View Single Post
Old 11-10-2008, 05:51 AM   #1 (permalink)
CreepZero
Registered User
 
Join Date: Nov 2008
Location: Manchester, UK
Posts: 10
OS: xp


Trojan/Malware/popups

Hi, after turning on my PC on Saturday morning, I was bombarded with popups, some of which you could only hear and not see, I went into system restore only to find that I was unable to go back to any date previous IE would not show pictures, even after going into IE/tools/advanced and ticking the "show pictures" box when IE was restarted it automatically reverted back to unticking this option..
I have run AVG and malwarebyte's anti-malware and they found several threats...but im worried im still infected, any help or advice would be greatly appriciated

Regards

Logfile of random's system information tool 1.04 (written by random/random)
Run by Terry at 2008-11-10 12:28:24
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 158 GB (66%) free of 238 GB
Total RAM: 1023 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:28:59, on 10/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\Program Files\LifeView DTV\RemoteControl.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\FinePixViewerS\QuickDCF2.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\SEC\Natural Color Pro\NCProTray.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Terry\Desktop\RSIT.exe
C:\Documents and Settings\Terry\Desktop\Terry.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R3 - URLSearchHook: (no name) - {a1b2f3fa-dd1d-470b-a23e-a133b2f8ef60} - (no file)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [DTVRemote] "C:\Program Files\LifeView DTV\RemoteControl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [lovefilm DLM Manager] C:\Program Files\LOVEFiLM International\Lovefilm Download Manager\Download Manager.exe
O4 - HKCU\..\Run: [EPSON Stylus D92 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBZE.EXE /FU "C:\WINDOWS\TEMP\E_S86.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_1_0
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Exif Launcher S.lnk = C:\Program Files\FinePixViewerS\QuickDCF2.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NCProTray.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {164B406B-0FD6-4E7F-BA7E-64D227D4CA37} -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1171998185500
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} -
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: lyjdcu.dll,avgrsstx.dll glhugw.dll
O20 - Winlogon Notify: pmnkLFXR - pmnkLFXR.dll (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

--
End of file - 7679 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\vnsojwww.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{A057A204-BACC-4D26-9990-79A187E2698E} - AVG Security Toolbar - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2008-11-08 2055960]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-04-06 90112]
"AlcWzrd"=C:\WINDOWS\ALCWZRD.EXE [2005-04-06 2805248]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-04-11 65536]
"DTVRemote"=C:\Program Files\LifeView DTV\RemoteControl.exe [2004-09-17 32768]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\point32.exe [2005-06-10 217088]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-05-16 13529088]
"nwiz"=nwiz.exe /install []
"Kernel and Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2008-02-29 76304]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-05-16 86016]
"QuickTime Task"=C:\qttask.exe -atboottime []
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-11-08 1234712]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2008-11-09 136600]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"lovefilm DLM Manager"=C:\Program Files\LOVEFiLM International\Lovefilm Download Manager\Download Manager.exe []
"EPSON Stylus D92 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBZE.EXE [2006-09-27 139264]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-09-16 1833296]
"updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-10-18 204288]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Exif Launcher S.lnk - C:\Program Files\FinePixViewerS\QuickDCF2.exe
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
NCProTray.lnk - C:\Program Files\SEC\Natural Color Pro\NCProTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="lyjdcu.dll,avgrsstx.dll glhugw.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2008-05-02 72208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\pmnkLFXR]
pmnkLFXR.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
C:\WINDOWS\system32\khfFWqno

