DDS (Version 1.0) - NTFSx86
Run by Home at 13:56:39.56 on Tue 11/18/2008
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.959.271 [GMT -5:00]
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe
C:\Program Files\WebMediaViewer\qttask.exe
C:\Program Files\WebMediaViewer\hpmon.exe
C:\WINDOWS\system32\ICO.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\Program Files\WebMediaViewer\hpmom.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\Program Files\WebMediaViewer\qttaskm.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.5.0_15\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Rainlendar\Rainlendar.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\stickies\stickies.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Home\Desktop\dds.scr
============== Psuedo HJT Report ===============
uSearch Page = hxxp://windiwsfsearch.com
uSearch Bar = hxxp://windiwsfsearch.com/ie6.html
uSearchMigratedDefaultURL = hxxp://windiwsfsearch.com/search?q={searchTerms}
uStart Page = about:blank
uDefault_Search_URL = hxxp://windiwsfsearch.com
mDefault_Page_URL = hxxp://www.yahoo.com
mDefault_Search_URL = hxxp://windiwsfsearch.com
mSearch Page = hxxp://windiwsfsearch.com
mStart Page = hxxp://www.yahoo.com
mSearchMigratedDefaultURL = hxxp://windiwsfsearch.com/search?q={searchTerms}
mSearch Bar = hxxp://windiwsfsearch.com/ie6.html
uSearchAssistant = hxxp://windiwsfsearch.com
mSearchURL = hxxp://windiwsfsearch.com
mSearchAssistant = hxxp://windiwsfsearch.com
uURLSearchHooks: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll
BHO: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {64466B8E-20A7-4A4A-AFF4-AAD9CA68B52C} - c:\program files\webmediaviewer\hpmun.dll
BHO: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.5.0_15\bin\ssv.dll
BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\3.1.807.1746\swg.dll
TB: {2EEF94DF-75F6-42E9-B7FB-AF5A170A6E2E} - c:\program files\webmediaviewer\browseul.dll
TB: {2EEF94DF-75F6-42E9-B7FB-AF5A170A6E2E} - c:\program files\webmediaviewer\browseul.dll
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [Weather] c:\program files\aws\weatherbug\Weather.exe 1
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [wblogon] c:\windows\system32\algg.exe
mRun: [Mouse Suite 98 Daemon] ICO.EXE
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [Mixersel] c:\windows\temp\mixersel.exe
mRun: [AMSG] c:\program files\thinkvantage\amsg\Amsg.exe
mRun: [suScheduler] c:\program files\thinkvantage\systemupdate\UCLauncher.exe /SCHEDULER
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [DiskeeperSystray] "c:\program files\diskeeper corporation\diskeeper\DkIcon.exe"
mRun: [LPManager] c:\progra~1\lenovo\lenovo~2\LPMGR.exe
mRun: [cssauthe] "c:\program files\ibm thinkvantage\client security solution\cssauthe.exe" silent
mRun: [Picasa Media Detector] c:\program files\picasa2\PicasaMediaDetector.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [LanguageShortcut] "c:\program files\cyberlink\powerdvd\language\Language.exe"
