The system seems to be back to its old self. After plenty of gaming and general computer use, explorer is as stable as ever. I really cannot say thanks enough.
Per your request here are the two logs posted and not attached (the latter appears to have found some issues). :
Deckard's System Scanner v20071014.68
Run by Nighthawk on 2008-06-09 20:53:31
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- HijackThis (run as Nighthawk.exe) -------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:53:33 PM, on 6/9/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Cisco Systems\SSL VPN Client\agent.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AnyDVD\AnyDVDtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Rich\Local Settings\Temp\jkos-Nighthawk\binaries\ScanningProcess.exe
C:\Documents and Settings\Rich\Local Settings\Temp\jkos-Nighthawk\binaries\ScanningProcess.exe
C:\Program Files\Cisco Systems\SSL VPN Client\GUI.exe
C:\Program Files\DameWare Development\DameWare NT Utilities\DWRCC.exe
C:\Download\Virus\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Nighthawk.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
https://mnm.manheim.com/webvpn.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\System32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\AnyDVD\AnyDVDtray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [\\ALLYS\EPSON Stylus Photo R260 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBNA.EXE /FU "C:\DOCUME~1\Rich\LOCALS~1\Temp\E_S122.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: mIRC.lnk = C:\Program Files\mIRC\mirc.exe
O4 - Startup: Tardis.lnk = C:\Program Files\Tardis2000\Tardis.exe
O4 - Global Startup: VME 1.2.lnk = C:\Program Files\VME 1.2\VME Manager.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://www.update.microsoft.com/wind...?1197915538656
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6D88669A-E51C-4270-B64D-5386F6210399}: Domain = man.cox.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{6D88669A-E51C-4270-B64D-5386F6210399}: NameServer = 10.100.10.16,10.100.11.16
O17 - HKLM\System\CCS\Services\Tcpip\..\{A75C0A01-6285-4004-BCC9-BCEE1F391774}: NameServer = 205.152.0.20,207.69.188.185
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = man.cox.com
O17 - HKLM\System\CS1\Services\Tcpip\..\{6D88669A-E51C-4270-B64D-5386F6210399}: Domain = man.cox.com
O17 - HKLM\System\CS1\Services\Tcpip\..\{6D88669A-E51C-4270-B64D-5386F6210399}: NameServer = 10.100.10.16,10.100.11.16
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = man.cox.com
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Cisco Systems, Inc. STC Agent (STCAgent) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\SSL VPN Client\agent.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
--
End of file - 9588 bytes
-- Files created between 2008-05-09 and 2008-06-09 -----------------------------
2008-06-09 19:08:14 0 d-------- C:\Program Files\VME 1.2
2008-06-09 18:09:14 0 d-------- C:\Program Files\Common Files\Java
2008-06-09 08:11:46 0 d-------- C:\cmdcons
2008-06-09 08:10:38 68096 --a------ C:\WINDOWS\zip.exe
2008-06-09 08:10:38 161792 --a------ C:\WINDOWS\swreg.exe <Not Verified; SteelWerX; SteelWerX Registry Editor>
2008-06-09 08:10:37 49152 --a------ C:\WINDOWS\VFind.exe
2008-06-09 08:10:37 212480 --a------ C:\WINDOWS\swxcacls.exe <Not Verified; SteelWerX; SteelWerX Extended Configurator ACLists>
2008-06-09 08:10:37 136704 --a------ C:\WINDOWS\swsc.exe <Not Verified; SteelWerX; SteelWerX Service Controller>
2008-06-09 08:10:37 98816 --a------ C:\WINDOWS\sed.exe
2008-06-09 08:10:37 80412 --a------ C:\WINDOWS\grep.exe
2008-06-09 08:10:37 89504 --a------ C:\WINDOWS\fdsv.exe <Not Verified; Smallfrogs Studio; >
2008-06-08 07:29:57 0 dr------- C:\Documents and Settings\LocalService\Favorites
2008-06-06 07:15:58 0 d-------- C:\Program Files\Trend Micro
2008-06-05 07:09:15 0 d-------- C:\Program Files\Panda Security
2008-06-03 05:56:17 0 d-------- C:\Documents and Settings\Rich\Application Data\HouseCall 6.6
2008-06-02 20:14:10 0 d-------- C:\Documents and Settings\Administrator\Application Data\Nero
2008-06-02 20:13:53 0 d-------- C:\Documents and Settings\Administrator\Application Data\Identities
2008-06-02 20:11:44 0 d--h----- C:\Documents and Settings\Administrator\Templates
2008-06-02 20:11:44 0 dr------- C:\Documents and Settings\Administrator\Start Menu
2008-06-02 20:11:44 0 dr-h----- C:\Documents and Settings\Administrator\SendTo
2008-06-02 20:11:44 0 dr-h----- C:\Documents and Settings\Administrator\Recent
2008-06-02 20:11:44 0 d--h----- C:\Documents and Settings\Administrator\PrintHood
