (L) C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE ALL (L) C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE ALL (L) C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPROXY.EXE ALL (L) C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE ALL (L) C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SNDSRVC.EXE ALL (L) C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE ALL (L) C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE ALL (L) C:\PROGRAM FILES\Grisoft\AVG6\avgcc32.exe ALL (L) C:\PROGRAM FILES\HIJACK THIS\HIJACKTHIS\HIJACKTHIS.EXE ALL (L) C:\PROGRAM FILES\HIJACKTHIS[1].EXE ALL (L) C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE ALL (L) C:\PROGRAM FILES\JUNO\EXEC.EXE ALL (L) C:\PROGRAM FILES\MRU-BLASTER\SCHEDULER.EXE ALL (L) C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE ALL (L) C:\PROGRAM FILES\NORTON ANTIVIRUS\ADVTOOLS\NPROTECT.EXE ALL (L) C:\PROGRAM FILES\NORTON ANTIVIRUS\DEFWATCH.EXE ALL (L) C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE ALL (L) C:\PROGRAM FILES\NORTON ANTIVIRUS\POPROXY.EXE ALL (L) C:\PROGRAM FILES\NORTON ANTIVIRUS\RTVSCN95.EXE ALL (L) C:\PROGRAM FILES\NORTON ANTIVIRUS\VPTRAY.EXE ALL (L) C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE ALL (L) C:\PROGRAM FILES\RFA\RFAGENT.EXE ALL (L) C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE ALL (L) C:\PROGRAM FILES\SPYWAREBLASTER\HJTHELPER.EXE ALL (L) C:\PROGRAM FILES\SPYWAREGUARD\SGBHP.EXE ALL (L) C:\PROGRAM FILES\SPYWAREGUARD\SGMAIN.EXE ALL (L) C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE ALL (L) C:\PROGRAM FILES\SYMANTEC\LIVEUPDATE\LUCOMSERVER.EXE ALL (L) C:\PROGRAM FILES\USB DISK TOOL\USNDISKT.EXE ALL (L) C:\PROGRAM FILES\WEBSHOTS\WEBSHOTSTRAY.EXE ALL (L) C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE ALL (L) C:\PROGRAM\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE ALL (L) C:\PROGRAM\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEAUI.EXE ALL (L) C:\PROGRAM\COMPAQ\ON-SCREEN DISPLAY\OSD.EXE ALL (L) C:\PROGRAM\IOMEGA\TOOLS\IMGICON.EXE ALL (L) C:\PROGRAM\ZONE LABS\ZONEALARM\ZLCLIENT.EXE ALL (L) C:\PROGRA~1\AIM\aim.exe ALL (L) C:\PROGRA~1\CA\ETRUST~1\realmon.exe ALL (L) C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe ALL (L) C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe ALL (L) C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe ALL (L) C:\PROGRA~1\CONCEP~1\BLUETO~1\BTSTAC~1.EXE ALL (L) C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe ALL (L) C:\PROGRA~1\Grisoft\AVG6\avgserv.exe ALL (L) C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe ALL (L) C:\PROGRA~1\INCRED~1\bin\IMApp.exe ALL (L) C:\PROGRA~1\MICROS~3\Office10\OUTLOOK.EXE ALL (L) C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe ALL (L) C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe ALL (L) C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe ALL (L) C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe ALL (L) C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe ALL (L) C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE ALL (L) C:\PROGRA~1\NORTON~1\NORTON~4\GHOSTS~2.EXE ALL (L) C:\PROGRA~1\NORTON~1\navapw32.exe ALL (L) C:\PROGRA~1\NSClean\BOClean\BOCSEC.EXE ALL (L) C:\PROGRA~1\NSClean\BOClean\BOClean.exe ALL (L) C:\PROGRA~1\Ontrack\SYSTEM~1\mxserver.exe ALL (L) C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe ALL (L) C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe ALL (L) C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe ALL (L) C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe ALL (L) C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE ALL (L) C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe ALL (L) C:\PROGRA~1\ThinkPad\UTILIT~1\TP98TRAY.EXE ALL (L) C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe ALL (L) C:\PROGRA~1\Yahoo!\PARENT~1\YPCSER~1.EXE ALL (L) C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe ALL (L) C:\PROGRA~1\Zone Labs\ZoneAlarm\zapro.exe ALL (L) C:\PROGRA~1\mcafee.com\agent\mcagent.exe ALL (L) C:\PROGRA~1\mcafee.com\vso\mcshield.exe ALL (L) C:\PROGRA~1\mcafee.com\vso\mcvsescn.exe ALL (L) C:\PROGRA~1\mcafee.com\vso\mcvsrte.exe ALL (L) C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe ALL (L) C:\PROGRA~1\mozilla.org\Mozilla\Mozilla.exe ALL (L) C:\Palm\HOTSYNC.EXE ALL (L) C:\Program Files\AIM+\AIM+.exe ALL (L) C:\Program Files\AIM95\aim.exe ALL (L) C:\Program Files\AIM\aim.exe ALL (L) C:\Program Files\AMD\Cool'n'Quiet\GemServ.exe ALL (L) C:\Program Files\AOL 9.0\aoltray.exe ALL (L) C:\Program Files\AOL 9.0\shellmon.exe ALL (L) C:\Program Files\AOL 9.0\waol.exe ALL (L) C:\Program Files\AOL\Broadband CheckUp\bin\mpbtn.exe ALL (L) C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe ALL (L) C:\Program Files\Accessories\TransparentW.exe ALL (L) C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe ALL (L) C:\Program Files\Ahead\InCD\InCD.exe ALL (L) C:\Program Files\Ahead\InCD\InCDsrv.exe ALL (L) C:\Program Files\America Online 9.0\aoltray.exe ALL (L) C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe ALL (L) C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe ALL (L) C:\Program Files\Analog Devices\SoundMAX\SMTray.exe ALL (L) C:\Program Files\AnalogX\CookieWall\cookie.exe ALL (L) C:\Program Files\Apoint\Apntex.exe ALL (L) C:\Program Files\Apoint\Apoint.exe ALL (L) C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe ALL (L) C:\Program Files\Browser Mouse\Browser Mouse\1.1\MOUSE32A.EXE ALL (L) C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe ALL (L) C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe ALL (L) C:\Program Files\CA\eTrust Antivirus\InoRT.exe ALL (L) C:\Program Files\CA\eTrust Antivirus\InoRpc.exe ALL (L) C:\Program Files\CA\eTrust Antivirus\InoTask.exe ALL (L) C:\Program Files\Canon\VDC\AuVdc.exe ALL (L) C:\Program Files\CheckPoint\AuthAgent\PROGRAM\FWSession.exe ALL (L) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe ALL (L) C:\Program Files\Common Files\AOL\ACS\AOLDial.exe ALL (L) C:\Program Files\Common Files\AOL\aoltpspd.exe ALL (L) C:\Program Files\Common Files\Dell\EUSW\Support.exe ALL (L) C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS ALL (L) C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE ALL (L) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE ALL (L) C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe ALL (L) C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe ALL (L) C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe ALL (L) C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe ALL (L) C:\Program Files\Common Files\Real\Update_OB\realsched.exe ALL (L) C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe ALL (L) C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ALL (L) C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe ALL (L) C:\Program Files\Common Files\Symantec Shared\ccApp.exe ALL (L) C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe ALL (L) C:\Program Files\Common Files\Symantec Shared\ccProxy.exe ALL (L) C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe ALL (L) C:\Program Files\Conceptronic\Bluetooth Software\BTTray.exe ALL (L) C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe ALL (L) C:\Program Files\D-Tools\daemon.exe ALL (L) C:\Program Files\DIGStream\digstream.exe ALL (L) C:\Program Files\DU Meter\DUMeter.exe ALL (L) C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe ALL (L) C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe ALL (L) C:\Program Files\Dell\Media Experience\PCMService.exe ALL (L) C:\Program Files\Dell\QuickSet\QuickSet.exe ALL (L) C:\Program Files\Dell\QuickSet\quickset.exe ALL (L) C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe ALL (L) C:\Program Files\DiamondCS\ProcessGuard\dcsuserprot.exe ALL (L) C:\Program Files\DiamondCS\ProcessGuard\procguard.exe ALL (L) C:\Program Files\DiamondCS\TDS3\TDS-3.exe ALL (L) C:\Program Files\Digital Line Detect\DLG.exe ALL (L) C:\Program Files\Executive Software\Diskeeper\DkService.exe ALL (L) C:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe ALL (L) C:\Program Files\Grisoft\AVG6\avgcc32.exe ALL (L) C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe ALL (L) C:\Program Files\HPQ\One-Touch\OneTouch.EXE ALL (L) C:\Program Files\HP\hpcoretech\hpcmpmgr.exe ALL (L) C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOFXM07.exe ALL (L) C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe ALL (L) C:\Program Files\Hewlett-Packard\AiO\hp officejet g series\Bin\hpoavn07.exe ALL (L) C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe ALL (L) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe ALL (L) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe ALL (L) C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe ALL (L) C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe ALL (L) C:\Program Files\HijackThis.exe ALL (L) C:\Program Files\HijackThis\HijackThis.exe ALL (L) C:\Program Files\Hijackthis\HijackThis.exe ALL (L) C:\Program Files\Info Select\is.exe ALL (L) C:\Program Files\Intel\Intel(R) Active Monitor\imonnt.exe ALL (L) C:\Program Files\Intel\Intel(R) Active Monitor\imontray.exe ALL (L) C:\Program Files\InterMute\SpySubtract\SpySub.exe ALL (L) C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ALL (L) C:\Program Files\Internet Explorer\IEXPLORE.EXE ALL (L) C:\Program Files\Internet Explorer\iexplore.exe ALL (L) C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002.exe ALL (L) C:\Program Files\Java\j2re1.4.2\bin\jusched.exe ALL (L) C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe ALL (L) C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe ALL (L) C:\Program Files\Kazaa Lite K++\KazaaLite.kpp ALL (L) C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe ALL (L) C:\Program Files\Logitech\MouseWare\System\em_exec.exe ALL (L) C:\Program Files\Logitech\MouseWare\system\em_exec.exe ALL (L) C:\Program Files\Logitech\iTouch\iTouch.exe ALL (L) C:\Program Files\MGA NT PowerDesk\QDesk\MGAQDESK.EXE ALL (L) C:\Program Files\MSN Messenger\MsnMsgr.Exe ALL (L) C:\Program Files\MSN Messenger\msnmsgr.exe ALL (L) C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe ALL (L) C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe ALL (L) C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe ALL (L) C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe ALL (L) C:\Program Files\MailWasher Pro\MailWasher.exe ALL (L) C:\Program Files\McAfee\McAfee VirusScan\Avconsol.exe ALL (L) C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe ALL (L) C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe ALL (L) C:\Program Files\McAfee\McAfee VirusScan\Vshwin32.exe ALL (L) C:\Program Files\McAfee\McAfee VirusScan\Webscanx.exe ALL (L) C:\Program Files\Messenger\msmsgs.exe ALL (L) C:\Program Files\Microsoft Broadband Networking\MSBNTray.exe