RECYCLE BIN can't be emptied.

crimanysakes · 06-18-2008, 11:11 PM

At a loss for where else to go.

Simply(?) put, I have two files in my recycle bin, named "Flash9d.ocx" and "FlashUtil9d.exe". When I attempt to delete (empty) these files, I get an error that states:

"Cannot delete Dh39: Access is denied"

I have attempted to use System Recovery Console (it won't allow me into the Recycle Bin / to Delete the Recycle Bin); KillBox in both Normal and Safe Mode (Gives me a message stating it can't delete the file), CCcleaner in both Normal and Safe Mode.

I did the whole "attrib -h -s" on the RECYCLER directory. I tried to delete the "attrib -h" the inf* files in there. If I go into the the RECYCLER directory there are NO FILES in there.

I was unable to get Panda to run, it kept giving me an error "Update error, try again later".

So, i've funneled myself to here, not knowing where else to go.

I don't really *notice* any performance hit or other odd things happening, but I'm also a bit paranoid that it's just waiting.

If that has nothing to do with Malware/Trojans/AnythingSerious let me know, I'm not sure what else to do but I'm sure I can keep trying.

Thanks in advance!

Deckard's System Scanner v20071014.68
Run by crimanysakes on 2008-06-18 22:46:18
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

System Restore is disabled; attempting to re-enable...success.

-- Last 1 Restore Point(s) --
1: 2008-06-19 05:46:20 UTC - RP1 - System Checkpoint

Backed up registry hives.
Performed disk cleanup.

-- HijackThis (run as crimanysakes.exe) ----------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 10:46:38 PM, on 6/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\spoolsv.exe
H:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
P:\AVG8\avgwdsvc.exe
P:\Juniper Networks\Common Files\dsNcService.exe
H:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
P:\Linksys\WUSBF54G\NICServ.exe
H:\WINDOWS\system32\nvsvc32.exe
H:\WINDOWS\system32\oodag.exe
H:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
H:\WINDOWS\Explorer.EXE
P:\AVG8\avgrsx.exe
P:\AVG8\avgemc.exe
P:\TrueImage\TrueImageMonitor.exe
P:\TrueImage\TimounterMonitor.exe
H:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
H:\WINDOWS\CTHELPER.EXE
H:\WINDOWS\system32\CTXFIHLP.EXE
H:\WINDOWS\SYSTEM32\CTXFISPI.EXE
P:\RivaTuner\RivaTuner.exe
H:\WINDOWS\system32\oodtray.exe
H:\WINDOWS\system32\RUNDLL32.EXE
H:\WINDOWS\system32\ctfmon.exe
P:\LClock\lclock.exe
P:\TinyResMeter\tinyresmeter097.exe
P:\Linksys\WUSBF54G\wlMonitor.exe
P:\TrayIt!\TrayIt!.exe
p:\Total Uninstall 4\TuAgent.exe
P:\AVG8\avgtray.exe
H:\Documents and Settings\crimanysakes\Desktop\dss.exe
H:\DOCUME~1\CRIMAN~1\Desktop\PROGRA~1\HIJACK~1\crimanysakes.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - P:\AVG8\avgssie.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - P:\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - H:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - P:\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE H:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [TrueImageMonitor.exe] P:\TrueImage\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] P:\TrueImage\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "H:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [RivaTuner] "P:\RivaTuner\RivaTuner.exe" /T
O4 - HKLM\..\Run: [OODefragTray] H:\WINDOWS\system32\oodtray.exe
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "P:\RivaTuner\RivaTuner.exe" /S
O4 - HKLM\..\Run: [AVG8_TRAY] P:\AVG8\avgtray.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE H:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] H:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Total Uninstall Agent] "p:\Total Uninstall 4\TuStarter.exe" "p:\Total Uninstall 4\TuAgent.exe"
O4 - HKCU\..\Run: [LClock] P:\LClock\lclock.exe
O4 - Startup: TrayIt!.lnk = P:\TrayIt!\TrayIt!.exe
O4 - Global Startup: Shortcut to tinyresmeter097.lnk = P:\TinyResMeter\tinyresmeter097.exe
O4 - Global Startup: Wireless Network Monitor.lnk = ?
O8 - Extra context menu item: Customize Menu - file://P:\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://p:\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms - file://P:\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://P:\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://P:\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://P:\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://P:\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://P:\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://P:\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://P:\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://P:\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - P:\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: {12F7F128-B36C-4843-8AA4-A5F71A969331} (Launcher Control) - https://horizons.istaria.com/controls/launcher.ocx
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1206854180984
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1207632159593
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - P:\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - H:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: WgaLogon - H:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - H:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - H:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - P:\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - P:\AVG8\avgwdsvc.exe
O23 - Service: Juniper Network Connect Service (dsNcService) - Juniper Networks - P:\Juniper Networks\Common Files\dsNcService.exe
O23 - Service: Imapi Helper - Alex Feinman - H:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: NICSer_WUSBF54G - Unknown owner - P:\Linksys\WUSBF54G\NICServ.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - H:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - H:\WINDOWS\system32\oodag.exe
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - H:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe

