Hi
NoLop! Log by Skate_Punk_21
Please Note: any existing old logs will have now been renamed to NoLop!OLD.log
Fix running from: D:\Documents and Settings\Tom\Desktop
[17/05/2007]
[19:08:28]
---Infection Files Found/Removed---
NO INFECTION FILES FOUND - Cleaning Aborted.
---Listing AppData sub directories---
D:\Documents and Settings\Administrator\Application Data\Aol
D:\Documents and Settings\Administrator\Application Data\Identities
D:\Documents and Settings\Administrator\Application Data\Lavasoft
D:\Documents and Settings\Administrator\Application Data\Macromedia
D:\Documents and Settings\Administrator\Application Data\Microsoft
D:\Documents and Settings\Administrator\Application Data\You've Got Pictures Screensaver
D:\Documents and Settings\All Users\Application Data\Adobe
D:\Documents and Settings\All Users\Application Data\Aol
D:\Documents and Settings\All Users\Application Data\Apple Computer
D:\Documents and Settings\All Users\Application Data\Avg7
D:\Documents and Settings\All Users\Application Data\Cyberlink
D:\Documents and Settings\All Users\Application Data\Google
D:\Documents and Settings\All Users\Application Data\Grisoft
D:\Documents and Settings\All Users\Application Data\Installshield
D:\Documents and Settings\All Users\Application Data\Microsoft
D:\Documents and Settings\All Users\Application Data\Od2
D:\Documents and Settings\All Users\Application Data\Quicktime
D:\Documents and Settings\All Users\Application Data\Sbsi
D:\Documents and Settings\All Users\Application Data\Skype -- EMPTY Directory
D:\Documents and Settings\All Users\Application Data\Smartsound Software Inc
D:\Documents and Settings\All Users\Application Data\Sony Ericsson
D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
D:\Documents and Settings\All Users\Application Data\Symantec
D:\Documents and Settings\All Users\Application Data\Teleca
D:\Documents and Settings\All Users\Application Data\Ulead Systems
D:\Documents and Settings\All Users\Application Data\Vaderetro
D:\Documents and Settings\All Users\Application Data\Viewpoint
D:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
D:\Documents and Settings\Brian Perks\Application Data\Adobe
D:\Documents and Settings\Brian Perks\Application Data\Adobeum
D:\Documents and Settings\Brian Perks\Application Data\Aol
D:\Documents and Settings\Brian Perks\Application Data\Apple Computer
D:\Documents and Settings\Brian Perks\Application Data\Avg7
D:\Documents and Settings\Brian Perks\Application Data\Cyberlink
D:\Documents and Settings\Brian Perks\Application Data\Google
D:\Documents and Settings\Brian Perks\Application Data\Help -- EMPTY Directory
D:\Documents and Settings\Brian Perks\Application Data\Identities
D:\Documents and Settings\Brian Perks\Application Data\Leadertech
D:\Documents and Settings\Brian Perks\Application Data\Macromedia
D:\Documents and Settings\Brian Perks\Application Data\Microsoft
D:\Documents and Settings\Brian Perks\Application Data\Od2
D:\Documents and Settings\Brian Perks\Application Data\Skype
D:\Documents and Settings\Brian Perks\Application Data\Sonic
D:\Documents and Settings\Brian Perks\Application Data\Sun
D:\Documents and Settings\Brian Perks\Application Data\Teleca
D:\Documents and Settings\Brian Perks\Application Data\Ulead Systems
D:\Documents and Settings\Brian Perks\Application Data\Vaderetro -- EMPTY Directory
D:\Documents and Settings\Brian Perks\Application Data\Winrar -- EMPTY Directory
D:\Documents and Settings\Brian Perks\Application Data\You've Got Pictures Screensaver
D:\Documents and Settings\Default User\Application Data\Aol
D:\Documents and Settings\Default User\Application Data\Identities
D:\Documents and Settings\Default User\Application Data\Macromedia
