WINHNN32.dll missing/and wont restart

dliteya · 03-02-2006, 02:44 PM

When I boot my computer, I get the following error:
Error Loading WINHHN32.dll
Cant find specified file.

When I goodle this file, the closest I come is WINHN32.dll

Where can I get this file. Thanks

OH, and for several months, I have not been able to restart my computer. (Start>Shutdown>Restart) or even when a program asked to restart, it goes black and hangs there. Someone said resources were too low or too much was going on in the background, but resources are at 85% most of the time and I dont have a lot of crap going on, if i did, i know how to get rid of it. I have run spydoctor and adaware and these two things are still happening. Any help would be appreciated. THanks

Geekgirl · 03-03-2006, 07:05 AM

Nor could I find any info on WINHHN32.dll

Males me think you removed some type of spyware/malware and this is the leftover. I also think you still have some nasty stuff going on.

Download and install Spybot S&D . Run Spybot and click on the 'Search for Updates' button. Install any updates that are available. Next click on the 'Check for Problems' button. Let it run the scan. If it finds something, check all those in RED and hit the Fix Selected Problems button. Exit Spybot. If you keep getting the DSO Exploit entries, even after you updated Windows and fixed them, then download the Spybot DSO Exploit Fix and install it over the current Spybot installation.

Also look over this link for further information
First Steps at Removing the Malware and Posting your HJT Log

dliteya · 03-04-2006, 04:25 PM

I ran S&D and it said no immediate threats were found. Also, I tried to run msconfig so i could do a selective start up and i get the following error message: Environment variables were found in the legacy files AUTOEXEC.BAT and /or CONFIG.SYS and the variables were moved to the Windows Registry.........WHAT IS THAT

Geekgirl · 03-04-2006, 04:47 PM

Read this
http://support.microsoft.com/?kbid=262786

dliteya · 03-04-2006, 10:02 PM

alrighty......i ran hijackthis (AGAIN) and i found a couple bho's and got rid of them, now my msconfig doesnt get that error message when starting up

my resources have been okay for a couple of days now and i unchecked winhh32.dll in msconfig, so it doesnt try to load anymore......now i just have the restart problem

Geekgirl · 03-05-2006, 09:04 AM

Download StartupList and post the results so I can look them over.

StartupList is a simple tool that lists all and every auto starting program on your system. You might be surprised what it finds, this is way better than Msconfig. Commonly used to troubleshoot malfunctioning systems, trojan/viral infections, new spyware/malware breed and the likes.

dliteya · 03-05-2006, 10:57 PM

i hope this is what you wanted......its really long........

StartupList report, 3/5/2006, 11:53:41 PM
StartupList version 2.00.0
Started from: C:\WINDOWS\TEMP\WZ3D2E\STARTUPLIST.EXE
Detected: Windows ME (Win9x 4.90.3000)
Logged on as 'Dedra L. Trimble' to 'AGGRAVATOR1'
* Using default options (see end of log for possible options)
==================================================

Running processes (27):

[C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACRORD32.EXE (91)]
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACE.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\AGM.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\BIB.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\COOLTYPE.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ESDUPDATE.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\JP2KLIB.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\OPP.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PDF417ENCODER.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\ACCESSIBILITY.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\ACROFORM.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\ANNOTATIONS\ANNOTS.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\DIGSIG.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\EBOOK.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\ESCRIPT.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\EWH32.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\HLS.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\IA32.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\IMAGEVIEWER\IMAGEVIEWER.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\MAKEACCESSIBLE.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\MULTIMEDIA\MULTIMEDIA.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\PAPERMETADATA.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\PDDOM.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\PICTURETASKS\PICTURETASKS.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\PPKLITE.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\PRINTME.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\REFLOW.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\SAVEASRTF.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\SEARCH.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\SEARCH5.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\SENDMAIL.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\SOAP.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\UPDATER.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\WEBLINK.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\XFA.API
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\SPPLUGINS\ADMPLUGIN.APL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\SPPLUGINS\EXPRESSVIEWS.APL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\UNICOWS.DLL
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\AVICAP32.DLL
C:\WINDOWS\SYSTEM\CABINET.DLL
C:\WINDOWS\SYSTEM\CFGMGR32.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\COMDLG32.DLL
C:\WINDOWS\SYSTEM\CRYPT32.DLL
C:\WINDOWS\SYSTEM\DCIMAN32.DLL
C:\WINDOWS\SYSTEM\DHCPCSVC.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\ICMP.DLL
C:\WINDOWS\SYSTEM\IMAGEHLP.DLL
C:\WINDOWS\SYSTEM\IMM32.DLL
C:\WINDOWS\SYSTEM\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\LZ32.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MSAFD.DLL
C:\WINDOWS\SYSTEM\MSASN1.DLL
C:\WINDOWS\SYSTEM\MSNET32.DLL
C:\WINDOWS\SYSTEM\MSPWL32.DLL
C:\WINDOWS\SYSTEM\MSVCP60.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\MSVCRT20.DLL
C:\WINDOWS\SYSTEM\MSVFW32.DLL
C:\WINDOWS\SYSTEM\MSWSOCK.DLL
C:\WINDOWS\SYSTEM\MYDOCS.DLL
C:\WINDOWS\SYSTEM\NETAPI32.DLL
C:\WINDOWS\SYSTEM\NETBIOS.DLL
C:\WINDOWS\SYSTEM\NTDLL.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\OLEDLG.DLL
C:\WINDOWS\SYSTEM\RASAPI32.DLL
C:\WINDOWS\SYSTEM\RICHED20.DLL
C:\WINDOWS\SYSTEM\RNR20.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\SECUR32.DLL
C:\WINDOWS\SYSTEM\SETUPAPI.DLL
C:\WINDOWS\SYSTEM\SHDOCVW.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\SVRAPI.DLL
C:\WINDOWS\SYSTEM\TAPI32.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WININET.DLL
C:\WINDOWS\SYSTEM\WINMM.DLL
C:\WINDOWS\SYSTEM\WINSPOOL.DRV
C:\WINDOWS\SYSTEM\WINTRUST.DLL
C:\WINDOWS\SYSTEM\WOW32.DLL
C:\WINDOWS\SYSTEM\WS2_32.DLL
C:\WINDOWS\SYSTEM\WS2HELP.DLL
C:\WINDOWS\SYSTEM\WSOCK32.DLL

[C:\PROGRAM FILES\CACHEMAN\CACHEMAN.EXE (13)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\COMDLG32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\HHCTRL.OCX
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL

[C:\PROGRAM FILES\COMMON FILES\ROXIO SHARED\PROJECT SELECTOR\PROJSELECTOR.EXE (19)]
C:\PROGRAM FILES\COMMON FILES\ROXIO SHARED\HOMEUTILS\RCSL.DLL
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\CDRAL.DLL
C:\WINDOWS\SYSTEM\CDRTC.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MFC42.DLL
C:\WINDOWS\SYSTEM\MFC42LOC.DLL
C:\WINDOWS\SYSTEM\MSVCP60.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\NETAPI32.DLL
C:\WINDOWS\SYSTEM\NETBIOS.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL

[C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE (56)]
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SDHELPER.DLL
C:\WINDOWS\SYSTEM\ACTXPRXY.DLL
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\BROWSELC.DLL
C:\WINDOWS\SYSTEM\BROWSEUI.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\COMDLG32.DLL
C:\WINDOWS\SYSTEM\CRYPT32.DLL
C:\WINDOWS\SYSTEM\DHCPCSVC.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\ICMP.DLL
C:\WINDOWS\SYSTEM\IEPEERS.DLL
C:\WINDOWS\SYSTEM\IMM32.DLL
C:\WINDOWS\SYSTEM\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM\JSCRIPT.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH8.OCX
C:\WINDOWS\SYSTEM\MLANG.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MSAFD.DLL
C:\WINDOWS\SYSTEM\MSASN1.DLL
C:\WINDOWS\SYSTEM\MSHTML.DLL
C:\WINDOWS\SYSTEM\MSHTMLED.DLL
C:\WINDOWS\SYSTEM\MSLS31.DLL
C:\WINDOWS\SYSTEM\MSNET32.DLL
C:\WINDOWS\SYSTEM\MSPWL32.DLL
C:\WINDOWS\SYSTEM\MSSHRUI.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\MSWSOCK.DLL
C:\WINDOWS\SYSTEM\NETAPI32.DLL
C:\WINDOWS\SYSTEM\NETBIOS.DLL
C:\WINDOWS\SYSTEM\NTDLL.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\OLEPRO32.DLL
C:\WINDOWS\SYSTEM\PLUGIN.OCX
C:\WINDOWS\SYSTEM\RASAPI32.DLL
C:\WINDOWS\SYSTEM\RNR20.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\SECUR32.DLL
C:\WINDOWS\SYSTEM\SHDOCLC.DLL
C:\WINDOWS\SYSTEM\SHDOCVW.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\SVRAPI.DLL
C:\WINDOWS\SYSTEM\TAPI32.DLL
C:\WINDOWS\SYSTEM\URLMON.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WININET.DLL
C:\WINDOWS\SYSTEM\WINMM.DLL
C:\WINDOWS\SYSTEM\WINSPOOL.DRV
C:\WINDOWS\SYSTEM\WS2_32.DLL
C:\WINDOWS\SYSTEM\WS2HELP.DLL
C:\WINDOWS\SYSTEM\WSOCK32.DLL

[C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE (69)]
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\GBDETECT.DLL
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\PDF.OCX
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\PLUG_INS\EWH32.API
C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SDHELPER.DLL
C:\WINDOWS\SYSTEM\ACTXPRXY.DLL
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\BROWSELC.DLL
C:\WINDOWS\SYSTEM\BROWSEUI.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\COMDLG32.DLL
C:\WINDOWS\SYSTEM\CRYPT32.DLL
C:\WINDOWS\SYSTEM\DDRAW.DLL
C:\WINDOWS\SYSTEM\DDRAWEX.DLL
C:\WINDOWS\SYSTEM\DHCPCSVC.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\ICMP.DLL
C:\WINDOWS\SYSTEM\IEPEERS.DLL
C:\WINDOWS\SYSTEM\IMAGEHLP.DLL
C:\WINDOWS\SYSTEM\IMGUTIL.DLL
C:\WINDOWS\SYSTEM\IMM32.DLL
C:\WINDOWS\SYSTEM\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM\JSCRIPT.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\KEYLIMIT.DLL
C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH8.OCX
C:\WINDOWS\SYSTEM\MFC42.DLL
C:\WINDOWS\SYSTEM\MFC42LOC.DLL
C:\WINDOWS\SYSTEM\MLANG.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MSAFD.DLL
C:\WINDOWS\SYSTEM\MSASN1.DLL
C:\WINDOWS\SYSTEM\MSHTML.DLL
C:\WINDOWS\SYSTEM\MSHTMLED.DLL
C:\WINDOWS\SYSTEM\MSLS31.DLL
C:\WINDOWS\SYSTEM\MSNET32.DLL
C:\WINDOWS\SYSTEM\MSPWL32.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\MSWSOCK.DLL
C:\WINDOWS\SYSTEM\NETAPI32.DLL
C:\WINDOWS\SYSTEM\NETBIOS.DLL
C:\WINDOWS\SYSTEM\NTDLL.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\OLEPRO32.DLL
C:\WINDOWS\SYSTEM\PLUGIN.OCX
C:\WINDOWS\SYSTEM\RASAPI32.DLL
C:\WINDOWS\SYSTEM\RNR20.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\RSAENH.DLL
C:\WINDOWS\SYSTEM\SCHANNEL.DLL
C:\WINDOWS\SYSTEM\SECUR32.DLL
C:\WINDOWS\SYSTEM\SHDOCLC.DLL
C:\WINDOWS\SYSTEM\SHDOCVW.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\SVRAPI.DLL
C:\WINDOWS\SYSTEM\TAPI32.DLL
C:\WINDOWS\SYSTEM\URLMON.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VBSCRIPT.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WININET.DLL
C:\WINDOWS\SYSTEM\WINMM.DLL
C:\WINDOWS\SYSTEM\WINSPOOL.DRV
C:\WINDOWS\SYSTEM\WINTRUST.DLL
C:\WINDOWS\SYSTEM\WS2_32.DLL
C:\WINDOWS\SYSTEM\WS2HELP.DLL
C:\WINDOWS\SYSTEM\WSOCK32.DLL

[C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\AUDIOCENTRAL\PLAYLIST.EXE (14)]
C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\AUDIOCENTRAL\PLAYLISTPS.DLL
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSVCP60.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\MSXML3.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\USER32.DLL

[C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\AUDIOCENTRAL\RXMON.EXE (39)]
C:\PROGRAM FILES\COMMON FILES\ROXIO SHARED\CDENGINE\ACMWRAPPERV2.DLL
C:\PROGRAM FILES\COMMON FILES\ROXIO SHARED\CDENGINE\CDENGINE.DLL
C:\PROGRAM FILES\COMMON FILES\ROXIO SHARED\CDENGINE\DRIVERSV2.DLL
C:\PROGRAM FILES\COMMON FILES\ROXIO SHARED\CDENGINE\TRKWRITE.DLL
C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\AUDIOCENTRAL\MEDIADBPS.DLL
C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\AUDIOCENTRAL\PLAYLISTPS.DLL
C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\AUDIOCENTRAL\RCSL.DLL
C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\AUDIOCENTRAL\RXACCD.DLL
C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\AUDIOCENTRAL\RXAUDIOCODEC.DLL
C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\AUDIOCENTRAL\RXMONPS.DLL
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\ATL.DLL
C:\WINDOWS\SYSTEM\CDRAL.DLL
C:\WINDOWS\SYSTEM\CDRTC.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\COMDLG32.DLL
C:\WINDOWS\SYSTEM\CRYPT32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\IMAGEHLP.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MFC42.DLL
C:\WINDOWS\SYSTEM\MFC42LOC.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MSACM32.DLL
C:\WINDOWS\SYSTEM\MSASN1.DLL
C:\WINDOWS\SYSTEM\MSVCIRT.DLL
C:\WINDOWS\SYSTEM\MSVCP60.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\OLEPRO32.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHFOLDER.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\WININET.DLL
C:\WINDOWS\SYSTEM\WINMM.DLL
C:\WINDOWS\SYSTEM\WINTRUST.DLL

[C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\DRAGTODISC\DRGTODSC.EXE (21)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\CDRAL.DLL
C:\WINDOWS\SYSTEM\CDRTC.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\COMDLG32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\LINKINFO.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MSSHRUI.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\MSVCRT20.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\OLEDLG.DLL
C:\WINDOWS\SYSTEM\OLEPRO32.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHFOLDER.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\WINSPOOL.DRV

