Deckard's System Scanner v20070809.63
Run by Thomas Barrie on 2007-08-11 at 07:47:21
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- HijackThis (run as Thomas Barrie.exe) ---------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:45:21 AM, on 8/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\i34yuc387.exe
C:\Program Files\Windows Media Player\horyk22011.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Ozqaguwk\mezavkvd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
c:\windows\system32\dwdsrngt.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Thomas Barrie\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Thomas Barrie.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.si.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about
:blank
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0FF078B0-0072-4FCA-AEDC-36C078A563D5} - C:\Program Files\Common Files\hoketoz455101.dll (file missing)
O2 - BHO: (no name) - {356EA4B8-0225-4C11-AF5E-B7CEE719E4D2} - \
O2 - BHO: (no name) - {3E66438B-D364-DFEF-1A15-F88DB123D49D} - C:\WINDOWS\system32\llbxjem.dll (file missing)
O2 - BHO: (no name) - {420C4981-32CC-AF09-C412-03797A5A3F37} - C:\Program Files\Brytaxrx\axwhrzbz.dll
O2 - BHO: (no name) - {53B5F2B1-94DD-43E5-8187-EB4E31F00701} - C:\WINDOWS\system32\l3acdb.dll (file missing)
O2 - BHO: 0 - {5DA6F8BC-0758-4541-5F85-7A23AF300F87} - C:\Program Files\Internet Explorer\lavunabiq.dll
O2 - BHO: BndDrive BHO Class - {9815DA81-2E0C-478c-90E4-06E474E704D0} - C:\Program Files\ISM\BndDrive.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [i34yuc387] C:\WINDOWS\i34yuc387
O4 - HKLM\..\Run: [{85-52-22-2E-ZN}] c:\windows\system32\dwdsrngt.exe D4M001
O4 - HKLM\..\Run: [horyk] C:\Program Files\Windows Media Player\horyk22011.exe
O4 - HKLM\..\Run: [dgtghudc] rundll32.exe "C:\Program Files\dgtghudc\tgfgjgva.dll",Init
O4 - HKLM\..\Run: [csrss] C:\WINDOWS\csrss.exe
O4 - HKLM\..\Run: [mezavkvd] C:\Program Files\Ozqaguwk\mezavkvd.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Cxqbik] "C:\Documents and Settings\Thomas Barrie\My Documents\??sks\w?crtupd.exe"
O4 - HKCU\..\Run: [fmuu] C:\PROGRA~1\COMMON~1\fmuu\fmuum.exe
O4 - HKCU\..\Run: [ISMModule2] "C:\Program Files\ISM\ISMModule2.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'Default user')
O4 - Startup: TA_Start.lnk = C:\WINDOWS\system32\dwdsrngt.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsof...?1174669905562
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) -
https://h17000.www1.hp.com/ewfrf-JAV...oadManager.ocx
O20 - Winlogon Notify: tuvvusr - tuvvusr.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O24 - Desktop Component 0: (no name) - C:\Program Files\Internet Explorer\profsycyrtypr.html
O24 - Desktop Component 1: (no name) - C:\Program Files\ComPlus Applications\profsycyrtypr.html
--
End of file - 9535 bytes
-- Files created between 2007-07-11 and 2007-08-11 -----------------------------
2007-08-11 07:44:25 0 d-------- C:\Program Files\Trend Micro
2007-08-11 07:19:07 135168 --a------ C:\WINDOWS\tk58.exe
2007-08-11 07:03:09 75328 --a------ C:\WINDOWS\system32\uocvbpji.exe <Not Verified; ; DDC>
2007-08-09 20:28:46 75328 --a------ C:\WINDOWS\system32\sihcsdvq.exe <Not Verified; ; DDC>
2007-08-09 19:22:40 0 d-------- C:\Program Files\SpywareBlaster
2007-08-09 19:11:36 192584 --a------ C:\WINDOWS\system32\nwinqmdt.exe
2007-08-09 19:05:14 0 d-------- C:\WINDOWS\system32\ActiveScan
2007-08-09 16:34:58 0 d-------- C:\WINDOWS\network diagnostic
2007-08-09 16
17 0 d-------- C:\Documents and Settings\Guest\Application Data\Macromedia
2007-08-09 16:00:43 0 d-------- C:\Documents and Settings\Guest\Application Data\Google
2007-08-09 16:00:41 0 d-------- C:\Documents and Settings\Guest\Application Data\GTek
2007-08-09 16:00:38 0 d-------- C:\Documents and Settings\Guest\Application Data\Real
2007-08-09 16:00:38 0 d-------- C:\Documents and Settings\Guest\Application Data\McAfee.com Personal Firewall
2007-08-09 16:00:23 0 dr------- C:\Documents and Settings\Guest\Favorites
2007-08-09 16:00:23 0 d-------- C:\Documents and Settings\Guest\Desktop
2007-08-09 16:00:23 0 d---s---- C:\Documents and Settings\Guest\Cookies