D:\Documents and Settings\Default User\Application Data\Microsoft
D:\Documents and Settings\Default User\Application Data\You've Got Pictures Screensaver
D:\Documents and Settings\Ed\Application Data\Adobe
D:\Documents and Settings\Ed\Application Data\Aol
D:\Documents and Settings\Ed\Application Data\Avg7
D:\Documents and Settings\Ed\Application Data\Google
D:\Documents and Settings\Ed\Application Data\Identities
D:\Documents and Settings\Ed\Application Data\Lavasoft
D:\Documents and Settings\Ed\Application Data\Limewire
D:\Documents and Settings\Ed\Application Data\Macromedia
D:\Documents and Settings\Ed\Application Data\Microsoft
D:\Documents and Settings\Ed\Application Data\Od2
D:\Documents and Settings\Ed\Application Data\Sonic
D:\Documents and Settings\Ed\Application Data\Sun
D:\Documents and Settings\Ed\Application Data\Teleca
D:\Documents and Settings\Ed\Application Data\Ulead Systems
D:\Documents and Settings\Ed\Application Data\Winrar -- EMPTY Directory
D:\Documents and Settings\Ed\Application Data\You've Got Pictures Screensaver
D:\Documents and Settings\Localservice\Application Data\Avg7 -- EMPTY Directory
D:\Documents and Settings\Localservice\Application Data\Microsoft
D:\Documents and Settings\Networkservice\Application Data\Microsoft
D:\Documents and Settings\Tom\Application Data\Adobe
D:\Documents and Settings\Tom\Application Data\Adobeum
D:\Documents and Settings\Tom\Application Data\Aol
D:\Documents and Settings\Tom\Application Data\Apple Computer
D:\Documents and Settings\Tom\Application Data\Avg7
D:\Documents and Settings\Tom\Application Data\Cyberlink
D:\Documents and Settings\Tom\Application Data\Google
D:\Documents and Settings\Tom\Application Data\Identities
D:\Documents and Settings\Tom\Application Data\Macromedia
D:\Documents and Settings\Tom\Application Data\Microsoft
D:\Documents and Settings\Tom\Application Data\Od2
D:\Documents and Settings\Tom\Application Data\Screenshot Sender
D:\Documents and Settings\Tom\Application Data\Sun
D:\Documents and Settings\Tom\Application Data\Teleca
D:\Documents and Settings\Tom\Application Data\Template
D:\Documents and Settings\Tom\Application Data\Ulead Systems
D:\Documents and Settings\Tom\Application Data\Winrar -- EMPTY Directory
D:\Documents and Settings\Tom\Application Data\You've Got Pictures Screensaver
=========================================================
[TRACE] Enumerating jobs and queues
[TRACE] Activating job 'AppleSoftwareUpdate.job'
[TRACE] Printing all job properties
ApplicationName: 'C:\Program Files\Apple Software Update\SoftwareUpdate.exe'
Parameters: '-Task'
WorkingDirectory: ''
Comment: ''
Creator: 'SYSTEM'
Priority: NORMAL
MaxRunTime: 259200000 (3d 0:00:00)
IdleWait: 10
IdleDeadline: 60
MostRecentRun: 05/12/2007 19:05:00
NextRun: 05/19/2007 19:05:00
StartError: S_OK
ExitCode: 0
Status: SCHED_S_TASK_READY
ScheduledWorkItem Flags:
DeleteWhenDone = 0
Suspend = 0
StartOnlyIfIdle = 0
KillOnIdleEnd = 0
RestartOnIdleResume = 0
DontStartIfOnBatteries = 0
KillIfGoingOnBatteries = 0
RunOnlyIfLoggedOn = 0
SystemRequired = 0
Hidden = 0
TaskFlags: 0
1 Trigger
Trigger 0:
Type: Weekly
WeeksInterval: 1
DaysOfTheWeek: ......A
StartDate: 11/26/2006
EndDate: 00/00/0000
StartTime: 19:05
MinutesDuration: 0
MinutesInterval: 0
Flags:
HasEndDate = 0
KillAtDuration = 0
Disabled = 0
======================================================
Deckard's System Scanner v20070426.43
Run by Tom on 2007-05-17 at 19:26:45
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- HijackThis (run as Tom.exe) -------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 19:27:30, on 17/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Apps\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\winlogon.exe