[C:\PROGRAM FILES\WINZIP\WINZIP32.EXE (38)]
C:\PROGRAM FILES\WINZIP\WZ32.DLL
C:\PROGRAM FILES\WINZIP\WZCAB3.DLL
C:\PROGRAM FILES\WINZIP\WZCKTREE.DLL
C:\PROGRAM FILES\WINZIP\WZEAY32.DLL
C:\PROGRAM FILES\WINZIP\WZVINFO.DLL
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\COMDLG32.DLL
C:\WINDOWS\SYSTEM\CRYPT32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MSASN1.DLL
C:\WINDOWS\SYSTEM\MSI.DLL
C:\WINDOWS\SYSTEM\MSNET32.DLL
C:\WINDOWS\SYSTEM\MSPWL32.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\MSWSOCK.DLL
C:\WINDOWS\SYSTEM\MYDOCS.DLL
C:\WINDOWS\SYSTEM\NETAPI32.DLL
C:\WINDOWS\SYSTEM\NETBIOS.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\RASAPI32.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\RSAENH.DLL
C:\WINDOWS\SYSTEM\SECUR32.DLL
C:\WINDOWS\SYSTEM\SHDOCVW.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\SVRAPI.DLL
C:\WINDOWS\SYSTEM\TAPI32.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WININET.DLL
C:\WINDOWS\SYSTEM\WS2_32.DLL
C:\WINDOWS\SYSTEM\WS2HELP.DLL
C:\WINDOWS\SYSTEM\WSOCK32.DLL

[C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE (11)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\HHCTRL.OCX
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\USER32.DLL

[C:\WINDOWS\EXPLORER.EXE (71)]
C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\SDHELPER.DLL
C:\PROGRAM FILES\WINZIP\WZSHLSTB.DLL
C:\WINDOWS\SYSTEM\ACTXPRXY.DLL
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\AUHOOK.DLL
C:\WINDOWS\SYSTEM\AVIFIL32.DLL
C:\WINDOWS\SYSTEM\BROWSELC.DLL
C:\WINDOWS\SYSTEM\BROWSEUI.DLL
C:\WINDOWS\SYSTEM\CABINET.DLL
C:\WINDOWS\SYSTEM\CFGMGR32.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\COMDLG32.DLL
C:\WINDOWS\SYSTEM\CRTDLL.DLL
C:\WINDOWS\SYSTEM\CRYPT32.DLL
C:\WINDOWS\SYSTEM\DCIMAN32.DLL
C:\WINDOWS\SYSTEM\DHCPCSVC.DLL
C:\WINDOWS\SYSTEM\DOCPROP2.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\ICMP.DLL
C:\WINDOWS\SYSTEM\IMAGEHLP.DLL
C:\WINDOWS\SYSTEM\IMGUTIL.DLL
C:\WINDOWS\SYSTEM\IMM32.DLL
C:\WINDOWS\SYSTEM\IPHLPAPI.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\LINKINFO.DLL
C:\WINDOWS\SYSTEM\LZ32.DLL
C:\WINDOWS\SYSTEM\MLANG.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MSACM32.DLL
C:\WINDOWS\SYSTEM\MSAFD.DLL
C:\WINDOWS\SYSTEM\MSASN1.DLL
C:\WINDOWS\SYSTEM\MSHTML.DLL
C:\WINDOWS\SYSTEM\MSI.DLL
C:\WINDOWS\SYSTEM\MSLS31.DLL
C:\WINDOWS\SYSTEM\MSNET32.DLL
C:\WINDOWS\SYSTEM\MSPWL32.DLL
C:\WINDOWS\SYSTEM\MSSHRUI.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\MSVFW32.DLL
C:\WINDOWS\SYSTEM\MSWSOCK.DLL
C:\WINDOWS\SYSTEM\MYDOCS.DLL
C:\WINDOWS\SYSTEM\NETAPI32.DLL
C:\WINDOWS\SYSTEM\NETBIOS.DLL
C:\WINDOWS\SYSTEM\NTDLL.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\OLEPRO32.DLL
C:\WINDOWS\SYSTEM\RASAPI32.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\SECUR32.DLL
C:\WINDOWS\SYSTEM\SETUPAPI.DLL
C:\WINDOWS\SYSTEM\SHDOCLC.DLL
C:\WINDOWS\SYSTEM\SHDOCVW.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\SVRAPI.DLL
C:\WINDOWS\SYSTEM\TAPI32.DLL
C:\WINDOWS\SYSTEM\URLMON.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WEBCHECK.DLL
C:\WINDOWS\SYSTEM\WEBVW.DLL
C:\WINDOWS\SYSTEM\WININET.DLL
C:\WINDOWS\SYSTEM\WINMM.DLL
C:\WINDOWS\SYSTEM\WINSPOOL.DRV
C:\WINDOWS\SYSTEM\WINTRUST.DLL
C:\WINDOWS\SYSTEM\WOW32.DLL
C:\WINDOWS\SYSTEM\WS2_32.DLL
C:\WINDOWS\SYSTEM\WS2HELP.DLL
C:\WINDOWS\SYSTEM\WSOCK32.DLL

[C:\WINDOWS\STARTER.EXE (10)]
C:\WINDOWS\MIXRES32.DLL
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\WINMM.DLL

[C:\WINDOWS\SYSTEM\DDHELP.EXE (12)]
C:\WINDOWS\SYSTEM\3DFX32V3.DLL
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\DDRAW.DLL
C:\WINDOWS\SYSTEM\DSOUND.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\NTDLL.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WINMM.DLL

[C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE (1)]
C:\WINDOWS\SYSTEM\KERNEL32.DLL

[C:\WINDOWS\SYSTEM\KERNEL32.DLL (3)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\USER32.DLL

[C:\WINDOWS\SYSTEM\mmtask.tsk (1)]
C:\WINDOWS\SYSTEM\KERNEL32.DLL

[C:\WINDOWS\SYSTEM\MPREXE.EXE (9)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MPRSERV.DLL
C:\WINDOWS\SYSTEM\MSNET32.DLL
C:\WINDOWS\SYSTEM\MSNP32.DLL
C:\WINDOWS\SYSTEM\MSPWL32.DLL
C:\WINDOWS\SYSTEM\USER32.DLL

[C:\WINDOWS\SYSTEM\MSGSRV32.EXE (5)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\USER32.DLL

[C:\WINDOWS\SYSTEM\MSTASK.EXE (10)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSIDLE.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\USER32.DLL

[C:\WINDOWS\SYSTEM\PSTORES.EXE (15)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\CRYPT32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\IMAGEHLP.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MSASN1.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\PSBASE.DLL
C:\WINDOWS\SYSTEM\PSTORERC.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WINTRUST.DLL

[C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE (23)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\ATRACE.DLL
C:\WINDOWS\SYSTEM\CABINET.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\CRYPT32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\IMAGEHLP.DLL
C:\WINDOWS\SYSTEM\IMM32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSASN1.DLL
C:\WINDOWS\SYSTEM\MSIDLE.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\RSAENH.DLL
C:\WINDOWS\SYSTEM\SFPDLL.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\SMGR.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WINTRUST.DLL

[C:\WINDOWS\SYSTEM\SPOOL32.EXE (23)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\CRYPT32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\HPZL9X14.DLL
C:\WINDOWS\SYSTEM\IMAGEHLP.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MSASN1.DLL
C:\WINDOWS\SYSTEM\MSNET32.DLL
C:\WINDOWS\SYSTEM\MSPP32.DLL
C:\WINDOWS\SYSTEM\MSSHRUI.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\MSVCRT40.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\SPOOLSS.DLL
C:\WINDOWS\SYSTEM\SVRAPI.DLL
C:\WINDOWS\SYSTEM\USBMON.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\WINTRUST.DLL

[C:\WINDOWS\SYSTEM\SYSTRAY.EXE (28)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\BATMETER.DLL
C:\WINDOWS\SYSTEM\CABINET.DLL
C:\WINDOWS\SYSTEM\CFGMGR32.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\COMDLG32.DLL
C:\WINDOWS\SYSTEM\CRYPT32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\IMAGEHLP.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\LZ32.DLL
C:\WINDOWS\SYSTEM\MPR.DLL
C:\WINDOWS\SYSTEM\MSASN1.DLL
C:\WINDOWS\SYSTEM\MSI.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\NTDLL.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\POWRPROF.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\SETUPAPI.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WINMM.DLL
C:\WINDOWS\SYSTEM\WINSPOOL.DRV
C:\WINDOWS\SYSTEM\WINTRUST.DLL
C:\WINDOWS\SYSTEM\WMI.DLL

[C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE (14)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WBEM\FASTPROX.DLL
C:\WINDOWS\SYSTEM\WBEM\WBEMCOMN.DLL
C:\WINDOWS\SYSTEM\WBEM\WBEMCORE.DLL
C:\WINDOWS\SYSTEM\WBEM\WBEMESS.DLL
C:\WINDOWS\SYSTEM\WBEM\WBEMSVC.DLL

[C:\WINDOWS\SYSTEM\WMIEXE.EXE (7)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\WMICORE.DLL

[C:\WINDOWS\TASKMON.EXE (4)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\USER32.DLL

[C:\WINDOWS\TEMP\WZ3D2E\STARTUPLIST.EXE (21)]
C:\WINDOWS\SYSTEM\ADVAPI32.DLL
C:\WINDOWS\SYSTEM\ASYCFILT.DLL
C:\WINDOWS\SYSTEM\COMCTL32.DLL
C:\WINDOWS\SYSTEM\COMDLG32.DLL
C:\WINDOWS\SYSTEM\GDI32.DLL
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSCOMCTL.OCX
C:\WINDOWS\SYSTEM\MSVBVM60.DLL
C:\WINDOWS\SYSTEM\MSVCRT.DLL
C:\WINDOWS\SYSTEM\OLE32.DLL
C:\WINDOWS\SYSTEM\OLEAUT32.DLL
C:\WINDOWS\SYSTEM\RPCRT4.DLL
C:\WINDOWS\SYSTEM\SHELL32.DLL
C:\WINDOWS\SYSTEM\SHLWAPI.DLL
C:\WINDOWS\SYSTEM\USER32.DLL
C:\WINDOWS\SYSTEM\VERSION.DLL
C:\WINDOWS\SYSTEM\WBEM\FASTPROX.DLL
C:\WINDOWS\SYSTEM\WBEM\WBEMCOMN.DLL
C:\WINDOWS\SYSTEM\WBEM\WBEMDISP.DLL
C:\WINDOWS\SYSTEM\WBEM\WBEMPROX.DLL
C:\WINDOWS\SYSTEM\WBEM\WBEMSVC.DLL

--------------------

Autostart folders:

[Startup (2)]
Microsoft Works Calendar Reminders.lnk
WinZip Quick Pick.lnk

[IOSUBSYS folder (32)]
ESDI_506.PDR
HSFLOP.PDR
RMM.PDR
SCSIPORT.PDR
APIX.VXD
ATAPCHNG.VXD
CDFS.VXD
CDTSD.VXD
CDVSD.VXD
DISKTSD.VXD
DISKVSD.VXD
DRVSPACX.VXD
NECATAPI.VXD
SCSI1HLP.VXD
TORISAN3.VXD
VOLTRACK.VXD
SMARTVSD.VXD
BIGMEM.DRV
ENSQIO.VXD
amdeide.mpd
amdidepm.vxd
pxhelper.vxd
CDRALVSD.VXD
cdr4vsd.vxd
Cdudfrw.vxd
Acbhlpr.vxd
UdfReadr.vxd
Cdudf.vxd
Cdrpwd.vxd
NTMAPHLP.PDR
USBMPHLP.PDR
DVDVRRdr.vxd

[VMM32 folder (3)]
IFSMGR.VXD
MRCI2.VXD
QEMMFIX.VXD

--------------------

Task Scheduler jobs (2):

PCHealth Scheduler for Data Collection.job
Tune-up Application Start.job

--------------------

Ini file values:

[system.ini]
shell = Explorer.exe
drivers = mmsystem.dll power.drv
device = *dynapage
device = *vcd
device = *vpd
device = *int13
mouse = *vmouse, msmouse.vxd
display = *vdd,*vflatd
ebios = *ebios

--------------------

Autostarting batch files:

[winstart.bat]
@C:\WINDOWS\tmpcpyis.bat

[dosstart.bat]
C:\SBPCI\APINIT

[autoexec.bat]
SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND;C:\PROGRA~1\COMMON~1\ROXIOS~1\DLLSHA~1;C:\PROGRA~1\COMMON~1\ROXIOS~1\DLLSHA~1
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP
SET BLASTER=A220 I7 D1 T2
SET SNDSCAPE=C:\WINDOWS
SET windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS
SET COMSPEC=C:\WINDOWS\COMMAND.COM

--------------------

On-reboot actions:

[Wininit.bak]
[rename]
NUL=C:\WINDOWS\Cookies\index.dat

--------------------

Shell commands:

.bat - MS-DOS Batch File - "%1" %*
.com - MS-DOS Application - "%1" %*
.exe - Application - "%1" %*
.hta - HTML Application - C:\WINDOWS\SYSTEM\MSHTA.EXE "%1" %*
.js - JScript Script File - C:\WINDOWS\WScript.exe "%1" %*
.jse - JScript Script File - C:\WINDOWS\WScript.exe "%1" %*
.pif - Performs text-based (command-line) functions. - "%1" %*
.scr - Screen Saver - "%1" /S
.txt - Text Document - C:\WINDOWS\NOTEPAD.EXE %1
.vbe - VBScript Script File - C:\WINDOWS\WScript.exe "%1" %*
.vbs - VBScript Script File - C:\WINDOWS\WScript.exe "%1" %*
.wsf - Windows Script File - C:\WINDOWS\WScript.exe "%1" %*
.wsh - Windows Script Host Settings File - C:\WINDOWS\WScript.exe "%1" %*

--------------------

Print monitors (3):

usbmon - usbmon.dll
usbmon.dll - usbmon.dll
HPZL9X14 - hpzl9x14.dll

--------------------

Policies:

[This user]
* Primary policies *
- Software\Policies\Microsoft\Office\9.0\ClipGallery (1)
ClipsOnlineURL = http://www.microsoft.com/isapi/redir.dll?prd=clipgallery&plcid=0x%1!04x!&pver=5.0&o1=ClipGallery

[All users]
* Primary policies *
- (1)
FullLogging = No

* Alternate policies *
- Software\Microsoft\Windows\CurrentVersion\policies\WinOldApp (1)
NoRealMode = 1

- Software\Microsoft\Windows\CurrentVersion\policies\NonEnum (3)
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} = dword: 1
{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF} = dword: 1073741857
{0DF44EAA-FF21-4412-828E-260A8728E7F1} = dword: 32

- (1)
FullLogging = No

--------------------

Browser Helper Objects (2):

(no name) = {53707962-6F74-2D53-2644-206D7942484F} = C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
AcroIEHlprObj Class = {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL

--------------------

ActiveX objects (62):

(no name) - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
(no name) - {CA0A4247-44BE-11d1-A005-00805F8ABE06} - RunDLL setupx.dll,InstallHinfSection PowerCfg.user 0 powercfg.inf
(no name) - >PerUser_MSN_Clean - C:\WINDOWS\msnmgsr1.exe
(no name) - AppletsPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection AppletsPerUser 64 C:\WINDOWS\INF\applets.inf
(no name) - FontsPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection FontsPerUser 64 C:\WINDOWS\INF\fonts.inf
(no name) - MmoptRegisterPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection MmoptRegisterPerUser 64 C:\WINDOWS\INF\mmopt.inf
(no name) - MotownAvivideoPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection MotownAvivideoPerUser 64 C:\WINDOWS\INF\motown.inf
(no name) - MotownMmsysPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection MotownMmsysPerUser 64 C:\WINDOWS\INF\motown.inf
(no name) - MotownMPlayPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection MotownMPlayPerUser 64 C:\WINDOWS\INF\motown.inf
(no name) - MotownRecPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection MotownRecPerUser 64 C:\WINDOWS\INF\motown.inf
(no name) - NetservrPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection NetservrPerUser 64 C:\WINDOWS\INF\netservr.inf
(no name) - OlsAolPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection OlsAolPerUser 64 C:\WINDOWS\INF\ols.inf
(no name) - OlsAttPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection OlsAttPerUser 64 C:\WINDOWS\INF\ols.inf
(no name) - OlsCompuservePerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection OlsCompuservePerUserRemove 64 C:\WINDOWS\INF\ols.inf
(no name) - OlsEarthlinkPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection OlsEarthlinkPerUser 64 C:\WINDOWS\INF\ols.inf
(no name) - OlsMsnPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection OlsMsnPerUser 64 C:\WINDOWS\INF\ols.inf
(no name) - OlsPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection OlsPerUser 64 C:\WINDOWS\INF\ols.inf
(no name) - OlsProdigyPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection OlsProdigyPerUser 64 C:\WINDOWS\INF\ols.inf
(no name) - PerUser_Base - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_Base 64 C:\WINDOWS\INF\msmail.inf
(no name) - PerUser_Calc_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_Calc_Inis 64 C:\WINDOWS\INF\applets.inf
(no name) - PerUser_CDPlayer_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_CDPlayer_Inis 64 C:\WINDOWS\INF\mmopt.inf
(no name) - PerUser_CVT_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_CVT_Inis 64 C:\WINDOWS\INF\applets1.inf
(no name) - PerUser_DCC_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_DCC_Inis 64 C:\WINDOWS\INF\rna.inf
(no name) - PerUser_Dialer_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_Dialer_Inis 64 C:\WINDOWS\INF\appletpp.inf
(no name) - PerUser_dxxspace_Links - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_dxxspace_Links 64 C:\WINDOWS\INF\applets1.inf
(no name) - PerUser_HNW_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_HNW_Inis 64 C:\WINDOWS\INF\ICS.inf
(no name) - PerUser_ICW_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_ICW_Inis 0 C:\WINDOWS\INF\icw97.inf
(no name) - PerUser_LinkBar_URLs - C:\WINDOWS\COMMAND\sulfnbk.exe /L
(no name) - PerUser_moviemaker - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_moviemaker 64 C:\WINDOWS\INF\moviemk.inf
(no name) - PerUser_Msinfo - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_Msinfo 64 C:\WINDOWS\INF\msinfo.inf
(no name) - PerUser_Msinfo2 - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_Msinfo2 64 C:\WINDOWS\INF\msinfo.inf
(no name) - PerUser_MSWordPad_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_MSWordPad_Inis 64 C:\WINDOWS\INF\wordpad.inf
(no name) - PerUser_Paint_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_Paint_Inis 64 C:\WINDOWS\INF\applets.inf
(no name) - PerUser_PBGame_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_PBGame_Inis 64 C:\WINDOWS\INF\games.inf
(no name) - PerUser_PCHealth - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_PCHealth 64 C:\WINDOWS\INF\pchealth.inf
(no name) - PerUser_RNA_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_RNA_Inis 64 C:\WINDOWS\INF\rna.inf
(no name) - PerUser_Vol - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_Vol 64 C:\WINDOWS\INF\motown.inf
(no name) - PerUser_winapps_Links - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_winapps_Links 64 C:\WINDOWS\INF\subase.inf
(no name) - PerUser_winbase_Links - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_winbase_Links 64 C:\WINDOWS\INF\subase.inf
(no name) - PerUser_Wingames_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_Wingames_Inis 64 C:\WINDOWS\INF\games.inf
(no name) - PerUser_Winpopup_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_Winpopup_Inis_remove 64 C:\WINDOWS\INF\winpopup.inf
(no name) - PerUser_ZoneGame_Inis - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUser_ZoneGame_Inis 64 C:\WINDOWS\INF\games.inf
(no name) - PerUserOldLinks - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection PerUserOldLinks 64 C:\WINDOWS\INF\appletpp.inf
(no name) - SamplerPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection SamplerPerUser 64 C:\WINDOWS\INF\sampler.inf
(no name) - SetupcPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection SetupcPerUser 64 C:\WINDOWS\INF\setupc.inf
(no name) - Shell2PerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection Shell2PerUser 64 C:\WINDOWS\INF\shell2.inf
(no name) - ShellPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection ShellPerUser 64 C:\WINDOWS\INF\shell.inf
(no name) - TapiPerUser - rundll.exe C:\WINDOWS\SYSTEM\setupx.dll,InstallHinfSection TapiPerUser 64 C:\WINDOWS\INF\tapi.inf
BASEIE40_Win - {89820200-ECBD-11cf-8B85-00AA005B4383} - rundll32.exe advpack.dll,UserInstStubWrapper {89820200-ECBD-11cf-8B85-00AA005B4383}
BRANDING.CAB - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
DOTNETFRAMEWORKS - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\SYSTEM\Rundll32.exe C:\WINDOWS\SYSTEM\mscories.dll,Install
ICW_Win - {5A8D6EE0-3E18-11D0-821E-444553540000} - rundll32.exe advpack.dll,LaunchINFSectionEx C:\WINDOWS\INF\icw.inf,PerUserStub,,36
IE4Shell_Win - {89820200-ECBD-11cf-8B85-00AA005B4395} - regsvr32.exe /s /n /i:U shell32.dll
MailNews - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - rundll32.exe advpack.dll,UserInstStubWrapper {44BBA840-CC51-11CF-AAFA-00AA00B6015C}
Messenger - {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.Install.PerUser
Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub
netmeeting - {44BBA842-CC51-11CF-AAFA-00AA00B6015C} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.W95
WAB - {7790769C-0471-11d2-AF11-00C04FA35D02} - rundll32.exe advpack.dll,UserInstStubWrapper {7790769C-0471-11d2-AF11-00C04FA35D02}
WebFolders - {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\webfdr16.inf,PerUserStub.Install,1
webpublish - {44BBA851-CC51-11CF-AAFA-00AA00B6015C} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wpie5x86.inf,PerUserStub
Windows CRL Update - {9EF0045A-CDD9-438e-95E6-02B9AFEC8E11} - C:\WINDOWS\SYSTEM\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl
Windows Media Player - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\mplayer2.inf,PerUserStub

--------------------

Internet Explorer toolbars:

[This user]
* ShellBrowser (1) *
&Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL

* WebBrowser (3) *
&Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
&Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
(no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - (no file)

--------------------

Internet Explorer buttons/tools (1):

Spyware Doctor - {A1EDC4A1-940F-48E0-8DFD-E38F1D501021} - C:\PROGRA~1\SPYWAR~1\TOOLS\IESDPB.DLL

--------------------

Internet Explorer Bands (8):

Explorer Band - {EFA24E64-B078-11d0-89E4-00C04FC9E26E} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Search Band - {30D02401-6A81-11d0-8274-00C04FD5AE38} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Favorites Band - {EFA24E61-B078-11d0-89E4-00C04FC9E26E} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
History Band - {EFA24E62-B078-11d0-89E4-00C04FC9E26E} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
&Tip of the Day - {4D5C8C25-D075-11d0-B416-00C04FB90376} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Media Band - {32683183-48a0-441b-a342-7c2a440a9478} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
File and Folders Search ActiveX Control - {C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} - C:\WINDOWS\SYSTEM\SHELL32.DLL
&Discuss - {BDEADE7F-C265-11D0-BCED-00A0C90AB50F} - shdocvw.dll

--------------------

Downloaded Program Files (15):

Microsoft XML Parser for Java - Microsoft XML Parser for Java - (no file) - file://C:\WINDOWS\Java\classes\xmldso4.cab
DirectAnimation Java Classes - DirectAnimation Java Classes - (no file) - file://C:\WINDOWS\SYSTEM\dajava.cab
Internet Explorer Classes for Java - Internet Explorer Classes for Java - (no file) - file://C:\WINDOWS\SYSTEM\iejava.cab
(no name) - {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - (no file) - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
(no name) - {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - (no file) - http://download.mcafee.com/molbin/sh...26/mcgdmgr.cab
Update Class - {9F1C11AA-197B-4942-BA54-47A8489BB47F} - C:\WINDOWS\SYSTEM\IUCTL.DLL - http://v4.windowsupdate.microsoft.co...687.9537615741
Shockwave Flash Object - {D27CDB6E-AE6D-11CF-96B8-444553540000} - C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH8.OCX - http://fpdownload.macromedia.com/pub...sh/swflash.cab
shizmoo Class - {09C6CAC0-936E-40A0-BC26-707480103DC3} - C:\PROGRAM FILES\SHIZMOO\UPROAR_WEBGAMES\FLIPSIDE_WEBMOO18.DLL - http://www.uproar.com/applets/active...side_web18.cab
ZoneIntro Class - {B8BE5E93-A60C-4D26-A2DC-220313175592} - C:\WINDOWS\DOWNLOADED PROGRAM FILES\ZINTRO.OCX - http://cdn2.zone.msn.com/binFramewor...o.cab34246.cab
HeartbeatCtl Class - {E5D419D6-A846-4514-9FAD-97E826C84822} - C:\WINDOWS\DOWNLO~1\HRTBEAT.OCX - http://fdl.msn.com/zone/datafiles/heartbeat.cab
Toontown Installer ActiveX Control - {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} - C:\WINDOWS\DOWNLOADED PROGRAM FILES\TTINST.DLL - http://a.download.toontown.com/sv1.0.18.37/ttinst.cab
Snapfish Activia - {406B5949-7190-4245-91A9-30A17DE16AD0} - C:\WINDOWS\DOWNLOADED PROGRAM FILES\SNAPFISHACTIVIA1000.OCX - http://www.clarkcolor.com/ClarkActivia.cab
QDiagHUpdateObj Class - {EB387D2F-E27B-4D36-979E-847D1036C65D} - C:\WINDOWS\SYSTEM\QDIAGH.OCX - http://h30043.www3.hp.com/hpdj/en/check/qdiagh.cab?326
MALPlaybackCtrl Class - {341FF14B-00CB-49F5-A427-A164DF1D5E1F} - C:\WINDOWS\DOWNLOADED PROGRAM FILES\SMALPLAYBACKCTRL.OCX - http://musicstore.connect.com/XSL/mb...LStreaming.cab
(no name) - {74C861A1-D548-4916-BC8A-FDE92EDFF62C} - (no file) - http://mediaplayer.walmart.com/installer/install.cab

--------------------

URL search hooks:

[This user (1)]
Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL

--------------------

Explorer clones:

C:\WINDOWS\explorer.exe

--------------------

ContextMenuHandlers:

[* (3)]
CMCUTIL = {19741013-C829-11D1-8233-0020AF3E97A9} = C:\PROGRA~1\COOLMP~1\CMCUTIL.DLL
Open With = {09799AFB-AD67-11d1-ABCD-00C04FC30936} = C:\WINDOWS\SYSTEM\SHELL32.DLL
WinZip = {E0D79304-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\WZSHLSTB.DLL

[Drive (3)]
Disk Copy Extension = {59099400-57FF-11CE-BD94-0020AF85B590} = C:\WINDOWS\SYSTEM\diskcopy.dll
Roxio DragToDisc Shell Extension = {5E44E225-A408-11CF-B581-008029601108} = C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\DRAGTODISC\SHELLEX.DLL
SharingMenu = {6D78EC20-5AA6-101B-8681-366FBD64CEB9} = msshrui.dll

[Folder (1)]
WinZip = {E0D79304-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\WZSHLSTB.DLL

[Directory (2)]
SharingMenu = {6D78EC20-5AA6-101B-8681-366FBD64CEB9} = msshrui.dll
WinZip = {E0D79304-84BE-11CE-9641-444553540000} = C:\PROGRA~1\WINZIP\WZSHLSTB.DLL

[Directory\Background (1)]
New = {D969A300-E7FF-11d0-A93B-00A0C90F2719} = C:\WINDOWS\SYSTEM\SHELL32.DLL

[ChannelShortcut (1)]
Channel Menu Handler Object = {f3da0dc0-9cc8-11d0-a599-00c04fd64437} = C:\WINDOWS\SYSTEM\CDFVIEW.DLL

[InternetShortcut (1)]
Internet Shortcut = {FBF23B40-E3F0-101B-8488-00AA003E56F8} = shdocvw.dll

[AllFileSystemObjects (1)]
Send To = {7BA4C740-9E81-11CF-99D3-00AA004AE837} = C:\WINDOWS\SYSTEM\SHELL32.DLL

--------------------

ColumnHandlers (5):

(no name) - {0D2E74C4-3C34-11d2-A27E-00C04FC30871} - C:\WINDOWS\SYSTEM\SHELL32.DLL
(no name) - {24F14F01-7B1C-11d1-838f-0000F80461CF} - C:\WINDOWS\SYSTEM\SHELL32.DLL
(no name) - {24F14F02-7B1C-11d1-838f-0000F80461CF} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Image Property Extractor - {7ab770c7-0e23-4d7a-8aa2-19bfad479829} - C:\WINDOWS\SYSTEM\SHELL32.DLL
ShAVColumnProvider class - {884EA37B-37C0-11d2-BE3F-00A0C9A83DA1} - C:\WINDOWS\SYSTEM\DOCPROP2.DLL

--------------------

ShellExecuteHooks (1):

URL Exec Hook = {AEB6717E-7E19-11d0-97EE-00C04FD91972} = shell32.dll

--------------------

Approved Shell Extensions:

[All users (124)]
- {53C74826-AB99-4d33-ACA4-3117F51D3788} - C:\WINDOWS\SYSTEM\SHELL32.DLL
- {FEF10FA2-355E-4e06-9381-9B24D7F7CC88} - C:\WINDOWS\SYSTEM\SHELL32.DLL
&Address - {01E04581-4EEE-11d0-BFE9-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
&Links - {0E5CBF21-D15F-11d0-8301-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
.CAB file viewer - {0CD7A5C0-9F37-11CE-AE65-08002B2E1262} - cabview.dll
Accessible - {7e653215-fa25-46bd-a339-34a2790f3cb7} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
ActiveDesktop - {75048700-EF1F-11D0-9888-006097DEACF9} - C:\WINDOWS\SYSTEM\SHELL32.DLL
ActiveX Cache Folder - {88C6C381-2E85-11D0-94DE-444553540000} - C:\WINDOWS\SYSTEM\OCCACHE.DLL
Address Bar Parser - {E0E11A09-5CB8-4B6C-8332-E00720A168F2} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Address EditBox - {A08C11D2-A228-11d0-825B-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Augmented Shell Folder - {91EA3F8B-C99B-11d0-9815-00C04FD91972} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Augmented Shell Folder 2 - {6413BA2C-B461-11d1-A18A-080036B11A03} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
BandProxy - {F61FFEC1-754F-11d0-80CA-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Briefcase Folder - {86747AC0-42A0-1069-A2E6-08002B30309D} - C:\WINDOWS\SYSTEM\SHELL32.DLL
CDF Extension Copy Hook - {67EA19A0-CCEF-11d0-8024-00C04FD75D13} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Channel File - {f39a0dc0-9cc8-11d0-a599-00c04fd64433} - C:\WINDOWS\SYSTEM\CDFVIEW.DLL
Channel Handler Object - {f3ba0dc0-9cc8-11d0-a599-00c04fd64435} - C:\WINDOWS\SYSTEM\CDFVIEW.DLL
Channel Menu - {f3da0dc0-9cc8-11d0-a599-00c04fd64437} - C:\WINDOWS\SYSTEM\CDFVIEW.DLL
Channel Properties - {f3ea0dc0-9cc8-11d0-a599-00c04fd64438} - C:\WINDOWS\SYSTEM\CDFVIEW.DLL
Channel Shortcut - {f3aa0dc0-9cc8-11d0-a599-00c04fd64434} - C:\WINDOWS\SYSTEM\CDFVIEW.DLL
CmdFileIcon - {57651662-CE3E-11D0-8D77-00C04FC99D61} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Code Download Agent - {7D559C10-9FE9-11d0-93F7-00AA0059CE02} - C:\WINDOWS\SYSTEM\WEBCHECK.DLL
ConnectionAgent - {E6CC6978-6B6E-11D0-BECA-00C04FD940BE} - C:\WINDOWS\SYSTEM\WEBCHECK.DLL
Crypto PKO Extension - {7444C717-39BF-11D1-8CD9-00C04FC29D45} - C:\WINDOWS\SYSTEM\CRYPTEXT.DLL
Crypto Sign Extension - {7444C719-39BF-11D1-8CD9-00C04FC29D45} - C:\WINDOWS\SYSTEM\CRYPTEXT.DLL
Custom MRU AutoCompleted List - {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Default Image Extrator for Properties - {8DE56A0D-E58B-41FE-9F80-3563CDCB2C22} - C:\WINDOWS\SYSTEM\THUMBVW.DLL
Dial-Up Networking - {992CFFA0-F557-101A-88EC-00DD010CCC48} - rnaui.dll
Display Control Panel HTML Extensions - {3FC0B520-68A9-11D0-8D77-00C04FD70822} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Download Status - {22BF0C20-6DA7-11D0-B373-00A0C9034938} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Explorer Band - {EFA24E64-B078-11d0-89E4-00C04FC9E26E} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Favorites Band - {EFA24E61-B078-11d0-89E4-00C04FC9E26E} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
File Property Page Extension - {21B22460-3AEA-1069-A2DC-08002B30309D} - C:\WINDOWS\SYSTEM\SHELL32.DLL
File Types Page - {B091E540-83E3-11CF-A713-0020AFD79762} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Folder Options Property Page Extension - {6D5313C0-8C62-11D1-B2CD-006097DF8C11} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Folder Shortcut - {0AFACED1-E828-11D1-9187-B532F1E9575D} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Fusion Cache - {1D2680C9-0E2A-469d-B787-065558BC7D43} - C:\WINDOWS\SYSTEM\mscoree.dll
GDI+ file thumbnail extractor - {3F30C968-480A-4C6C-862D-EFC0897BB84B} - C:\WINDOWS\SYSTEM\THUMBVW.DLL
Global Folder Settings - {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
History - {FF393560-C2A7-11CF-BFF4-444553540000} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
HTML Thumbnail Extractor - {EAB841A0-9550-11CF-8C16-00805F1408F3} - C:\WINDOWS\SYSTEM\THUMBVW.DLL
ICC Profile - {DBCE2480-C732-101B-BE72-BA78E9AD5B27} - icmui.dll
ICM Monitor Management - {5DB2625A-54DF-11D0-B6C4-0800091AA605} - icmui.dll
ICM Printer Management - {675F097E-4C4D-11D0-B6C1-0800091AA605} - icmui.dll
ICM Scanner Management - {176d6597-26d3-11d1-b350-080036a75b03} - icmui.dll
IE4 Suite Splash Screen - {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
In-pane search - {169A0691-8DF9-11d1-A1C4-00C04FD75D13} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Internet Name Space - {871C5380-42A0-1069-A2EA-08002B30309D} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
InternetShortcut - {FBF23B40-E3F0-101B-8488-00AA003E56F8} - shdocvw.dll
ISFBand OC - {131A6951-7F78-11D0-A979-00C04FD705A2} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
IShellFolderBand - {D82BE2B0-5764-11D0-A96E-00C04FD705A2} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
LNK file thumbnail interface delegator - {500202A0-731E-11D0-B829-00C04FD706EC} - C:\WINDOWS\SYSTEM\THUMBVW.DLL
Media Band - {32683183-48a0-441b-a342-7c2a440a9478} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Menu Band - {5b4dae26-b807-11d0-9815-00c04fd91972} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Menu Desk Bar - {ECD4FC4F-521C-11D0-B792-00A0C90312E1} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Menu Shell Folder - {568804CA-CBD7-11d0-9816-00C04FD91972} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Menu Site - {E13EF4E4-D2F2-11d0-9816-00C04FD91972} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Microsoft AutoComplete - {00BB2763-6A77-11D0-A535-00C04FD7D062} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Microsoft Browser Architecture - {A5E46E3A-8849-11D1-9D8C-00C04FC99D61} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Microsoft BrowserBand - {7BA4C742-9E81-11CF-99D3-00AA004AE837} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Microsoft CopyTo Service - {C2FBB630-2971-11d1-A18C-00C04FD75D13} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Microsoft History AutoComplete List - {00BB2764-6A77-11D0-A535-00C04FD7D062} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Microsoft Internet Toolbar - {5E6AB780-7743-11CF-A12B-00AA004AE837} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Microsoft MoveTo Service - {C2FBB631-2971-11d1-A18C-00C04FD75D13} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Microsoft Multiple AutoComplete List Container - {00BB2765-6A77-11D0-A535-00C04FD7D062} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Microsoft New Object Service - {D969A300-E7FF-11d0-A93B-00A0C90F2719} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Microsoft SendTo Service - {7BA4C740-9E81-11CF-99D3-00AA004AE837} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Microsoft Shell Folder AutoComplete List - {03C036F1-A186-11D0-824A-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Microsoft Url History Service - {3C374A40-BAE4-11CF-BF7D-00AA006946EE} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
MIME File Types Hook - {FBF23B41-E3F0-101B-8488-00AA003E56F8} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Mounted Volume - {12518493-00B2-11d2-9FA5-9E3420524153} - C:\WINDOWS\SYSTEM\SHELL32.DLL
MRU AutoComplete List - {6756A641-DE71-11d0-831B-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
My Computer - {20D04FE0-3AEA-1069-A2D8-08002B30309D} - C:\WINDOWS\SYSTEM\SHELL32.DLL
My Media - {A44D5ACC-3411-40DE-9AD3-214FFB2ED7AC} - C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\MediaSX.dll
MyDocs Copy Hook - {ECF03A33-103D-11d2-854D-006008059367} - mydocs.dll
MyDocs Drop Target - {ECF03A32-103D-11d2-854D-006008059367} - mydocs.dll
MyDocs Folder - {450D8FBA-AD25-11D0-98A8-0800361B1103} - mydocs.dll
MyDocs Properties - {4a7ded0a-ad25-11d0-98a8-0800361b1103} - mydocs.dll
Office Graphics Filters Thumbnail Extractor - {1AEB1360-5AFC-11D0-B806-00C04FD706EC} - C:\WINDOWS\SYSTEM\THUMBVW.DLL
Open With Context Menu Handler - {09799AFB-AD67-11d1-ABCD-00C04FC30936} - C:\WINDOWS\SYSTEM\SHELL32.DLL
PostAgent - {D8BD2030-6FC9-11D0-864F-00AA006809D9} - C:\WINDOWS\SYSTEM\WEBCHECK.DLL
Registrar Registry Manager SHell Extension - {CCA60260-A2C9-11D2-BA62-0020188191B2} -
Registry Tree Options Utility - {AF4F6510-F982-11d0-8595-00AA004CD6D8} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Roxio DragToDisc Shell Extension - {5E44E225-A408-11CF-B581-008029601108} - C:\PROGRAM FILES\ROXIO\EASY CD CREATOR 6\DRAGTODISC\SHELLEX.DLL
Scheduled Tasks - {D6277990-4C6A-11CF-8D87-00AA0060F5BF} - C:\WINDOWS\SYSTEM\mstask.dll
Search Assistant OC - {9461b922-3c5a-11d2-bf8b-00c04fb93661} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Search Band - {30D02401-6A81-11d0-8274-00C04FD5AE38} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Sendmail service - {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE} - C:\WINDOWS\SYSTEM\SENDMAIL.DLL
Sendmail service - {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE} - C:\WINDOWS\SYSTEM\SENDMAIL.DLL
Shell Automation Folder View - {62112AA1-EBE4-11cf-A5FB-0020AFE7292D} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Shell Automation Inproc Service - {0A89A860-D7B1-11CE-8350-444553540000} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Shell Automation Service - {13709620-C279-11CE-A49E-444553540000} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Shell Band Site Menu - {ECD4FC4E-521C-11D0-B792-00A0C90312E1} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Shell DeskBar - {ECD4FC4C-521C-11D0-B792-00A0C90312E1} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Shell DeskBarApp - {3CCF8A41-5C85-11d0-9796-00AA00B90ADF} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Shell DocObject Viewer - {E7E4BC40-E76A-11CE-A9BB-00AA004AE837} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Shell Drag and Drop helper - {4657278A-411B-11d2-839A-00C04FD918D0} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Shell Extensions for RealOne Player - {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} - C:\PROGRAM FILES\REAL\REALPLAYER\RPSHELL.DLL
Shell extensions for Windows Script Host - {60254CA5-953B-11CF-8C96-00AA00B8708C} - C:\WINDOWS\SYSTEM\WSHEXT.DLL
Shell Favorite Folder - {1A9BA3A0-143A-11CF-8350-444553540000} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Shell Rebar BandSite - {ECD4FC4D-521C-11D0-B792-00A0C90312E1} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
SlowFile Icon Overlay - {7D688A77-C613-11D0-999B-00C04FD655E1} -
Start Menu - {4622AD11-FF23-11d0-8D34-00A0C90F2719} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Subscription Folder - {F5175861-2688-11d0-9C5E-00AA00A45957} - C:\WINDOWS\SYSTEM\WEBCHECK.DLL
Subscription Mgr - {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE} - C:\WINDOWS\SYSTEM\WEBCHECK.DLL
Summary Info Thumbnail handler (DOCFILES) - {9DBD2C50-62AD-11D0-B806-00C04FD706EC} - C:\WINDOWS\SYSTEM\THUMBVW.DLL
Tasks Folder Shell Extension - {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF} - C:\WINDOWS\SYSTEM\mstask.dll
Temporary Internet Files - {7BD29E00-76C1-11CF-9DD0-00A0C9034933} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Temporary Internet Files - {7BD29E01-76C1-11CF-9DD0-00A0C9034933} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
The Internet - {3DC7A020-0ACD-11CF-A9BB-00AA004AE837} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Thumbnail Image - {7487cd30-f71a-11d0-9ea7-00805f714772} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Thumbnails - {8BEBB290-52D0-11D0-B7F4-00C04FD706EC} - C:\WINDOWS\SYSTEM\THUMBVW.DLL
Track Popup Bar - {acf35015-526e-4230-9596-becbe19f0ac9} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Tracking Shell Menu - {8278F931-2A3E-11d2-838F-00C04FD918D0} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
TrayAgent - {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7} - C:\WINDOWS\SYSTEM\WEBCHECK.DLL
TridentImageExtractor - {7376D660-C583-11d0-A3A5-00C04FD706EC} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
User Assist - {DD313E04-FEFF-11d1-8ECD-0000F87A470C} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Web Folders - {BDEADF00-C265-11d0-BCED-00A0C90AB50F} - C:\PROGRA~1\COMMON~1\MICROS~1\Web Folders\MSONSEXT.DLL
Web Search - {07798131-AF23-11d1-9111-00A0C98BA67D} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\SYSTEM\WEBCHECK.DLL
WebCheck SyncMgr Handler - {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB} - C:\WINDOWS\SYSTEM\WEBCHECK.DLL
WebCheckChannelAgent - {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB} - C:\WINDOWS\SYSTEM\WEBCHECK.DLL
WebCheckWebCrawler - {08165EA0-E946-11CF-9C87-00AA005127ED} - C:\WINDOWS\SYSTEM\WEBCHECK.DLL

--------------------

Registry 'Run' keys:

[User Run]
Cacheman = C:\PROGRA~1\CACHEMAN\Cacheman.exe

[System Run]
EnsoniqMixer = starter.exe
HP Software Update = C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
projselector = "C:\Program Files\Common Files\Roxio Shared\Project Selector\projselector.exe" -r
RoxioAudioCentral = "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
RoxioDragToDisc = "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
RoxioEngineUtility = "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
SystemTray = SysTray.Exe
TaskMonitor = C:\WINDOWS\taskmon.exe
WINHHN32 = rundll32 WINHHN32.DLL,run

[System RunServices]
*StateMgr = C:\WINDOWS\System\Restore\StateMgr.exe
KB891711 = C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent = mstask.exe

--------------------

Protocols:

[Pluggable MIME filters (8)]
lzdhtml = {8f6b0360-b80d-11d0-a9b3-006097942311} = C:\WINDOWS\SYSTEM\urlmon.dll
deflate = {8f6b0360-b80d-11d0-a9b3-006097942311} = C:\WINDOWS\SYSTEM\urlmon.dll
gzip = {8f6b0360-b80d-11d0-a9b3-006097942311} = C:\WINDOWS\SYSTEM\urlmon.dll
Class Install Handler = {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} = C:\WINDOWS\SYSTEM\urlmon.dll
text/webviewhtml = {733AC4CB-F1A4-11d0-B951-00A0C90312E1} = C:\WINDOWS\SYSTEM\SHELL32.DLL
application/octet-stream = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} = C:\WINDOWS\SYSTEM\mscoree.dll
application/x-complus = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} = C:\WINDOWS\SYSTEM\mscoree.dll
application/x-msdownload = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} = C:\WINDOWS\SYSTEM\mscoree.dll

[Protocol handlers (19)]
http = {79eac9e2-baf9-11ce-8c82-00aa004ba90b} = C:\WINDOWS\SYSTEM\urlmon.dll
ftp = {79eac9e3-baf9-11ce-8c82-00aa004ba90b} = C:\WINDOWS\SYSTEM\urlmon.dll
gopher = {79eac9e4-baf9-11ce-8c82-00aa004ba90b} = C:\WINDOWS\SYSTEM\urlmon.dll
https = {79eac9e5-baf9-11ce-8c82-00aa004ba90b} = C:\WINDOWS\SYSTEM\urlmon.dll
mk = {79eac9e6-baf9-11ce-8c82-00aa004ba90b} = C:\WINDOWS\SYSTEM\urlmon.dll
file = {79eac9e7-baf9-11ce-8c82-00aa004ba90b} = C:\WINDOWS\SYSTEM\urlmon.dll
local = {79eac9e7-baf9-11ce-8c82-00aa004ba90b} = C:\WINDOWS\SYSTEM\urlmon.dll
cdl = {3dd53d40-7b8b-11D0-b013-00aa0059ce02} = C:\WINDOWS\SYSTEM\urlmon.dll
javascript = {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} = C:\WINDOWS\SYSTEM\MSHTML.DLL
vbscript = {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} = C:\WINDOWS\SYSTEM\MSHTML.DLL
about = {3050F406-98B5-11CF-BB82-00AA00BDCE0B} = C:\WINDOWS\SYSTEM\MSHTML.DLL
res = {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} = C:\WINDOWS\SYSTEM\MSHTML.DLL
mailto = {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} = C:\WINDOWS\SYSTEM\MSHTML.DLL
sysimage = {76E67A63-06E9-11D2-A840-006008059382} = C:\WINDOWS\SYSTEM\MSHTML.DLL
its = {9D148291-B9C8-11D0-A4CC-0000F80149F6} = C:\WINDOWS\SYSTEM\ITSS.DLL
ms-its = {9D148291-B9C8-11D0-A4CC-0000F80149F6} = C:\WINDOWS\SYSTEM\ITSS.DLL
mhtml = {05300401-BCBC-11d0-85E3-00C04FD85AB4} = C:\WINDOWS\SYSTEM\INETCOMM.DLL
ndwiat = {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} = C:\WINDOWS\SYSTEM\WIASCR.DLL
vnd.ms.radio = {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} = C:\WINDOWS\SYSTEM\MSDXM.OCX

--------------------

ShellServiceObjectDelayLoad:

[All users (2)]
AUHook = {BCBCD383-3E06-11D3-91A9-00C04F68105C} = C:\WINDOWS\SYSTEM\AUHOOK.DLL
WebCheck = {E6FB5E20-DE35-11CF-9C87-00AA005127ED} = C:\WINDOWS\SYSTEM\WEBCHECK.DLL

--------------------

SharedTaskScheduler (2):

Browseui preloader = {438755C2-A8BA-11D1-B96B-00A0C90312E1} = C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Component Categories cache daemon = {8C7461EF-2B13-11d2-BE35-3078302C2030} = C:\WINDOWS\SYSTEM\BROWSEUI.DLL

--------------------

Winsock LSP:

[Protocols (4)]
MS.w95.spi.tcp - {FF017DE0-CAE9-11CF-8A99-00AA0062C609} - C:\WINDOWS\SYSTEM\msafd.dll
MS.w95.spi.udp - {FF017DE0-CAE9-11CF-8A99-00AA0062C609} - C:\WINDOWS\SYSTEM\msafd.dll
MS.w95.spi.rsvptcp - {ECBDCBA0-334A-11D0-BD88-0000C082E69A} - C:\WINDOWS\SYSTEM\rsvpsp.dll
MS.w95.spi.rsvpudp - {ECBDCBA0-334A-11D0-BD88-0000C082E69A} - C:\WINDOWS\SYSTEM\rsvpsp.dll

[Namespace Providers (1)]
DNS Name Space Provider. - {FF017DE2-CAE9-11CF-8A99-00AA0062C609} - C:\WINDOWS\SYSTEM\rnr20.dll

--------------------

Hijack points:

[Reset web settings URLs]
SearchAssistant =
CustomizeSearch =
START_PAGE_URL =
SEARCH_PAGE_URL =
MS_START_PAGE_URL =

[Internet Explorer URLs]
* This user *
- Internet Explorer\Main (2)
Local Page = C:\WINDOWS\SYSTEM\blank.htm
Start Page = http://www.google.com/

- Internet Explorer\Search (1)
SearchAssistant = http://ie.search.msn.com

- Internet Explorer\Desktop\General (2)
BackupWallpaper = C:\WINDOWS\Application Data\Digital Album Organizer\daowlppr.bmp
Wallpaper = C:\WINDOWS\Application Data\Digital Album Organizer\daowlppr.bmp

* All users *
- Internet Explorer\Main (3)
Default_Page_Url = http://www.microsoft.com/isapi/redir...r=6&ar=msnhome
Local Page = C:\WINDOWS\SYSTEM\blank.htm
Start Page = about:blank

- Internet Explorer\Search (2)
CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
SearchAssistant = http://ie.search.msn.com

- Internet Explorer\AboutURLs (6)
blank = res://mshtml.dll/blank.htm
DesktopItemNavigationFailure = res://shdoclc.dll/navcancl.htm
NavigationCanceled = res://shdoclc.dll/navcancl.htm
NavigationFailure = res://shdoclc.dll/navcancl.htm
OfflineInformation = res://shdoclc.dll/offcancl.htm
PostNotCached = res://mshtml.dll/repost.htm

[Default URL prefixes]
default = http://
ftp = ftp://
gopher = gopher://
home = http://
mosaic = http://
www = http://

--------------------

Protection & disabled items:

[ActiveX killbits (68)]
- {18ab439e-fcf4-40d4-90da-f79baa3b0655} - diactfrm.dll
&Address - {01E04581-4EEE-11d0-BFE9-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
(no name) - {283807B8-2C60-11D0-A31D-00AA00B92C03} - C:\WINDOWS\SYSTEM\DANIM.DLL
ACM Class Manager - {33d9a761-90c8-11d0-bd43-00a0c911ce86} - C:\WINDOWS\SYSTEM\DEVENUM.DLL
ActiveMovie Filter Class Manager - {083863F1-70DE-11d0-BD40-00A0C911CE86} - C:\WINDOWS\SYSTEM\DEVENUM.DLL
ActiveXPlugin Object - {06DD38D3-D187-11CF-A80D-00C04FD74AD8} - C:\WINDOWS\SYSTEM\PLUGIN.OCX
ADODB.Stream - {00000566-0000-0010-8000-00AA006D2EA4} - C:\PROGRAM FILES\COMMON FILES\SYSTEM\ADO\MSADO15.DLL
AVIFile Proxy/Stub - {0002000D-0000-0000-C000-000000000046} - avifil32.dll
Bln Proxy - {bc5f1e51-5110-11d1-aff5-006097c9a284} - C:\PROGRA~1\MICROS~6\OFFICE\BLNMGRPS.DLL
BlnMgr Class - {3f8a6c33-e0fd-11d0-8a8c-00a0c90c2bc5} - C:\Program Files\Microsoft Office\Office\BLNMGR.DLL
BlnMgr Proxy - {F27CE930-4CA3-11D1-AFF2-006097C9A284} - C:\PROGRA~1\MICROS~6\OFFICE\BLNMGRPS.DLL
Br549 Control - {167701E3-FDCF-11D0-A48E-006097C549FF} - C:\WINDOWS\SYSTEM\BR549.OCX
CEnroll Class - {43F8F289-7A20-11D0-8F06-00C04FC295E1} - C:\WINDOWS\SYSTEM\XENROLL.DLL
CLSID_ApprenticeICW - {8ee42293-c315-11d0-8d6f-00a0c9a06e1f} - C:\WINDOWS\SYSTEM\INETCFG.DLL
CLSID_CCommAcctImport - {1AA06BA1-0E88-11d1-8391-00C04FBD7C09} - C:\WINDOWS\SYSTEM\MSOEACCT.DLL
CV3 Class - {CEBC955E-58AF-11D2-A30A-00A0C903492B} - C:\WINDOWS\SYSTEM\WUV3IS.DLL
Dial-Up Networking - {992cffa0-f557-101a-88ec-00dd010ccc48} - rnaui.dll
EYEDOG Control - {06A7EC63-4E21-11D0-A112-00A0C90543AA} - C:\WINDOWS\SYSTEM\EYEDOG.OCX
Helper Object for Java - {8e26bfc1-afd6-11cf-bffc-00aa003cfdfc} - C:\WINDOWS\SYSTEM\VMHELPER.DLL
HHCtrl Object - {41B23C28-488E-4E5C-ACE2-BB0BBABE99E8} - C:\WINDOWS\SYSTEM\HHCTRL.OCX
HHCtrl Object - {ADB880A6-D8FF-11CF-9377-00AA003B7A11} - C:\WINDOWS\SYSTEM\HHCTRL.OCX
Hhopen Control - {130D7743-5F5A-11D1-B676-00A0C9697233} - C:\WINDOWS\SYSTEM\HHOPEN.OCX
ICM Class Manager - {33d9a760-90c8-11d0-bd43-00a0c911ce86} - C:\WINDOWS\SYSTEM\DEVENUM.DLL
JVIEW Profiler - {03D9F3F2-B0E3-11D2-B081-006008039BF0} - C:\WINDOWS\SYSTEM\JAVAPRXY.DLL
Kodak Image Admin Control - {009541A0-3B81-101C-92F3-040224009C02} - C:\WINDOWS\SYSTEM\IMGADMIN.OCX
Kodak Image Annotation Control - {6D940285-9F11-11CE-83FD-02608C3EC08A} - C:\WINDOWS\SYSTEM\IMGEDIT.OCX
Kodak Image Edit Control - {6D940280-9F11-11CE-83FD-02608C3EC08A} - C:\WINDOWS\SYSTEM\IMGEDIT.OCX
Kodak Image Scan Control - {84926CA0-2941-101C-816F-0E6013114B7F} - C:\WINDOWS\SYSTEM\IMGSCAN.OCX
Kodak Image Thumbnail Control - {E1A6B8A0-3603-101C-AC6E-040224009C02} - C:\WINDOWS\SYSTEM\IMGTHUMB.OCX
LM Runtime Control - {183C259A-0480-11d1-87EA-00C04FC29D46} - C:\WINDOWS\SYSTEM\LMRT.DLL
Marquee Control - {250770f3-6af2-11cf-a915-008029e31fcd} - C:\Program Files\Microsoft Office\Office\HTML\HTMLMARQ.OCX
mbcontent Class - {52ca3bcf-3b9b-419e-a3d6-5d28c0b0b50c} - C:\WINDOWS\SYSTEM\BROWSEWM.DLL
Microsoft ActiveX Upload Control, version 1.5 - {886E7BF0-C867-11CF-B1AE-00AA00A3F2C3} - C:\PROGRAM FILES\WEB PUBLISH\FLUPL.OCX
Microsoft Agent Control 1.5 - {F5BE8BD2-7DE6-11D0-91FE-00C04FD701A5} - C:\WINDOWS\MSAGENT\AGENTCTL.DLL
Microsoft Common Browser Architecture - {AF604EFE-8897-11D1-B944-00A0C90312E1} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
Microsoft DocHost User Interface Handler - {7057e952-bd1b-11d1-8919-00c04fc2c836} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
Microsoft Html Popup Window - {3050f667-98b5-11cf-bb82-00aa00bdce0b} - C:\WINDOWS\SYSTEM\MSHTML.DLL
Microsoft HTML Window Security Proxy - {3050F391-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM\MSHTML.DLL
Microsoft MPEG-4 Video Decompressor Property page - {598eba02-b49a-11d2-a1c1-00609778ea66} - C:\WINDOWS\SYSTEM\MPG4DS32.AX
Microsoft MS Audio Decompressor Control Property page - {8fe7e181-bb96-11d2-a1cb-00609778ea66} - C:\WINDOWS\SYSTEM\MSADDS32.AX
Microsoft Rich Textbox Control 6.0 (SP4) - {3B7C8860-D78F-101B-B9B5-04021C009402} - C:\WINDOWS\SYSTEM\RICHTX32.OCX
Microsoft WBEM Event Subsystem - {5d08b586-343a-11d0-ad46-00c04fd8fdff} - C:\WINDOWS\SYSTEM\WBEM\WBEMESS.DLL
MidiOut Class Manager - {4efe2452-168a-11d1-bc76-00c04fb9453b} - C:\WINDOWS\SYSTEM\DEVENUM.DLL
Multimedia File Property Sheet - {00022613-0000-0000-c000-000000000046} - C:\WINDOWS\SYSTEM\mmsys.cpl
OpenCable Class - {ABBA001B-3075-11D6-88A4-00B0D0200F88} - C:\WINDOWS\SYSTEM\PSISDECD.DLL
PSDispatch - {00020420-0000-0000-c000-000000000046} - oleaut32.dll
PSEnumVariant - {00020421-0000-0000-C000-000000000046} - oleaut32.dll
PSOAInterface - {00020424-0000-0000-c000-000000000046} - oleaut32.dll
PSSupportErrorInfo - {DF0B3D60-548F-101B-8E65-08002B2BD119} - oleaut32.dll
PSTypeComp - {00020425-0000-0000-C000-000000000046} - oleaut32.dll
PSTypeInfo - {00020422-0000-0000-C000-000000000046} - oleaut32.dll
PSTypeLib - {00020423-0000-0000-C000-000000000046} - oleaut32.dll
RegWizCtrl - {50E5E3D1-C07E-11D0-B9FD-00A0249F6B00} - C:\WINDOWS\SYSTEM\REGWIZC.DLL
Shortcut - {00021401-0000-0000-c000-000000000046} - shell32.dll
SSubTimer6.CTimer - {71A27034-C7D8-11D2-BEF8-525400DFB47A} - C:\WINDOWS\SYSTEM\SSUBTMR6.DLL
SSubTimer6.GSubclass - {71A27032-C7D8-11D2-BEF8-525400DFB47A} - C:\WINDOWS\SYSTEM\SSUBTMR6.DLL
Start Menu - {4622AD11-FF23-11d0-8D34-00A0C90F2719} - C:\WINDOWS\SYSTEM\SHELL32.DLL
Trident HTMLEditor - {3050f4f5-98b5-11cf-bb82-00aa00bdce0b} - C:\WINDOWS\SYSTEM\MSHTMLED.DLL
VFW Capture Class Manager - {860bb310-5d01-11d0-bd3b-00a0c911ce86} - C:\WINDOWS\SYSTEM\DEVENUM.DLL
Video Effect (1 input) Class Manager - {cc7bfb42-f175-11d1-a392-00e0291f3959} - C:\WINDOWS\SYSTEM\QEDIT.DLL
Video Effect (2 input) Class Manager - {cc7bfb43-f175-11d1-a392-00e0291f3959} - C:\WINDOWS\SYSTEM\QEDIT.DLL
Video Mixing Renderer 9 - {51b4abf3-748f-4e3b-a276-c828330e926a} - C:\WINDOWS\SYSTEM\QUARTZ.DLL
VideoPort Object - {CE292861-FC88-11D0-9E69-00C04FD7C15B} - C:\WINDOWS\SYSTEM\QDVD.DLL
VMR Allocator Presenter 9 - {2d2e24cb-0cd5-458f-86ea-3e6fa22c8e64} - C:\WINDOWS\SYSTEM\QUARTZ.DLL
VMR ImageSync 9 - {e4979309-7a32-495e-8a92-7b014aad4961} - C:\WINDOWS\SYSTEM\QUARTZ.DLL
WaveIn Class Manager - {33D9A762-90C8-11d0-BD43-00A0C911CE86} - C:\WINDOWS\SYSTEM\DEVENUM.DLL
WaveOut and DSound Class Manager - {e0f158e1-cb04-11d0-bd4e-00a0c911ce86} - C:\WINDOWS\SYSTEM\DEVENUM.DLL
WMI Instance Provider - {d2d588b5-d081-11d0-99e0-00c04fc2f8ec} - C:\WINDOWS\SYSTEM\WBEM\WMIPROV.DLL