2008-06-02 20:11:44 0 d--h----- C:\Documents and Settings\Administrator\NetHood
2008-06-02 20:11:44 0 dr------- C:\Documents and Settings\Administrator\My Documents
2008-06-02 20:11:44 0 d--h----- C:\Documents and Settings\Administrator\Local Settings
2008-06-02 20:11:44 0 dr------- C:\Documents and Settings\Administrator\Favorites
2008-06-02 20:11:44 0 d-------- C:\Documents and Settings\Administrator\Desktop
2008-06-02 20:11:44 0 d--hs---- C:\Documents and Settings\Administrator\Cookies
2008-06-02 20:11:44 0 dr-h----- C:\Documents and Settings\Administrator\Application Data
2008-06-02 20:11:44 0 d---s---- C:\Documents and Settings\Administrator\Application Data\Microsoft
2008-06-02 20:11:43 786432 --ah----- C:\Documents and Settings\Administrator\NTUSER.DAT
2008-06-01 12:37:09 0 d-------- C:\Documents and Settings\Rich\Application Data\Move Networks
2008-05-31 12:35:55 0 d-------- C:\Documents and Settings\Rich\Application Data\ACD Systems
2008-05-31 12:34:32 0 d-------- C:\Program Files\Common Files\ACD Systems
2008-05-31 12:34:32 0 d-------- C:\Program Files\ACD Systems
2008-05-31 12:34:32 0 d-------- C:\Documents and Settings\All Users\Application Data\ACD Systems
2008-05-31 12:34:13 0 d-------- C:\WINDOWS\Downloaded Installations
2008-05-30 19:22:48 802816 --a------ C:\WINDOWS\system32\divx_xx11.dll <Not Verified; DivX, Inc.; DivX?>
2008-05-30 19:22:48 823296 --a------ C:\WINDOWS\system32\divx_xx0c.dll <Not Verified; DivX, Inc.; DivX®>
2008-05-30 19:22:48 823296 --a------ C:\WINDOWS\system32\divx_xx07.dll <Not Verified; DivX, Inc.; DivX®>
2008-05-30 19:22:46 815104 --a------ C:\WINDOWS\system32\divx_xx0a.dll <Not Verified; DivX, Inc.; DivX®>
2008-05-30 19:22:46 683520 --a------ C:\WINDOWS\system32\DivX.dll <Not Verified; DivX, Inc.; DivX®>
2008-05-27 21:23:51 0 d--h----- C:\WINDOWS\system32\GroupPolicy
2008-05-22 18:22:18 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2008-05-22 18:19:46 196608 --a------ C:\WINDOWS\system32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>
2008-05-22 18:19:46 81920 --a------ C:\WINDOWS\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2008-05-22 18:18:54 12288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll
2008-05-21 19:10:01 0 d-------- C:\Documents and Settings\All Users\Application Data\media center programs
2008-05-21 18:03:05 0 d-------- C:\Age of Conan
2008-05-21 17:18:05 0 d-------- C:\Pictures
2008-05-10 10:20:55 0 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-05-10 05:13:57 0 d-------- C:\Documents and Settings\All Users\Application Data\Funcom
-- Find3M Report ---------------------------------------------------------------
2008-06-09 20:17:22 0 d-------- C:\Program Files\mIRC
2008-06-09 19:11:52 0 d-------- C:\Program Files\DivX
2008-06-09 18:09:34 0 d-------- C:\Program Files\Java
2008-06-09 18:09:14 0 d-------- C:\Program Files\Common Files
2008-06-09 18:08:24 0 d-------- C:\Program Files\Symantec AntiVirus
2008-06-01 17:18:34 0 d-------- C:\Documents and Settings\Rich\Application Data\uTorrent
2008-05-31 12:35:36 0 d-------- C:\Program Files\Thumbs6
2008-05-31 09:08:04 0 d-------- C:\Program Files\Safari
2008-05-30 07:46:12 0 d-------- C:\Program Files\AnyDVD
2008-05-25 21:57:20 0 d-------- C:\Program Files\Trillian
2008-05-19 07:31:26 0 d-------- C:\Program Files\uTorrent
2008-05-14 20:45:16 0 d-------- C:\Documents and Settings\Rich\Application Data\Apple Computer
2008-05-07 21:38:12 0 d-------- C:\Program Files\Ad-Aware 2007
2008-05-07 07:46:52 0 d-------- C:\Program Files\EPSON Print CD
2008-05-05 20:13:31 0 d-------- C:\Program Files\coverXP
2008-05-05 19:26:18 0 d-------- C:\Program Files\EPSON
2008-05-05 19:26:17 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-05-03 22:17:53 17144 --a------ C:\Documents and Settings\Rich\Application Data\GDIPFONTCACHEV1.DAT
2008-05-03 22:05:11 0 d-------- C:\Program Files\VobBlanker
2008-04-16 10:50:57 0 d-------- C:\Program Files\iTunes
2008-04-16 10:50:50 0 d-------- C:\Program Files\iPod
2008-04-16 10:50:01 0 d-------- C:\Program Files\QuickTime
2008-04-16 10:41:15 0 d-------- C:\Program Files\Apple Software Update
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [11/14/2006 05:21 AM C:\WINDOWS\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [05/16/2006 06:04 AM C:\WINDOWS\SkyTel.exe]
"JMB36X IDE Setup"="C:\WINDOWS\JM\JMInsIDE.exe" [10/30/2006 08:44 AM]
"JMB36X Configure"="C:\WINDOWS\System32\JMRaidSetup.exe" [10/30/2006 08:44 AM]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [10/28/2007 05:52 PM]