C:\Apps\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\sm56hlpr.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
C:\Apps\Softex\OmniPass\scureapp.exe
C:\APPS\Powercinema\PCMService.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Hewlett-Packard\AiO\hp officejet g series\Bin\hpoavn07.exe
C:\PROGRA~1\Grisoft\AVG7\avgw.exe
C:\PROGRA~1\HEWLET~1\AiO\Shared\Bin\hpoevm07.exe
C:\WINDOWS\system32\hpoipm07.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Hewlett-Packard\AiO\Shared\bin\hpOSTS07.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
D:\Documents and Settings\Tom\Desktop\dss.exe
C:\PROGRA~1\HIJACK~1\Tom.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [OmniPass] C:\Apps\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: HPAiODevice(hp officejet g series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet g series\Bin\hpoavn07.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) -
http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://by117fd.bay117.hotmail.msn.co...s/MsnPUpld.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) -
https://h17000.www1.hp.com/ewfrf-JAV...oadManager.ocx
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: OPXPGina - C:\Apps\Softex\OmniPass\opxpgina.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
-- Files created between 2007-04-17 and 2007-05-17 -----------------------------
2007-05-13 18:17:31 0 d-------- C:\WINDOWS\system32\Kaspersky Lab
2007-05-09 16:43:21 0 d-------- D:\Deckard
2007-05-09 16:37:57 21312 --a------ C:\WINDOWS\choice.exe
2007-05-09 16:35:36 0 d-------- D:\Documents and Settings\Ed\Application Data\WinRAR
2007-05-08 20:17:01 0 d-------- D:\Documents and Settings\Administrator\Application Data\Lavasoft
2007-05-08 20:15:14 0 dr------- D:\Documents and Settings\Administrator\Desktop
2007-05-08 20:15:14 0 d--hs---- D:\Documents and Settings\Administrator\Cookies
2007-05-08 20:15:14 0 dr-h----- D:\Documents and Settings\Administrator\Application Data
2007-05-08 20:15:14 0 d-------- D:\Documents and Settings\Administrator\Application Data\You've Got Pictures Screensaver
2007-05-08 20:15:14 0 d---s---- D:\Documents and Settings\Administrator\Application Data\Microsoft
2007-05-08 20:15:14 0 d-------- D:\Documents and Settings\Administrator\Application Data\Macromedia
2007-05-08 20:15:14 0 d-------- D:\Documents and Settings\Administrator\Application Data\Identities
2007-05-08 20:15:14 0 d-------- D:\Documents and Settings\Administrator\Application Data\AOL
2007-05-08 20:15:13 0 d--h----- D:\Documents and Settings\Administrator\Templates
2007-05-08 20:15:13 0 dr------- D:\Documents and Settings\Administrator\Start Menu
2007-05-08 20:15:13 0 dr-h----- D:\Documents and Settings\Administrator\SendTo
2007-05-08 20:15:13 0 dr-h----- D:\Documents and Settings\Administrator\Recent
2007-05-08 20:15:13 0 d--h----- D:\Documents and Settings\Administrator\PrintHood
2007-05-08 20:15:13 0 d--h----- D:\Documents and Settings\Administrator\NetHood
2007-05-08 20:15:13 0 dr------- D:\Documents and Settings\Administrator\My Documents
2007-05-08 20:15:13 0 d--h----- D:\Documents and Settings\Administrator\Local Settings
2007-05-08 20:15:13 0 dr------- D:\Documents and Settings\Administrator\Favorites
2007-05-08 20:15:11 1048576 --ah----- D:\Documents and Settings\Administrator\NTUSER.DAT
2007-05-05 17:49:05 0 d-------- D:\Documents and Settings\Ed\Shared
2007-05-05 17:49:04 0 d-------- D:\Documents and Settings\Ed\Incomplete
2007-05-05 17:48:09 0 d-------- D:\Documents and Settings\Ed\Application Data\LimeWire
2007-05-05 17:47:57 0 d-------- C:\Program Files\LimeWire
-- Find3M Report ---------------------------------------------------------------
2007-05-17 19:03:09 0 d-------- D:\Documents and Settings\Tom\Application Data\AVG7
