OK....I got a little side tracked reading all that great info you sent...still not sure of which anti-virus, etc. to use??
Anyway I removed SpyHunter just showed up recently I'm not exactly sure how it arrived on my computer as I don't remember downloading it! I removed McAfee (it came with my computer software from Dell) as well.
Here are the two new log files....
ComboFix 08-11-18.A2 - Mine 2008-11-19 19:52:23.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.564 [GMT -8:00]
Running from: c:\documents and settings\Mine\Desktop\1ComboFix.exe
Command switches used :: c:\documents and settings\Mine\Desktop\CFScript.txt
* Created a new restore point
FILE ::
c:\windows\system32\cont_mxlivemedia-remove.exe
c:\windows\system32\nslE9.dll
c:\windows\system32\pmgubxiwlojaqzbiz.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\All Users\Application Data\Avg8
c:\documents and settings\Mine\Application Data\AVGTOOLBAR
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\avglinks.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\avglogo.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\avgstatus.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\avgstatus_error.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\avgtoolbartb0502.cfg
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\brandlogo.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\COMBOSEARCH.acs
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\p_yahoo.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\safesearch.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\safesearch_off.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\safesearch_on.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\safesurf.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\safesurf_off.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\safesurf_on.bmp
c:\documents and settings\Mine\Application Data\AVGTOOLBAR\slider.bmp
c:\documents and settings\Mine\Application Data\Viewpoint
c:\documents and settings\Mine\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_00\-920016760.mtj&p2=1&p3=13628889503440113430122022044687&p4=50463258
c:\documents and settings\Mine\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_00\URLCache.ini
c:\documents and settings\Mine\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_01\URLCache.ini
c:\documents and settings\Mine\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_02\URLCache.ini
c:\documents and settings\Mine\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\ResourceFolder_03\URLCache.ini
c:\documents and settings\Mine\Application Data\Viewpoint\Viewpoint Experience Technology\Resources\UpdateVersionList_v2.mtx
c:\program files\AVG
c:\program files\AVG\AVG8\fixfp.exe
c:\program files\Enigma Software Group
c:\windows\system32\cont_mxlivemedia-remove.exe
c:\windows\system32\nslE9.dll
c:\windows\system32\pmgubxiwlojaqzbiz.exe
.
((((((((((((((((((((((((( Files Created from 2008-10-20 to 2008-11-20 )))))))))))))))))))))))))))))))
.
2008-11-19 16:39 . 2008-11-19 16:39 <DIR> d-------- c:\program files\Trend Micro
2008-11-17 14:46 . 2008-11-17 14:46 <DIR> d-------- c:\program files\Common Files\Adobe AIR
2008-11-16 14:48 . 2008-11-16 14:48 250 --a------ c:\windows\gmer.ini
2008-11-15 00:08 . 2008-11-15 00:08 <DIR> d-------- c:\program files\Phantom EFX
2008-11-13 10:37 . 2008-11-16 14:41 <DIR> d-------- c:\program files\Spybot - Search & Destroy
2008-11-13 10:37 . 2008-11-16 14:41 <DIR> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2008-11-12 18:26 . 2008-11-16 13:44 <DIR> d-------- c:\documents and settings\All Users\Application Data\Lavasoft
2008-11-11 12:52 . 2008-11-11 12:54 <DIR> d-------- c:\program files\PokerStars.NET
2008-11-08 18:20 . 2008-11-08 18:20 <DIR> d-------- c:\documents and settings\George\Application Data\Corel Photo Album