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=157
"NoFolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Ares\Ares.exe"="C:\Program Files\Ares\Ares.exe:*:Enabled:Ares"
"C:\Program Files\Xfire\xfire.exe"="C:\Program Files\Xfire\xfire.exe:*:Enabled:Xfire"
"C:\Program Files\Valve\Steam\SteamApps\supaking\half-life 2 deathmatch\hl2.exe"="C:\Program Files\Valve\Steam\SteamApps\supaking\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2"
"C:\Program Files\PPLive\PPLive.exe"="C:\Program Files\PPLive\PPLive.exe:*:Enabled:PPLive"
"C:\Program Files\PPStream\PPStream.exe"="C:\Program Files\PPStream\PPStream.exe:*:Enabled:PPStream"
"C:\Program Files\TVAnts\Tvants.exe"="C:\Program Files\TVAnts\Tvants.exe:*:Enabled:TVAnts"
"C:\Program Files\PPMate\PPMate\ppmate.exe"="C:\Program Files\PPMate\PPMate\ppmate.exe:*:Enabled:PPMate"
"C:\Program Files\Valve\Steam\SteamApps\supaking\source sdk base\hl2.exe"="C:\Program Files\Valve\Steam\SteamApps\supaking\source sdk base\hl2.exe:*:Enabled:hl2"
"C:\Program Files\KONAMI\Pro Evolution Soccer 6\PES6.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 6\PES6.exe:*:Enabled:pes6.exe"
"C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe"="C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe:*:Enabled:Kodak Software Updater"
"C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe"="C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe:*:Enabled:EasyShare"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\Veoh Networks\Veoh\VeohClient.exe"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe:*:Enabled:Veoh Client"
"C:\Program Files\Valve\Steam\SteamApps\supaking\counter-strike source\hl2.exe"="C:\Program Files\Valve\Steam\SteamApps\supaking\counter-strike source\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Valve\Steam\SteamApps\killerwurst1988\day of defeat source\hl2.exe"="C:\Program Files\Valve\Steam\SteamApps\killerwurst1988\day of defeat source\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Valve\Steam\SteamApps\killerwurst1988\half-life 2 deathmatch\hl2.exe"="C:\Program Files\Valve\Steam\SteamApps\killerwurst1988\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Valve\Steam\SteamApps\natalie664\half-life 2 deathmatch\hl2.exe"="C:\Program Files\Valve\Steam\SteamApps\natalie664\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Valve\Steam\Steam.exe"="C:\Program Files\Valve\Steam\Steam.exe:*:Enabled:Steam"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Valve\Steam\SteamApps\common\enemy territory quake wars demo\etqw.exe"="C:\Program Files\Valve\Steam\SteamApps\common\enemy territory quake wars demo\etqw.exe:*:Enabled:Enemy Territory: QUAKE Wars"
"C:\Program Files\Winamp Remote\bin\Orb.exe"="C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb"
"C:\Program Files\Winamp Remote\bin\OrbTray.exe"="C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray"
"C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe"="C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
"C:\Program Files\MC2\Sniper Elite\SniperElite.exe"="C:\Program Files\MC2\Sniper Elite\SniperElite.exe:*:Enabled:SniperElite"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\SopCast\adv\SopAdver.exe"="C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"
"C:\Program Files\PPMate\ppmate.exe"="C:\Program Files\PPMate\ppmate.exe:*:Enabled:PPMate"
"C:\Program Files\PPMate\ppamnet.exe"="C:\Program Files\PPMate\ppamnet.exe:*:Enabled:PPMate"
"C:\Program Files\TmNationsForever\TmForever.exe"="C:\Program Files\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"C:\Program Files\Valve\Steam\SteamApps\natalie664\counter-strike source\hl2.exe"="C:\Program Files\Valve\Steam\SteamApps\natalie664\counter-strike source\hl2.exe:*:Enabled:hl2"
"C:\Program Files\MagicTune Premium\MagicTune.exe"="C:\Program Files\MagicTune Premium\MagicTune.exe:*:Enabled:MagicTune"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Documents and Settings\Terry\temp\TeamViewer3\TeamViewer.exe"="C:\Documents and Settings\Terry\temp\TeamViewer3\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Valve\Steam\SteamApps\supaking\zombie panic! source\hl2.exe"="C:\Program Files\Valve\Steam\SteamApps\supaking\zombie panic! source\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Activision\Call of Duty - World at War Beta\CoDWaWbeta.exe"="C:\Program Files\Activision\Call of Duty - World at War Beta\CoDWaWbeta.exe:*:Enabled:Call of Duty(R): World at War Multiplayer"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2008-11-10 12:28:24 ----D---- C:\rsit
2008-11-10 12:10:09 ----A---- C:\WINDOWS\gmer.ini
2008-11-10 12:10:07 ----A---- C:\WINDOWS\gmer_uninstall.cmd
2008-11-10 12:10:07 ----A---- C:\WINDOWS\gmer.exe
2008-11-10 12:10:07 ----A---- C:\WINDOWS\gmer.dll
2008-11-09 2307 ----D---- C:\Documents and Settings\Terry\Application Data\Malwarebytes
2008-11-09 2302 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-11-09 2301 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-11-09 17:57:56 ----D---- C:\Documents and Settings\Terry\Application Data\Mozilla
2008-11-09 17:57:44 ----D---- C:\Program Files\Mozilla Firefox