2007-08-09 16:00:23 0 dr-h----- C:\Documents and Settings\Guest\Application Data
2007-08-09 16:00:23 0 d-------- C:\Documents and Settings\Guest\Application Data\Sun
2007-08-09 16:00:23 0 d---s---- C:\Documents and Settings\Guest\Application Data\Microsoft
2007-08-09 16:00:23 0 d-------- C:\Documents and Settings\Guest\Application Data\Identities
2007-08-09 16:00:22 0 d--h----- C:\Documents and Settings\Guest\Templates
2007-08-09 16:00:22 0 dr------- C:\Documents and Settings\Guest\Start Menu
2007-08-09 16:00:22 0 dr-h----- C:\Documents and Settings\Guest\SendTo
2007-08-09 16:00:22 0 dr-h----- C:\Documents and Settings\Guest\Recent
2007-08-09 16:00:22 0 d--h----- C:\Documents and Settings\Guest\PrintHood
2007-08-09 16:00:22 786432 --ah----- C:\Documents and Settings\Guest\NTUSER.DAT
2007-08-09 16:00:22 0 d--h----- C:\Documents and Settings\Guest\NetHood
2007-08-09 16:00:22 0 dr------- C:\Documents and Settings\Guest\My Documents
2007-08-09 16:00:22 0 d--h----- C:\Documents and Settings\Guest\Local Settings
2007-08-09 12:01:48 18761 --a------ C:\WINDOWS\system32\k.dat
2007-08-09 12:01:40 0 d-------- C:\WINDOWS\system32\hblbdnun
2007-08-09 12:01:40 0 d-------- C:\Program Files\SecCenter
2007-08-09 12:01:40 0 d-------- C:\Program Files\Ozqaguwk
2007-08-09 12:01:39 0 d-------- C:\Program Files\Brytaxrx
2007-08-09 12:01:36 0 d-------- C:\Program Files\dgtghudc
2007-08-09 07:07:04 57362 --a------ C:\WINDOWS\system32\lpdsrngm.exe <Not Verified; ; Browser Driver>
2007-08-09 07:04:58 65536 --a------ C:\WINDOWS\system32\sdadlrow-t2.exe <Not Verified; .j..yljjkjlkjylj.j.yj.jy.jy.jy.jy.jy.jy; Project1>
2007-08-09 07:04:56 57354 --a------ C:\WINDOWS\system32\dwdsrngt.exe <Not Verified; ; Browser Driver>
2007-08-09 07:04:52 0 d-------- C:\Documents and Settings\NetworkService\Desktop
2007-08-09 07:04:52 0 d-------- C:\Documents and Settings\LocalService\Desktop
2007-08-09 07:02:41 0 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2007-08-09 06:46:39 224283 --a------ C:\WINDOWS\Setup167.exe
2007-07-31 12:04:27 0 d-------- C:\Documents and Settings\LocalService\Application Data\Macromedia
2007-07-29 18:45:19 0 d-------- C:\WINDOWS\fmuu
2007-07-29 18:45:19 0 d-------- C:\Program Files\Common Files\fmuu
2007-07-23 22:58:07 0 dr------- C:\Documents and Settings\LocalService\Favorites
2007-07-23 22:58:07 0 d-------- C:\Documents and Settings\LocalService\Application Data\Google
2007-07-23 16:48:59 0 d--hs---- C:\WINDOWS\VGhvbWFzIEJhcnJpZQ
2007-07-23 16:48:59 0 d-------- C:\Documents and Settings\LocalService\Application Data\NetMon
2007-07-21 15:31:56 180224 --a------ C:\WINDOWS\UninstallWSST.exe <Not Verified; ; UninstallEXE Application>
2007-07-21 15:31:56 28672 --a------ C:\WINDOWS\system32\ssconfig.exe <Not Verified; Auralis, Inc.; Auralis SSConfig>
2007-07-19 13:05:42 53248 --a------ C:\WINDOWS\uninst1017.exe <Not Verified; ; uninst1017>
2007-07-19 13:02:42 192512 --a------ C:\WINDOWS\i34yuc387.exe <Not Verified; ; q432gf65>
-- Find3M Report ---------------------------------------------------------------
2007-08-11 07:16:31 0 d-------- C:\Program Files\Common Files
2007-08-09 21:31:05 0 d-------- C:\Program Files\QuickTime
2007-08-09 21:20:52 0 d-------- C:\Program Files\Messenger
2007-08-09 21:20:18 0 d-------- C:\Program Files\iTunes
2007-08-09 21:18:33 0 d-------- C:\Program Files\Google
2007-08-09 21:07:49 0 d-------- C:\Program Files\DellSupport
2007-08-09 18:53:33 0 d-------- C:\Program Files\WildTangent
2007-08-09 18:51:38 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-08-09 18:51:38 0 d-------- C:\Program Files\CyberLink
2007-08-09 18:31:04 0 d-------- C:\Program Files\PacificPoker
2007-08-09 16:53:42 0 d-------- C:\Program Files\Sonic
2007-08-09 16:53:33 0 d-------- C:\Program Files\Common Files\Sonic Shared
2007-08-09 09:52:49 15026 --a------ C:\Documents and Settings\Thomas Barrie\Application Data\wklnhst.dat
2007-07-31 19:10:10 0 d-------- C:\Program Files\World of Warcraft
2007-07-27 10:31:45 21840 --a-----t C:\WINDOWS\system32\SIntfNT.dll
2007-07-27 10:31:45 17212 --a-----t C:\WINDOWS\system32\SIntf32.dll
2007-07-27 10:31:45 12067 --a-----t C:\WINDOWS\system32\SIntf16.dll
2007-07-08 12:02:35 16 --a------ C:\WINDOWS\popcinfo.dat