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [Windows Defender] "c:\program files\windows defender\MSASCui.exe" -hide
mRun: [SunJavaUpdateSched] "c:\program files\java\jre1.5.0_15\bin\jusched.exe"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [sysftray2] c:\windows\bolivar26.exe
mRun: [cctray] "c:\program files\ca\ca internet security suite\cctray\cctray.exe"
mRun: [QOELOADER] "c:\program files\ca\ca internet security suite\ca anti-spam\qsp-5.1.18.0\QOELoader.exe"
mRun: [CAVRID] "c:\program files\ca\ca internet security suite\ca anti-virus\CAVRID.exe"
mRun: [cafwc] c:\program files\ca\ca internet security suite\ca personal firewall\cafw.exe -cl
mRun: [capfasem] c:\program files\ca\ca internet security suite\ca personal firewall\capfasem.exe
mRun: [<NO NAME>]
mRun: [capfupgrade] c:\program files\ca\ca internet security suite\ca personal firewall\capfupgrade.exe
dRun: [DWQueuedReporting] "c:\progra~1\common~1\micros~1\dw\dwtrig20.exe" -t
mExplorerRun: [QuickTime Task] c:\program files\webmediaviewer\qttask.exe
mExplorerRun: [VMware hptray] c:\program files\webmediaviewer\hpmon.exe
StartupFolder: c:\docume~1\home\startm~1\programs\startup\iwinde~1.lnk - c:\documents and settings\all users\application data\iwin games\desktopalerts\DesktopAlerts.exe
StartupFolder: c:\docume~1\home\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 2.3\program\quickstart.exe
StartupFolder: c:\docume~1\home\startm~1\programs\startup\rainle~1.lnk - c:\program files\rainlendar\Rainlendar.exe
StartupFolder: c:\docume~1\home\startm~1\programs\startup\stickies.lnk - c:\program files\stickies\stickies.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\kodake~1.lnk - c:\program files\kodak\kodak easyshare software\bin\EasyShare.exe
mPolicies-explorer: NoResolveSearch = 1 (0x1)
IE: {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} -
http://www.ietoolexpress.com/redirect.php
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC} - c:\program files\java\jre1.5.0_15\bin\ssv.dll
IE: {3B8FB116-D358-48A3-A5C7-DB84F15CBB04} -
http://www.ietoolexpress.com/redirect.php
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
LSP: c:\windows\system32\VetRedir.dll
Trusted Zone: *.arise.com
Notify: PFW - UmxWnp.Dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
STS: {1f3dd9bf-1472-4a8b-b295-b596a597149b} - c:\windows\system32\gowqug.dll
SEH: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - c:\progra~1\wifd1f~1\MpShHook.dll
============= SERVICES / DRIVERS ===============
R0 KmxStart;KmxStart;c:\windows\system32\drivers\kmxstart.sys
R1 KmxAgent;KmxAgent;c:\windows\system32\drivers\kmxagent.sys
R1 KmxFile;KmxFile;c:\windows\system32\drivers\KmxFile.sys
R1 KmxFw;KmxFw;c:\windows\system32\drivers\kmxfw.sys
R2 ibmfilter;ibmfilter;\??\c:\windows\system32\drivers\ibmfilter.sys
R2 KmxCF;KmxCF;c:\windows\system32\drivers\KmxCF.sys
R2 KmxSbx;KmxSbx;c:\windows\system32\drivers\KmxSbx.sys
R2 smi2;smi2;\??\c:\program files\smi2\smi2.sys
R2 UmxAgent;HIPS Event Manager;"c:\program files\ca\sharedcomponents\hipsengine\UmxAgent.exe"
