Thanks very much for your help, advice noted here is a fresh dss scan as requested
Deckard's System Scanner v20071014.68
Run by Dave on 2007-12-06 02:35:18
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
-- Last 5 Restore Point(s) --
18: 2007-12-06 02:10:08 UTC - RP18 - Deckard's System Scanner Restore Point
17: 2007-12-05 21:17:42 UTC - RP17 - System Checkpoint
16: 2007-12-04 20:04:38 UTC - RP16 - System Checkpoint
15: 2007-12-03 18:31:58 UTC - RP15 - Software Distribution Service 3.0
14: 2007-12-03 17:43:12 UTC - RP14 - System Checkpoint
-- First Restore Point --
1: 2007-11-30 00:27:11 UTC - RP1 - System Checkpoint
Performed disk cleanup.
Total Physical Memory: 256 MiB (512 MiB recommended).
-- HijackThis (run as Dave.exe) ------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:35:23, on 06/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\FSI\F-Prot\F-Sched.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\FSI\F-Prot\F-StopW.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Dave\desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Dave.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [F-StopW] C:\Program Files\FSI\F-Prot\F-StopW.EXE
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [FRISK FP-Scheduler] C:\Program Files\FSI\F-Prot\F-Sched.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://www.update.microsoft.com/wind...?1196429270988
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) -
http://javadl-esd.sun.com/update/1.6...ws-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 4932 bytes
-- File Associations -----------------------------------------------------------
All associations okay.
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R0 FPA_RTP - c:\windows\system32\drivers\fstopw.sys <Not Verified; Frisk Software International -
www.f-prot.com; F-StopW Version 3.14c>
R1 FileDisk - c:\windows\system32\drivers\filedisk.sys <Not Verified; Bo Brantén; filedisk>
R1 SASDIFSV - c:\program files\superantispyware\sasdifsv.sys
R1 SASKUTIL - c:\program files\superantispyware\saskutil.sys
R3 cmuda (C-Media WDM Audio Interface) - c:\windows\system32\drivers\cmuda.sys <Not Verified; C-Media Inc; C-Media Audio Driver (WDM)>
R3 SASENUM - c:\program files\superantispyware\sasenum.sys <Not Verified; SuperAdBlocker, Inc.; SuperAntiSpyware>
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
All services whitelisted.
-- Device Manager: Disabled ----------------------------------------------------
No disabled devices found.
-- Process Modules -------------------------------------------------------------
C:\WINDOWS\system32\winlogon.exe (pid 576)
2007-04-19 13:41:36 294912 --a------ C:\Program Files\SUPERAntiSpyware\SASWINLO.dll <Not Verified; SUPERAntiSpyware.com; SUPERAntiSpyware WinLogon Processor>
C:\WINDOWS\explorer.exe (pid 1296)
2006-12-20 13:55:48 77824 --a------ C:\Program Files\SUPERAntiSpyware\SASSEH.DLL <Not Verified; SuperAdBlocker.com; SuperAntiSpyware>
2005-09-23 07:28:38 83456 --a------ C:\WINDOWS\system32\dfshim.dll <Not Verified; Microsoft Corporation; Microsoft® .NET Framework>
2007-04-13 03:21:14 271360 --a------ C:\WINDOWS\system32\mscoree.dll <Not Verified; Microsoft Corporation; Microsoft® .NET Framework>
2005-09-23 07:28:56 107520 --a------ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\shfusion.dll <Not Verified; Microsoft Corporation; Microsoft® .NET Framework>
2005-09-23 07:28:50 9216 --a------ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fusion.dll <Not Verified; Microsoft Corporation; Microsoft® .NET Framework>
2005-09-23 07:28:58 17920 --a------ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Culture.dll <Not Verified; Microsoft Corporation; Microsoft® .NET Framework>
2005-09-23 07:29:00 85504 --a------ C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll <Not Verified; Microsoft Corporation; Microsoft® .NET Framework>
2000-04-19 08:00:00 24644 --a------ C:\Program Files\WinZip\WZSHLSTB.DLL <Not Verified; WinZip Computing, Inc.; WinZip>
C:\WINDOWS\system32\rundll32.exe (pid 1624)
2005-12-15 20:46:48 2834432 --a------ C:\WINDOWS\system\cmicnfg.cpl <Not Verified; C-Media Corporation; CmiCnfg Dynamic Link Library>
2003-04-24 20:29:08 32768 --a------ C:\WINDOWS\system32\udaprop.dll <Not Verified; C-Media Corporation; CMI8738/CMI9738/CMI9739 Audio Device>