2008-11-09 17:54:19 ----A---- C:\WINDOWS\system32\javaws.exe
2008-11-09 17:54:19 ----A---- C:\WINDOWS\system32\deploytk.dll
2008-11-09 17:54:18 ----A---- C:\WINDOWS\system32\javaw.exe
2008-11-09 17:54:18 ----A---- C:\WINDOWS\system32\java.exe
2008-11-08 14:42:59 ----A---- C:\WINDOWS\wininit.ini
2008-11-08 10:56:57 ----HD---- C:\$AVG8.VAULT$
2008-11-08 10:52:54 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2008-11-08 10:52:41 ----D---- C:\Documents and Settings\Terry\Application Data\AVGTOOLBAR
2008-11-08 10:52:29 ----D---- C:\Program Files\AVG
2008-11-08 10:52:29 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2008-11-08 09:24:52 ----A---- C:\WINDOWS\system32\uipbmyazmmmtm.dll-uninst.exe
2008-11-08 08:51:31 ----A---- C:\WINDOWS\system32\amqrevolxw.exe
2008-11-08 08:46:29 ----A---- C:\WINDOWS\system32\635d2f11-.txt
2008-11-08 08:45:45 ----ASH---- C:\WINDOWS\system32\onqWFfhk.ini
2008-11-08 08:15:25 ----D---- C:\Documents and Settings\Terry\Application Data\IUpd721
2008-11-08 07:58:44 ----A---- C:\WINDOWS\system32\msuzwgcroqtw.exe
2008-11-08 07:56:56 ----D---- C:\WINDOWS\system32\xdt
2008-11-08 07:56:56 ----D---- C:\WINDOWS\system32\mir5
2008-11-08 07:56:56 ----D---- C:\WINDOWS\system32\IET
2008-11-08 07:56:56 ----D---- C:\WINDOWS\system32\CT6
2008-11-08 07:56:22 ----D---- C:\WINDOWS\system32\sX3i19
2008-11-01 09:37:22 ----A---- C:\WINDOWS\system32\ymzalkgkpnuufbc.dll
2008-10-29 23:49:09 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2008-10-29 23:49:09 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2008-10-29 23:49:09 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2008-10-29 23:49:09 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2008-10-29 23:49:09 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2008-10-29 23:49:09 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2008-10-29 23:49:08 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2008-10-29 23:49:08 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2008-10-29 23:49:08 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2008-10-29 23:49:08 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2008-10-29 23:49:07 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2008-10-29 23:49:07 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2008-10-29 23:49:07 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2008-10-29 23:49:07 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2008-10-29 23:49:06 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2008-10-29 23:49:05 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2008-10-29 23:49:03 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2008-10-29 23:49:03 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2008-10-29 23:48:50 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2008-10-29 23:47:49 ----D---- C:\WINDOWS\Logs
2008-10-28 22:36:00 ----A---- C:\WINDOWS\system32\divx_xx0c.dll
2008-10-28 22:36:00 ----A---- C:\WINDOWS\system32\divx_xx07.dll
2008-10-28 22:35:58 ----A---- C:\WINDOWS\system32\divx_xx11.dll
2008-10-28 22:35:58 ----A---- C:\WINDOWS\system32\divx_xx0a.dll
2008-10-28 22:35:56 ----A---- C:\WINDOWS\system32\DivX.dll
2008-10-24 1426 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-10-24 1418 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2008-10-24 1408 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-10-23 07:46:47 ----D---- C:\WINDOWS\Prefetch
2008-10-23 07:44:22 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-10-23 07:44:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-10-23 07:44:09 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-10-23 07:44:01 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-10-23 07:43:53 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-10-23 07:43:47 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-10-23 07:43:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-10-23 07:43:35 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-10-23 07:43:28 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-10-23 07:43:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2008-10-23 07:43:14 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-10-23 07:43:07 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-10-23 07:43:01 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-10-23 07:42:54 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-10-23 07:38:08 ----D---- C:\WINDOWS\system32\scripting
2008-10-23 07:38:08 ----D---- C:\WINDOWS\system32\en
2008-10-23 07:38:08 ----D---- C:\WINDOWS\l2schemas
2008-10-23 07:38:07 ----D---- C:\WINDOWS\system32\bits
2008-10-23 07:36:12 ----D---- C:\WINDOWS\ServicePackFiles
2008-10-16 21:41:58 ----D---- C:\Documents and Settings\Terry\Application Data\TeamViewer
2008-10-16 17:49:00 ----HDC---- C:\WINDOWS\$NtUninstallKB954211_0$
2008-10-15 21:50:35 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2008-10-15 21:50:30 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-10-15 21:50:23 ----HDC---- C:\WINDOWS\$NtUninstallKB957095_0$
2008-10-15 21:49:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956841_0$