[Zones]
* This user *
- Restricted sites (1460)
008i.com
008k.com
00hq.com
010402.com
100sexlinks.com
10sek.com
139mm.com
157.238.62.14
171203.com
17-plus.com
1800searchonline.com
193.125.201.50
195.255.177.28
1-domains-registrations.com
1sexparty.com
1stantivirus.com
1stpagehere.com
1stsearchportal.com
2020search.com
209.66.114.130
20x2p.com
213.131.225.2
216.152.240.10
216.152.240.13
216.152.240.14
216.152.240.16
216.255.179.234
216.65.3.68
24.244.71.239
24-7searching-and-more.com
24teen.com
2ndpower.com
3322.org
36site.com
3721.com
39-93.com
4corn.net
4klm.com
65.75.151.192
66.117.14.138
66.117.37.7
66.197.100.83
66.197.138.235
66.230.175.129
66.250.107.100
66.250.107.101
66.250.107.99
66.250.130.194
66.250.170.107
66.250.57.26
66.250.57.27
66.250.57.28
66.250.74.150
66.40.16.198
69.50.171.122
6sek.com
75tz.com
777search.com
777top.com
7search.com
82.179.170.11
82.179.170.82
8ad.com
971searchbox.com
aaasexypics.com
aaawebfinder.com
aavc.com
aboutclicker.com
abrp.net
accessthefuture.net
acemedic.com
ace-webmaster.com
acjp.com
actionbreastcancer.org
activexupdate.com
ad25.com
ad45.com
ad77.com
ad86.com
adamsupportgroup.org
adasearch.com
adaware.cc
adipics.com
adshttp.com
adsonwww.com
adspics.com
adult-engine-search.com
adult-erotic-guide.net
adult-friends-finder.net
adultgambling.org
adulthyperlinks.com
adult-personal.us
adultsgames.net
adulttds.com
advert.exaccess.ru
ad-ware.cc
ad-w-a-r-e.com
a-d-w-a-r-e.com
adwarebazooka.com
adwarepunisher.com
africaspromise.org
agava.com
agava.ru
agentstudio.com
aifind.info
airtleworld.com
akril.com
alcatel.ws
alfacleaner.com
alfa-search.com
allabtcars.com
allabtjeeps.com
allcybersearch.com
allforadult.com
allhyperlinks.com
all-inet.com
allinternetbusiness.com
almarvideos.com
amandamountains.com
amateurliveshow.com
amigeek.com
amisbusiness.com
ampmsearch.com
analmovi.com
anarchylolita.com
anarchyporn.com
anin.org
annaromeo.com
antrocity.com
anything4health.com
approvedlinks.com
apsua.com
archiviosex.net
aregay.com
arheo.com
arizonaweb.org
armitageinn.com
artachnid.com
art-func.com
art-xxx.com
asiankingkong.com
***-gals.com
athenrye.com
autoescrowpay.com
avforce.com
avian-ads.com
awmcash.biz
awmdabest.com
ayakawamura.com
ayumitaniguchi.com
babenet.com
babeweb.de
bannedhost.net
barbudafarms.com
barnandfence.com
batsearch.com
baygraphicsllc.com
bbbsearch.com
bb-search.com
bdsmlibrary.net
bedhome.com
bediadance.com
begin2search.com
bellabasketsfl.com
bernaolatwin.com
best-counter.com
bestcrawler.com
bestfor.ru
best-hardpics.com
bestporngate.com
bestweblinks.com
best-winning-casino.com
bestxporno.com
bitchesonline.net
blackhats.tc
blackjack-free.net
blazefind.com
blondetgp.com
blue-elefant.com
bodaciousbabette.com
boobdoll.com
boobsandtits.com
boobsclub.com
boredlife.com
bowlofogumbo.com
bradcoem.org
brandiyoung.com
brookeburn.com
bucps.com
buldog-stats.com
burgerkingbigscreen.com
buscards.net
bustyrussell.com
buttejazz.org
buyselldomain.net
buz.ru
by.ru
calcioturris.com
cameup.com
camup.net
canberracricketcoaching.com
candycantaloupes.com
cantfind.com
carsands.com
carsrentals.net
cashdeluxe.net
cashengines.com
cashsearch.biz
casino2win.net
casino-gambling-1.net
casino-gambling-2.net
casinomidas.net
casinonline.net
casino-onlines.net
castingsamateur.com
catallogue.com
caxa.ru
cclebali.org
ceewawires.org
certumgroup.com
chelancatering.com
childrenvilla.com
chips-4-free.com
chrisswasey.com
chriswallace.net
ckick4thumbs.com
cl55.biz
clackamasliteraryreview.com
clearsearch.cc
clearsearch.net
clickaire.com
clickhere4search.com
clicktomakeasearch.com
clickyestoenter.net
cliks.org
clrsch.com
cmtapestry.com
cnetadd.com
coolfetishsite.com
coolfreehost.com
coolfreepage.com
coolfreepages.com
cool-homepage.co
cool-homepage.com
coolmoneysearch.com
coolpornsearch.com
cool-search.net
coolsearcher.info
coolwebsearch.
coolwebsearch.com
cool-web-search.com
coolwebsearsh.com
coolwwwsearch.
coolwwwsearch.com
cool-xxx.net
copmtraine.com
couldnotfind.com
count.cc
count.hitscount.net
count-all.com
creamedcutties.com
creditsearchonline.com
crestring.com
crooder.com
curvedspaces.com
cvsymphony.com
cyberrape.com
cydom.com
daily-gals.com
dailyteenspic.com
dancingbabycd.com
datanotary.com
datareco.com
dating-search.net
davemarshall.org
db105.com
dcfitusa.com
de.ag
defaultsearch.net
derklaif.biz
desarrollocreativo.com
dev.ntcor.com
develip.com
dewis.us
df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
dialer2004.com
dialerclub.com
dietpills4free.com
dietpussy.com
digistreamsa.com
digital-pornography.com
dionforvalleycouncil.org
directsearchzone.com
dl.ad-ware.cc
dl.targetsaver.com
dnaads.com
doctorwaldron.com
doggyaction.com
domaincar.com
domains2003.net
domains-for-you-online.com
domain-your-registration.com
domkrat.com
downloads.adaware.cc
dp-host.com
drug-sources-exposed.com
drvvv.com
dumpserv.com
duolaimi.net
dutch-sex.com
dvdbank.org
eager-sex.com
earthllnk.net
eases.net
easyantispy.com
easycategories.com
easy-search.net
easysearch4you.com
easysearchingtips.com
ebav.com
ebaw.com
ebch.com
ebdv.com
ebdw.com
ebgo.com
ebjp.com
ebkb.com
ebkn.com
ebky.com
eblv.com
ebmu.com
ebvr.com
ecmh.com
ecmp.com
ecosrioplatenses.org
ecpm.com
ecstasyporn.net
ecwz.com
ecyb.com
edhq.com
edty.com
eduy.com
eeev.com
eikokoike.com
e-localad.com
emch.com
emediacodec.com
enjoywebsurf.com
enterthesearch.com
e-plus.cc
epornsex.com
ergosites.com
esearch2005.com
euuu.com
evidence-detector.biz
evilspidercomics.com
ewebsearch.net
e-websitesolutions.com
ewizard.cc
exaccess.ru
excellentsckin.com
exit.megago.com
extremeseek.net
eza1netsearch.com
ez-searching.com
ezwebsearching.com
f*ckdenniss.com
f*cknicepics.com
faithstevens.com
fantasiewelten.com
farmsteadbandb.com
farse.com
fartpost.com
fastmetasearch.com
fastwebfinder.com
faxporn.com
featured-results.com
fickenisgeil.de
finance-loans.com
find4u.net
find-itnow.com
findit-now.com
findloss.com
findthesite.com
findthewebsiteyouneed.com
find-uk-health.co.uk
findwhatevernow.com
fined.biz
fine-search.net
fionasteel.com
firehunt.com
firstbookmark.net
fitness-free.com
flashflashmx.3322.org
foodvacations.net
forexcredit.com
forexcredit.ru
formingfusions.com
forsythfire.net
forthline.com
free4porno.net
free64all.com
freebookmark.net
freebookmarks.net
freecategories.com
free-chipes.com
freecj.com
freecoolhost.com
free-f*cking-video.com
free-hit.com
freehqmovies.com
free-pics-and-movies.com
freerbhost.com
freescratchandwin.com
free-sex-movie-clips.net
freeshemalepics.net
free-spybot.com
freeyaho.com
freshseek.com
freshteensite.com
full-search.net
funny-girls.com
ga31.com
gabrielscott.com
galpostgirls.com
gals-for-free.com
gambling-online4you.com
game4all.biz
games.de.ag
gameterror.net
gay50.com
generalsmeltingofcanada.com
geteens.com
getpicshere.com
gimmezamore.com
gimnasiaer.com
girls4rent.net
girls-porn-life.com
glbdf.org
globalefinder.com
global-finder.com
globalwebsearch.com
globe-finder.cc
globe-finder.com
globesearch.com
go2realsearch.com
go2-search.com
gocybersearch.com
golftennis.net
good-mortgages.net
good-mortgages-calculator.com
goodsexs.com
googlf.com
gradforum.org
gratis-porn-movie.com
gratis-pornopics.com
greg-search.com
greg-tut.com
gtawarehouse.com
gueb.com
guzzycats.com
gzphoenix.com
H24413.tfil.com
hachimitsu-lemon.com
hallnetaccolade.com
hand-book.com
happyanal.com
hardbodytgp.com
hardcoreover.com
hard-gals.com
hardloved.com
hardwareseek.net
harukaigawa.com
havy.biz
hccsolanonapa.org
health-protein.com
helpyoursearch.com
hentai4u.net
here4search.com
heyrichy.com
hiddenguides.com
highdialer.com
himen.biz
hi-search.com
hitlistlyrics.com
hitscount.net
hitvirus.com
hityou.com
holidayautostr.com
homemortage.ws
hostance.net
hostssp.com
hotbar.com
hotbookmark.com
hotels-list.net
hotelxxxcams.com
hotfreebies.com
hotpopup.com
hotsearchbox.com
hotsex-series.com
hotstartpage.com
hqsex.biz
httpwwwads.com
hu15.ru
hugeporn4u.net
hunacsa.com
hupacasath.com
hut1.ru
hypoteches.com
hzsx.com
ibmx.com
icansearch.net
icwb.com
icwo.com
icwp.com
iddh.com
idgsearch.com
idhh.com
iefeadsl.com
ie-search.com
ifiz.com
iframe.biz
iguu.com
i-lookup.com
incest-host.com
incestporngate.com
infodigger.net
infoglobus.com
inherhole.com
innovagest2000.com
insertthiscock.com
installcash.com
insuranceall.net
insurance-flood.net
internetsearch.ru
ionichost.com
ionomist.com
ipsex.net
iqsearch.net
ironcarteam.com
is-best.com
istarthere.com
itsanal.com
itseasy.us
iweb-commerce.com
iwebland.com
iwon.com
jeannineoldfield.com
jerrynews.com
jethomepage.com
jetseeker.com
jmhgallery.org
joannelatham.com
judin.ru
junkysex.com
jupitersatellites.biz
kabex.com
kathisomers.com
kazaa-lite.ws
keithgreenpro.com
kenmccaul.com
killerpornstars.com
kilosex.com
kimhines.com
kinoru.com
kliksearch.com
kliksoftware.com
krankin.com
ksdspups.org
landrape.com
lauraroebuck.com
leannalovelace.com
lesobank.ru
libertyonlinehosting.com
lingerie-mania.com
linksummary.com
lisamatthew.com
little-download.net
little-help.com
livegambling.com
liveholio.com
livenewspaper.com
loading-lolita.com
lollitop.com
lookfor.cc
looking-for.cc
lop.com
louiseleeds.com
loveadot.com
love-host.com
lovelas.com
lovelysearch.com
love-pix.com
low-taxes.com
luckysearch.net
lunitaweb.net
lustful-porno.com
mackinnonsbrook.org
madfinder.com
madisonmoons.com
madisonoilco.com
madonalive.com
mafiapics.com
mainstreamdollars.com
majuozawa.com
makin-do.com
male4free.com
map-quest.org
marilynchamber.com
marketengines.com
martfinder.com
massearch.com
masterbar.com
matetrava.com
mature50.com
matureporngate.com
maxdzines.com
maxifile.com
mayancasino.com
mcgeeforlabor.com
mdstunisie.org
medicare-insurance.net
medicare-supplemental.com
mega-dating-tips.com
megago.com
megapornix.com
megaseek.net
megumikanzaki.com
meshalynn.com
meta-adult.com
meta-casino.com
metafora.ru
meta-mobile.com
metapoisk.ru
meta-porn.com
metastop.com
michiyonakajima.com
miconsultamedica.com
microsoftantispyware.net
mikasakamoto.com
mikoni.com
millennialpeople.org
miosearch.com
mipham.org
mircosoftantispy.com
missingcommand.com
mixsearch.com
mommykiss.com
moneyhunters.com
montgomeryhospitalanesthesia.com
morflot.com
mortgage-debt.net
mortismaximus.com
moscowwhores.com
moviecategories.com
mp3-pix.com
mpeg-look.com
msantispy.com
msnguard.cc
msn-info.net
msupdater.net
multipussy.com
mundopolar.com
munky.com
mustv.com
my-dedik-one.com
myexexex.com
my-finder.com
myseachexplorer.com
mywebsearch.net
nativehardcore.com
naturalspy.com
nbasportsbook.net
needf*cknow.com
nellyslyrics.com
nepgyan.com
nesrecords.com
netshastra.net
netspyprotector.com
nettime.ru
netyellowpages.info
newcategories.com
newcracks.com
newcracks.net
newiframe.biz
new-incest.com
newlife-lajolla.com
new-search.net
newsexgate.com
newtonknows.com
newtonsracks.com
newtopsites.com
newxpics.com
nhlsportsbook.net
niagaracapital.com
niche-tv.com
nmrba.com
noblindlinks.com
nocalories.net
nocensor.com
nonameforthisdomain.com
noproblemsurf.com
nospywaresoft.com
nsbabes.com
ntcor.com
nuclearwitness.org
n-udd.com
nursemania.com
nvntour.com
nvphall.org
nylonsexy.com
oborot.com
ocalalivestockmarket.com
ocsff.com
oeatlanta.com
oharrowsearch.com
okmmm.com
ok-search.com
okulta.com
omegabrains.net
omega-search.com
oneclicksearches.com
onemoresearch.net
online-casino-1.net
online-casino-bonus.info
online-casinos-x.com
onlineclick.net
online-more.com
onlineserverz.com
onlinetradings.net
online-winning.net
onlycunt.com
onlyinsured.com
onlysex.ws
only-virgins.com
operanabuco.com
opsex.com
orbitexplorer.com
oregoncharters.org
ormandcompany.com
otrlives.com
out.true-counter.com
ozawamadoka.com
paigesummer.com
pamelacollections.com
panamcup.com
pantygirls4u.com
pantyhoserealm.com