-- File Associations -----------------------------------------------------------

All associations okay.

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 TVicPort - h:\windows\system32\drivers\tvicport.sys <Not Verified; EnTech Taiwan; TVicPort Generic Device Driver for Windows 95/98/ME/NT/2000/2003/XP/XP64>
R2 windrvNT - h:\windows\system32\windrvnt.sys
R3 dsNcAdpt (Juniper Network Connect Adapter) - h:\windows\system32\drivers\dsncadpt.sys <Not Verified; Juniper Networks; Network Connect>
R3 RivaTuner32 - p:\rivatuner\rivatuner32.sys
R3 ZDPSp50 (ZDPSp50 NDIS Protocol Driver) - h:\windows\system32\drivers\zdpsp50.sys <Not Verified; Printing Communications Assoc., Inc. (PCAUSA); PCAUSA Rawether for Windows>

S1 TVicPort64 - h:\windows\syswow64\drivers\tvicport64.sys (file missing)
S3 ALSysIO - h:\docume~1\criman~1\locals~1\temp\alsysio.sys (file missing)
S3 ENTECH - h:\windows\system32\drivers\entech.sys <Not Verified; EnTech Taiwan; PowerStrip>
S3 XDva134 - h:\windows\system32\xdva134.sys (file missing)

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 dsNcService (Juniper Network Connect Service) - p:\juniper networks\common files\dsncservice.exe <Not Verified; Juniper Networks; Network Connect>
R2 NICSer_WUSBF54G - p:\linksys\wusbf54g\nicserv.exe

S3 Imapi Helper - "h:\program files\alex feinman\iso recorder\imapihelper.exe" <Not Verified; Alex Feinman; ISO Recorder>

-- Device Manager: Disabled ----------------------------------------------------

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: NVIDIA nForce Networking Controller
Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0373\4&575C2CF&1&00
Manufacturer: NVIDIA
Name: NVIDIA nForce Networking Controller
PNP Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0373\4&575C2CF&1&00
Service: NVENETFD

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: NVIDIA nForce Networking Controller
Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0373\4&19933FE2&1&00
Manufacturer: NVIDIA
Name: NVIDIA nForce Networking Controller #2
PNP Device ID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV0373\4&19933FE2&1&00
Service: NVENETFD