ALL (L) C:\Program Files\Microsoft Hardware\Keyboard\type32.exe ALL (L) C:\Program Files\Microsoft Hardware\Mouse\point32.exe ALL (L) C:\Program Files\Microsoft Money\System\mnyexpr.exe ALL (L) C:\Program Files\Microsoft Office\Office10\WINWORD.EXE ALL (L) C:\Program Files\Microsoft Office\Office\WINWORD.EXE ALL (L) C:\Program Files\Mozilla Firefox\firefox.exe ALL (L) C:\Program Files\NavNT\defwatch.exe ALL (L) C:\Program Files\NavNT\rtvscan.exe ALL (L) C:\Program Files\NavNT\vptray.exe ALL (L) C:\Program Files\NetManage\System\nmlsserv.exe ALL (L) C:\Program Files\Netscape\Netscape\Netscp.exe ALL (L) C:\Program Files\Network Associates\Common Framework\FrameworkService.exe ALL (L) C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe ALL (L) C:\Program Files\Network Associates\VirusScan\Mcshield.exe ALL (L) C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE ALL (L) C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe ALL (L) C:\Program Files\Network Associates\VirusScan\mcshield.exe ALL (L) C:\Program Files\Network Associates\VirusScan\vstskmgr.exe ALL (L) C:\Program Files\Network ICE\BlackICE\blackd.exe ALL (L) C:\Program Files\Network ICE\BlackICE\blackice.exe ALL (L) C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE ALL (L) C:\Program Files\Norton AntiVirus\SAVScan.exe ALL (L) C:\Program Files\Norton AntiVirus\navapsvc.exe ALL (L) C:\Program Files\Norton Internet Security\NISUM.EXE ALL (L) C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe ALL (L) C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe ALL (L) C:\Program Files\Norton Internet Security\ccPxySvc.exe ALL (L) C:\Program Files\Norton SystemWorks\Norton Antivirus\SAVScan.exe ALL (L) C:\Program Files\Norton SystemWorks\Norton Antivirus\navapsvc.exe ALL (L) C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE ALL (L) C:\Program Files\Norton Utilities\NPROTECT.EXE ALL (L) C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe ALL (L) C:\Program Files\PerSono\perstray.exe ALL (L) C:\Program Files\QUICKENW\QAGENT.EXE ALL (L) C:\Program Files\QuickTime\qttask.exe ALL (L) C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe ALL (L) C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe ALL (L) C:\Program Files\SETI@home\SETI@home.exe ALL (L) C:\Program Files\Samsung\Digimax Viewer 1.0\DigimaxViewer.exe ALL (L) C:\Program Files\ScanSoft\OmniPageSE\opware32.exe ALL (L) C:\Program Files\Speed Disk\nopdb.exe ALL (L) C:\Program Files\Spybot - Search & Destroy13\TeaTimer.exe ALL (L) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe ALL (L) C:\Program Files\SpywareGuard\sgbhp.exe ALL (L) C:\Program Files\SpywareGuard\sgmain.exe ALL (L) C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe ALL (L) C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe ALL (L) C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe ALL (L) C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe ALL (L) C:\Program Files\ThinkPad\ConnectUtilities\QCTRAY.EXE ALL (L) C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE ALL (L) C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe ALL (L) C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe ALL (L) C:\Program Files\TrojanHunter 3.9\THGuard.exe ALL (L) C:\Program Files\UPHClean\uphclean.exe ALL (L) C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe ALL (L) C:\Program Files\UnH Solutions\SavePicNoAsk Light\spnal.exe ALL (L) C:\Program Files\VIA\RAID\raid_tool.exe ALL (L) C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe ALL (L) C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe ALL (L) C:\Program Files\WinRAR\WinRAR.exe ALL (L) C:\Program Files\WinZip\WZQKPICK.EXE ALL (L) C:\Program Files\Winamp\Winampa.exe ALL (L) C:\Program Files\Winamp\winampa.exe ALL (L) C:\Program Files\Windows Media Player\wmplayer.exe ALL (L) C:\Program Files\Yahoo!\Messenger\YPager.exe ALL (L) C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe ALL (L) C:\Program Files\a2\a2guard.exe ALL (L) C:\Program Files\iPod\bin\iPodService.exe ALL (L) C:\Program Files\iTunes\iTunesHelper.exe ALL (L) C:\Program Files\laplinknt\tsisched.exe ALL (L) C:\Program Files\lotus\notes\ntmulti.exe ALL (L) C:\SUPERVOC\PROGRAM\PICPMON.EXE ALL (L) C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE ALL (L) C:\hijackthis\HijackThis.exe ALL (L) C:\memturbo\memturbo.exe ALL (L) C:\orant8i\BIN\TNSLSNR.exe ALL (L) C:\program files\laplinknt\tsircusr.exe ALL (L) C:\program files\mcafee.com\shared\mghtml.exe ALL (L) C:\progra~1\mcafee.com\vso\mcvsescn.exe ALL (L) C:\progra~1\mcafee.com\vso\mcvsftsn.exe ALL (L) C:\unzipped\hijackthis\HijackThis.exe ALL (L) F0 - system.ini: Shell= ALL (L) F1 - win.ini: run=hpfsched ALL (L) F2 - REG:system.ini: UserInit=%SYSDIR%\userinit.exe XP (L) F2 - REG:system.ini: UserInit=%SYSDIR%\userinit.exe, XP (L) N1 - Netscape 4: user_pref("browser.startup.homepage", "http://home.netscape.com/"); (C:\Program Files\Netscape\Users\freexdom2\prefs.js) ALL (L) N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Anthony\Application Data\Mozilla\Profiles\default\ktsnm4dc.slt\prefs.js) ALL (L) N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\M Minchew\Application Data\Mozilla\Profiles\default\7ougr0w1.slt\prefs.js) ALL (L) N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.google.com/"); (C:\Documents and Settings\Anthony\Application Data\Mozilla\Profiles\default\ktsnm4dc.slt\prefs.js) ALL (L) O1 - Hosts: 64.91.255.87 www.dcsresearch.com ALL (L) O1 - Hosts: 66.118.163.109 auto.search.msn.com ALL (L) O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll ALL (L) O12 - Plugin for .asx: C:\PROGRAM FILES\CONNECTIVITY_PACKAGE\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll ALL (L) O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll ALL (L) O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll ALL (L) O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll ALL (L) O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll ALL (L) O12 - Plugin for .spop: C:\PROGRA~1\Plus!\MICROS~1\Plugins\NPDocBox.dll ALL (L) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll ALL (L) O12 - Plugin for .wma: C:\PROGRAM FILES\CONNECTIVITY_PACKAGE\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll ALL (L) O12 - Plugin for .wmv: C:\PROGRAM FILES\CONNECTIVITY_PACKAGE\NETSCAPE\COMMUNICATOR\PROGRAM\PLUGINS\npdsplay.dll ALL (L) O14 - IERESET.INF: START_PAGE_URL=http://aopen.com ALL (L) O14 - IERESET.INF: START_PAGE_URL=http://us8l.hpwis.com ALL (L) O14 - IERESET.INF: START_PAGE_URL=http://www.bellsouth.net ALL (L) O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net ALL (L) O14 - IERESET.INF: START_PAGE_URL=http://www.freeserve.com/ ALL (L) O14 - IERESET.INF: START_PAGE_URL=http://www.pcclub.com ALL (L) O14 - IERESET.INF: START_PAGE_URL=http://www.wanadoo.co.uk ALL (L) O15 - Trusted Zone: http://*.computercops.biz ALL (L) O15 - Trusted Zone: http://www.computercops.us ALL (L) O15 - Trusted Zone: www.cybertechhelp.com ALL (L) O16 - DPF: IWL AT - https://www1.etradeaustralia.com.au/etr....0.136.CAB ALL (L) O16 - DPF: IWL ATCFX - https://www1.etradeaustralia.com.au/etr....0.118.CAB ALL (L) O16 - DPF: IWL DataPump - https://www1.etradeaustralia.com.au/etr....0.124.CAB ALL (L) O16 - DPF: IWL DynaLib - https://www1.etradeaustralia.com.au/etr....0.129.CAB ALL (L) O16 - DPF: IWL TradingPump - https://www1.etradeaustralia.com.au/etr....0.129.CAB ALL (L) O16 - DPF: IWL iMediaLib - https://www1.etradeaustralia.com.au/etr...3.0.44.CAB ALL (L) O16 - DPF: JT's Blocks - http://download.games.yahoo.com/gam...ts/y/blt1_x.cab ALL (L) O16 - DPF: Toki Toki Boom - http://download.games.yahoo.com/gam...nts/y/vto_x.cab ALL (L) O16 - DPF: Win32 Classes - file://%WINDIR%\Java\classes\win32ie4.cab 98 (L) O16 - DPF: Yahoo! Chat - ALL (L) O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.co...t/c381/chat.cab ALL (L) O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/cha...t/c381/chat.cab ALL (L) O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab ALL (L) O16 - DPF: Yahoo! Dice - http://download.games.yahoo.com/gam...ts/y/dct4_x.cab ALL (L) O16 - DPF: Yahoo! Dominoes - http://download.games.yahoo.com/games/clients/y/dot8_x.cab ALL (L) O16 - DPF: Yahoo! Dots - http://download.games.yahoo.com/gam...ts/y/dtt1_x.cab ALL (L) O16 - DPF: Yahoo! Dots - http://download.games.yahoo.com/games/clients/y/dtt1_x.cab ALL (L) O16 - DPF: Yahoo! Euchre - ALL (L) O16 - DPF: Yahoo! Freecell Solitaire - http://yog55.games.scd.yahoo.com/yog/y/fs10_x.cab ALL (L) O16 - DPF: Yahoo! Klondike Solitaire - http://yog55.games.scd.yahoo.com/yog/y/ks12_x.cab ALL (L) O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/gam...nts/y/tt3_x.cab ALL (L) O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/games/clients/y/tt3_x.cab ALL (L) O16 - DPF: Yahoo! Pool 2 - ALL (L) O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab ALL (L) O16 - DPF: Yahoo! Pyramids - http://download.games.yahoo.com/gam...ts/y/pyt1_x.cab ALL (L) O16 - DPF: Yahoo! Pyramids - http://download.games.yahoo.com/games/clients/y/pyt1_x.cab ALL (L) O16 - DPF: Yahoo! Spades - http://download.games.yahoo.com/gam...nts/y/st2_x.cab ALL (L) O16 - DPF: axscanner - http://www.pestscan.com/scanner/axscanner.cab ALL (L) O16 - DPF: axscannerruntime - http://www.pestscan.com/scanner/axscannerruntime.cab ALL (L) O16 - DPF: iMedia Component Downloader - https://www1.etradeaustralia.com.au/etr....0.0.9.CAB ALL (L) O16 - DPF: mscomctl - http://www.pestscan.com/scanner/mscomctl.cab ALL (L) O16 - DPF: msvcp71 - http://download.pestpatrol.com/Downloads/C...nts/msvcp71.cab ALL (L) O16 - DPF: msvcr71 - http://download.pestpatrol.com/Downloads/C...nts/msvcr71.cab ALL (L) O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab ALL (L) O16 - DPF: symsupportutil - https://www-secure.symantec.com/techsupp/ac...supportutil.CAB ALL (L) O16 - DPF: webiress - http://web.iress.com.au/webiress-0_8_3_8.cab ALL (L) O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab ALL (L) O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28578.cab ALL (L) O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.cab ALL (L) O16 - DPF: {01CA75F1-054B-4A63-9221-C6926369EC52} (HS_live Control) - http://install.homestead.com/~site/Install...ive/HS_live.cab ALL (L) O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://www.may.ie/wfplayer/tdserver.cab ALL (L) O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://www.truedoc.com/activex/tdserver.cab ALL (L) O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab ALL (L) O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://www.apple.com/qtactivex/qtplugin.cab ALL (L) O16 - DPF: {08F04139-8DFC-11D2-80E9-006008B066EE} (ConfigChkr Class) - https://www.applyforproducts.cibc.com/certe...ll/vscnfchk.cab ALL (L) O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://us.creative.com/support/downloads/s...119/CTSUEng.cab ALL (L) O16 - DPF: {0C3F7D74-ADA5-4976-8908-A8189590DAFA} (3DGreetings.com Player 2.0) - http://expressit.broderbund.com/Plugin/.../vroom.CAB ALL (L) O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://pcpitstop.com/pcpitstop/PCPitStop.CAB ALL (L) O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB ALL (L) O16 - DPF: {13E23C9E-3018-4AC1-B998-C08BF1814DB0} - http://ftp.gurunet.com/pub/cabs/GNInstaller.cab ALL (L) O16 - DPF: {1538D4E0-B2C4-402D-B71A-BA6A04BC7A5D} (PictureChooser.picChooser) - http://direct.fotomenyn.com/direct/PictureChooser.cab ALL (L) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shoc...tor/sw.cab ALL (L) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - ALL (L) O16 - DPF: {16A6152E-9737-11D5-A6DC-00D0B721CA48} (PlugXCtl Class) - https://lht.lancer-ins.com/PlugX.cab ALL (L) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409 ALL (L) O16 - DPF: {17D72920-7A15-11D4-921E-0080C8DA7A5E} (AimSp32 Class) - http://makeover.ivillage.com/save/makeover.cab ALL (L) O16 - DPF: {17D72920-7A15-11D4-921E-0080C8DA7A5E} (AimSp32 Class) - http://makeover.substance.com/save/makeover.cab ALL (L) O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://pcpitstop.com/internet/pcpConnCheck.cab ALL (L) O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://www.pcpitstop.com/internet/pcpConnCheck.cab ALL (L) O16 - DPF: {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} (MSSecurityAdvisor Class) - http://download.microsoft.com/download/0/5...b?1083745494153 ALL (L) O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} - file://C:\counter.cab ALL (L) O16 - DPF: {1DD81666-F3AD-11D3-BA86-00500487B4EC} (WonSearchX Control) - http://www.investors.com/member/ocx/WonSearchX.ocx ALL (L) O16 - DPF: {1DF36010-E276-11D4-A7C0-00C04F0453DD} (Stamps.com Secure Postal Account Registration) - https://secure.stamps.com/download/us/registration/3_0_0_789/sdcregie.cab ALL (L) O16 - DPF: {2253F320-AB68-4A07-917D-4F12D8884A06} (ChainCast VMR Client Proxy) - http://www.streamaudio.com/download/ccpm_0237.cab ALL (L) O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab ALL (L) O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab ALL (L) O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB ALL (L) O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/v45/yacscom.cab ALL (L) O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://download.weatherbug.com/minibug/tri...Transporter.cab? ALL (L) O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/...bin/AvSniff.cab ALL (L) O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/Shar...vSniff.cab ALL (L) O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab ALL (L) O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab ALL (L) O16 - DPF: {2CFB52FD-7CF2-479C-BF65-B27F8A834F31} (SecureSession Class) - http://www.samsungtechwin.com/include/pki/SecuiTechIE.cab ALL (L) O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab ALL (L) O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\common\yinsthelper.dll ALL (L) O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - ALL (L) O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab ALL (L) O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB ALL (L) O16 - DPF: {36C66BBD-E667-4DAD-9682-58050E7C9FDC} (CDKey Class) - ALL (L) O16 - DPF: {3734A957-FBD5-4F87-A404-4289C6F3DDFF} (DownloadScanEngine.ctlDSE296315) - http://downloads.rogershelp.com/updates.cab ALL (L) O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} (TTestGenXInstallObject) - http://www.mathxl.com/wizmodules/testge...nstall.cab ALL (L) O16 - DPF: {38578BF0-0ABB-11D3-9330-0080C6F796A1} (Create & Print ActiveX Plug-in) - http://www.imgag.com/cp/install/AxCtp.cab ALL (L) O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab ALL (L) O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - »office.microsoft.com/officeupdate/cont.. ALL (L) O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200...taller.exe ALL (L) O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-12.cab ALL (L) O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.com/oas/A...iveX/winrep.cab ALL (L) O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsc...72/mcinsctl.cab ALL (L) O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsctl/en-us/4,0,0,76/mcinsctl.cab ALL (L) O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/share...insctl.cab ALL (L) O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - »bin.mcafee.com/molbin/shared/mcinsctl/.. ALL (L) O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe ALL (L) O16 - DPF: {5B2745C4-8488-432C-A985-77C3E2EFA64F} (PpayWallet) - https://www26.americanexpress.com/privatepa...nts/ppayspw.cab ALL (L) O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} (WSDownloader Control) - http://www.webshots.com/samplers/WSDownloader.ocx ALL (L) O16 - DPF: {60EFC337-15C2-4369-B2A0-3429B071D8B8} (WebProgramManager Class) - http://isupport4.hp.com/awebui/jsp/answ...anager.CAB ALL (L) O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - ALL (L) O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20030530/qtinstall.info.apple.com/abarth/us/win/QuickTimeInstaller.exe ALL (L) O16 - DPF: {638AF6A2-81A1-4655-9FFA-9FC09CDE22CF} (CScanner Object) - http://www.pestscan.com/scanner/ppctlcab.cab ALL (L) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1093291079375 ALL (L) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1093641872154 ALL (L) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1094506794415 ALL (L) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1096121332343 ALL (L) O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/...n/bin/cabsa.cab ALL (L) O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Shar.../cabsa.cab ALL (L) O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab ALL (L) O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab ALL (L) O16 - DPF: {65F77758-B822-45FB-8F0C-08E85705EC4A} (Upload.ctlUpload) - http://direct.fotomenyn.com/direct/upload.cab ALL (L) O16 - DPF: {6F7864F9-DB33-11D3-8166-0060B0F885E6} (VSPTA Class) - https://www.applyforproducts.cibc.com/certe...Apps/vspta3.cab ALL (L) O16 - DPF: {6FDB0065-2787-11D6-B1D8-0001023916FC} (CLOActiveXInstaller Control) - http://play.igl.net/clo/install/CLO...tallerProj1.cab ALL (L) O16 - DPF: {72C23FEC-3AF9-48FC-9597-241A8EBDFE0A} (InstallShield International Setup Player) - http://ftp.hp.com/pub/automatic/player/isetupML.cab ALL (L) O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/...all/xscan53.cab ALL (L) O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/0fb5...scan53.cab ALL (L) O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2001122...all/xscan53.cab ALL (L) O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004...scan53.cab ALL (L) O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061...all/xscan53.cab ALL (L) O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab ALL (L) O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/76808a0e7ae82f/housecall.antivirus.com/housecall/xscan53.cab ALL (L) O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - »a840.g.akamai.net/7/840/537/2003120501.. ALL (L) O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://www.nick.com/common/groove/gx/GrooveAX25.cab ALL (L) O16 - DPF: {78267546-F2AC-11D2-A278-005004676C44} (WonList Control) - http://www.investors.com/member/ocx/WonList.ocx ALL (L) O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab ALL (L) O16 - DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} (DASWebDownload Class) - http://das.microsoft.com/activate/cab/x86/i486/NTANSI/retail/DASAct.cab ALL (L) O16 - DPF: {88C51E90-8E9C-4C96-8A45-574D88B63FAF} - http://acceso.masminutos.com/laaplicacion.cab ALL (L) O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - ALL (L) O16 - DPF: {8B1BC605-C593-4865-8F5B-05517F0CD0BB} (MSSecurityAdvisorCD Class) - file://C:\Content\include\msSecUcd.cab ALL (L) O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me...Client.cab ALL (L) O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...StatsClient.cab ALL (L) O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab ALL (L) O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab ALL (L) O16 - DPF: {8EDAD21C-3584-4E66-A8AB-EB0E5584767D} - http://toolbar.google.com/data/GoogleActivate.cab ALL (L) O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.broderbund.com/IFW/Cabs/isetup.cab ALL (L) O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab ALL (L) O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.napster.com/client/isetup.cab ALL (L) O16 - DPF: {94482AAF-458E-45EA-BB34-52780CE94306} (RHSIUpdates.ctlUpdates294205) - http://downloads.rogershelp.com/updates.cab ALL (L) O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/4021/ftp...23/cpbrkpie.cab ALL (L) O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} - ALL (L) O16 - DPF: {9732FB42-C321-11D1-836F-00A0C993F125} (mhLabel Class) - http://www.pcpitstop.com/mhLbl.cab ALL (L) O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab ALL (L) O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - »www.pandasoftware.com/activescan/as5/a.. ALL (L) O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/...8211.7790972222 ALL (L) O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37889.6457523148 ALL (L) O16 - DPF: {A031D222-B496-11D2-9CC8-00105A10AAF6} (WONWebLauncher Class) - http://hoylegames.sierra.com/cab/WO...cherControl.cab ALL (L) O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://download.yahoo.com/dl/installs/ymail/ymmapi.dll ALL (L) O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab ALL (L) O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments Control) - https://webresponse.one.microsoft.com/oas/A...eX/FileXfer.cab ALL (L) O16 - DPF: {A7E092C3-692A-11D0-A7E5-08002B322F3B} (WebResponseAttachments Control) - https://webresponse.one.microsoft.com/oas/ActiveX/FileXfer.cab ALL (L) O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab ALL (L) O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) - file://C:\Resources\IntraLaunch.CAB ALL (L) O16 - DPF: {AECD14A8-F662-11D1-A395-00805F535788} (Plotwon Control) - http://www.investors.com/member/ocx/plotwon.ocx ALL (L) O16 - DPF: {B160422D-0A48-11D4-BD9B-00A0C9B0AB7B} (Download Class) - http://expressit.broderbund.com/plugin/Download.cab ALL (L) O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundl...ArcadeRdxIE.cab ALL (L) O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/mcgdmg...,15/mcgdmgr.cab ALL (L) O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://bin.mcafee.com/molbin/shared/mcgdmgr/en-us/1,0,0,16/mcgdmgr.cab ALL (L) O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/share...cgdmgr.cab ALL (L) O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - »bin.mcafee.com/molbin/shared/mcgdmgr/e.. ALL (L) O16 - DPF: {BE5431D2-0F30-11D4-89D9-00C04F509C0A} (SDCInstaller Class) - http://www.stamps.com/download/us/cab/stamps/stamps.cab?r=0.409881591796875&file=stamps.cab ALL (L) O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/SSC/Shared.../cabsa.cab ALL (L) O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab ALL (L) O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab ALL (L) O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - »sc.groups.msn.com/controls/PhotoUC/Msn.. ALL (L) O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/6c5b0a...5/Installer.exe ALL (L) O16 - DPF: {C4DD6732-1E82-4AE7-BD94-180331B84082} (DeltaCVX Control) - http://www.mathxl.com/applets/deltacvx.cab ALL (L) O16 - DPF: {C9DB5AF8-4C14-4A3E-90F8-DB49D6B4866D} (YBUICtrl.FloatWnd.1) - http://racing.youbet.com/wr_3_2/controls/YBUICtrl.cab ALL (L) O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - http://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab ALL (L) O16 - DPF: {CA797B15-445F-4AA9-9828-8A88502F560F} (Uninstall Control) - http://www.worldwinner.com/games/shared/uninstall.cab ALL (L) O16 - DPF: {CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1) - ALL (L) O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/activedata/SymAData.cab ALL (L) O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsup...mAData.cab ALL (L) O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac...ta/SymAData.cab ALL (L) O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac...ta/SymAData.dll ALL (L) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc...wflash.cab ALL (L) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa...ash/swflash.cab ALL (L) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab ALL (L) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab ALL (L) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - »download.macromedia.com/pub/shockwave/.. ALL (L) O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab ALL (L) O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} - http://ax.phobos.apple.com.edgesuite.net/d.../ITDetector.cab ALL (L) O16 - DPF: {DCF0768D-BA7A-101A-B57A-0000C0C3ED5F} - http://209.123.150.11/SetID221/SysUpd.CAB ALL (L) O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://play04.pogo.com/game/deluxe/...aploader_v5.cab ALL (L) O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://utu.popcap.com/games/popcaploader_v5.cab ALL (L) O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab ALL (L) O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - http://www.symantec.com/techsupp/activedata/ActiveData.cab ALL (L) O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsup...veData.cab ALL (L) O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac.../ActiveData.cab ALL (L) O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/active...ol_v1-0-3-0.cab ALL (L) O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab ALL (L) O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://photo.walmart.com/photo/upload/XUpload.ocx ALL (L) O16 - DPF: {E93A6FCA-C052-45DF-AC9B-B729066092F8} (Util Class) - https://isupport4.hp.com/motivedocs/linklauncher/MotUtil.cab ALL (L) O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/en/check/qdiagh.cab?321 ALL (L) O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?312 ALL (L) O16 - DPF: {EE3CD402-69EB-4B53-819D-0CA2F95AD7DA} (PFMngr Control) - http://www.investors.com/member/ocx/PFMngr.ocx ALL (L) O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...304/mcfscan.cab ALL (L) O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...365/mcfscan.cab ALL (L) O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...371/mcfscan.cab ALL (L) O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Companion) - http://us.dl1.yimg.com/download.companion....ebio5_1_6_0.cab ALL (L) O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_1_6_0.cab ALL (L) O16 - DPF: {EFAEF0E4-F044-4D57-9900-1C3FF18524C9} (AV Class) - http://pcpitstop.com/antivirus/PitPav.cab ALL (L) O16 - DPF: {EFAEF0E4-F044-4D57-9900-1C3FF18524C9} (AV Class) - http://www.pcpitstop.com/antivirus/PitPav.cab ALL (L) O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup...er/imloader.cab ALL (L) O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by2fd.bay2.hotmail.msn.com/activex/HMAtchmt.ocx ALL (L) O16 - DPF: {F127B9BA-89EA-4B04-9C67-2074A9DF61FC} (PCUploader Class) - http://photos.walmartphotocentre.ca/activex/PCAXSetup.cab? ALL (L) O16 - DPF: {F2A84794-EE6D-447B-8C21-3BA1DC77C5B4} (SDKInstall Class) - http://activex.microsoft.com/activex/controls/sdkupdate/sdkinst.cab ALL (L) O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX/kdx.cab ALL (L) O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab ALL (L) O16 - DPF: {F5C90925-ABBF-4475-88F5-8622B452BA9E} (Compaq System Data Class) - http://wwemail.support.hp.com/fd2/objects/SysQuery.cab ALL (L) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://us.creative.com/support/downloads/s...12119/CTPID.cab ALL (L) O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So...b28578.cab ALL (L) O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab ALL (L) O16 - DPF: {FDDCE9FF-1FC6-413C-80B1-37B101FDA1D4} (ShellInstaller Control) - http://www.wgutv.com/ShellInstaller.cab ALL (L) O16 - DPF: {FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75} - ALL (L) O16 - DPF: {FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75} - http://download.redswoosh.net/Installer/113/rsinstaller.cab ALL (L) O17 - HKLM\System\CCS\Services\Tcpip\..\{4A613E77-83DF-4FB1-934D-952836EEF50D}: NameServer = 152.66.115.1,195.70.32.131 ALL (L) O17 - HKLM\System\CCS\Services\Tcpip\..\{8DEC32BB-0089-4121-8CA6-38CE8086325F}: NameServer = 68.47.160.6,68.47.160.5 ALL (L) O17 - HKLM\System\CCS\Services\Tcpip\..\{B633F4F0-09D1-4988-864F-EE8E673859A3}: NameServer = 194.158.37.196 194.158.37.211 ALL (L) O17 - HKLM\System\CCS\Services\Tcpip\..\{C6675A22-81F4-4D81-AC8B-578BAA33C849}: NameServer = 192.168.123.254 ALL (L) O17 - HKLM\System\CCS\Services\Tcpip\..\{FED15DFA-D9B6-43A9-8E06-D9E0760A27F2}: NameServer = 206.141.192.60 206.141.193.55 ALL (L) O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = home ALL (L) O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = uchicago.edu ALL (L) O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 205.152.144.235,205.152.0.5 ALL (L) O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 207.217.126.81 ALL (L) O17 - HKLM\System\CS1\Services\Tcpip\..\{4A613E77-83DF-4FB1-934D-952836EEF50D}: NameServer = 152.66.115.1,195.70.32.131 ALL (L) O17 - HKLM\System\CS1\Services\Tcpip\..\{8DEC32BB-0089-4121-8CA6-38CE8086325F}: NameServer = 68.47.160.6,68.47.160.5 ALL (L) O17 - HKLM\System\CS2\Services\Tcpip\..\{4A613E77-83DF-4FB1-934D-952836EEF50D}: NameServer = 152.66.115.1,195.70.32.131 ALL (L) O17 - HKLM\System\CS2\Services\Tcpip\..\{8DEC32BB-0089-4121-8CA6-38CE8086325F}: NameServer = 68.47.160.6,68.47.160.5 ALL (L) O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll ALL (L) O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL ALL (L) O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx ALL (L) O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll ALL (L) O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll ALL (L) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRAM\SPYBOT~1\SDHELPER.DLL ALL (L) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL ALL (L) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll ALL (L) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll ALL (L) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll ALL (L) O2 - BHO: (no name) - {5CA3D70E-1895-11CF-8E15-001234567890} - %SYSDIR%\dla\tfswshx.dll XP (L) O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll ALL (L) O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\program files\google\googletoolbar1.dll ALL (L) O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\program files\google\googletoolbar_en_2.0.95-deleon.dll ALL (L) O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll ALL (L) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX ALL (L) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL ALL (L) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX ALL (L) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx ALL (L) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll ALL (L) O2 - BHO: BAHelper Class - {074E3AA7-7718-4404-B3F8-FF8FB5414E0E} - %WINDIR%\Downloaded Program Files\BrowserAccelerator.dll (file missing) XP (L) O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll ALL (L) O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - %SYSDIR%\dla\tfswshx.dll XP (L) O2 - BHO: EarthLink Popup Blocker - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - C:\Program Files\EarthLink TotalAccess\PnEL.dll ALL (L) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - %WINDIR%\googletoolbar2.dll NT,XP (L) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\program files\google\googletoolbar1.dll ALL (L) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\program files\google\googletoolbar2.dll ALL (L) O2 - BHO: IYBookmarkHO Class - {8B11A219-80C8-4B42-B558-B8C14D1AA8C4} - C:\Program Files\Yahoo!