2008-11-08 17:13 . 2008-11-08 17:13 <DIR> d-------- c:\documents and settings\All Users\Application Data\Solt Lake Software
2008-11-08 15:31 . 2008-11-08 15:31 <DIR> d-------- c:\documents and settings\George\Application Data\TELUS
2008-11-07 22:05 . 2008-11-07 22:11 <DIR> d-------- c:\program files\eGames
2008-11-07 22:05 . 1999-05-07 00:00 140,288 --a------ c:\windows\system32\Comdlg32.ocx
2008-11-07 22:05 . 1999-03-25 23:00 101,888 --a------ c:\windows\system32\Vb6stkit.dll
2008-11-07 22:05 . 1999-05-07 00:00 82,960 --a------ c:\windows\system32\Picclp32.ocx
2008-11-07 22:05 . 2000-07-17 13:41 70,088 --a------ c:\windows\system32\Project2-1.ocx
2008-11-07 22:05 . 2000-03-21 15:37 1,760 --a------ c:\windows\system32\objsafe.tlb
2008-11-07 22:05 . 2000-04-06 14:58 1,453 --a------ c:\windows\system32\Project2.INF
2008-11-07 21:59 . 2008-11-08 18:27 <DIR> d-------- c:\program files\MasqueGames
2008-11-03 22:47 . 2008-11-03 22:47 <DIR> d-------- c:\program files\Oberon Media
2008-11-03 22:47 . 2008-11-03 23:49 <DIR> d-------- c:\program files\MSN Games
2008-11-03 22:47 . 2008-11-03 23:47 <DIR> d-a------ c:\documents and settings\All Users\Application Data\TEMP
2008-11-03 22:22 . 2008-11-03 22:22 <DIR> d-------- c:\documents and settings\All Users\Application Data\GameHouse
2008-11-03 21:42 . 2008-11-03 21:42 <DIR> d-------- c:\windows\Sun
2008-11-02 19:51 . 2008-11-02 19:51 <DIR> d-------- c:\program files\directx
2008-11-02 19:48 . 2008-11-07 22:15 <DIR> d-------- c:\program files\Phantom
2008-10-29 22:49 . 2008-10-29 22:49 <DIR> d-------- c:\program files\Windows Media Connect 2
2008-10-29 22:47 . 2008-10-29 22:47 <DIR> d-------- c:\windows\system32\LogFiles
2008-10-29 22:47 . 2008-10-29 22:48 <DIR> d-------- c:\windows\system32\drivers\UMDF
2008-10-27 17:13 . 2008-10-27 17:13 <DIR> d-------- c:\program files\Raxco
2008-10-27 17:13 . 2008-10-27 17:13 <DIR> d-------- c:\documents and settings\All Users\Application Data\Raxco
2008-10-27 17:05 . 2008-10-27 17:05 <DIR> d--h----- c:\windows\PIF
2008-10-27 16:59 . 2008-10-27 17:12 53,192 --a------ c:\windows\system32\drivers\rp_skt32.sys
2008-10-27 16:59 . 2007-04-19 10:36 48,384 --a------ c:\windows\system32\drivers\rp_pkt32.sys
2008-10-27 16:58 . 2008-10-27 17:03 <DIR> d-------- c:\program files\Common Files\Scanner
2008-10-27 16:58 . 2008-10-27 16:58 <DIR> d-------- c:\program files\Common Files\Authentium
2008-10-27 16:58 . 2008-10-27 16:58 <DIR> d-------- c:\program files\CA
2008-10-27 16:57 . 2008-10-27 16:58 <DIR> d-------- c:\program files\TELUS
2008-10-27 16:57 . 2008-10-27 16:57 <DIR> d-------- c:\documents and settings\Mine\Application Data\TELUS
2008-10-27 16:56 . 2008-10-27 16:58 <DIR> d-------- c:\documents and settings\All Users\Application Data\TELUS
2008-10-27 16:55 . 2008-10-27 16:55 <DIR> d-------- c:\documents and settings\Mine\Application Data\InstallShield
2008-10-27 16:34 . 2008-10-27 16:34 <DIR> d-------- c:\documents and settings\Mine\Application Data\Runaware
2008-10-27 16:34 . 2008-10-27 16:34 <DIR> d-------- c:\documents and settings\Mine\Application Data\ICAClient
2008-10-23 09:21 . 2008-10-15 08:34 337,408 --------- c:\windows\system32\dllcache\netapi32.dll
2008-10-22 18:47 . 2008-10-22 18:47 70,272 --a------ c:\documents and settings\Mine\Application Data\GDIPFONTCACHEV1.DAT
2008-10-20 18:53 . 2008-10-20 18:53 <DIR> d-------- c:\documents and settings\Mine\Application Data\Apple Computer
2008-10-20 18:53 . 2008-04-17 12:12 107,368 --a------ c:\windows\system32\GEARAspi.dll
2008-10-20 18:53 . 2008-04-17 12:12 15,464 --a------ c:\windows\system32\drivers\GEARAspiWDM.sys
2008-10-20 18:52 . 2008-10-20 18:52 <DIR> d-------- c:\program files\QuickTime
2008-10-20 18:52 . 2008-10-20 18:53 <DIR> d-------- c:\program files\iTunes
2008-10-20 18:52 . 2008-10-20 18:52 <DIR> d-------- c:\program files\iPod
