[Active] OneCare won't remove 7 "issues" on my system.

pwilliamsaz · 12th October 2008

Ran OneCare Scan. 7 issues were found that it couldn't remove. I have no idea what to do now. Ran logging program as your instructions requested.

Results:

Logfile of random's system information tool 1.04 (written by random/random)
Run by Patrick at 2008-10-12 07:24:29
Microsoft® Windows Vista™ Home Premium Service Pack 1
System drive C: has 49 GB (18%) free of 277 GB
Total RAM: 3070 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:25:04 AM, on 10/12/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Windows\system32\rundll32.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Common Files\Logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Windows\ehome\ehmsas.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\Windows\ehome\ehsched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\ehome\ehRecvr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Patrick\Desktop\RSIT.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Patrick.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\mskapbho.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JS...ws-i586-jc.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{86128EDB-CD5F-429F-9F75-44463B112C76}: NameServer = 68.105.28.11,68.105.29.11,68.105.28.12
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

--
End of file - 14391 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Check Updates for Windows Live Toolbar.job
C:\Windows\tasks\ErrorSmart Scheduled Scan.job
C:\Windows\tasks\GoogleUpdateTaskUser.job
C:\Windows\tasks\McDefragTask.job
C:\Windows\tasks\McQcTask.job
C:\Windows\tasks\Norton Security Scan.job
C:\Windows\tasks\User_Feed_Synchronization-{8F542ED6-13BB-432B-A00D-B348DA487187}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll [2008-07-28 882416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-08-12 1437696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{27B4851A-3207-45A2-B947-BE8AFE6163AB}]
McAfee Phishing Filter - c:\PROGRA~1\mcafee\msk\mskapbho.dll [2008-07-09 246088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-05-07 308856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}]
Yahoo! IE Services Button - C:\Program Files\Yahoo!\Common\yiesrvc.dll [2007-12-12 222448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll [2008-06-20 58688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2008-08-16 2549368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll [2008-10-08 652784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2008-09-04 121632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Brows er Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll [2008-07-28 160496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll [2008-07-28 882416]
{D0943516-5076-4020-A3B5-AEFAF26AB263} - Veoh Browser Plug-in - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll [2008-05-15 352256]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2008-08-16 2549368]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll [2008-09-04 121632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ISTray"=C:\Program Files\Spyware Doctor\pctsTray.exe [2008-07-16 1166216]
"McENUI"=C:\PROGRA~1\McAfee\MHN\McENUI.exe [2008-06-13 1176808]
"mcagent_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2008-07-11 641208]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2008-07-07 167936]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2008-02-29 76304]
"LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [2008-02-13 564496]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2008-02-13 2196240]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-09-03 111936]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""= []
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2007-06-21 1318912]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-05-31 68856]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-08-08 490952]
"Yahoo! Pager"=C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2007-08-30 4670704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\5272c0a9]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-09-03 111936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA]
C:\Users\Patrick\Program Files\DNA\btdna.exe [2008-08-26 342848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bluetooth Connection Assistant]
LBTWIZ.EXE -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cmds]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Corel Photo Downloader]
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe [2005-08-02 106496]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-08-16 29744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Patrick\AppData\Local\Google\Update\GoogleUpdate.exe [2008-09-05 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
C:\Program Files\Google\Google Talk\googletalk.exe [2007-01-01 3739648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2005-06-10 249856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-06-10 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2008-07-30 289064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
C:\Windows\KHALMNPR.EXE [2008-02-29 76304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PeerGuardian]
C:\Program Files\PeerGuardian2\pg2.exe [2007-06-02 1457152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
C:\Program Files\Picasa2\PicasaMediaDetector.exe [2008-08-20 443968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Windows\RtHDVCpl.exe [2007-10-25 4702208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiteAdvisor]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2008-08-12 21741864]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Startup Manager]
C:\Program Files\Advanced System Optimizer\startUp manager.exe [2007-06-22 919280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-05-31 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2008-05-07 185896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Veoh]
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe [2008-08-28 3660848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2007-08-30 4670704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk]
C:\PROGRA~1\Logitech\SetPoint\SetPoint.exe [2008-05-02 805392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Patrick^AppData^Roaming^Microsoft^Win dows^Start Menu^Programs^Startup^Internet - Shortcut.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Patrick^AppData^Roaming^Microsoft^Win dows^Start Menu^Programs^Startup^YPOPs.lnk]
C:\PROGRA~1\YPOPs\ypops.exe [2007-09-04 1331200]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2007-04-19 294912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell ExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscs vc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxs ervice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcore service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscs vc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfSer vice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdauxs ervice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sdcore service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Syste m]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameter s\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameter s\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountp oints2\{c580dedc-1959-11dd-a13f-806e6f6e6963}]
shell\AutoRun\command - E:\start.exe