-- Files created between 2007-11-06 and 2007-12-06 -----------------------------
2007-12-06 02:13:00 0 d-------- C:\Program Files\Trend Micro
2007-12-05 04:09:57 0 d--h----- C:\WINDOWS\system32\GroupPolicy
2007-12-04 22:22:55 0 d-------- C:\Documents and Settings\All Users\Application Data\Hagel Technologies
2007-12-04 22:20:29 0 d-------- C:\Program Files\dumeter3
2007-12-04 01:10:26 0 d-------- C:\Program Files\C-Media
2007-12-03 01:31:20 0 d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2007-12-03 01:31:06 4212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2007-12-03 01:30:58 11264 --a------ C:\WINDOWS\system32\SpOrder.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System>
2007-12-03 01:30:28 0 d-------- C:\WINDOWS\system32\ZoneLabs
2007-12-03 01:27:39 0 d-------- C:\WINDOWS\Internet Logs
2007-12-02 21:37:50 0 d-------- C:\Program Files\Common Files\xing shared
2007-12-02 21:37:25 0 d-------- C:\Program Files\Common Files\Real
2007-12-02 21:37:18 0 d-------- C:\Program Files\Real
2007-12-02 21:34:31 0 d-------- C:\Documents and Settings\Dave\Application Data\Real
2007-12-02 18:29:56 0 d-------- C:\Documents and Settings\Dave\Shared
2007-12-02 18:29:44 0 d-------- C:\Documents and Settings\Dave\Incomplete
2007-12-02 18:29:04 0 d-------- C:\Documents and Settings\Dave\Application Data\LimeWire
2007-12-02 18:28:48 0 d-------- C:\Program Files\LimeWire
2007-12-02 17:03:12 0 d-------- C:\Program Files\Windows Media Connect 2
2007-12-02 17:01:09 0 d-------- C:\WINDOWS\system32\LogFiles
2007-12-02 17:01:09 0 d-------- C:\WINDOWS\system32\drivers\UMDF
2007-12-02 15:24:08 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll <Not Verified; Pegasus Software; TWNLIB20>
2007-12-02 15:24:07 364544 -----n--- C:\WINDOWS\system32\TwnLib4.dll <Not Verified; Pegasus Imaging Corp.; TwnLib4>
2007-12-02 15:24:07 471040 -----n--- C:\WINDOWS\system32\ImagXRA7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7>
2007-12-02 15:24:07 262144 -----n--- C:\WINDOWS\system32\ImagXR7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7>
2007-12-02 15:24:06 38912 -----n--- C:\WINDOWS\system32\picn20.dll <Not Verified; Pegasus Imaging Corp.; PEGASUS>
2007-12-02 15:24:06 1568768 -----n--- C:\WINDOWS\system32\ImagX7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7>
2007-12-02 15:24:05 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe <Not Verified; Ahead Software Gmbh; Ahead Software Gmbh NeroCheck>
2007-12-02 15:24:05 0 d-------- C:\Program Files\Common Files\Ahead
2007-12-02 15:24:01 0 d-------- C:\Program Files\Ahead
2007-12-02 03:58:28 0 d-------- C:\Documents and Settings\Dave\Application Data\BitZipper
2007-12-02 03:58:20 0 d-------- C:\Program Files\BitZipper
2007-12-01 23:39:24 0 d-------- C:\Program Files\Seagate
2007-12-01 22:32:31 0 d-------- C:\Documents and Settings\Dave\Application Data\Adobe
2007-12-01 22:25:50 0 d-------- C:\Documents and Settings\All Users\Application Data\Adobe
2007-12-01 22:25:43 0 d-------- C:\Program Files\Common Files\Adobe
2007-12-01 20:09:09 12928 --a------ C:\WINDOWS\system32\drivers\filedisk.sys <Not Verified; Bo Brantén; filedisk>
2007-12-01 18:17:49 0 d-------- C:\Documents and Settings\Dave\Application Data\WinRAR
2007-12-01 17:45:16 0 d-------- C:\Documents and Settings\Dave\Application Data\Help
2007-12-01 17:02:56 0 d-------- C:\Program Files\7-Zip
2007-11-30 22:12:57 0 d-------- C:\Documents and Settings\Dave\Application Data\Google
2007-11-30 21:47:14 0 d-------- C:\WINDOWS\Sun
2007-11-30 21:47:14 0 d-------- C:\Documents and Settings\Dave\Application Data\Sun
2007-11-30 21:46:35 0 d-------- C:\Documents and Settings\All Users\Application Data\Google
2007-11-30 21:46:33 0 d-------- C:\Program Files\Google
2007-11-30 21:45:42 0 d-------- C:\Program Files\Java
2007-11-30 21:44:56 0 d-------- C:\Program Files\Common Files\Java
2007-11-30 21:39:10 0 d-------- C:\Program Files\uTorrent
2007-11-30 21:38:47 0 d-------- C:\Documents and Settings\Dave\Application Data\uTorrent
2007-11-30 20:44:38 0 d-------- C:\WINDOWS\network diagnostic
2007-11-30 17:49:32 0 d-------- C:\Documents and Settings\Dave\Application Data\Macromedia
2007-11-30 17:24:16 0 d-------- C:\Documents and Settings\Dave\Application Data\InterVideo