2008-10-20 18:52 . 2008-10-20 18:52 <DIR> d-------- c:\program files\Bonjour
2008-10-20 18:52 . 2008-10-20 18:52 <DIR> d-------- c:\documents and settings\All Users\Application Data\Apple Computer
2008-10-20 18:52 . 2008-10-20 18:53 <DIR> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2008-10-20 18:51 . 2008-10-20 18:53 <DIR> d----c--- c:\windows\system32\DRVSTORE
2008-10-20 18:51 . 2008-10-20 18:52 <DIR> d-------- c:\program files\Common Files\Apple
2008-10-20 18:51 . 2008-10-20 18:51 <DIR> d-------- c:\program files\Apple Software Update
2008-10-20 18:51 . 2008-10-20 18:51 <DIR> d-------- c:\documents and settings\All Users\Application Data\Apple
2008-10-20 12:53 . 2008-10-20 12:53 <DIR> d-------- c:\documents and settings\Mine\Application Data\Corel Photo Album
2008-10-20 12:53 . 2008-11-17 14:02 3,350 --ahs---- c:\windows\system32\KGyGaAvL.sys
2008-10-20 12:53 . 2008-11-17 14:02 56 -r-hs---- c:\windows\system32\6E962D0515.sys
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-20 03:35 1,324 ----a-w c:\documents and settings\Mine\Application Data\wklnhst.dat
2008-11-18 17:32 --------- d-----w c:\program files\NOS
2008-11-18 17:32 --------- d-----w c:\documents and settings\All Users\Application Data\NOS
2008-11-17 22:45 --------- d-----w c:\program files\Common Files\Adobe
2008-11-16 22:39 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-16 00:27 --------- d-----w c:\program files\DIGStream
2008-10-27 15:38 --------- d-----w c:\documents and settings\Mine\Application Data\AdobeUM
2008-10-13 19:03 --------- d-----w c:\documents and settings\Mine\Application Data\U3
2008-10-10 22:48 --------- d-----w c:\documents and settings\Guest\Application Data\GTek
2008-10-09 09:01 --------- d-----w c:\program files\MSXML 4.0
2008-10-09 04:30 --------- d-----w c:\program files\Common Files\AOL
2008-10-09 04:30 --------- d-----w c:\documents and settings\All Users\Application Data\AOL
2008-10-09 04:29 --------- d-----w c:\documents and settings\George\Application Data\GTek
2008-10-09 04:29 --------- d-----w c:\documents and settings\All Users\Application Data\Dell
2008-10-09 02:32 --------- d-----w c:\program files\Google
2008-10-08 04:24 --------- d-----w c:\documents and settings\Mine\Application Data\HP
2008-10-08 04:18 --------- d-----w c:\documents and settings\All Users\Application Data\HP
2008-10-08 04:17 --------- d-----w c:\program files\Common Files\Sonic Shared
2008-10-08 04:17 --------- d-----w c:\documents and settings\All Users\Application Data\Sonic
2008-10-08 04:16 --------- d-----w c:\program files\Common Files\HP
2008-10-08 04:15 --------- d-----w c:\program files\HP
2008-10-08 04:15 --------- d-----w c:\program files\Hewlett-Packard
2008-10-08 04:14 --------- d-----w c:\program files\Common Files\Hewlett-Packard
2008-10-08 02:42 --------- d-----w c:\windows\system32\config\systemprofile\Application Data\McAfee
2008-10-07 21:55 --------- d--h--w c:\documents and settings\Mine\Application Data\Gtek
2008-10-07 21:50 --------- d-----w c:\program files\Java
2008-10-07 21:42 --------- d-----w c:\program files\DellSupport
2008-10-03 17:41 6,066,176 ------w c:\windows\system32\dllcache\ieframe.dll
2008-09-15 12:12 1,846,400 ----a-w c:\windows\system32\win32k.sys
2008-09-15 12:12 1,846,400 ------w c:\windows\system32\dllcache\win32k.sys
2008-09-08 10:41 333,824 ------w c:\windows\system32\dllcache\srv.sys
2008-08-29 17:18 87,336 ----a-w c:\windows\system32\dns-sd.exe
2008-08-29 16:53 61,440 ----a-w c:\windows\system32\dnssd.dll
2008-08-27 08:24 3,593,216 ------w c:\windows\system32\dllcache\mshtml.dll
2008-08-25 08:38 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
2008-08-25 08:37 70,656 ------w c:\windows\system32\dllcache\ie4uinit.exe
2008-08-23 05:56 635,848 ------w c:\windows\system32\dllcache\iexplore.exe
2008-08-23 05:54 161,792 ------w c:\windows\system32\dllcache\ieakui.dll
.