Continued in next post

pwilliamsaz · 12th October 2008

======File associations======

.reg - open - regedit.exe "%1" %*
.scr - open - "%1" %*

======List of files/folders created in the last 3 months======

2008-10-12 07:24:30 ----D---- C:\Program Files\trend micro
2008-10-12 07:24:29 ----D---- C:\rsit
2008-10-05 21:56:01 ----D---- C:\Windows\TweakVI
2008-10-05 21:56:01 ----D---- C:\Program Files\TweakVI
2008-10-05 21:16:21 ----D---- C:\Program Files\IObit
2008-10-05 12:15:37 ----D---- C:\Users\Patrick\AppData\Roaming\Avery
2008-10-02 18:58:55 ----D---- C:\Users\Patrick\AppData\Roaming\Pamela
2008-10-02 18:58:50 ----D---- C:\Program Files\Pamela
2008-09-30 19:21:27 ----D---- C:\Program Files\Vuze
2008-09-28 22:18:05 ----D---- C:\Program Files\Bonjour
2008-09-24 19:36:00 ----R---- C:\Windows\bwUnin-8.1.1.87-8876480SL.exe
2008-09-24 15:44:31 ----R---- C:\Windows\bwUnin-8.1.1.50-8876480SL.exe
2008-09-24 15:44:02 ----D---- C:\Users\Patrick\AppData\Roaming\Leadertech
2008-09-24 15:43:36 ----A---- C:\Windows\system32\LVUI2RC.dll
2008-09-24 15:43:36 ----A---- C:\Windows\system32\LVUI2.dll
2008-09-24 15:43:36 ----A---- C:\Windows\system32\lvcoinst.ini
2008-09-24 15:43:36 ----A---- C:\Windows\system32\lvcodec2.dll
2008-09-24 15:43:36 ----A---- C:\Windows\system32\lvci11701196.dll
2008-09-19 17:17:25 ----D---- C:\Users\Patrick\AppData\Roaming\ImgBurn
2008-09-19 16:39:41 ----D---- C:\Program Files\ImgBurn
2008-09-19 15:08:19 ----D---- C:\Program Files\iPod(77)
2008-09-19 15:08:18 ----D---- C:\Program Files\iTunes(78)
2008-09-19 15:04:32 ----D---- C:\Program Files\QuickTime(87)
2008-09-19 14:45:44 ----D---- C:\Program Files\Bonjour(0)
2008-09-17 17:01:00 ----D---- C:\Program Files\Systweak
2008-09-16 17:09:31 ----D---- C:\Users\Patrick\AppData\Roaming\Petroglyph
2008-09-16 16:52:36 ----D---- C:\Program Files\LucasArts
2008-09-15 22:21:12 ----D---- C:\Program Files\DAEMON Tools Lite
2008-09-15 19:14:12 ----D---- C:\Windows\system32\Futuremark
2008-09-15 16:44:27 ----D---- C:\Users\Patrick\AppData\Roaming\DAEMON Tools
2008-09-14 14:57:02 ----D---- C:\Users\Patrick\AppData\Roaming\DivX
2008-09-14 08:43:15 ----A---- C:\Windows\_MSRSTRT.EXE
2008-09-14 08:24:18 ----D---- C:\Program Files\ImTOO
2008-09-14 08:13:02 ----D---- C:\Program Files\DVD Decrypter
2008-09-14 07:43:49 ----D---- C:\Program Files\AC3Filter
2008-09-12 00:16:14 ----D---- C:\Program Files\MagicISO
2008-09-11 23:48:11 ----D---- C:\Program Files\PowerISO
2008-09-09 18:47:37 ----A---- C:\Windows\system32\Apphlpdm.dll
2008-09-09 18:47:35 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2008-09-09 18:47:14 ----A---- C:\Windows\system32\wmpeffects.dll
2008-09-09 18:47:09 ----A---- C:\Windows\system32\dataclen.dll
2008-09-09 18:47:09 ----A---- C:\Windows\system32\cdd.dll
2008-09-08 23:34:30 ----D---- C:\Program Files\Prima Games
2008-09-08 22:26:37 ----A---- C:\Windows\system32\xinput1_3.dll
2008-09-08 22:26:35 ----A---- C:\Windows\system32\d3dx10_33.dll
2008-09-08 22:26:35 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2008-09-08 22:26:33 ----A---- C:\Windows\system32\d3dx9_33.dll
2008-09-08 22:26:32 ----A---- C:\Windows\system32\d3dx10.dll
2008-09-08 22:26:30 ----A---- C:\Windows\system32\d3dx9_31.dll
2008-09-08 22:03:19 ----D---- C:\ProgramData\Media Center Programs
