Tech Support Forum - View Single Post - Re: Posted Logs-need Spyware Removal Help

adasha · 01-20-2008, 07:46 AM

Here is the COMBOFIX log:

ComboFix 08-01-20.1 - Adasha Knight 2008-01-20 8:02:13.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.729 [GMT -6:00]
Running from: C:\Documents and Settings\Adasha Knight\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Adasha Knight\Desktop\CFscript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071206-221922-851.dll
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071206-222313-289.dll
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071212-231333-851.dll
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071215-131912-475.dll
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071206-221922-851.dll
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071206-222313-289.dll
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071212-231333-851.dll
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071215-131912-475.dll
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
C:\Program Files\Common Files\Real\Update_OB\realsched.exe

----- Unknown downloads made by BITS: ----
http://80.93.48.74

.
((((((((((((((((((((((((( Files Created from 2007-12-20 to 2008-01-20 )))))))))))))))))))))))))))))))
.

2008-01-20 08:00 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-19 08:54 . 2008-01-19 08:54 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-01-19 08:54 . 2008-01-19 08:54 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-01-15 21:10 . 2008-01-15 21:10 <DIR> d-------- C:\Program Files\Trend Micro
2008-01-09 14:31 . 2008-01-09 14:31 <DIR> d-------- C:\Program Files\SpywareBlaster
2008-01-09 14:30 . 2008-01-09 14:30 <DIR> d-------- C:\ie-spyad_zo
2008-01-09 11:50 . 2007-06-05 10:56 44,928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS
2008-01-09 11:29 . 2008-01-09 13:47 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2008-01-09 11:29 . 2008-01-09 11:29 30,590 --a------ C:\WINDOWS\system32\pavas.ico
2008-01-09 11:29 . 2008-01-09 11:29 2,550 --a------ C:\WINDOWS\system32\Uninstall.ico
2008-01-09 11:29 . 2008-01-09 11:29 1,406 --a------ C:\WINDOWS\system32\Help.ico
2007-12-23 12:40 . 2008-01-05 14:23 <DIR> d-------- C:\Program Files\AIMTunes
2007-12-23 12:27 . 2007-12-23 12:27 4,286 --a------ C:\WINDOWS\system32\MobileSidewalk.ico

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-18 01:22 --------- d-----w C:\Program Files\QuickTime
2008-01-16 13:49 --------- d-----w C:\Program Files\Java
2008-01-09 19:15 --------- d-----w C:\Program Files\Lexmark 1200 Series
2008-01-09 19:09 --------- d-----w C:\Program Files\DIGStream
2007-12-23 18:42 --------- d-----w C:\Program Files\AIM6
2007-12-23 18:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL Downloads
2007-12-06 23:43 --------- d-----w C:\Program Files\LimeWire
2007-09-23 16:03 25,336 ----a-w C:\Documents and Settings\Adasha Knight\Application Data\GDIPFONTCACHEV1.DAT
2007-09-09 16:35 14,738 ----a-w C:\Program Files\videodownloader-1.1.1-fx.xpi
2007-01-19 04:36 722,176 ----a-w C:\Documents and Settings\Adasha Knight\gotomypc_428.exe
2006-06-25 02:14 5,244 ----a-w C:\Program Files\me 06 (84 x 114).jpg
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Aim6"="" []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2008-01-17 18:40 385024]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2008-01-17 18:40 83608]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"MySpaceIM"="C:\Program Files\MySpace\IM\MySpaceIM.exe" [2007-01-08 18:04 4898816]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-09-27 19:17 443968]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
C:\Program Files\Intel\Wireless\Bin\LgNotify.dll 2004-09-07 18:08 110592 C:\Program Files\Intel\Wireless\Bin\LgNotify.dll

S3 akshasp;Aladdin HASP Key;C:\WINDOWS\system32\DRIVERS\akshasp.sys [2005-07-20 20:08]

.
Contents of the 'Scheduled Tasks' folder
"2008-01-19 00:29:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-20 08:10:03
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-20 8:13:10 - machine was rebooted [Adasha Knight]
ComboFix-quarantined-files.txt 2008-01-20 14:12:59
ComboFix2.txt 2008-01-19 14:47:13
.
2007-07-12 03:53:47 --- E O F ---

Here is the HIJACKTHIS log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:43, on 2008-01-20
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.yahoo.com/
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www1.snapfish.com/SnapfishActivia.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1189315894890
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.dotphoto.com/ImageUploader4.cab
O16 - DPF: {6F750202-1362-4815-A476-88533DE61D0C} (Kodak Gallery Easy Upload Manager Class) - http://www.kodakgallery.com/download...2/axofupld.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 3791 bytes