\browser\ybmho.dll ALL (L) O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll ALL (L) O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll ALL (L) O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll ALL (L) O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll ALL (L) O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\PROGRAM FILES\SPYWAREGUARD\DLPROTECT.DLL ALL (L) O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll ALL (L) O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll ALL (L) O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_5_0.dll ALL (L) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - %WINDIR%\googletoolbar2.dll NT,XP (L) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\program files\google\googletoolbar1.dll ALL (L) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\program files\google\googletoolbar2.dll ALL (L) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\program files\google\googletoolbar_en_2.0.95-deleon.dll ALL (L) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - %SYSDIR%\MSDXM.OCX 98,ME (L) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - %SYSDIR%\msdxm.ocx XP,NT,2000 (L) O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboForm.dll ALL (L) O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file) ALL (L) O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) ALL (L) O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - %SYSDIR%\msdxm.ocx 2000 (L) O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll ALL (L) O3 - Toolbar: EarthLink Toolbar - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - C:\Program Files\EarthLink TotalAccess\PnEL.dll ALL (L) O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ALL (L) O3 - Toolbar: JunoBar - {5854FAC4-5BF0-47DD-B5A9-A5EA8CFF3CF4} - C:\PROGRAM FILES\JUNO\TOOLBAR.DLL ALL (L) O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\progra~1\mcafee.com\vso\mcvsshl.dll ALL (L) O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll ALL (L) O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll ALL (L) O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton Antivirus\NavShExt.dll ALL (L) O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\PROGRA~1\WANADOO\WSBAR\WSBAR.DLL ALL (L) O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll ALL (L) O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_5_0.dll ALL (L) O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL ALL (L) O4 - Global Startup: 3Com Modem Manager.lnk = C:\Program Files\3Com\ModemMgr\Program\mdmMgr.exe ALL (L) O4 - Global Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0\aoltray.exe ALL (L) O4 - Global Startup: AOL Broadband Check-Up.lnk = C:\Program Files\AOL\Broadband CheckUp\bin\matcli.exe ALL (L) O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe ALL (L) O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe ALL (L) O4 - Global Startup: BTTray.lnk = ? ALL (L) O4 - Global Startup: BlackICE Utility.lnk = C:\Program Files\Network ICE\BlackICE\blackice.exe ALL (L) O4 - Global Startup: Digimax Viewer 1.0.lnk = C:\Program Files\Samsung\Digimax Viewer 1.0\DigimaxViewer.exe ALL (L) O4 - Global Startup: Digital Line Detect.lnk = ? ALL (L) O4 - Global Startup: Event Reminder.lnk = ? ALL (L) O4 - Global Startup: FireWall-1 Authentication Agent.lnk = C:\Program Files\CheckPoint\AuthAgent\PROGRAM\FWSession.exe ALL (L) O4 - Global Startup: Forget Me Not.lnk = C:\Program Files\Broderbund\AG Scrapbooks\AGremind.exe ALL (L) O4 - Global Startup: HPAiODevice(hp officejet g series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet g series\Bin\hpoavn07.exe ALL (L) O4 - Global Startup: HotSync Manager.lnk = C:\Palm\HOTSYNC.EXE ALL (L) O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe ALL (L) O4 - Global Startup: LapLink Scheduler.lnk = C:\Program Files\laplinknt\tsisched.exe ALL (L) O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe ALL (L) O4 - Global Startup: Microsoft Broadband Networking.lnk = ? ALL (L) O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE ALL (L) O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE ALL (L) O4 - Global Startup: Microsoft Outlook.lnk = C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE ALL (L) O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? ALL (L) O4 - Global Startup: Perstray.lnk = C:\Program Files\PerSono\perstray.exe ALL (L) O4 - Global Startup: QuickBooks 2002 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002.exe ALL (L) O4 - Global Startup: Shortcut to TransparentW.exe.lnk = C:\Program Files\Accessories\TransparentW.exe ALL (L) O4 - Global Startup: SpySubtract.lnk = C:\Program Files\InterMute\SpySubtract\SpySub.exe ALL (L) O4 - Global Startup: Ulead Photo Express 3.0 SE Calendar Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe ALL (L) O4 - Global Startup: Ulead Photo Express Calendar Checker For My Custom Edition.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 My Custom Edition\CalCheck.exe ALL (L) O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe ALL (L) O4 - Global Startup: VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe ALL (L) O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE ALL (L) O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe ALL (L) O4 - Global Startup: hpoddt01.exe.lnk = ? ALL (L) O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl ALL (L) O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl ALL (L) O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl ALL (L) O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\LaunchPd.exe" ALL (L) O4 - HKCU\..\Run: [CTFMON.EXE] %SYSDIR%\ctfmon.exe XP (L) O4 - HKCU\..\Run: [E6TaskPanel] "C:\PROGRAM FILES\EARTHLINK TOTALACCESS\TASKPANL.EXE" -winstart ALL (L) O4 - HKCU\..\Run: [Extreme Messenger for AIM] C:\Extreme Messenger\ExtremeMessenger.exe nosplash ALL (L) O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c ALL (L) O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background ALL (L) O4 - HKCU\..\Run: [McAfee.InstantUpdate.Monitor] "C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe" /startmonitor ALL (L) O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe ALL (L) O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe" ALL (L) O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape\Netscape\Netscp.exe" -turbo ALL (L) O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\mozilla.org\Mozilla\Mozilla.exe" -turbo ALL (L) O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background ALL (L) O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE %SYSDIR%\NVMCTRAY.DLL,NvTaskbarInit 2000,XP (L) O4 - HKCU\..\Run: [Ohar] C:\Documents and Settings\Jim\Application Data\latt.exe ALL (L) O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe" ALL (L) O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\Program Files\Panicware\Pop-Up Stopper Free Edition\PSFree.exe" ALL (L) O4 - HKCU\..\Run: [Semagic] C:\LiveJournal\Semagic\LiveJournal.exe ALL (L) O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0 ALL (L) O4 - HKCU\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0 ALL (L) O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy13\TeaTimer.exe ALL (L) O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe ALL (L) O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\spydoctor.exe" /Q ALL (L) O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe ALL (L) O4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\Symantec\LIVEUP~1\SNDMon.EXE ALL (L) O4 - HKCU\..\Run: [Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\ypager.exe -quiet ALL (L) O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet ALL (L) O4 - HKCU\..\Run: [a²] "C:\Program Files\a2\a2guard.exe" ALL (L) O4 - HKCU\..\Run: [ctfmon.exe] %SYSDIR%\ctfmon.exe XP (L) O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background ALL (L) O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM\MSN MESSENGER\MSNMSGR.EXE" /background ALL (L) O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background ALL (L) O4 - HKCU\..\Run: [pdfFactory Dispatcher v2] %SYSDIR%\spool\DRIVERS\W32X86\3\fppdis2a.exe 2000 (L) O4 - HKCU\..\Run: [seticlient] C:\Program Files\SETI@home\SETI@home.exe -min ALL (L) O4 - HKCU\..\Run: [spc_w] "C:\Program Files\JUSearch\hcm.exe" -w ALL (L) O4 - HKCU\..\Run: [win32spl] %SYSDIR%\win32spl.exe 2000 (L) O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe ALL (L) O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRAM FILES\COMMON FILES1\AOL\AOLSPY~1\AOLSP Scheduler.exe" ALL (L) O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe" ALL (L) O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe ALL (L) O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe ALL (L) O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe ALL (L) O4 - HKLM\..\Run: [AVG_CC] C:\PROGRAM FILES\Grisoft\AVG6\avgcc32.exe /STARTUP ALL (L) O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\GRISOFT\AVG6\avgcc32.exe /STARTUP ALL (L) O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP ALL (L) O4 - HKLM\..\Run: [AVG_CC] C:\Program Files\Grisoft\AVG6\avgcc32.exe /startup ALL (L) O4 - HKLM\..\Run: [Ad-watch] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe" ALL (L) O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" ALL (L) O4 - HKLM\..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe ALL (L) O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE ALL (L) O4 - HKLM\..\Run: [Aktivitetsfältet] SysTray.Exe ALL (L) O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE ALL (L) O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe ALL (L) O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL ALL (L) O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe ALL (L) O4 - HKLM\..\Run: [AtiKey] Atitask.exe ALL (L) O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe ALL (L) O4 - HKLM\..\Run: [Aureal A3D Interactive Audio Init] A3dInit.exe ALL (L) O4 - HKLM\..\Run: [AutoTBar] C:\hp\bin\autotbar.exe ALL (L) O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe ALL (L) O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor ALL (L) O4 - HKLM\..\Run: [BOCleanautostart] C:\PROGRA~1\NSClean\BOClean\BOClean.exe ALL (L) O4 - HKLM\..\Run: [BrowserWebCheck] loadwc.exe ALL (L) O4 - HKLM\..\Run: [CARPService] carpserv.exe ALL (L) O4 - HKLM\..\Run: [CHotkey] mHotkey.exe ALL (L) O4 - HKLM\..\Run: [CPQEASYACC] "C:\PROGRAM\COMPAQ\EASY ACCESS BUTTON SUPPORT\Cpqeaui.exe" ALL (L) O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE ALL (L) O4 - HKLM\..\Run: [CTRegRun] %WINDIR%\CTRegRun.EXE XP (L) O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run ALL (L) O4 - HKLM\..\Run: [CXMon] "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe" ALL (L) O4 - HKLM\..\Run: [ChkAdmin] CHKADMIN.EXE ALL (L) O4 - HKLM\..\Run: [Compaq Internet Setup] C:\Compaq\Internet\InetWizard.exe /RUN ALL (L) O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe ALL (L) O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 ALL (L) O4 - HKLM\..\Run: [DIGStream] C:\Program Files\DIGStream\digstream.exe ALL (L) O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB ALL (L) O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe ALL (L) O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" ALL (L) O4 - HKLM\..\Run: [DVDSentry] %SYSDIR%\DSentry.exe XP (L) O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\PROGRA~1\AIM\\DeadAIM.ocm",ExportedCheckODLs ALL (L) O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs ALL (L) O4 - HKLM\..\Run: [Dell AIO Printer A920] "C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe" ALL (L) O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe ALL (L) O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe ALL (L) O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s ALL (L) O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe ALL (L) O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe ALL (L) O4 - HKLM\..\Run: [EACLEAN] C:\Program\Compaq\Easy Access Button Support\eaclean.exe /NORESTART ALL (L) O4 - HKLM\..\Run: [EM_EXEC] C:\Program Files\Logitech\MouseWare\System\em_exec.exe ALL (L) O4 - HKLM\..\Run: [EM_EXEC] C:\mouse\system\em_exec.exe ALL (L) O4 - HKLM\..\Run: [EPSON Stylus C42 Series] %SYSDIR%\spool\DRIVERS\W32X86\E_S10IC1.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42" XP (L) O4 - HKLM\..