"nwiz"="nwiz.exe" [10/28/2007 05:52 PM C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [10/28/2007 05:52 PM]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [11/21/2006 06:38 PM]
"vptray"="C:\PROGRA~1\SYMANT~1\VPTray.exe" [03/14/2007 08:49 PM]
"NeroFilterCheck"="C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe" [03/01/2007 04:57 PM]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [09/20/2007 10:51 AM]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [03/28/2008 11:37 PM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [03/30/2008 10:36 AM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe" [03/25/2008 04:28 AM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AnyDVD"="C:\Program Files\AnyDVD\AnyDVDtray.exe" [05/28/2008 07:10 AM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 01:56 AM]
"\\ALLYS\EPSON Stylus Photo R260 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBNA.exe" [05/19/2006 04:00 AM]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" [09/20/2007 04:35 PM]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [10/18/2006 09:05 PM]
C:\Documents and Settings\Rich\Start Menu\Programs\Startup\
mIRC.lnk - C:\Program Files\mIRC\mirc.exe [11/1/2007 3:57:24 PM]
Tardis.lnk - C:\Program Files\Tardis2000\Tardis.exe [12/21/2007 11:46:35 PM]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
VME 1.2.lnk - C:\Program Files\VME 1.2\VME Manager.exe [8/27/2007 2:30:16 AM]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=0 (0x0)
"HideStartupScripts"=0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"HideLegacyLogonScripts"=0 (0x0)
"HideLogoffScripts"=0 (0x0)
"RunLogonScriptSync"=1 (0x1)
"RunStartupScriptSync"=0 (0x0)
"HideStartupScripts"=0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"
-- End of Deckard's System Scanner: finished at 2008-06-09 20:53:50 ------------
--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Monday, June 9, 2008
Operating System: Microsoft Windows XP Professional Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Monday, June 09, 2008 19:26:50
Records in database: 844518
--------------------------------------------------------------------------------
Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes
Scan area - My Computer:
A:\
C:\
D:\
E:\
F:\
Scan statistics:
Files scanned: 70976
Threat name: 7
Infected objects: 23
Suspicious objects: 0
Duration of the scan: 00:47:57
File name / Threat name / Threats count
C:\Program Files\mIRC\mirc.exe/C:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
C:\Backup\vnc-4_1_2-x86_win32-server.exe Infected: not-a-virus:RemoteAdmin.Win32.WinVNC.4 4
C:\Deckard\System Scanner\backup\DOCUME~1\Rich\LOCALS~1\Temp\ACDSee 8.0.39.rar Infected: Trojan-Downloader.Win32.Injecter.tz 1
C:\Deckard\System Scanner\backup\DOCUME~1\Rich\LOCALS~1\Temp\ACDSee 8.0.39.rar Infected: Trojan-Dropper.Win32.Small.bob 1
C:\Deckard\System Scanner\backup\DOCUME~1\Rich\LOCALS~1\Temp\mirc631.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.631 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\00840000\48CEF136.VBN Infected: Trojan.Win32.Monder.gen 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\00840001\48CEF160.VBN Infected: Trojan.Win32.Monder.gen 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\00840002\48CEF168.VBN Infected: Trojan.Win32.Monder.gen 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\00840003\48CEF182.VBN Infected: Trojan.Win32.Monder.gen 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08840000\48CEE269.VBN Infected: Trojan.Win32.Monder.gen 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\09BC0000\49FF1484.VBN Infected: Trojan.Win32.Monder.gen 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\09BC0001\49FF177F.VBN Infected: Trojan.Win32.Monder.gen 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\09BC0002\49FF258F.VBN Infected: Trojan.Win32.Monder.gen 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\09BC0003\49FF393F.VBN Infected: Trojan.Win32.Monder.gen 1
C:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
C:\QooBox\Quarantine\C\WINDOWS\system32\awtqrsqq.dll.vir Infected: Trojan.Win32.Monder.gen 1
C:\QooBox\Quarantine\C\WINDOWS\system32\iifFWOGV.dll.vir Infected: Trojan.Win32.Monder.gen 1
C:\QooBox\Quarantine\C\WINDOWS\system32\rqRKEWPf.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.wwr 1
C:\QooBox\Quarantine\C\WINDOWS\system32\urqQGyaB.dll.vir Infected: Trojan.Win32.Monder.gen 1
C:\QooBox\Quarantine\C\WINDOWS\system32\wvUOHXPG.dll.vir Infected: Trojan.Win32.Monder.gen 1
The selected area was scanned.
----------------------------------------------------------------
Any ideas why my Symantec AntiVirus Corporate fully updated doesn't catch this stuff?