R2 UmxCfg;HIPS Configuration Interpreter;"c:\program files\ca\sharedcomponents\hipsengine\UmxCfg.exe"
R2 UmxPol;HIPS Policy Manager;"c:\program files\ca\sharedcomponents\hipsengine\UmxPol.exe"
R2 Viewpoint Manager Service;Viewpoint Manager Service;"c:\program files\viewpoint\common\ViewpointService.exe"
R3 dsNcAdpt;Juniper Network Connect Adapter;c:\windows\system32\drivers\dsNcAdpt.sys
R3 KmxCfg;KmxCfg;c:\windows\system32\drivers\kmxcfg.sys
R3 PPCtlPriv;PPCtlPriv;"c:\program files\ca\ca internet security suite\ca anti-spyware\PPCtlPriv.exe"
S0 ANCSQ;ANCSQ;c:\windows\system32\drivers\ANCSQ.sys
S3 pelmouse;Mouse Suite Driver;c:\windows\system32\drivers\pelmouse.sys
S3 pelusblf;USB Mouse Low Filter Driver;c:\windows\system32\drivers\pelusblf.sys
=============== Created Last 30 ================
2008-11-18 11:20 <DIR> --d----- c:\windows\CAVTemp
2008-11-18 11:10 880,560 a------- c:\windows\system32\drivers\vetefile.sys
2008-11-18 11:10 108,368 a------- c:\windows\system32\drivers\veteboot.sys
2008-11-18 11:07 99,592 a------- c:\windows\system32\isafeif.dll
2008-11-18 11:07 79,424 a------- c:\windows\system32\vetredir.dll
2008-11-18 11:07 75,016 a------- c:\windows\system32\isafprod.dll
2008-11-18 11:07 32,264 a------- c:\windows\system32\drivers\vetmonnt.sys
2008-11-18 11:07 26,376 a------- c:\windows\system32\drivers\vet-filt.sys
2008-11-18 11:07 21,512 a------- c:\windows\system32\drivers\vetfddnt.sys
2008-11-18 11:07 21,128 a------- c:\windows\system32\drivers\vet-rec.sys
2008-11-18 11:06 <DIR> --d----- c:\program files\CA
2008-11-18 10:52 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Avg7
2008-11-18 06:10 <DIR> --d----- c:\windows\system32\512686
2008-11-18 06:09 <DIR> --d----- c:\program files\WebMediaViewer
2008-11-17 18:51 1 ----h--- c:\windows\f49f4daa.dat
2008-11-17 18:51 1 ----h--- c:\windows\fmark2.dat
2008-11-13 09:14 <DIR> --d----- c:\docume~1\home\applic~1\Snapfish
2008-11-11 10:18 <DIR> --d----- c:\docume~1\home\applic~1\Productivity Tools
2008-11-07 06:46 <DIR> --d----- c:\program files\MDI VIew
2008-10-27 08:27 <DIR> --d----- c:\program files\iWin.com
2008-10-27 08:26 <DIR> --d----- c:\docume~1\home\applic~1\iWinArcade
2008-10-27 08:25 <DIR> --d----- c:\docume~1\alluse~1\applic~1\iWin Games
2008-10-23 07:09 <DIR> --d----- c:\docume~1\home\applic~1\webex
2008-10-23 07:08 <DIR> --d----- c:\program files\WebEx
2008-10-21 09:58 <DIR> --d----- c:\docume~1\alluse~1\applic~1\WildTangent
2008-10-19 20:01 <DIR> --d----- c:\docume~1\home\applic~1\Dragon Altar Games
==================== Find3M ====================
2008-11-18 13:56 <DIR> --d----- c:\program files\LimeWire
2008-11-18 11:14 <DIR> --d----- c:\docume~1\home\applic~1\stickies
2008-11-18 11:07 <DIR> --d----- c:\program files\common files\Scanner
2008-11-18 10:52 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Grisoft
2008-11-17 17:15 <DIR> --d----- c:\docume~1\home\applic~1\LimeWire
2008-11-17 08:19 15,360 a--s---- c:\windows\system32\gowqug.dll
2008-11-16 09:04 5,427 a------- c:\windows\system32\EGATHDRV.SYS
2008-10-31 05:37 <DIR> --d----- c:\program files\Yahoo!