2007-06-29 06:18:04 3350 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2007-06-29 06:18:03 56 -r-hs---- C:\WINDOWS\system32\BDED30B750.sys
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0FF078B0-0072-4FCA-AEDC-36C078A563D5}]
C:\Program Files\Common Files\hoketoz455101.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{356EA4B8-0225-4C11-AF5E-B7CEE719E4D2}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3E66438B-D364-DFEF-1A15-F88DB123D49D}]
C:\WINDOWS\system32\llbxjem.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{420C4981-32CC-AF09-C412-03797A5A3F37}]
08/09/2007 12:01 PM 94208 --a------ C:\Program Files\Brytaxrx\axwhrzbz.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53B5F2B1-94DD-43E5-8187-EB4E31F00701}]
C:\WINDOWS\system32\l3acdb.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5DA6F8BC-0758-4541-5F85-7A23AF300F87}]
08/11/2007 07:19 AM 70144 --a------ C:\Program Files\Internet Explorer\lavunabiq.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9815DA81-2E0C-478c-90E4-06E474E704D0}]
C:\Program Files\ISM\BndDrive.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [11/19/2003 06:48 PM]
"SigmatelSysTrayApp"="stsystra.exe" [03/23/2005 01:20 AM C:\WINDOWS\stsystra.exe]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [06/17/2005 08:56 AM]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [08/05/2005 10:05 PM]
"IntelMeM"="C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe" [09/03/2003 09:12 PM]
"DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [02/23/2005 05:19 PM]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" []
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [06/10/2005 11:44 AM]
"DMXLauncher"="C:\Program Files\Dell\Media Experience\DMXLauncher.exe" [01/27/2005 02:02 AM]
"VSOCheckTask"="C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" [07/08/2005 07:18 PM]
"MCAgentExe"="c:\PROGRA~1\mcafee.com\agent\mcagent.exe" [09/22/2005 07:29 PM]
"MCUpdateExe"="C:\PROGRA~1\mcafee.com\agent\McUpdate.exe" [01/11/2006 01:05 PM]
"VirusScan Online"="C:\Program Files\McAfee.com\VSO\mcvsshld.exe" [08/10/2005 01:49 PM]
"MPFExe"="C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe" [11/11/2005 06:00 PM]
"OASClnt"="C:\Program Files\McAfee.com\VSO\oasclnt.exe" [08/11/2005 11:02 PM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [08/14/2006 03:55 PM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [09/24/2006 03:24 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [09/25/2006 02:54 PM]
"i34yuc387"="C:\WINDOWS\i34yuc387" []
"{85-52-22-2E-ZN}"="c:\windows\system32\dwdsrngt.exe" [08/09/2007 07:04 AM]
"horyk"="C:\Program Files\Windows Media Player\horyk22011.exe" [08/07/2007 03:30 PM]
"dgtghudc"="C:\Program Files\dgtghudc\tgfgjgva.dll" [08/09/2007 12:01 PM]
"csrss"="C:\WINDOWS\csrss.exe" []
"mezavkvd"="C:\Program Files\Ozqaguwk\mezavkvd.exe" [08/09/2007 12:01 PM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 11:24 AM]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [07/15/2007 03:12 PM]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [03/15/2007 11:09 AM]
"Cxqbik"="C:\Documents and Settings\Thomas Barrie\My Documents\??sks\w?crtupd.exe" []
"fmuu"="C:\PROGRA~1\COMMON~1\fmuu\fmuum.exe" []
"ISMModule2"="C:\Program Files\ISM\ISMModule2.exe" []
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 06:00 AM]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Documents and Settings\Thomas Barrie\Start Menu\Programs\Startup\
TA_Start.lnk - C:\WINDOWS\system32\dwdsrngt.exe [8/9/2007 7:04:56 AM]
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
Source= C:\Program Files\Internet Explorer\profsycyrtypr.html
FriendlyName=
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\1]
Source= C:\Program Files\ComPlus Applications\profsycyrtypr.html
FriendlyName=
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tuvvusr]
tuvvusr.dll
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"McShield"=2 (0x2)
"McDetect.exe"=2 (0x2)
"McTskshd.exe"=2 (0x2)
"mcupdmgr.exe"=3 (0x3)
"MpfService"=2 (0x2)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
AutoRun\command- K:\LaunchU3.exe -a
-- End of Deckard's System Scanner: finished at 2007-08-11 at 07:47:45 ---------