\Run: [EnsoniqMixer] %SYSDIR%\starter.exe NT (L) O4 - HKLM\..\Run: [GSICONEXE] gsicon.exe ALL (L) O4 - HKLM\..\Run: [GWMDMMSG] GWMDMMSG.exe ALL (L) O4 - HKLM\..\Run: [GWMDMpi] %WINDIR%\GWMDMpi.exe XP (L) O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe ALL (L) O4 - HKLM\..\Run: [Gtwatch] %WINDIR%\gtwatch.exe XP (L) O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" ALL (L) O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe" ALL (L) O4 - HKLM\..\Run: [HPDJ Taskbar Utility] %SYSDIR%\spool\drivers\w32x86\3\hpztsb09.exe XP (L) O4 - HKLM\..\Run: [HYPERFOLIO BROWSER SPY] C:\Program Files\CUA\hfbspy.exe "C:\Program Files\CUA\hfolio.exe" ALL (L) O4 - HKLM\..\Run: [Hot Key Kbd 9910 Daemon] SK9910DM.EXE ALL (L) O4 - HKLM\..\Run: [HotKeysCmds] %SYSDIR%\hkcmd.exe XP (L) O4 - HKLM\..\Run: [IDCLNT7NMCPDATA] C:\Program Files\NetManage\Setup\nmcpdata.exe I IDCLNT7 ALL (L) O4 - HKLM\..\Run: [IMONTRAY] C:\Program Files\Intel\Intel(R) Active Monitor\imontray.exe ALL (L) O4 - HKLM\..\Run: [IPInSightMonitor 01] "C:\Program Files\SBC Yahoo!\Connection Manager\IP InSight\IPMon32.exe" ALL (L) O4 - HKLM\..\Run: [IgfxTray] %SYSDIR%\igfxtray.exe XP (L) O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe ALL (L) O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe" ALL (L) O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" ALL (L) O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe ALL (L) O4 - HKLM\..\Run: [KAZAA] "C:\Program Files\Kazaa Lite K++\kpp.exe" "C:\Program Files\Kazaa Lite K++\KazaaLite.kpp" /SYSTRAY ALL (L) O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k ALL (L) O4 - HKLM\..\Run: [KeyMaestro] C:\KMaestro\KMaestro.exe ALL (L) O4 - HKLM\..\Run: [Keyboard Preload Check] C:\OEMDRVRS\KEYB\Preload.exe /DEVID: /CLASS:Keyboard /RunValue:"Keyboard Preload Check" ALL (L) O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE ALL (L) O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Browser Mouse\Browser Mouse\1.1\MOUSE32A.EXE ALL (L) O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme ALL (L) O4 - HKLM\..\Run: [LoadQM] loadqm.exe ALL (L) O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe ALL (L) O4 - HKLM\..\Run: [MCAgentExe] C:\PROGRA~1\mcafee.com\agent\mcagent.exe ALL (L) O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe ALL (L) O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe ALL (L) O4 - HKLM\..\Run: [MGA Hook] "%SYSDIR%\MGAHOOK.EXE" NT (L) O4 - HKLM\..\Run: [MGA QuickDesk] "C:\Program Files\MGA NT PowerDesk\QDesk\MGAQDESK.EXE" ALL (L) O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe ALL (L) O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe ALL (L) O4 - HKLM\..\Run: [MPFExe] C:\PROGRAM FILES\McAfee.com\PERSON~1\MpfTray.exe ALL (L) O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe ALL (L) O4 - HKLM\..\Run: [MSConfig] %WINDIR%\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto XP (L) O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" ALL (L) O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers ALL (L) O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe ALL (L) O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe ALL (L) O4 - HKLM\..\Run: [NAV CfgWiz] C:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT" ALL (L) O4 - HKLM\..\Run: [NAV DefAlert] C:\PROGRA~1\NORTON~1\DEFALERT.EXE ALL (L) O4 - HKLM\..\Run: [NPROTECT] C:\PROGRA~1\NORTON~1\ADVTOOLS\NPROTECT.EXE ALL (L) O4 - HKLM\..\Run: [NS] ns.exe ALL (L) O4 - HKLM\..\Run: [NeroCheck] %SYSDIR%\NeroCheck.exe XP,2000 (L) O4 - HKLM\..\Run: [NeroFilterCheck] %SYSDIR%\NeroCheck.exe XP,2000 (L) O4 - HKLM\..\Run: [NetManage LaunchNow Init] RunDLL32 C:\PROGRA~1\NETMAN~1\Common\nmgoinn.dll,VerifyStartMenu ALL (L) O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET ALL (L) O4 - HKLM\..\Run: [Norton eMail Protect] C:\PROGRAM FILES\NORTON ANTIVIRUS\POProxy.exe ALL (L) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE %SYSDIR%\NvCpl.dll,NvStartup XP,2000,ME (L) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize ALL (L) O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE %SYSDIR%\NvMcTray.dll,NvTaskbarInit XP (L) O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\OfficeScan NT\pccntmon.exe" -HideWindow ALL (L) O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe ALL (L) O4 - HKLM\..\Run: [P2P NETWORKING] %SYSDIR%\P2P NETWORKING\P2P NETWORKING.EXE /AUTOSTART 98 (L) O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe" ALL (L) O4 - HKLM\..\Run: [POINTER] C:\Program Files\Microsoft Hardware\Mouse\point32.exe ALL (L) O4 - HKLM\..\Run: [POINTER] point32.exe ALL (L) O4 - HKLM\..\Run: [PSDrvCheck] %SYSDIR%\PSDrvCheck.exe XP (L) O4 - HKLM\..\Run: [PWSTray] PwsTray.exe ALL (L) O4 - HKLM\..\Run: [PinnacleDriverCheck] %SYSDIR%\PSDrvCheck.exe XP (L) O4 - HKLM\..\Run: [PreloadApp] C:\hp\drivers\printers\photosmart\hphprld.exe C:\hp\drivers\printers\photosmart\setup.exe -d ALL (L) O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode ALL (L) O4 - HKLM\..\Run: [QAGENT] C:\Program Files\QUICKENW\QAGENT.EXE ALL (L) O4 - HKLM\..\Run: [QCTRAY] C:\Program Files\ThinkPad\ConnectUtilities\QCTRAY.EXE ALL (L) O4 - HKLM\..\Run: [QCWLICON] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE ALL (L) O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE ALL (L) O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime ALL (L) O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER ALL (L) O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s ALL (L) O4 - HKLM\..\Run: [RoboPDF] %WINDIR%\System32 XP (L) O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe" ALL (L) O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe" ALL (L) O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe" ALL (L) O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe ALL (L) O4 - HKLM\..\Run: [SMC] C:\SMC\SMC.exe ALL (L) O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe ALL (L) O4 - HKLM\..\Run: [ScanRegistry] %WINDIR%\scanregw.exe /autorun 98 (L) O4 - HKLM\..\Run: [SchedulingAgent] mstinit.exe /logon ALL (L) O4 - HKLM\..\Run: [Service Connection] C:\cpqs\bwtools\sccenter.exe ALL (L) O4 - HKLM\..\Run: [SetRefresh] C:\Program Files\Compaq\SetRefresh\SetRefresh.exe ALL (L) O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE ALL (L) O4 - HKLM\..\Run: [SiS KHooker] %SYSDIR%\khooker.exe 2000,XP (L) O4 - HKLM\..\Run: [SiS Tray] %SYSDIR%\sistray.EXE XP (L) O4 - HKLM\..\Run: [SiSUSBRG] %WINDIR%\SiSUSBrg.exe XP (L) O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe ALL (L) O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui ALL (L) O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui ALL (L) O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE ALL (L) O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon ALL (L) O4 - HKLM\..\Run: [SpybotSD TeaTimer] C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TeaTimer.exe ALL (L) O4 - HKLM\..\Run: [StillImageMonitor] %SYSDIR%\STIMON.EXE 98 (L) O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r ALL (L) O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2\bin\jusched.exe ALL (L) O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe ALL (L) O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe ALL (L) O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start ALL (L) O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon ALL (L) O4 - HKLM\..\Run: [SystemTray] SysTray.Exe ALL (L) O4 - HKLM\..\Run: [TCASUTIEXE] TCAUDIAG.exe -on ALL (L) O4 - HKLM\..\Run: [TDS3] C:\Program Files\DiamondCS\TDS3\TDS-3.exe ALL (L) O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 3.8\THGuard.exe" ALL (L) O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 3.9\THGuard.exe" ALL (L) O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe ALL (L) O4 - HKLM\..\Run: [TPTRAY] C:\PROGRA~1\ThinkPad\UTILIT~1\TP98TRAY.EXE ALL (L) O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK ALL (L) O4 - HKLM\..\Run: [TaskMonitor] %WINDIR%\taskmon.exe 98 (L) O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot ALL (L) O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe ALL (L) O4 - HKLM\..\Run: [TraySantaCruz] %SYSDIR%\tbctray.exe XP (L) O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp ALL (L) O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe ALL (L) O4 - HKLM\..\Run: [USB Disk Tool] C:\Program Files\USB Disk Tool\USNDISKT.EXE ALL (L) O4 - HKLM\..\Run: [UpdReg] %WINDIR%\UpdReg.EXE XP (L) O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r ALL (L) O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask ALL (L) O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe ALL (L) O4 - HKLM\..\Run: [VirusScan Online] "C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe" ALL (L) O4 - HKLM\..\Run: [VortexTray] ASP4TRAY.EXE ALL (L) O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE ALL (L) O4 - HKLM\..\Run: [WXSETLOC] C:\Program Files\WAVEXA-2K\WXSETLOC.EXE ALL (L) O4 - HKLM\..\Run: [Watch Dog Program] C:\COMPAQ\INTERNET\WATCHDOG.EXE ALL (L) O4 - HKLM\..\Run: [WinPatrol PLUS] C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe ALL (L) O4 - HKLM\..\Run: [WinVNC] "C:\Program Files\ORL\VNC\WinVNC.exe" -servicehelper ALL (L) O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe" ALL (L) O4 - HKLM\..\Run: [WinampAgent] "C:\Program\Winamp3\winampa.exe" ALL (L) O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe ALL (L) O4 - HKLM\..\Run: [Windows Registry Repair Pro] C:\Program Files\3B Software\Windows Registry Repair Pro\Windows Registry Repair Pro.exe -X ALL (L) O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe ALL (L) O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" ALL (L) O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program\Zone Labs\ZoneAlarm\zlclient.exe" ALL (L) O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe ALL (L) O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\Zone Labs\ZoneAlarm\zapro.exe ALL (L) O4 - HKLM\..\Run: [bacstray] BacsTray.exe ALL (L) O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" ALL (L) O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe" ALL (L) O4 - HKLM\..\Run: [dla] %SYSDIR%\dla\tfswctrl.exe XP (L) O4 - HKLM\..\Run: [ezShieldProtector for Px] %SYSDIR%\ezSP_Px.exe 2000 (L) O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe ALL (L) O4 - HKLM\..\Run: [internat.exe] internat.exe ALL (L) O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe ALL (L) O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe ALL (L) O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mmtask.exe ALL (L) O4 - HKLM\..\Run: [nwiz] nwiz.exe /install ALL (L) O4 - HKLM\..\Run: [rfagent] C:\PROGRAM FILES\RFA\rfagent.exe ALL (L) O4 - HKLM\..