2007-11-30 17:22:17 0 d--h----- C:\WINDOWS\PIF
2007-11-30 17:21:13 0 d-------- C:\Program Files\Common Files\InterVideo
2007-11-30 17:20:26 0 d-------- C:\Program Files\InterVideo
2007-11-30 17:20:25 77824 --a------ C:\WINDOWS\system32\ctdvda32.dll <Not Verified; Creative Technology Ltd; Creative DVD-Audio Product>
2007-11-30 17:20:25 831600 --a------ C:\WINDOWS\system32\Ctaa1.dat
2007-11-30 17:20:24 315248 --a------ C:\WINDOWS\system32\drivers\ctdvda2k.sys <Not Verified; Creative Technology Ltd; Creative Audio Product>
2007-11-30 17:20:23 122880 --a------ C:\WINDOWS\system32\cddvdint.dll
2007-11-30 17:20:23 0 d-------- C:\Program Files\Creative
2007-11-30 15:33:10 0 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-11-30 15:33:01 0 d-------- C:\Program Files\SUPERAntiSpyware
2007-11-30 15:33:01 0 d-------- C:\Documents and Settings\Dave\Application Data\SUPERAntiSpyware.com
2007-11-30 15:32:12 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-11-30 15:19:49 0 d-------- C:\Program Files\K-Lite Codec Pack
2007-11-30 13:38:07 319652 --a------ C:\WINDOWS\system32\drivers\FSTOPW.sys <Not Verified; Frisk Software International -
www.f-prot.com; F-StopW Version 3.14c>
2007-11-30 13:38:07 0 d-------- C:\Program Files\FSI
2007-11-30 13:38:06 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-11-30 13:37:53 0 d-------- C:\Program Files\Common Files\InstallShield
2007-11-30 13:31:48 0 d-------- C:\WINDOWS\system32\PreInstall
2007-11-30 13:31:46 0 d--h----- C:\WINDOWS\$hf_mig$
2007-11-30 13:28:21 0 d-------- C:\WINDOWS\system32\SoftwareDistribution
2007-11-30 13:27:03 0 d--hs---- C:\Documents and Settings\Dave\UserData
2007-11-30 00:35:24 0 d-------- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
2007-11-30 00:35:19 0 d-------- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2007-11-30 00:26:59 0 d-------- C:\Documents and Settings\Dave\Application Data\Identities
2007-11-30 00:26:52 0 d--h----- C:\Documents and Settings\Dave\Templates
2007-11-30 00:26:52 0 dr------- C:\Documents and Settings\Dave\Start Menu
2007-11-30 00:26:52 0 dr-h----- C:\Documents and Settings\Dave\SendTo
2007-11-30 00:26:52 0 dr-h----- C:\Documents and Settings\Dave\Recent
2007-11-30 00:26:52 0 d--h----- C:\Documents and Settings\Dave\PrintHood
2007-11-30 00:26:52 1572864 --ah----- C:\Documents and Settings\Dave\NTUSER.DAT
2007-11-30 00:26:52 0 d--h----- C:\Documents and Settings\Dave\NetHood
2007-11-30 00:26:52 0 dr------- C:\Documents and Settings\Dave\My Documents
2007-11-30 00:26:52 0 d--h----- C:\Documents and Settings\Dave\Local Settings
2007-11-30 00:26:52 0 dr------- C:\Documents and Settings\Dave\Favorites
2007-11-30 00:26:52 0 d-------- C:\Documents and Settings\Dave\Desktop
2007-11-30 00:26:52 0 d--hs---- C:\Documents and Settings\Dave\Cookies
2007-11-30 00:26:52 0 d--h----- C:\Documents and Settings\Dave\Application Data
2007-11-30 00:25:59 0 d-------- C:\WINDOWS\SoftwareDistribution
2007-11-30 00:25:57 0 d---s---- C:\WINDOWS\system32\Microsoft
2007-11-30 00:25:57 0 d-------- C:\WINDOWS\Prefetch
2007-11-30 00:25:56 262144 --ah----- C:\Documents and Settings\LocalService\NTUSER.DAT
2007-11-30 00:25:56 0 d--h----- C:\Documents and Settings\LocalService\Local Settings
2007-11-30 00:25:56 0 d--hs---- C:\Documents and Settings\LocalService\Cookies
2007-11-30 00:25:56 0 d-------- C:\Documents and Settings\LocalService\Application Data
2007-11-30 00:25:56 0 d---s---- C:\Documents and Settings\LocalService\Application Data\Microsoft
2007-11-30 00:25:49 225280 --ah----- C:\Documents and Settings\NetworkService\NTUSER.DAT
2007-11-30 00:25:49 0 d--h----- C:\Documents and Settings\NetworkService\Local Settings
2007-11-30 00:25:49 0 d---s---- C:\Documents and Settings\NetworkService\Cookies
2007-11-30 00:25:49 0 d-------- C:\Documents and Settings\NetworkService\Application Data
2007-11-30 00:25:49 0 d---s---- C:\Documents and Settings\NetworkService\Application Data\Microsoft
2007-11-30 00:21:54 0 d-------- C:\WINDOWS\system32\xircom
2007-11-30 00:21:54 0 d-------- C:\Program Files\microsoft frontpage
2007-11-30 00:21:32 225280 ---h----- C:\Documents and Settings\Default User\NTUSER.DAT
2007-11-30 00:21:25 0 -rahs---- C:\MSDOS.SYS
2007-11-30 00:21:25 0 -rahs---- C:\IO.SYS