pantyplace.com
partner23.firehunt.com
passthison.com
pastubes.com
paulapage.com
paulhoover.com
payfortraffic.net
pcadprotector.cc
pcspyremover.com
pedo.ws
perlink.biz
pervertbot.com
pestrap.com
pesttrap.com
pharmacy2003.com
pharma-diet-pills.com
pharmalocator.com
phendimetrazine-tenuate-adipex.com
picsdir.com
picsforbucks.com
picsofseductiveladies.com
pics-videos.com
pills-birth-control.com
pillsmall.com
pilotronix.com
pixpox.com
pizdato.biz
planemusic.com
poiska.net
poker-casino-free.com
poker-games-free.net
polradiologia.com
pooi.net
popentertain.com
porncamz.com
pornfree.info
pornnightdreams.com
pornokopec.com
porn-screen.com
porn-teacher.com
porntetris.com
porntwist.com
power-cleaner.com
powerwebsearch.com
prblitz.com
pretypics.com
pribalt.com
privacy-support.biz
privateporn.net
prolivation.com
prostactive.com
prostol.com
protect-yourself.biz
prsainlandempire.org
put-your-link-here.com
p-uud.com
pyrocorp.com
quicklaunch.com
quick-search.ws
quicksearch360.com
quiksearchgenealogy.com
r.babenet.com
radfrall.org
ramgo.com
ranafrog.ne
rapegate.com
rawtocash.net
rb37.com
realarea.biz
realphx.com
redbudbmx.com
refinance-help.com
regfreeze.com
removeearthkeepers.org
rf104.com
rightfinder.net
ritztours.com
roar.com
robbsproshop.com
robertferencz.com
rocketsearch.com
rotocasters.com
royalsearch.net
runsearch.com
russiansponsor.com
russogay.com
ruworld.com
s1s1s1search.com
sacitylife.com
safe-sales.biz
samplegals.com
samz.com
saoe.com
satisf*cktion.net
savehits.com
saveli.com
sbee.com
sbjr.com
sbnl.com
sbnt.com
sbssurvivor.com
sbvr.com
scanandrepair.com
scarypix.com
scbm.com
sccdnet.com
schoolforest.com
sckr.com
screensaver.it
scrk.com
sdry.com
search.xrenoder.com
search-1.net
search101online.com
search123forme.com
search-2003.com
search345quest.com
search-777.com
search-about.net
searchaccurate.com
searchadultweb.com
searchalot.com
searchandbrowse.com
searchandclick.com
searchbutler.com
searchbutler.org
searchbuttler.com
searchby.net
searchcentrix.com
searchclick.cc
searchcomplete.com
searchdesire.com
searchdot.com
searchdot.net
searchenhancement.com
search-exe.com
searchexpander.com
search-explorer.net
searchfastnet.com
searchforge.com
searchgateway.net
search-hawk.com
searching-the-net.com
search-log.com
searchmadesafe.net
search-meta.com
searchmeta.md
searchmeta.net
searchmeta.ru
searchmeup.com
searchmiracle.com
search-motor.com
searchnow.ws
searchonfly.com
searchresult.net
search-safe.com
searchsquire.com
searchtheworld4you.com
search-to-find.com
SEARCHTOFIND.NET
searchv.com
searchwebzone.com
search-what.net
searchwhatuwant.com
searchxl.com
searchxp.com
sebot.com
secondpower.com
secret-crush.com
securenp.org
securitycaution.com
securityindex.net
security-warning.biz
seehardcore.com
seekseek.com
seektheglobe.com
seekwell.net
seld.com
selfbookmark.com
selfbookmark.info
selfbookmark.net
selltraffic.biz
sex.free4porno.net
sexarena.com
sexarena.org
sex-coach.com
sex-festival.com
sexfiles.nu
sexgalleries4all.com
sexmoviesnet.com
sexolymp.com
sexpatriot.net
sexpicsporn.com
sexunique.net
sex-video-galleries.com
sexy18.cc
sfbayfolkboats.com
sfonditalia.biz
sfux.com
sgirls.net
sgrunt.biz
sharempeg.com
sheat.com
shopcards.net
shopknights.com
sic02.com
sidefind.com
sinpussy.com
sintrader.com
sipo.com
sirh0t.blackhats.tc
site1.ru
sitesearchcentral.com
sites-in-web.com
sitevictoria.com
sixroads.com
skakalka.ru
skeech.com
slawsearch.com
slotch.com
slotchbar.com
slutmania.biz
smartsumo.com
smds.com
smutarchive.net
smutserver.com
softwareprofit.com
solongas.com
sonomaevents.com
sp2******.biz
spermatrix.com
spidersearch.com
sportbooks-free4you.com
spros.com
spyass.com
spyaxeupdate.com
spybotremover.net
spydeface.com
spyiblock.com
spyorgy.net
SpyShield.org
spytrooper.com
spyware-stop.com
sqwire.com
srib.com
srng.net
srox.com
srsf.com
ssaw.com
ssby.com
staceyowens.com
stacistaxx.com
stacystaxx.com
startium.com
start-seite.com
start-space.com
startsurfing.com
stats.cashdeluxe.net
steamycock.com
sterva.com
stevecashdollar.com
stop-tracking.biz
stopvotefraud.com
stopxxxpics.com
strekoza.com
stuffstore.com
styleclickink.com
summercollins.com
summitcross.com
supersexmachine.com
super-spider.com
superwebsearch.com
super-websearch.com
superwp.by.ru
supret.com
sureseeker.com
surferbar.com
surj.com
suzannebrecht.com
sweeteenz.com
t058.com
tacil.org
tangounion.com
targetsaver.com
tastethemusic.com
tax-refund4you.com
tbvg.com
tdak.com
tdko.com
tdmy.com
tech-jobs.ws
technology-related.com
teen-biz.com
teenhost.net
teen-pic-post.com
teenpornosex.com
teens4free.net
teensact.com
teensgate.com
teensguru.com
teenswamp.com
tefs.com
terafinder.com
Teslaplus.com
testosterone-birth-control.com
tfil.com
tgp-4-you.com
the818search-co.com
the-exit.com
thefakejournal.com
the-huns-yellow-pages.com
thehuy.net
thenewsearch.com
theproxy.org
therealsearch.com
thespyguard.com
thesten.com
thko.com
thornleygroup.com
tings.org
tinybar.com
titanvision.com
titsianna.com
tit-x.com
tjar.com
tjaw.com
tjdo.com
tjem.com
tjgo.com
toddhayes.com
toolbar.cc
toolbarbest.biz
toolbarbucks.biz
toolbarcash.com
toolbarpartner.com
toolbartraff.biz
tooncomics.com
toon-comics.com
topsearcher.com
topsite.us
topsites.us
topsitez.us
topx.cc
torc.com
toriii.cc
trackhits.cc
tracktraff.cc
trafficback.com
trafficswitcher.com
true-counter.com
true-portal.com
trytechnical.com
type2find.com
u-239.com
u45.cx
u46.cx
u47.cc
u48.cc
ultraload.net
umaxsearch.com
une-autre-france.com
unigays.com
unionseek.com
unipages.cc
up2you.ru
uptodatesecurity.com
uralitel.ru
urlstat.com
urlstat.ru
ursie.net
usefullsoft.net
utahsweet.com
utils.winfixer.com
utopicportal.com
uusocialjustice.org
uvu-channel.com
uydsiygeds.com
v-224.com
v61.com
vaginpics.com
valmyers.com
v-codec.com
vegas-free.com
vegbuy.com
veloventures.com
veryeasysearch.com
verzila.com
vesbiz.biz
victoriaadam.com
videocategories.com
virgin-tgp.net
vitamins-for-each.com
votehowe.org
vparivalka.com
vse-moe.biz
vxebony.com
wabq.com
wabu.com
wakeupdick.com
warnomore.org
watersport-specialties.com
wazzupnet.com
wbkb.com
webbrowser.tv
webcoolsearch.com
web-entrance.co
web-homepage.net
web-nexus.net
websearch.com
web-search.tk
websearchdot.com
weekend-movies.com
wethere.com
wetpornostars.com
wfix.com
wflu.com
whatsyoursearch.com
whazit.com
white-pages.ws
whittierblvd.com
winantivirus.com
windowenhancer.com
winfixer.com
win-in-casino.com
winmsn.com
winprotect.net
winshow.biz
wiresearch.com
wish7.com
wolfpacracing.com
WorldAntiSpy.com
worldray.com
worldusa.com
wowsearch.org
wpc2001.org
www.008k.com
www.00hq.com
www.100sexlinks.com
www.10sek.com
www.139mm.com
www.1800searchonline.com
www.1-domains-registrations.com
www.1sexparty.com
www.1stantivirus.com
www.1stpagehere.com
www.1stsearchportal.com
www.2020search.com
www.24-7searching-and-more.com
www.24teen.com
www.3322.org
www.36site.com
www.4corn.net
www.6sek.com
www.777search.com
www.777top.com
www.7search.com
www.8ad.com
www.971searchbox.com
www.aaawebfinder.com
www.aboutclicker.com
www.abrp.net
www.accessthefuture.net
www.acemedic.com
www.ace-webmaster.com
www.actionbreastcancer.org
www.activexupdate.com
www.adamsupportgroup.org
www.adasearch.com
www.adipics.com
www.adshttp.com
www.adsonwww.com
www.adspics.com
www.adult-engine-search.com
www.adult-erotic-guide.net
www.adult-friends-finder.net
www.adulthyperlinks.com
www.adulttds.com
www.ad-w-a-r-e.com
www.a-d-w-a-r-e.com
www.adwarebazooka.com
www.adwarepunisher.com
www.aifind.info
www.airtleworld.com
www.alfacleaner.com
www.allcybersearch.com
www.amateurliveshow.com
www.ampmsearch.com
www.anarchylolita.com
www.approvedlinks.com
www.avforce.com
www.babenet.com
www.babeweb.de
www.begin2search.com
www.blackhats.tc
www.blue-elefant.com
www.by.ru
www.cantfind.com
www.cashdeluxe.net
www.cashengines.com
www.castingsamateur.com
www.clickhere4search.com
www.clicktomakeasearch.com
www.cliks.org
www.cnetadd.com
www.coolwebsearch.com
www.coolwwwsearch.com
www.cyberrape.com
www.derklaif.biz
www.dialerclub.com
www.directsearchzone.com
www.dl.targetsaver.com
www.dnaads.com
www.domaincar.com
www.earthllnk.net
www.easysearch4you.com
www.emediacodec.com
www.enterthesearch.com
www.esearch2005.com
www.exaccess.ru
www.eza1netsearch.com
www.ezwebsearching.com
www.fastmetasearch.com
www.findwhatevernow.com
www.firehunt.com
www.free-spybot.com
www.game4all.biz
www.games.de.ag
www.globalefinder.com
www.globesearch.com
www.go2realsearch.com
www.gocybersearch.com
www.gueb.com
www.hachimitsu-lemon.com
www.highdialer.com
www.hitvirus.com
www.hityou.com
www.hostance.net
www.hotfreebies.com
www.httpwwwads.com
www.hypoteches.com
www.innovagest2000.com
www.jerrynews.com
www.jethomepage.com
www.jupitersatellites.biz
www.kabex.com
www.kliksoftware.com
www.krankin.com
www.little-download.net
www.little-help.com
www.loveadot.com
www.mainstreamdollars.com
www.marketengines.com
www.maxifile.com
www.megago.com
www.megaseek.net
www.metastop.com
www.microsoftantispyware.net
www.miosearch.com
www.mircosoftantispy.com
www.mixsearch.com
www.msantispy.com
www.msupdater.net
www.munky.com
www.my-dedik-one.com
www.myseachexplorer.com
www.netspyprotector.com
www.newtopsites.com
www.noblindlinks.com
www.nonameforthisdomain.com
www.nospywaresoft.com
www.ntcor.com
www.okmmm.com
www.online-more.com
www.pcadprotector.cc
www.perlink.biz
www.pestrap.com
www.pesttrap.com
www.popentertain.com
www.quicksearch360.com
www.rawtocash.net
www.ritztours.com
www.s1s1s1search.com
www.safe-sales.biz
www.savehits.com
www.saveli.com
www.scanandrepair.com
www.screensaver.it
www.search101online.com
www.search123forme.com
www.search345quest.com
www.searchmiracle.com
www.searchresult.net
www.searchtheworld4you.com
www.SEARCHTOFIND.NET
www.searchwebzone.com
www.securitycaution.com
www.securityindex.net
www.seektheglobe.com
www.sexarena.org
www.sexolymp.com
www.sexpicsporn.com
www.sitesearchcentral.com
www.skeech.com
www.softwareprofit.com
www.spydeface.com
www.spyiblock.com
www.SpyShield.org
www.spytrooper.com
www.spyware-stop.com
www.start-seite.com
www.stats.cashdeluxe.net
www.sureseeker.com
www.targetsaver.com
www.Teslaplus.com
www.the818search-co.com
www.thespyguard.com
www.tinybar.com
www.toolbarbest.biz
www.toolbarbucks.biz
www.toolbartraff.biz
www.topsearcher.com
www.topsite.us
www.topsites.us
www.topsitez.us
www.toriii.cc
www.true-counter.com
www.type2find.com
www.unionseek.com
www.uptodatesecurity.com
www.utils.winfixer.com
www.uvu-channel.com
www.uydsiygeds.com
www.v61.com
www.v-codec.com
www.wazzupnet.com
www.webbrowser.tv
www.websearch.com
www.wethere.com
www.winantivirus.com
www.WorldAntiSpy.com
www.worldray.com
www.wowsearch.org
www.xjupiter.com
www.xosearchox.com
www.xrenoder.com
www.xsremover.com
www.xtipp.de
www.xwebsearch.biz
www.xxx.com
www.yops.biz
www.yoursearchspace.com
www.ysbweb.com
www.zestyfind.com
www.znext.com
www5.worldray.com
www6.worldray.com
wwwbet.net
wwwbetting.net
wwwpokergames.com
wwwpokerplayers.com
wwwroulette.net
xads.cliks.org
xcomics4u.com
x-google.net
xic-bs.com
xjupiter.com
xldr.com
x-library.com
xosearchox.com
xp18.com
xrenoder.com
xrenosearch.com
xsex.ws
xsremover.com
xtipp.de
xtragay.com
x-webdesign.com
xwebsearch.biz
xxx.com
xxxcategories.com
xxxemailxxx.com
xxxtoolbar.com
xzoomy.com
yeak.net
y-e-l-l-o-w.com
yellow500.com
yezol.com
yops.biz
youfindall.com
youfindall.net
yourbookmarks.info
yourbookmarks.ws
your-prescriptions.net
yoursearchspace.com
yoursitebar.com
you-search.com
ypir.com
ysa-info.net
ysbweb.com
yukohamano.com
ywebsearch.info
zapros.com
zesearch.com
zestyfind.com
ziportal.com
zipportal.com
znext.com
zoneoffreeporn.com
zoofil.com
zoomegasite.com
zvimigdal.com
zyban-zocor-levitra.com