((((((((((((((((((((((((((((( snapshot@2008-11-19_13.09.22.67 )))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="c:\program files\DellSupport\DSAgnt.exe" [2007-03-15 460784]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-13 1695232]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-09-29 67584]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 344064]
"DMXLauncher"="c:\program files\Dell\Media Experience\DMXLauncher.exe" [2005-10-05 94208]
"RealTray"="c:\program files\Real\RealPlayer\RealPlay.exe" [2006-02-25 26112]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"MMTray"="c:\progra~1\MUSICM~1\MUSICM~3\mm_tray.exe" [2005-09-08 110592]
"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 249856]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 81920]
"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2005-09-08 122940]
"MimBoot"="c:\progra~1\MUSICM~1\MUSICM~3\mimboot.exe" [2005-09-08 8192]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 49152]
"Corel Photo Downloader"="c:\program files\Corel\Corel Photo Album 6\MediaDetect.exe" [2005-08-31 106496]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-10-01 289576]
"TEPA.exe"="c:\program files\TELUS\eProtect Advisor\TEPA.exe" [2007-05-14 2061816]
"TELUS eProtect"="c:\program files\TELUS\TELUS eProtect\Rps.exe" [2007-09-13 310000]
"-FreedomNeedsReboot"="c:\program files\TELUS\TELUS eProtect\ZkRunOnceR.exe" [2007-09-13 13552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"SigmatelSysTrayApp"="stsystra.exe" [2005-03-22 c:\windows\stsystra.exe]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-05-11 282624]
HP Image Zone Fast Start.lnk - c:\program files\HP\Digital Imaging\bin\hpqthb08.exe [2005-05-11 73728]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-12 83360]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
S3 Radialpoint Security Services;TELUS eProtect;c:\windows\system32\dllhost.exe /Processid:{80098F68-1220-4F43-80A8-15C7395B8874} [2005-08-16 5120]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
\Shell\AutoRun\command - E:\setup.exe
.
Contents of the 'Scheduled Tasks' folder
2008-11-18 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-11-19 19:53:49
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-11-19 19:54:29
ComboFix-quarantined-files.txt 2008-11-20 03:54:24
ComboFix2.txt 2008-11-19 21:15:17
ComboFix3.txt 2008-11-19 21:09:43
Pre-Run: 137,321,488,384 bytes free
Post-Run: 137,309,364,224 bytes free
227 --- E O F --- 2008-11-05 07:00:38
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:55:50 PM, on 11/19/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TELUS\TELUS eProtect\Fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\mm_tray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\TELUS\eProtect Advisor\TEPA.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\TELUS\TELUS eProtect\rpsupdaterR.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\imapi.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\TELUS\TELUS eProtect\pkR.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MMTray] C:\PROGRA~1\MUSICM~1\MUSICM~3\mm_tray.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TEPA.exe] "C:\Program Files\TELUS\eProtect Advisor\TEPA.exe" /AUTORUN
O4 - HKLM\..\Run: [TELUS eProtect] "C:\Program Files\TELUS\TELUS eProtect\Rps.exe"
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\TELUS\TELUS eProtect\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone:
http://*.mcafee.com
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) -
http://zone.msn.com/binFrameWork/v10...I.cab55579.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (MSN Games – Buddy Invite) -
http://zone.msn.com/BinFrameWork/v10...y.cab55579.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) -
http://zone.msn.com/binframework/v10...t.cab55579.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) -
https://h20436.www2.hp.com/ediags/de...e/HPDEXAXO.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) -
http://h20270.www2.hp.com/ediags/gmn...tDetection.cab
O16 - DPF: {8C279F4E-917E-4CD2-8DF0-D9C73C0CE763} (ZPA_WheelOfFortune Object) -
http://zone.msn.com/bingame/zpagames...f.cab55579.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) -
http://cdn2.zone.msn.com/binFramewor...o.cab56649.cab
O16 - DPF: {C86FF4B0-AA1D-46D4-8612-025FB86583C7} (AstoundLauncher Control) -
http://zone.msn.com/bingame/jobo/def...ndLauncher.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) -
http://zone.msn.com/bingame/feed/def...utLauncher.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (MSN Games – Game Communicator) -
http://zone.msn.com/binframework/v10...y.cab55579.cab
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: CA Pest Patrol Realtime Protection Service (ITMRTSVC) - CA, Inc. - C:\Program Files\CA\PPRT\bin\ITMRTSVC.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TELUS eProtect Update Service (RPSUpdaterR) - Radialpoint Inc. - C:\Program Files\TELUS\TELUS eProtect\rpsupdaterR.exe
O23 - Service: TELUS eProtect Firewall (RP_FWS) - TELUS - C:\Program Files\TELUS\TELUS eProtect\Fws.exe
--
End of file - 9969 bytes