\Run: [spc_w] "C:\Program Files\JUSearch\hcm.exe" -w ALL (L) O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe ALL (L) O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\NORTON~1\vptray.exe ALL (L) O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe ALL (L) O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe ALL (L) O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe ALL (L) O4 - HKLM\..\RunServices: [*StateMgr] %SYSDIR%\Restore\StateMgr.exe ME (L) O4 - HKLM\..\RunServices: [Aureal A3D Interactive Audio] sa3dsrv.exe ALL (L) O4 - HKLM\..\RunServices: [Avgserv9.exe] C:\PROGRA~1\GRISOFT\AVG6\Avgserv9.exe ALL (L) O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme ALL (L) O4 - HKLM\..\RunServices: [MSDTC] msdtcw -start ALL (L) O4 - HKLM\..\RunServices: [NS] ns.exe ALL (L) O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe ALL (L) O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg ALL (L) O4 - HKLM\..\RunServices: [SmcService] C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE ALL (L) O4 - HKLM\..\RunServices: [SndSrvc] C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSRVC.EXE ALL (L) O4 - HKLM\..\RunServices: [TrueVector] %SYSDIR%\ZONELABS\VSMON.EXE -service 98 (L) O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe" ALL (L) O4 - HKLM\..\RunServices: [ccProxy] C:\PROGRA~1\COMMON~1\SYMANT~1\CCPROXY.EXE ALL (L) O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe" ALL (L) O4 - HKLM\..\RunServices: [defwatch] C:\PROGRA~1\NORTON~1\defwatch.exe ALL (L) O4 - HKLM\..\RunServices: [inetinfo.exe] %SYSDIR%\inetsrv\inetinfo.exe -e w3svc 98 (L) O4 - HKLM\..\RunServices: [rtvscn95] C:\PROGRA~1\NORTON~1\rtvscn95.exe ALL (L) O4 - Startup: ATI Scheduler.lnk = C:\ati\atidesk\atisched.exe ALL (L) O4 - Startup: Adobe Gamma Loader.lnk = C:\Program\Vanliga filer\Adobe\Calibration\Adobe Gamma Loader.exe ALL (L) O4 - Startup: EPSON Background Monitor.lnk = C:\ESM2\Stms.exe ALL (L) O4 - Startup: Iomega Disk Icons.lnk = C:\Program\Iomega\Tools\IMGICON.exe ALL (L) O4 - Startup: Iomega Startinställningar.lnk = C:\Program\Iomega\Tools\Imgstart.exe ALL (L) O4 - Startup: Iomega Watch.lnk = C:\Program\Iomega\Tools\IOWATCH.EXE ALL (L) O4 - Startup: MRU-Blaster Scheduler.lnk = C:\Program Files\MRU-Blaster\scheduler.exe ALL (L) O4 - Startup: MRU-Blaster Silent Clean.lnk = C:\Program Files\MRU-Blaster\mrublaster.exe ALL (L) O4 - Startup: Macro Scheduler.lnk = C:\Program Files\MJT Net Ltd\Macro Scheduler\msched.exe ALL (L) O4 - Startup: MailWasherPro.lnk = C:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe ALL (L) O4 - Startup: MemTurbo.lnk = C:\memturbo\memturbo.exe ALL (L) O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE ALL (L) O4 - Startup: Microsoft Office.lnk = C:\Program\Microsoft Office\Office\OSA9.EXE ALL (L) O4 - Startup: Mopy Points Collector.lnk = C:\MOPYFISH\GETPOINT.EXE ALL (L) O4 - Startup: Norton System Doctor.LNK = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE ALL (L) O4 - Startup: PowerReg SchedulerV2.exe ALL (L) O4 - Startup: Process Guard.lnk = C:\Program Files\DiamondCS\ProcessGuard\procguard.exe ALL (L) O4 - Startup: Refresh.lnk = C:\Program\Iomega\Tools\refresh.exe ALL (L) O4 - Startup: Semagic.lnk = C:\LiveJournal\Semagic\LiveJournal.exe ALL (L) O4 - Startup: Snabbstartaren.lnk = C:\Program\htmledit\program\snabbst.Exe ALL (L) O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe ALL (L) O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe ALL (L) O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe ALL (L) O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present ALL (L) O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present ALL (L) O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm ALL (L) O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm ALL (L) O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm ALL (L) O8 - Extra context menu item: &Google Search - res://%WINDIR%\GoogleToolbar2.dll/cmsearch.html NT,XP (L) O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html ALL (L) O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\googletoolbar.dll/cmsearch.html ALL (L) O8 - Extra context menu item: &Google Search - res://C:\program files\google\GoogleToolbar1.dll/cmsearch.html ALL (L) O8 - Extra context menu item: &Google Search - res://C:\program files\google\GoogleToolbar2.dll/cmsearch.html ALL (L) O8 - Extra context menu item: &NeoTrace It! - C:\Program\NEOTRA~1\NTXcontext.htm ALL (L) O8 - Extra context menu item: &WordWeb... - res://%WINDIR%\wweb32.dll/lookup.html 2000 (L) O8 - Extra context menu item: Allow pop-ups from this site - C:\Program Files\Propel Accelerator\pac-addwl.html ALL (L) O8 - Extra context menu item: Backward &Links - res://%WINDIR%\GoogleToolbar2.dll/cmbacklinks.html NT (L) O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html ALL (L) O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\googletoolbar.dll/cmbacklinks.html ALL (L) O8 - Extra context menu item: Backward Links - res://%WINDIR%\GoogleToolbar2.dll/cmbacklinks.html XP (L) O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html ALL (L) O8 - Extra context menu item: Backward Links - res://C:\program files\google\GoogleToolbar1.dll/cmbacklinks.html ALL (L) O8 - Extra context menu item: Backward Links - res://C:\program files\google\GoogleToolbar2.dll/cmbacklinks.html ALL (L) O8 - Extra context menu item: Cac&hed Snapshot of Page - res://%WINDIR%\GoogleToolbar2.dll/cmcache.html NT (L) O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html ALL (L) O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\googletoolbar.dll/cmcache.html ALL (L) O8 - Extra context menu item: Cached Snapshot of Page - res://%WINDIR%\GoogleToolbar2.dll/cmcache.html XP (L) O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html ALL (L) O8 - Extra context menu item: Cached Snapshot of Page - res://C:\program files\google\GoogleToolbar1.dll/cmcache.html ALL (L) O8 - Extra context menu item: Cached Snapshot of Page - res://C:\program files\google\GoogleToolbar2.dll/cmcache.html ALL (L) O8 - Extra context menu item: Customize Menu &4 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ALL (L) O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm ALL (L) O8 - Extra context menu item: Download All Links with IDM - C:\PROGRAM FILES\INTERNET DOWNLOAD MANAGER\IEGetAll.htm ALL (L) O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm ALL (L) O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm ALL (L) O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm ALL (L) O8 - Extra context menu item: Download with IDM - C:\PROGRAM FILES\INTERNET DOWNLOAD MANAGER\IEExt.htm ALL (L) O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 ALL (L) O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 ALL (L) O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 ALL (L) O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 ALL (L) O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 ALL (L) O8 - Extra context menu item: Open Link Target in Firefox - file://C:\Documents and Settings\Alison\Application Data\Mozilla\Firefox\Profiles\default.rhi\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewlink.html ALL (L) O8 - Extra context menu item: Open Picture in &Microsoft PhotoDraw - res://C:\PROGRA~1\MICROS~2\Office\1033\phdintl.dll/phdContext.htm ALL (L) O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm ALL (L) O8 - Extra context menu item: Refresh Pa&ge with Full Quality - C:\Program Files\Propel Accelerator\pac-page.html ALL (L) O8 - Extra context menu item: Refresh Pi&cture with Full Quality - C:\Program Files\Propel Accelerator\pac-image.html ALL (L) O8 - Extra context menu item: RoboForm &2 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ALL (L) O8 - Extra context menu item: Save Flash with Flash Catcher - res://C:\Program Files\Common Files\justDo\IECatcher.DLL/FlashCatcher.htm ALL (L) O8 - Extra context menu item: Save Picture - res://C:\Program Files\UnH Solutions\SavePicNoAsk Light\spnal.exe/130 ALL (L) O8 - Extra context menu item: Search with Wanadoo - res://C:\PROGRA~1\WANADOO\WSBAR\WSBAR.DLL/VSearch.htm ALL (L) O8 - Extra context menu item: Si&milar Pages - res://%WINDIR%\GoogleToolbar2.dll/cmsimilar.html NT (L) O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html ALL (L) O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\googletoolbar.dll/cmsimilar.html ALL (L) O8 - Extra context menu item: Similar Pages - res://%WINDIR%\GoogleToolbar2.dll/cmsimilar.html XP (L) O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html ALL (L) O8 - Extra context menu item: Similar Pages - res://C:\program files\google\GoogleToolbar1.dll/cmsimilar.html ALL (L) O8 - Extra context menu item: Similar Pages - res://C:\program files\google\GoogleToolbar2.dll/cmsimilar.html ALL (L) O8 - Extra context menu item: Translate into English - res://%WINDIR%\GoogleToolbar2.dll/cmtrans.html NT,XP (L) O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html ALL (L) O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\googletoolbar.dll/cmtrans.html ALL (L) O8 - Extra context menu item: Translate into English - res://C:\program files\google\GoogleToolbar1.dll/cmtrans.html ALL (L) O8 - Extra context menu item: Translate into English - res://C:\program files\google\GoogleToolbar2.dll/cmtrans.html ALL (L) O8 - Extra context menu item: View This Page in Firefox - file://C:\Documents and Settings\Alison\Application Data\Mozilla\Firefox\Profiles\default.rhi\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewpage.html ALL (L) O9 - Extra 'Tools' menuitem: &FlashGet (HKLM) ALL (L) O9 - Extra 'Tools' menuitem: &Toolbar Wallpaper - {c23dd370-cb79-11d2-898a-00c04f80a47f} - C:\Program Files\Internet Explorer\Toolbar\toolbar.hta ALL (L) O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 (HKLM) ALL (L) O9 - Extra 'Tools' menuitem: Flash Catcher - {90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - res://C:\Program Files\Common Files\justDo\IECatcher.DLL/FlashCatcher.htm (file missing) ALL (L) O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRAM\ICQ\ICQ.exe ALL (L) O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe ALL (L) O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe ALL (L) O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE ALL (L) O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - (no file) ALL (L) O9 - Extra 'Tools' menuitem: Messenger (HKLM) ALL (L) O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE ALL (L) O9 - Extra 'Tools' menuitem: RoboForm &2 - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ALL (L) O9 - Extra 'Tools' menuitem: Rogers &Yahoo! Sidebar - {51085E3D-A958-42A2-A6BE-A6A9B0BAF276} - C:\Program Files\Yahoo!