01-20-2008, 07:46 AM	#8 (permalink)
adasha Registered User Join Date: Jan 2008 Location: Texas Posts: 12 OS: Windows XP	Re: Posted Logs-need Spyware Removal Help Here is the COMBOFIX log: ComboFix 08-01-20.1 - Adasha Knight 2008-01-20 8:02:13.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.729 [GMT -6:00] Running from: C:\Documents and Settings\Adasha Knight\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\Adasha Knight\Desktop\CFscript.txt * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! FILE C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071206-221922-851.dll C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071206-222313-289.dll C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071212-231333-851.dll C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071215-131912-475.dll C:\Program Files\Common Files\Real\Update_OB\realsched.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071206-221922-851.dll C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071206-222313-289.dll C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071212-231333-851.dll C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071215-131912-475.dll C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat C:\Program Files\Common Files\Real\Update_OB\realsched.exe ----- Unknown downloads made by BITS: ---- http://80.93.48.74 . ((((((((((((((((((((((((( Files Created from 2007-12-20 to 2008-01-20 ))))))))))))))))))))))))))))))) . 2008-01-20 08:00 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe 2008-01-19 08:54 . 2008-01-19 08:54 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab 2008-01-19 08:54 . 2008-01-19 08:54 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2008-01-15 21:10 . 2008-01-15 21:10 <DIR> d-------- C:\Program Files\Trend Micro 2008-01-09 14:31 . 2008-01-09 14:31 <DIR> d-------- C:\Program Files\SpywareBlaster 2008-01-09 14:30 . 2008-01-09 14:30 <DIR> d-------- C:\ie-spyad_zo 2008-01-09 11:50 . 2007-06-05 10:56 44,928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS 2008-01-09 11:29 . 2008-01-09 13:47 <DIR> d-------- C:\WINDOWS\system32\ActiveScan 2008-01-09 11:29 . 2008-01-09 11:29 30,590 --a------ C:\WINDOWS\system32\pavas.ico 2008-01-09 11:29 . 2008-01-09 11:29 2,550 --a------ C:\WINDOWS\system32\Uninstall.ico 2008-01-09 11:29 . 2008-01-09 11:29 1,406 --a------ C:\WINDOWS\system32\Help.ico 2007-12-23 12:40 . 2008-01-05 14:23 <DIR> d-------- C:\Program Files\AIMTunes 2007-12-23 12:27 . 2007-12-23 12:27 4,286 --a------ C:\WINDOWS\system32\MobileSidewalk.ico . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-18 01:22 --------- d-----w C:\Program Files\QuickTime 2008-01-16 13:49 --------- d-----w C:\Program Files\Java 2008-01-09 19:15 --------- d-----w C:\Program Files\Lexmark 1200 Series 2008-01-09 19:09 --------- d-----w C:\Program Files\DIGStream 2007-12-23 18:42 --------- d-----w C:\Program Files\AIM6 2007-12-23 18:40 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL Downloads 2007-12-06 23:43 --------- d-----w C:\Program Files\LimeWire 2007-09-23 16:03 25,336 ----a-w C:\Documents and Settings\Adasha Knight\Application Data\GDIPFONTCACHEV1.DAT 2007-09-09 16:35 14,738 ----a-w C:\Program Files\videodownloader-1.1.1-fx.xpi 2007-01-19 04:36 722,176 ----a-w C:\Documents and Settings\Adasha Knight\gotomypc_428.exe 2006-06-25 02:14 5,244 ----a-w C:\Program Files\me 06 (84 x 114).jpg . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Aim6"="" [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2008-01-17 18:40 385024] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2008-01-17 18:40 83608] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "MySpaceIM"="C:\Program Files\MySpace\IM\MySpaceIM.exe" [2007-01-08 18:04 4898816] "Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-09-27 19:17 443968] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless] C:\Program Files\Intel\Wireless\Bin\LgNotify.dll 2004-09-07 18:08 110592 C:\Program Files\Intel\Wireless\Bin\LgNotify.dll S3 akshasp;Aladdin HASP Key;C:\WINDOWS\system32\DRIVERS\akshasp.sys [2005-07-20 20:08] . Contents of the 'Scheduled Tasks' folder "2008-01-19 00:29:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************ catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-20 08:10:03 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************ . Completion time: 2008-01-20 8:13:10 - machine was rebooted [Adasha Knight] ComboFix-quarantined-files.txt 2008-01-20 14:12:59 ComboFix2.txt 2008-01-19 14:47:13 . 2007-07-12 03:53:47 --- E O F --- Here is the HIJACKTHIS log: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 08:43, on 2008-01-20 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.yahoo.com/ O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www1.snapfish.com/SnapfishActivia.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1189315894890 O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.dotphoto.com/ImageUploader4.cab O16 - DPF: {6F750202-1362-4815-A476-88533DE61D0C} (Kodak Gallery Easy Upload Manager Class) - http://www.kodakgallery.com/download...2/axofupld.cab O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe -- End of file - 3791 bytes