2008-09-08 22:02:27 ----D---- C:\Program Files\Sierra Entertainment
2008-09-08 22:00:10 ----D---- C:\wic
2008-09-08 20:04:46 ----D---- C:\ProgramData\Trymedia
2008-09-08 20:00:58 ----D---- C:\Program Files\Ubi Soft Games
2008-09-08 18:18:08 ----D---- C:\Program Files\Common Files\PX Storage Engine
2008-09-08 18:17:52 ----D---- C:\Program Files\DivX
2008-09-08 16:14:14 ----A---- C:\Windows\system32\xvidcore.dll
2008-09-08 16:14:13 ----D---- C:\Program Files\Xvid
2008-09-08 16:14:13 ----A---- C:\Windows\system32\xvidvfw.dll
2008-09-08 15:52:46 ----D---- C:\ProgramData\Azureus
2008-09-08 15:52:38 ----D---- C:\Users\Patrick\AppData\Roaming\Azureus
2008-09-08 15:38:34 ----D---- C:\Users\Patrick\AppData\Roaming\WinRAR
2008-09-08 15:38:11 ----D---- C:\Program Files\WinRAR
2008-09-06 15:12:44 ----D---- C:\Windows\pss
2008-09-05 03:00:37 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-09-04 16:58:41 ----D---- C:\Users\Patrick\AppData\Roaming\goombah
2008-09-04 16:31:18 ----D---- C:\Users\Patrick\AppData\Roaming\Ruckus Network
2008-09-04 16:30:57 ----D---- C:\Program Files\Emergent Music LLC
2008-09-04 16:29:32 ----A---- C:\Windows\system32\capicom.dll
2008-09-04 16:29:21 ----D---- C:\Program Files\Ruckus Player
2008-09-03 21:09:17 ----D---- C:\Program Files\HP
2008-09-03 20:45:54 ----D---- C:\Program Files\Common Files\Scanner
2008-09-03 20:45:47 ----D---- C:\Program Files\CA Yahoo! Anti-Spy
2008-09-03 16:40:06 ----D---- C:\Program Files\Apple Software Update
2008-08-31 20:59:11 ----D---- C:\Windows\system32\X-System 815
2008-08-31 20:10:24 ----D---- C:\Program Files\Ubi Soft
2008-08-31 09:06:20 ----D---- C:\ProgramData\InstallShield
2008-08-31 09:05:37 ----D---- C:\Users\Patrick\AppData\Roaming\Corel
2008-08-31 09:04:54 ----D---- C:\Program Files\Corel
2008-08-31 09:04:54 ----D---- C:\Program Files\Common Files\Corel
2008-08-30 17:46:43 ----D---- C:\Windows\system32\Painter IX Tutorial
2008-08-30 17:42:14 ----D---- C:\Windows\system32\Corel Painter IX
2008-08-29 19:03:57 ----D---- C:\Program Files\iPod
2008-08-29 19:03:47 ----D---- C:\Program Files\iTunes
2008-08-29 19:01:51 ----D---- C:\Program Files\QuickTime
2008-08-29 19:00:03 ----D---- C:\Program Files\Common Files\Apple
2008-08-29 10:18:58 ----A---- C:\Windows\system32\dns-sd.exe
2008-08-29 09:53:50 ----A---- C:\Windows\system32\dnssd.dll
2008-08-28 11:03:17 ----A---- C:\Windows\system32\javaws.exe
2008-08-28 11:03:17 ----A---- C:\Windows\system32\javaw.exe
2008-08-28 11:03:17 ----A---- C:\Windows\system32\java.exe
2008-08-28 11:02:10 ----D---- C:\Program Files\Java
2008-08-28 11:01:51 ----D---- C:\Program Files\Common Files\Java
2008-08-28 10:07:49 ----D---- C:\Program Files\Skype
2008-08-28 10:07:49 ----D---- C:\Program Files\Common Files\Skype
2008-08-27 13:58:02 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2008-08-27 13:57:34 ----D---- C:\Users\Patrick\AppData\Roaming\SUPERAntiSpyware.com
2008-08-27 13:57:34 ----D---- C:\Program Files\SUPERAntiSpyware
2008-08-27 13:56:48 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2008-08-27 13:52:11 ----D---- C:\Users\Patrick\AppData\Roaming\Malwarebytes
2008-08-27 13:52:00 ----D---- C:\ProgramData\Malwarebytes