\browser\ysidebarIE.dll ALL (L) O9 - Extra 'Tools' menuitem: SavePicNoAsk Light - {BC8FABCD-8649-4eef-89DB-C012144ADFB1} - C:\Program Files\UnH Solutions\SavePicNoAsk Light\spnal.exe (HKCU) ALL (L) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) ALL (L) O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - %WINDIR%\web\related.htm 98,NT,XP (L) O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) ALL (L) O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file) ALL (L) O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - %SYSDIR%\MSJAVA.DLL 98 (L) O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - %SYSDIR%\msjava.dll XP (L) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) ALL (L) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE ALL (L) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe ALL (L) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\MSMSGS.EXE ALL (L) O9 - Extra 'Tools' menuitem: Yahoo! Login (HKLM) ALL (L) O9 - Extra 'Tools' menuitem: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll ALL (L) O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM) ALL (L) O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - (no file) ALL (L) O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll ALL (L) O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll ALL (L) O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE ALL (L) O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe ALL (L) O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file) ALL (L) O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - %SYSDIR%\MSJAVA.DLL 98 (L) O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - %SYSDIR%\msjava.dll XP (L) O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - (no file) ALL (L) O9 - Extra button: (no name) - {AFC3FA82-AD07-45cd-8B57-983435B9899E} - (no file) ALL (L) O9 - Extra button: (no name) - {BC8FABCD-8649-4eef-89DB-C012144ADFB1} - C:\Program Files\UnH Solutions\SavePicNoAsk Light\spnal.exe (HKCU) ALL (L) O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) ALL (L) O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 (HKLM) ALL (L) O9 - Extra button: AIM (HKLM) ALL (L) O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM95\AIM.EXE ALL (L) O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE ALL (L) O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe ALL (L) O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe ALL (L) O9 - Extra button: AOL Instant Messenger ™ - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe ALL (L) O9 - Extra button: ATI TV (HKLM) ALL (L) O9 - Extra button: ComcastHSI - {F0835981-67F3-4943-A82D-4EBA3E936E9A} - http://www.comcast.net (file missing) (HKCU) ALL (L) O9 - Extra button: Dell Home - {6304A7A0-801E-11D3-8512-50AF4FC10000} - http://www.dell.com/ (file missing) (HKCU) ALL (L) O9 - Extra button: Flash Catcher - {90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - res://C:\Program Files\Common Files\justDo\IECatcher.DLL/FlashCatcher.htm (file missing) ALL (L) O9 - Extra button: FlashGet (HKLM) ALL (L) O9 - Extra button: Help - {E4C657FF-21B1-4096-9EF3-95473152C71E} - http://www.comcast.net/memberservices/ (file missing) (HKCU) ALL (L) O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe ALL (L) O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe ALL (L) O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe ALL (L) O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRAM\ICQ\ICQ.exe ALL (L) O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe ALL (L) O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing) ALL (L) O9 - Extra button: Messenger (HKLM) ALL (L) O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - (no file) ALL (L) O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll ALL (L) O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll ALL (L) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE ALL (L) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe ALL (L) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program\Messenger\MSMSGS.EXE ALL (L) O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll ALL (L) O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - C:\Program\NEOTRA~1\NTXtoolbar.htm (HKCU) ALL (L) O9 - Extra button: Real.com (HKLM) ALL (L) O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - %SYSDIR%\Shdocvw.dll XP (L) O9 - Extra button: RealGuide - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - %SYSDIR%\Shdocvw.dll 98 (L) O9 - Extra button: Related (HKLM) ALL (L) O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - %WINDIR%\web\related.htm 98,NT,XP (L) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL ALL (L) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL ALL (L) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL ALL (L) O9 - Extra button: Researcher - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Common Files\Microsoft Shared\Encarta Researcher\EROPROJ.DLL ALL (L) O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ALL (L) O9 - Extra button: Rogers Yahoo! Sidebar - {51085E3D-A958-42A2-A6BE-A6A9B0BAF276} - C:\Program Files\Yahoo!\browser\ysidebarIE.dll ALL (L) O9 - Extra button: Support - {F3CFCA70-4B21-4B72-A618-E60E3D102A1F} - http://www.comcastsupport.com (file missing) (HKCU) ALL (L) O9 - Extra button: Wallpaper - {c23dd370-cb79-11d2-898a-00c04f80a47f} - C:\Program Files\Internet Explorer\Toolbar\toolbar.hta ALL (L) O9 - Extra button: Yahoo! Login (HKLM) ALL (L) O9 - Extra button: Yahoo! Login - {2499216C-4BA5-11D5-BD9C-000103C116D5} - C:\Program Files\Yahoo!\Common\ylogin.dll ALL (L) O9 - Extra button: Yahoo! Messenger (HKLM) ALL (L) O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE ALL (L) O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %WINDIR%\PCHealth\HelpCtr\System\panels\blank.htm XP (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://intranite.aniteps.com/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://login.passport.net/uilogin.srf?id=2 ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sbc.yahoo.com/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bellsouth.net/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.canoe.ca/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.eircom.net/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.etrade.com.au/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.go.com.mt/mygo/index.html ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.se/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.livejournal.com/users/eure_maum/friends ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msnbc.com/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.pulse24.com/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.utexas.edu/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://xtra.co.nz/home ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = »fetew.rug.ac.be/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = »www.msnbc.msn.com/ ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = ALL (L) R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar ALL (L) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = ALL (L) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %WINDIR%\PCHealth\HelpCtr\System\panels\blank.htm XP (L) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Program Files\Common Files\Microsoft Shared\Stationery\Blank.htm ALL (L) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com ALL (L) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway ALL (L) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.pulse24.com ALL (L) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://xtra.co.nz/home ALL (L) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimtoday.com/search/aimtoolbar.jsp ALL (L) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://my.juno.com/s/search?r=minisearch ALL (L) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.earthlink.net/AL/Search ALL (L) R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://my.juno.com/s/sp?r=al&cf=sp&....JQ3&N=PLEM&O=A ALL (L) R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway ALL (L) R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.dell.com/ ALL (L) R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.dellnet.com/ ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.earthlink.net ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.earthlink.net/partner/more/m...earch.html ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.juno.com/s/search?r=minisearch ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.co.uk/iesearch/default.htm ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.juno.com/s/search?r=minisearch ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirec...&s=search&i=sve ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.google.co.uk/ ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = AnnMarie's Browser ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by BellSouth ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Boston University ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Freeserve ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Wanadoo ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Spike Valentine ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.juno.com/s/search?r=minisearch ALL (L) R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s ALL (L) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost ALL (L) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 ALL (L) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1; ALL (L) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = dynhost.inetcam.com;register.inetcam.com ALL (L) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost; ALL (L) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local ALL (L) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080 ALL (L) R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:8080 ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aopen.com ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://rd.yahoo.com/customize/sbcydsl/d...bc.com/dsl ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us8l.hpwis.com ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bellsouth.net ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.freeserve.com/ ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.pcclub.com ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.wanadoo.co.uk ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://my.juno.com/s/search?r=minisearch ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://rd.yahoo.com/customize/sbcydsl/d....yahoo.com ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presario.net/scripts/redirec...&s=search&i=sve ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://my.juno.com/s/search?r=minisearch ALL (L) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirec...&s=search&i=sve ALL (L) R3 - Default URLSearchHook is missing ALL (L) R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\PROGRAM FILES\JUSEARCH\SEARCHENH1.DLL ALL (L)