-- Files created between 2008-05-18 and 2008-06-18 -----------------------------

2008-06-18 22:39:44 0 d-------- H:\WINDOWS\LastGood
2008-06-18 22:39:28 0 d-------- P:\Panda Security <PANDAS~1>
2008-06-18 22:28:57 0 dr-h----- H:\Documents and Settings\crimanysakes\Recent
2008-06-18 22:16:06 0 d-------- H:\!KillBox
2008-06-15 16:00:06 0 d-------- P:\CCleaner
2008-06-14 14:13:57 0 d-------- H:\WINDOWS\nvidia icons
2008-06-13 00:27:29 0 d-------- H:\Documents and Settings\LocalService\Application Data\Juniper Networks
2008-06-12 17:44:48 0 d-------- P:\WinSCP
2008-06-12 15:15:28 0 d-------- H:\Documents and Settings\NetworkService\Application Data\Juniper Networks
2008-06-12 15:15:25 0 d-------- P:\Juniper Networks
2008-06-12 15:15:25 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\Juniper Networks
2008-06-07 16:51:45 0 dr-h----- H:\Documents and Settings\crimanysakes\Application Data\SecuROM
2008-06-07 02:01:26 0 d-------- P:\Electronic Arts
2008-06-07 01:51:15 0 d-------- H:\Program Files\Common Files\BioWare
2008-06-06 18:12:44 0 d-------- H:\Program Files\Common Files\AnswerWorks 5.0
2008-06-06 18:12:38 1843200 --a------ H:\WINDOWS\system32\acXMLParser.dll <Not Verified; Apache Software Foundation; Xerces-C Version 2.7.0>
2008-05-28 19:33:14 0 d-------- H:\WINDOWS\system32\drivers\Avg
2008-05-28 19:33:12 0 d-------- P:\AVG8
2008-05-28 19:33:12 0 d-------- P:\AVG
2008-05-28 19:33:12 0 d-------- H:\Documents and Settings\All Users\Application Data\avg8
2008-05-27 22:10:24 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\DivX
2008-05-27 21:48:09 0 d-------- H:\Documents and Settings\All Users\Application Data\media center programs
2008-05-27 18:47:09 0 d-------- H:\Documents and Settings\All Users\Application Data\Funcom

-- Find3M Report ---------------------------------------------------------------

2008-06-18 22:25:22 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\TeraCopy
2008-06-18 01:49:18 0 d-------- P:\Trillian
2008-06-17 15:39:47 0 d-------- P:\Vim
2008-06-17 15:26:19 600 --a------ H:\Documents and Settings\crimanysakes\Application Data\winscp.rnd
2008-06-14 16:52:22 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\Skype
2008-06-14 16:07:33 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\skypePM
2008-06-07 20:39:20 0 d-------- P:\Quicken
2008-06-07 02:01:28 0 d--h----- P:\InstallShield Installation Information
2008-06-07 01:59:52 0 d-------- H:\Program Files\Common Files\InstallShield
2008-06-06 18:12:35 0 d-------- P:\Config.Msi
2008-05-22 19:40:00 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\AccurateRip
2008-05-16 18:07:15 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\Acronis
2008-05-16 15:33:42 0 d-------- P:\WinDirStat
2008-05-16 00:37:49 0 d-------- P:\NCSoft
2008-05-16 00:37:48 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\GetRightToGo
2008-05-07 22:16:48 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\wootalyzer
2008-05-07 22:16:32 0 d-------- P:\Wootalyzer
2008-05-05 17:34:03 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\FreeStone Group
2008-05-05 12:30:12 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\Miranda
2008-05-05 00:11:59 0 d-------- P:\OCCT
2008-05-04 16:55:53 0 d-------- P:\MemSet
2008-05-03 21:24:42 0 d-------- P:\SIW
2008-05-03 18:43:24 0 d-------- P:\Total Uninstall 4
2008-05-03 18:36:18 0 d-------- P:\TeraCopy
2008-05-02 23:12:56 0 d-------- P:\3DMark06
2008-05-02 23:05:00 86016 --a------ H:\WINDOWS\system32\OpenAL32.dll <Not Verified; Portions (C) Creative Labs Inc. and NVIDIA Corp.; Standard OpenAL(TM) Library>
2008-05-02 22:46:00 1630208 --a------ H:\WINDOWS\system32\nwiz.exe
2008-05-02 22:46:00 1019904 --a------ H:\WINDOWS\system32\nvwimg.dll
2008-05-02 22:46:00 1703936 --a------ H:\WINDOWS\system32\nvwdmcpl.dll
2008-05-02 22:46:00 466944 --a------ H:\WINDOWS\system32\nvshell.dll
2008-05-02 22:46:00 1486848 --a------ H:\WINDOWS\system32\nview.dll
2008-05-02 22:46:00 1339392 --a------ H:\WINDOWS\system32\nvdspsch.exe
2008-05-02 22:46:00 442368 --a------ H:\WINDOWS\system32\nvappbar.exe
2008-05-02 22:46:00 425984 --a------ H:\WINDOWS\system32\keystone.exe
2008-05-02 01:44:13 0 d-------- P:\Windows Media Connect 2
2008-05-02 01:42:54 0 d-------- P:\Windows Media Components
2008-04-20 21:50:06 0 d-------- H:\Documents and Settings\crimanysakes\Application Data\VirtuaWin
2008-04-20 21:47:28 0 d-------- P:\xplorer2_lite
2008-04-06 12:07:51 0 --a------ H:\Documents and Settings\crimanysakes\Application Data\.googlewebacchosts
2008-03-30 22:45:16 413696 --a------ H:\WINDOWS\system32\wrap_oal.dll <Not Verified; Creative Labs; Creative Labs OpenAL32>
2008-03-30 01:09:32 35363 --a------ H:\WINDOWS\system32\windrvNT.sys
2008-03-30 01:09:32 53248 --a------ H:\WINDOWS\system32\suppdll.dll
2008-03-30 00:30:23 0 --a------ H:\WINDOWS\nsreg.dat
2008-03-30 00:18:43 315392 --a------ H:\WINDOWS\HideWin.exe <Not Verified; Realtek Semiconductor Corp.; HD Audio Hide windows program>
2008-03-28 01:14:50 21640 --a------ H:\WINDOWS\system32\emptyregdb.dat
2008-03-27 17:05:42 62 --ahs---- H:\Documents and Settings\crimanysakes\Application Data\desktop.ini