2007-11-30 00:21:25 0 --a------ C:\CONFIG.SYS
2007-11-30 00:21:25 0 --a------ C:\AUTOEXEC.BAT
2007-11-30 00:20:17 0 d--hs---- C:\Documents and Settings\All Users\DRM
2007-11-30 00:20:06 0 dr------- C:\WINDOWS\Offline Web Pages
2007-11-30 00:20:06 0 d---s---- C:\WINDOWS\Downloaded Program Files
2007-11-30 00:19:54 0 d--h----- C:\Program Files\WindowsUpdate
2007-11-30 00:19:33 0 d-------- C:\WINDOWS\system32\DirectX
2007-11-30 00:19:04 0 d---s---- C:\WINDOWS\Tasks
2007-11-30 00:19:03 0 d-------- C:\Program Files\Common Files\MSSoap
2007-11-30 00:19:00 0 d-------- C:\WINDOWS\system32\Macromed
2007-11-30 00:19:00 0 d-------- C:\WINDOWS\srchasst
2007-11-30 00:18:53 0 d-------- C:\Program Files\Movie Maker
2007-11-30 00:18:46 0 d-------- C:\WINDOWS\system32\Restore
2007-11-30 00:18:01 21640 --a------ C:\WINDOWS\system32\emptyregdb.dat
2007-11-30 00:17:46 0 d-------- C:\WINDOWS\Registration
2007-11-30 00:17:39 0 d-------- C:\Program Files\Online Services
2007-11-30 00:17:30 0 d-------- C:\Program Files\Messenger
2007-11-30 00:17:27 0 d-------- C:\Program Files\MSN Gaming Zone
2007-11-30 00:16:55 0 d-------- C:\Program Files\Windows NT
2007-11-30 00:16:52 0 d-------- C:\WINDOWS\system32\MsDtc
2007-11-30 00:16:51 0 d-------- C:\WINDOWS\system32\Com
2007-11-30 00:09:14 0 d--hs---- C:\WINDOWS\Installer
2007-11-30 00:09:13 0 d-------- C:\Program Files\Common Files\ODBC
2007-11-30 00:09:11 0 d-------- C:\Program Files\Common Files\SpeechEngines
2007-11-30 00:09:10 0 dr------- C:\Program Files
2007-11-30 00:09:10 0 d-------- C:\Program Files\Common Files
2007-11-30 00:08:47 0 d--h----- C:\Documents and Settings\Default User\Templates
2007-11-30 00:08:47 0 dr------- C:\Documents and Settings\Default User\Start Menu
2007-11-30 00:08:47 0 dr-h----- C:\Documents and Settings\Default User\SendTo
2007-11-30 00:08:47 0 d--h----- C:\Documents and Settings\Default User\Recent
2007-11-30 00:08:47 0 d--h----- C:\Documents and Settings\Default User\PrintHood
2007-11-30 00:08:47 0 d--h----- C:\Documents and Settings\Default User\NetHood
2007-11-30 00:08:47 0 d-------- C:\Documents and Settings\Default User\My Documents
2007-11-30 00:08:47 0 dr-h----- C:\Documents and Settings\Default User\Local Settings
2007-11-30 00:08:47 0 d-------- C:\Documents and Settings\Default User\Favorites
2007-11-30 00:08:47 0 d-------- C:\Documents and Settings\Default User\Desktop
2007-11-30 00:08:47 0 d---s---- C:\Documents and Settings\Default User\Cookies
2007-11-30 00:08:47 0 d--h----- C:\Documents and Settings\All Users\Templates
2007-11-30 00:08:47 0 dr------- C:\Documents and Settings\All Users\Start Menu
2007-11-30 00:08:47 0 d-------- C:\Documents and Settings\All Users\Favorites
2007-11-30 00:08:47 0 dr------- C:\Documents and Settings\All Users\Documents
2007-11-30 00:08:47 0 d-------- C:\Documents and Settings\All Users\Desktop
2007-11-30 00:08:34 0 d-------- C:\WINDOWS\system32\CatRoot2
2007-11-30 00:08:34 0 d-------- C:\WINDOWS\system32\CatRoot
2007-11-30 00:08:28 0 dr-h----- C:\Documents and Settings\Default User\Application Data
2007-11-30 00:08:28 0 d---s---- C:\Documents and Settings\Default User\Application Data\Microsoft
2007-11-30 00:08:28 0 dr-h----- C:\Documents and Settings\All Users\Application Data
2007-11-30 00:08:28 0 d---s---- C:\Documents and Settings\All Users\Application Data\Microsoft
2007-11-30 00:08:08 0 d--hs---- C:\System Volume Information
2007-11-30 00:08:08 0 d-------- C:\Documents and Settings
2007-11-30 00:03:47 0 d-------- C:\WINDOWS
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\WinSxS
2007-11-30 00:03:47 0 dr------- C:\WINDOWS\Web
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\twain_32
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\wins
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\wbem
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\usmt
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\spool
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\ShellExt
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\Setup
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\ras
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\oobe
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\npp
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\mui