2007-05-13 15:20:45 0 d-------- C:\Program Files\Java
2007-05-09 16:28:19 0 d-------- C:\Program Files\SpywareBlaster
2007-05-09 16:27:10 0 d-------- C:\Program Files\SpywareGuard
2007-05-09 14:08:26 0 d-------- C:\Program Files\QuickTime
2007-05-09 14:04:29 0 d-------- C:\Program Files\iTunes
2007-05-09 14:03:50 0 d-------- C:\Program Files\Google
2007-05-09 14:02:31 0 d-------- C:\Program Files\Common Files\Teleca Shared
2007-05-09 10:55:45 0 d-------- C:\Program Files\MSN Messenger
2007-05-03 18:49:34 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-04-13 15:37:20 0 d-------- C:\Program Files\EA GAMES
2007-04-10 21:46:05 0 d-------- C:\Program Files\Last.fm
2007-04-09 08:30:14 0 d-------- C:\Program Files\Lavasoft
2007-04-09 08:29:32 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-04-04 19:44:01 0 d-------- C:\Program Files\Megamanager
2007-03-24 20:34:27 0 d-------- C:\Program Files\iPod
2007-03-19 21:12:57 0 d-------- D:\Documents and Settings\Tom\Application Data\Screenshot Sender
-- Registry Dump ---------------------------------------------------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{4A368E80-174F-4872-96B5-0B27DDD11DB2} C:\Program Files\SpywareGuard\dlprotect.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
{AA58ED58-01DD-4d91-8333-CF10577473F7} c:\program files\google\googletoolbar2.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"PHIME2002ASync"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /SYNC"
"PHIME2002A"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /IMEName"
"SMSERIAL"="sm56hlpr.exe"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"High Definition Audio Property Page Shortcut"="HDAShCut.exe"
"RTHDCPL"="RTHDCPL.EXE"
"RealTray"="C:\\Program Files\\Real\\RealPlayer\\RealPlay.exe SYSTEMBOOTHIDEPLAYER"
"Vade Retro Outlook Express"="\"C:\\PROGRA~1\\GOTOSO~1\\VADERE~1\\Vaderetro_oe.exe\""
"DetectorApp"="C:\\Program Files\\Sonic\\DigitalMedia LE v7\\MyDVD LE\\DetectorApp.exe"
"ISUSPM Startup"="C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\UPDATE~1\\ISUSPM.exe -startup"
"ISUSScheduler"="\"C:\\Program Files\\Common Files\\InstallShield\\UpdateService\\issch.exe\" -start"
"OmniPass"="C:\\Apps\\Softex\\OmniPass\\scureapp.exe"
"PCMService"="\"c:\\APPS\\Powercinema\\PCMService.exe\""
"IMJPMIG8.1"="\"C:\\WINDOWS\\IME\\imjp8_1\\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32\""
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgcc.exe /STARTUP"
"LogitechVideoRepair"="C:\\Program Files\\Logitech\\Video\\ISStart.exe"
"LogitechVideoTray"="C:\\Program Files\\Logitech\\Video\\LogiTray.exe"
@=""
"Sony Ericsson PC Suite"="\"C:\\Program Files\\Sony Ericsson\\Mobile2\\Application Launcher\\Application Launcher.exe\" /startoptions"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.6.0_01\\bin\\jusched.exe"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.908.8472\\GoogleToolbarNotifier.exe"
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoCDBurning"=dword:00000000
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]
"{E020EFB2-0AE9-2057-0719-06060906002c}"="\"C:\\Program Files\\Common Files\\{E020EFB2-0AE9-2057-0719-06060906002c}\\Update.exe\" mc-110-12-0001411"
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OPXPGina
HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages REG_MULTI_SZ scecli\0\0
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0
-- End of Deckard's System Scanner: finished at 2007-05-17 at 19:27:50 ---------
=======================================================
There was no 'extra.txt' report produced when i ran dss
I have not experienced any pop ups for a few days now. the system seems to be running a lot better thanks