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="H:\WINDOWS\system32\NvCpl.dll" [05/02/2008 10:46 PM]
"nwiz"="nwiz.exe" [05/02/2008 10:46 PM H:\WINDOWS\system32\nwiz.exe]
"TrueImageMonitor.exe"="P:\TrueImage\TrueImageMonitor.exe" [10/30/2007 08:06 PM]
"AcronisTimounterMonitor"="P:\TrueImage\TimounterMonitor.exe" [10/30/2007 08:11 PM]
"Acronis Scheduler2 Service"="H:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe" [10/30/2007 08:07 PM]
"CTHelper"="CTHELPER.EXE" [08/17/2006 11:32 AM H:\WINDOWS\CTHELPER.EXE]
"CTxfiHlp"="CTXFIHLP.EXE" [08/17/2006 11:32 AM H:\WINDOWS\system32\CTXFIHLP.EXE]
"RivaTuner"="P:\RivaTuner\RivaTuner.exe" [04/28/2008 11:25 AM]
"OODefragTray"="H:\WINDOWS\system32\oodtray.exe" [05/11/2007 02:08 AM]
"RivaTunerStartupDaemon"="P:\RivaTuner\RivaTuner.exe" [04/28/2008 11:25 AM]
"AVG8_TRAY"="P:\AVG8\avgtray.exe" [05/28/2008 07:33 PM]
"NvMediaCenter"="H:\WINDOWS\system32\NvMcTray.dll" [05/02/2008 10:46 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="H:\WINDOWS\system32\ctfmon.exe" [08/04/2004 05:00 AM]
"Total Uninstall Agent"="p:\Total Uninstall 4\TuStarter.exe" [04/13/2008 09:26 AM]
"LClock"="P:\LClock\lclock.exe" [09/19/2004 11:27 AM]

H:\Documents and Settings\crimanysakes\Start Menu\Programs\Startup\
TrayIt!.lnk - P:\TrayIt!\TrayIt!.exe [4/6/2008 10:15:36 PM]

H:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Shortcut to tinyresmeter097.lnk - P:\TinyResMeter\tinyresmeter097.exe [4/7/2008 11:28:14 PM]
Wireless Network Monitor.lnk - P:\Linksys\WUSBF54G\wlMonitor.exe [4/9/2008 9:05:57 PM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 relog_ap

-- End of Deckard's System Scanner: finished at 2008-06-18 22:46:56 ------------