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\inetsrv
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\IME
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\icsxml
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\ias
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\export
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\drivers
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\drivers\etc
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\drivers\disdn
2007-11-30 00:03:47 0 dr-hs--c- C:\WINDOWS\system32\dllcache
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\dhcp
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\config
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\3com_dmi
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\3076
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\2052
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\1054
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\1042
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\1041
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\1037
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\1033
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\1031
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\1028
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system32\1025
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\system
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\security
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\Resources
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\repair
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\Provisioning
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\PeerNet
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\pchealth
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\mui
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\msapps
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\msagent
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\Media
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\java
2007-11-30 00:03:47 0 d--h----- C:\WINDOWS\inf
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\ime
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\Help
2007-11-30 00:03:47 0 dr--s---- C:\WINDOWS\Fonts
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\ehome
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\Driver Cache
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\Debug
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\Cursors
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\Connection Wizard
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\Config
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\AppPatch
2007-11-30 00:03:47 0 d-------- C:\WINDOWS\addins
-- Find3M Report ---------------------------------------------------------------
2007-11-30 00:08:47 62 --ahs---- C:\Documents and Settings\Dave\Application Data\desktop.ini
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"F-StopW"="C:\Program Files\FSI\F-Prot\F-StopW.EXE" [05/02/2004 15:30]
"Cmaudio"="cmicnfg.cpl" []
"FRISK FP-Scheduler"="C:\Program Files\FSI\F-Prot\F-Sched.exe" [07/04/2003 09:47]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [25/09/2007 01:11]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [10/10/2007 19:51]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [09/07/2001 11:50]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [02/12/2007 21:37]
"DU Meter"="C:\Program Files\DU Meter\DUMeter.exe" [04/12/2002 14:16]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [01/05/2007 09:29]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [30/11/2007 22:13]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe [04/12/2007 13:09:05]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [20/12/2006 13:55 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 19/04/2007 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
-- Hosts -----------------------------------------------------------------------
127.0.0.1 mpa.one.microsoft.com
-- End of Deckard's System Scanner: finished at 2007-12-06 02:37:14 ------------
Sorry for the delay, having problems with attaching extra.txt would it be ok to just copy/paste to here?