2008-10-24 06:10 453,632 -------- c:\windows\system32\dllcache\mrxsmb.sys
2008-10-21 05:38 <DIR> --d----- c:\docume~1\home\applic~1\Juniper Networks
2008-10-20 09:22 <DIR> --d----- c:\program files\Citrix
2008-10-16 09:05 <DIR> --d----- c:\program files\Maestro Learning
2008-10-15 11:53 339,456 -------- c:\windows\system32\dllcache\netapi32.dll
2008-10-14 15:50 <DIR> --d----- c:\program files\common files\AOL
2008-10-14 13:54 <DIR> --d----- c:\program files\Viewpoint
2008-10-14 13:54 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Viewpoint
2008-10-14 05:33 <DIR> --d----- c:\docume~1\home\applic~1\ICAClient
2008-10-14 05:30 <DIR> --d----- c:\program files\Juniper Networks
2008-10-13 14:20 <DIR> --d----- c:\program files\Barbie(R) idesign(TM) Ultimate Stylist(TM)
2008-10-03 12:41 6,066,176 -------- c:\windows\system32\dllcache\ieframe.dll
2008-10-01 13:37 61,510 -------- c:\windows\system32\dsGinaLoader.dll
2008-09-30 16:43 1,286,152 a------- c:\windows\system32\msxml4.dll
2008-09-23 05:57 <DIR> --d----- c:\program files\Three Rings Design
2008-09-15 06:57 1,846,016 -------- c:\windows\system32\win32k.sys
2008-09-15 06:57 1,846,016 -------- c:\windows\system32\dllcache\win32k.sys
2008-09-09 16:00 <DIR> --d----- c:\docume~1\home\applic~1\bang
2008-09-04 11:42 1,106,944 a------- c:\windows\system32\msxml3.dll
2008-09-04 11:42 1,106,944 -------- c:\windows\system32\dllcache\msxml3.dll
2008-08-29 20:06 1,350,664 a------- c:\windows\system32\msxml6.dll
2008-08-28 05:04 333,056 -------- c:\windows\system32\dllcache\srv.sys
2008-08-27 03:24 3,593,216 -------- c:\windows\system32\dllcache\mshtml.dll
2008-08-25 03:38 13,824 -------- c:\windows\system32\dllcache\ieudinit.exe
2008-08-25 03:37 70,656 -------- c:\windows\system32\dllcache\ie4uinit.exe
2008-08-23 00:56 635,848 -------- c:\windows\system32\dllcache\iexplore.exe
2008-08-23 00:54 161,792 -------- c:\windows\system32\dllcache\ieakui.dll
2008-08-22 18:00 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Juniper Networks
2008-08-04 14:24 <DIR> --d----- c:\docume~1\home\applic~1\WeatherBug
2008-07-23 19:55 <DIR> --d----- c:\docume~1\alluse~1\applic~1\PlayFirst
2008-07-23 19:55 <DIR> --d----- c:\docume~1\home\applic~1\PlayFirst
2008-07-17 16:31 <DIR> --d----- c:\docume~1\alluse~1\applic~1\CA
2008-07-17 15:14 <DIR> --d----- c:\docume~1\home\applic~1\Comodo
2008-07-09 13:55 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Barbie Fashion Show
2008-06-30 14:41 <DIR> --d----- c:\docume~1\alluse~1\applic~1\n7-89-o9-3r-4t-r9
2008-06-30 14:41 <DIR> --d----- c:\docume~1\home\applic~1\GameHouse
2008-05-19 11:58 <DIR> --d----- c:\docume~1\home\applic~1\Corel Photo Album
2008-04-28 16:37 <DIR> --d----- c:\docume~1\home\applic~1\Gamelab
2008-04-17 09:42 <DIR> --d----- c:\docume~1\home\applic~1\Saba
2008-04-17 09:41 <DIR> --d----- c:\docume~1\home\applic~1\Centra
2008-04-16 14:00 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Kodak
2008-04-16 12:43 <DIR> --d----- c:\docume~1\home\applic~1\Rainlendar
2008-04-16 12:35 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Lavasoft
2008-04-16 12:30 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Nero
2007-05-04 10:38 <DIR> --d----- c:\docume~1\alluse~1\applic~1\ThinkVantage
2007-05-04 10:38 <DIR> --d----- c:\docume~1\home\applic~1\ThinkVantage
2007-05-04 10:22 <DIR> --d----- c:\docume~1\home\applic~1\IBM
2007-05-04 10:19 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Borland
2007-05-04 10:18 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Lenovo
2004-08-09 13:06 <DIR> --d----- c:\docume~1\alluse~1\applic~1\SBSI
2008-08-18 20:23 88 ---shr-- c:\windows\system32\96FD89BD49.sys
2008-08-18 20:23 3,558 ---sh--- c:\windows\system32\KGyGaAvL.sys
============= FINISH: 13:58:22.10 ===============