======List of files/folders modified in the last 1 months======

2008-11-10 12:28:59 ----D---- C:\WINDOWS\Temp
2008-11-10 12:10:09 ----D---- C:\WINDOWS
2008-11-10 12:10:07 ----D---- C:\WINDOWS\system32\drivers
2008-11-10 1215 ----D---- C:\WINDOWS\system32\CatRoot2
2008-11-10 12:05:46 ----D---- C:\Program Files\Conduit
2008-11-10 12:04:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-11-10 11:58:17 ----RD---- C:\Program Files
2008-11-10 11:57:16 ----SHD---- C:\WINDOWS\Installer
2008-11-10 11:57:07 ----D---- C:\Config.Msi
2008-11-10 00:50:46 ----AD---- C:\WINDOWS\system32
2008-11-09 23:30:39 ----D---- C:\Program Files\Java
2008-11-09 22:50:42 ----RASH---- C:\boot.ini
2008-11-09 22:50:42 ----A---- C:\WINDOWS\win.ini
2008-11-09 22:50:42 ----A---- C:\WINDOWS\system.ini
2008-11-09 19:51:17 ----HD---- C:\Program Files\InstallShield Installation Information
2008-11-09 17:54:54 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-11-09 16:53:31 ----D---- C:\Documents and Settings\All Users\Application Data\DVD Shrink
2008-11-09 16:51:40 ----HD---- C:\WINDOWS\inf
2008-11-09 16:51:22 ----D---- C:\WINDOWS\ie7updates
2008-11-09 10:40:19 ----A---- C:\WINDOWS\NeroDigital.ini
2008-11-08 14:22:30 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-11-08 14:20:03 ----D---- C:\Program Files\Spybot - Search & Destroy
2008-11-08 11:51:43 ----D---- C:\Program Files\PPMate
2008-11-08 10:51:00 ----SD---- C:\Documents and Settings\Terry\Application Data\Microsoft
2008-11-08 09:50:32 ----D---- C:\WINDOWS\SoftwareDistribution
2008-11-08 09:24:44 ----A---- C:\WINDOWS\imsins.BAK
2008-11-08 08:00:13 ----D---- C:\Program Files\Microsoft IntelliPoint
2008-11-08 07:58:34 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-11-08 07:56:44 ----SD---- C:\WINDOWS\Tasks
2008-11-07 23:30:30 ----D---- C:\Program Files\DivX
2008-11-05 15:10:22 ----D---- C:\Documents and Settings\Terry\Application Data\Apple Computer
2008-10-30 16:16:43 ----D---- C:\Documents and Settings\Terry\Application Data\Xfire
2008-10-30 14:38:20 ----SD---- C:\Program Files\Xfire
2008-10-29 23:49:10 ----D---- C:\WINDOWS\system32\DirectX
2008-10-29 23:48:41 ----HD---- C:\WINDOWS\msdownld.tmp
2008-10-27 10:44:31 ----A---- C:\WINDOWS\OEWABLog.txt
2008-10-26 06:52:01 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-10-24 1429 ----D---- C:\Program Files\Messenger
2008-10-24 1426 ----HD---- C:\WINDOWS\$hf_mig$
2008-10-23 07:46:54 ----A---- C:\WINDOWS\setuplog.txt
2008-10-23 07:46:16 ----D---- C:\WINDOWS\system32\Setup
2008-10-23 07:46:16 ----D---- C:\WINDOWS\AppPatch
2008-10-23 07:46:14 ----D---- C:\WINDOWS\system32\wbem
2008-10-23 07:46:12 ----RSD---- C:\WINDOWS\Fonts
2008-10-23 07:45:10 ----D---- C:\WINDOWS\security
2008-10-23 07:44:23 ----D---- C:\WINDOWS\system32\CatRoot
2008-10-23 07:38:28 ----D---- C:\WINDOWS\WinSxS
2008-10-23 07:38:19 ----D---- C:\WINDOWS\network diagnostic
2008-10-23 07:38:19 ----D---- C:\WINDOWS\ime
2008-10-23 07:38:19 ----D---- C:\WINDOWS\Help
2008-10-23 07:38:09 ----D---- C:\WINDOWS\system32\usmt
2008-10-23 07:38:09 ----D---- C:\WINDOWS\system32\en-US
2008-10-23 07:38:07 ----D---- C:\WINDOWS\PeerNet
2008-10-23 07:38:07 ----D---- C:\Program Files\Movie Maker
2008-10-23 07:36:06 ----D---- C:\WINDOWS\system32\Restore
2008-10-23 07:36:06 ----D---- C:\WINDOWS\system32\npp
2008-10-23 07:36:03 ----D---- C:\WINDOWS\msagent
2008-10-23 07:36:02 ----D---- C:\WINDOWS\srchasst
2008-10-23 07:35:59 ----D---- C:\Program Files\NetMeeting
2008-10-23 07:35:58 ----D---- C:\WINDOWS\system32\Com
2008-10-23 07:35:55 ----D---- C:\Program Files\Windows Media Player
2008-10-23 07:35:54 ----D---- C:\Program Files\Windows NT
2008-10-23 07:35:54 ----D---- C:\Program Files\Outlook Express
2008-10-23 07:35:51 ----D---- C:\Program Files\Common Files\System
2008-10-23 07:35:29 ----AD---- C:\WINDOWS\system32\oobe
2008-10-23 07:35:26 ----D---- C:\WINDOWS\system