==================================================
= Other users on this computer: Default user =
==================================================
--------------------

Autostart folders:

[Startup]
Microsoft Works Calendar Reminders.lnk
WinZip Quick Pick.lnk

--------------------

Policies:

[Primary policies]
* Software\Policies\Microsoft\Office\9.0\ClipGallery (1) *
ClipsOnlineURL = http://www.microsoft.com/isapi/redir.dll?prd=clipgallery&plcid=0x%1!04x!&pver=5.0&o1=ClipGallery

--------------------

Internet Explorer toolbars:

[ShellBrowser (1)]
&Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL

[WebBrowser (3)]
&Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
&Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\SYSTEM\BROWSEUI.DLL
(no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - (no file)

--------------------

URL search hooks (1):

Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL

--------------------

Registry 'Run' keys:

[User Run]
Cacheman = C:\PROGRA~1\CACHEMAN\Cacheman.exe

--------------------

Hijack points:

[Internet Explorer URLs]
* Internet Explorer\Main (2) *
Local Page = C:\WINDOWS\SYSTEM\blank.htm
Start Page = http://www.google.com/

* Internet Explorer\Search (1) *
SearchAssistant = http://ie.search.msn.com

* Internet Explorer\Desktop\General (2) *
BackupWallpaper = C:\WINDOWS\Application Data\Digital Album Organizer\daowlppr.bmp
Wallpaper = C:\WINDOWS\Application Data\Digital Album Organizer\daowlppr.bmp

--------------------

==================================================
= Other users on this computer: Software =
==================================================
--------------------------------------------------
End of report, 116,159 bytes

Commandline options:
/showempty - Show empty sections
/showcmts - Show comments in .bat files
/noshowclsids - Hide class IDs
/noshowprivate - Hide usernames and computer name
/noshowusers - Hide entries from other users
/noshowhardware - Hide entries from other hardware configurations
/autosave - Run hidden, automatically save a report and quit

Geekgirl · 03-06-2006, 06:57 AM

Open System Configuration Utility and take the check mark out from beside these:
ACRORD32.EXE
CACHEMAN.EXE
PROJSELECTOR.EXE
PLAYLIST.EXE
RXMON.EXE
DRGTODSC.EXE
WINZIP32.EXE
WZQKPICK.EXE
STARTER.EXE
KB891711.EXE

**oshwyn5** · 03-08-2006, 11:54 AM

[q][System Run]
EnsoniqMixer = starter.exe
HP Software Update = C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
projselector = "C:\Program Files\Common Files\Roxio Shared\Project Selector\projselector.exe" -r
RoxioAudioCentral = "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
RoxioDragToDisc = "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
RoxioEngineUtility = "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
ScanRegistry = C:\WINDOWS\scanregw.exe /autorun
SystemTray = SysTray.Exe
TaskMonitor = C:\WINDOWS\taskmon.exe
WINHHN32 = rundll32 WINHHN32.DLL,run[/q]

Look at the last entry.
WINHHN32 = rundll32 WINHHN32.DLL,run

I really think you should have posted your hijackthis log on the appropriate board for help rather than trying to fix this yourself.
This is a virus or trojan, but which one is hard to tell with what you gave us.

That does not show as a 04 entry in hijackthis?

dliteya · 03-21-2006, 08:59 AM

"I really think you should have posted your hijackthis log on the appropriate board for help rather than trying to fix this yourself."

THIS IS WHAT I WAS ASKED TO DO
Download StartupList and post the results so I can look them over

I am a computer tech. I am not COMPLETELY illiterate and there are some things that i DO know. I do just fine assessing my HJT logs and doing what is necessary. I followed geekgirls advice when all else had failed. Thanks to her and my own knowledge the problem has been fixed. You come in here after the fact and tell me that i "should have posted your hijackthis log on the appropriate board" when i never even posted a HJT log.

and to answer your question "That does not show as a 04 entry in hijackthis?"

NO, it does not.

**oshwyn5** · 03-21-2006, 10:41 AM

OOPS double post

**oshwyn5** · 03-21-2006, 10:43 AM

Hang in there. And please do post a hijackthis log on the appropriate board.
I regret that at this time I am unable to say any more; other than that you have a know infection which appears to have been incorrectly removed.

03-02-2006, 02:44 PM	#1 (permalink)
dliteya Registered User Join Date: Jul 2005 Posts: 25 OS: WinMe	WINHNN32.dll missing/and wont restart When I boot my computer, I get the following error: Error Loading WINHHN32.dll Cant find specified file. When I goodle this file, the closest I come is WINHN32.dll Where can I get this file. Thanks OH, and for several months, I have not been able to restart my computer. (Start>Shutdown>Restart) or even when a program asked to restart, it goes black and hangs there. Someone said resources were too low or too much was going on in the background, but resources are at 85% most of the time and I dont have a lot of crap going on, if i did, i know how to get rid of it. I have run spydoctor and adaware and these two things are still happening. Any help would be appreciated. THanks

03-03-2006, 07:05 AM	#2 (permalink)
Geekgirl Assistant Manager, Microsoft Support Join Date: Jan 2005 Location: Six-burgh, Pennsylvania Posts: 14,186 OS: XP Home SP3/XP Pro SP3/Vista Ultimate SP2/Windows 7 Professional	Nor could I find any info on WINHHN32.dll Males me think you removed some type of spyware/malware and this is the leftover. I also think you still have some nasty stuff going on. Download and install Spybot S&D . Run Spybot and click on the 'Search for Updates' button. Install any updates that are available. Next click on the 'Check for Problems' button. Let it run the scan. If it finds something, check all those in RED and hit the Fix Selected Problems button. Exit Spybot. If you keep getting the DSO Exploit entries, even after you updated Windows and fixed them, then download the Spybot DSO Exploit Fix and install it over the current Spybot installation. Also look over this link for further information First Steps at Removing the Malware and Posting your HJT Log __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista Or Windows 7 How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM *The Pittsburgh Steelers - 6 X Superbowl Champions !!!!!!!* *The Pittsburgh Penguins - 2009 Stanley Cup Champions !!!!!!!*

03-04-2006, 04:47 PM	#4 (permalink)
Geekgirl Assistant Manager, Microsoft Support Join Date: Jan 2005 Location: Six-burgh, Pennsylvania Posts: 14,186 OS: XP Home SP3/XP Pro SP3/Vista Ultimate SP2/Windows 7 Professional	Read this http://support.microsoft.com/?kbid=262786 __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista Or Windows 7 How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM *The Pittsburgh Steelers - 6 X Superbowl Champions !!!!!!!* *The Pittsburgh Penguins - 2009 Stanley Cup Champions !!!!!!!*

03-05-2006, 09:04 AM	#6 (permalink)
Geekgirl Assistant Manager, Microsoft Support Join Date: Jan 2005 Location: Six-burgh, Pennsylvania Posts: 14,186 OS: XP Home SP3/XP Pro SP3/Vista Ultimate SP2/Windows 7 Professional	Download StartupList and post the results so I can look them over. StartupList is a simple tool that lists all and every auto starting program on your system. You might be surprised what it finds, this is way better than Msconfig. Commonly used to troubleshoot malfunctioning systems, trojan/viral infections, new spyware/malware breed and the likes. __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista Or Windows 7 How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM *The Pittsburgh Steelers - 6 X Superbowl Champions !!!!!!!* *The Pittsburgh Penguins - 2009 Stanley Cup Champions !!!!!!!*

03-06-2006, 06:57 AM	#8 (permalink)
Geekgirl Assistant Manager, Microsoft Support Join Date: Jan 2005 Location: Six-burgh, Pennsylvania Posts: 14,186 OS: XP Home SP3/XP Pro SP3/Vista Ultimate SP2/Windows 7 Professional	Open System Configuration Utility and take the check mark out from beside these: ACRORD32.EXE CACHEMAN.EXE PROJSELECTOR.EXE PLAYLIST.EXE RXMON.EXE DRGTODSC.EXE WINZIP32.EXE WZQKPICK.EXE STARTER.EXE KB891711.EXE __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista Or Windows 7 How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM *The Pittsburgh Steelers - 6 X Superbowl Champions !!!!!!!* *The Pittsburgh Penguins - 2009 Stanley Cup Champions !!!!!!!*

03-04-2006, 04:25 PM	#3 (permalink)
dliteya Registered User Join Date: Jul 2005 Posts: 25 OS: WinMe	I ran S&D and it said no immediate threats were found. Also, I tried to run msconfig so i could do a selective start up and i get the following error message: Environment variables were found in the legacy files AUTOEXEC.BAT and /or CONFIG.SYS and the variables were moved to the Windows Registry.........WHAT IS THAT

03-04-2006, 10:02 PM	#5 (permalink)
dliteya Registered User Join Date: Jul 2005 Posts: 25 OS: WinMe	alrighty......i ran hijackthis (AGAIN) and i found a couple bho's and got rid of them, now my msconfig doesnt get that error message when starting up my resources have been okay for a couple of days now and i unchecked winhh32.dll in msconfig, so it doesnt try to load anymore......now i just have the restart problem

03-08-2006, 11:54 AM	#9 (permalink)
oshwyn5 Registered User Join Date: Sep 2005 Location: Dallas , Tx Posts: 1,435 OS: DOS,Win95,98,ME,XP, Fedora	[q][System Run] EnsoniqMixer = starter.exe HP Software Update = C:\Program Files\HP\HP Software Update\HPWuSchd2.exe LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme PCHealth = C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s projselector = "C:\Program Files\Common Files\Roxio Shared\Project Selector\projselector.exe" -r RoxioAudioCentral = "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe" RoxioDragToDisc = "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe" RoxioEngineUtility = "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe" ScanRegistry = C:\WINDOWS\scanregw.exe /autorun SystemTray = SysTray.Exe TaskMonitor = C:\WINDOWS\taskmon.exe WINHHN32 = rundll32 WINHHN32.DLL,run[/q] Look at the last entry. WINHHN32 = rundll32 WINHHN32.DLL,run I really think you should have posted your hijackthis log on the appropriate board for help rather than trying to fix this yourself. This is a virus or trojan, but which one is hard to tell with what you gave us. That does not show as a 04 entry in hijackthis? __________________ Hello and Welcome to TSF My name is Pete but call me Oshwyn Click here for the five steps for Malware Removal If we have been of assistance please consider Donating to TSF to keep the forum running.

03-21-2006, 08:59 AM	#10 (permalink)
dliteya Registered User Join Date: Jul 2005 Posts: 25 OS: WinMe	"I really think you should have posted your hijackthis log on the appropriate board for help rather than trying to fix this yourself." THIS IS WHAT I WAS ASKED TO DO Download StartupList and post the results so I can look them over I am a computer tech. I am not COMPLETELY illiterate and there are some things that i DO know. I do just fine assessing my HJT logs and doing what is necessary. I followed geekgirls advice when all else had failed. Thanks to her and my own knowledge the problem has been fixed. You come in here after the fact and tell me that i "should have posted your hijackthis log on the appropriate board" when i never even posted a HJT log. and to answer your question "That does not show as a 04 entry in hijackthis?" NO, it does not.

03-21-2006, 10:41 AM	#11 (permalink)
oshwyn5 Registered User Join Date: Sep 2005 Location: Dallas , Tx Posts: 1,435 OS: DOS,Win95,98,ME,XP, Fedora	OOPS double post __________________ Hello and Welcome to TSF My name is Pete but call me Oshwyn Click here for the five steps for Malware Removal If we have been of assistance please consider Donating to TSF to keep the forum running. Last edited by oshwyn5; 03-21-2006 at 10:43 AM.

03-21-2006, 10:43 AM	#12 (permalink)
oshwyn5 Registered User Join Date: Sep 2005 Location: Dallas , Tx Posts: 1,435 OS: DOS,Win95,98,ME,XP, Fedora	Hang in there. And please do post a hijackthis log on the appropriate board. I regret that at this time I am unable to say any more; other than that you have a know infection which appears to have been incorrectly removed. __________________ Hello and Welcome to TSF My name is Pete but call me Oshwyn Click here for the five steps for Malware Removal If we have been of assistance please consider Donating to TSF to keep the forum running.