2008-10-23 07:31:09 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-10-23 07:30:45 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2008-10-23 07:27:28 ----D---- C:\WINDOWS\EHome
2008-10-15 21:50:13 ----D---- C:\Program Files\Internet Explorer
2008-10-15 16:34:24 ----A---- C:\WINDOWS\system32\netapi32.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-11-08 97928]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-11-08 26824]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R2 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2008-11-08 76040]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-01-29 16168]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-03-23 2547008]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2008-02-29 36880]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2008-02-29 28944]
R3 LVHybrid;LVHybrid service; C:\WINDOWS\system32\DRIVERS\LVHybrid.sys [2004-09-07 699648]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\system32\DRIVERS\Mtlmnt5.sys [2003-07-16 221736]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-05-16 6557408]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-03-04 74496]
R3 Slntamr;SmartLink AMR_PCI Driver; C:\WINDOWS\system32\DRIVERS\slntamr.sys [2003-08-20 548952]
R3 SlWdmSup;SlWdmSup; C:\WINDOWS\system32\DRIVERS\SlWdmSup.sys [2003-07-02 39348]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S1 c09a9aba;c09a9aba; C:\WINDOWS\System32\drivers\c09a9aba.sys []
S1 NCPro;NCPro; C:\WINDOWS\system32\drivers\MTictwl.sys []
S2 CSS DVP;CSS DVP; C:\WINDOWS\system32\DRIVERS\css-dvp.sys []
S3 ASPI;Advanced SCSI Programming Interface Driver; \??\C:\WINDOWS\System32\DRIVERS\ASPI32.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 gmer;gmer; C:\WINDOWS\System32\DRIVERS\gmer.sys [2008-11-10 85969]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\k750mdm.sys [2005-02-11 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\k750mgmt.sys [2005-02-11 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\k750obex.sys [2005-02-11 79488]
S3 MagicTune;MagicTune; C:\WINDOWS\system32\drivers\MTiCtwl.sys []
S3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 MPE;BDA MPE Filter; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 Mtlstrm;Mtlstrm; C:\WINDOWS\system32\DRIVERS\Mtlstrm.sys [2003-07-02 1301128]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NtMtlFax;NtMtlFax; C:\WINDOWS\system32\DRIVERS\NtMtlFax.sys [2003-07-02 167384]
S3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2005-06-10 21760]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SlNtHal;SlNtHal; C:\WINDOWS\system32\DRIVERS\Slnthal.sys [2003-07-02 86128]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320]
S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys [2005-08-30 8336]
S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys [2005-08-30 94000]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-07-22 32000]
S3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\WINDOWS\system32\DRIVERS\xusb21.sys [2007-08-28 55808]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-07-22 116040]
R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-11-08 875288]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-11-08 231704]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2008-11-09 152984]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-05-16 159812]
R2 SLService;SmartLinkService; C:\WINDOWS\system32\slserv.exe [2003-07-02 45056]
R2 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-07-30 532264]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2008-05-02 121360]

-----------------EOF-----------------
Attached Files
File Type: txt Gmer.txt (2.4 KB, 1 views)
File Type: txt info.txt (15.8 KB, 1 views)
CreepZero is offline  
Important Information
Join the #1 Tech Support Forum Today - It's Totally Free!

TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free.

Join TechSupportforum.com Today - Click Here