2008-08-27 13:51:59 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-26 21:39:22 ----D---- C:\Windows\Repair
2008-08-26 21:37:08 ----D---- C:\Users\Patrick\AppData\Roaming\Systweak
2008-08-26 21:36:27 ----D---- C:\Program Files\Advanced System Optimizer
2008-08-26 06:41:42 ----D---- C:\Users\Patrick\AppData\Roaming\BitTorrent
2008-08-26 06:41:20 ----D---- C:\Users\Patrick\AppData\Roaming\DNA
2008-08-26 06:41:20 ----D---- C:\Program Files\DNA
2008-08-26 06:41:18 ----D---- C:\Program Files\BitTorrent
2008-08-26 05:44:33 ----D---- C:\Program Files\AirStrike II DEMO
2008-08-26 05:17:40 ----D---- C:\Program Files\PeerGuardian2
2008-08-25 22:22:37 ----D---- C:\Program Files\Microsoft Visual Studio .NET 2003
2008-08-25 18:41:32 ----A---- C:\Windows\system32\Wh2Robo.dll
2008-08-25 18:41:32 ----A---- C:\Windows\system32\Roboex32.dll
2008-08-25 18:41:32 ----A---- C:\Windows\system32\Inetwh32.dll
2008-08-25 18:41:25 ----D---- C:\Program Files\Paint Shop Pro 6
2008-08-21 05:28:49 ----D---- C:\Program Files\Windows Live Favorites
2008-08-20 08:21:36 ----D---- C:\Program Files\Microsoft ActiveSync
2008-08-19 00:41:49 ----A---- C:\Windows\system32\wups2.dll
2008-08-19 00:41:49 ----A---- C:\Windows\system32\wucltux.dll
2008-08-19 00:41:49 ----A---- C:\Windows\system32\wuaueng.dll
2008-08-19 00:41:49 ----A---- C:\Windows\system32\wuauclt.exe
2008-08-19 00:41:04 ----A---- C:\Windows\system32\wups.dll
2008-08-19 00:41:04 ----A---- C:\Windows\system32\wudriver.dll
2008-08-19 00:41:04 ----A---- C:\Windows\system32\wuapi.dll
2008-08-19 00:40:44 ----A---- C:\Windows\system32\wuwebv.dll
2008-08-19 00:40:44 ----A---- C:\Windows\system32\wuapp.exe
2008-08-17 19:49:55 ----DC---- C:\Windows\system32\DRVSTORE
2008-08-17 05:43:43 ----D---- C:\ProgramData\ZoomBrowser
2008-08-17 05:43:09 ----D---- C:\Program Files\Canon
2008-08-16 17:13:37 ----HD---- C:\ProgramData\CanonBJ
2008-08-16 17:12:53 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information
2008-08-16 17:12:22 ----A---- C:\Windows\system32\CNMLM7Y.DLL
2008-08-16 17:12:00 ----HD---- C:\Program Files\CanonBJ
2008-08-16 16:31:43 ----D---- C:\Program Files\Common Files\Symantec Shared
2008-08-16 16:30:40 ----D---- C:\ProgramData\Symantec
2008-08-16 16:17:48 ----D---- C:\Program Files\Sun
2008-08-16 16:11:13 ----D---- C:\Users\Patrick\AppData\Roaming\PC Tools
2008-08-16 16:11:13 ----D---- C:\Program Files\Spyware Doctor
2008-08-16 16:11:03 ----D---- C:\Windows\system32\runtime
2008-08-16 16:10:43 ----D---- C:\Program Files\Norton Security Scan
2008-08-16 13:35:08 ----A---- C:\Windows\system32\msshooks.dll
2008-08-16 13:35:07 ----A---- C:\Windows\system32\msscb.dll
2008-08-16 13:34:58 ----A---- C:\Windows\system32\thawbrkr.dll
2008-08-16 13:34:58 ----A---- C:\Windows\system32\srchadmin.dll
2008-08-16 13:34:58 ----A---- C:\Windows\system32\SearchFilterHost.exe
2008-08-16 13:34:58 ----A---- C:\Windows\system32\propsys.dll
2008-08-16 13:34:58 ----A---- C:\Windows\system32\propdefs.dll
2008-08-16 13:34:58 ----A---- C:\Windows\system32\msstrc.dll
2008-08-16 13:34:58 ----A---- C:\Windows\system32\mssprxy.dll
2008-08-16 13:34:58 ----A---- C:\Windows\system32\mssitlb.dll
2008-08-16 13:34:58 ----A---- C:\Windows\system32\msshsq.dll
2008-08-16 13:34:58 ----A---- C:\Windows\system32\korwbrkr.dll
2008-08-16 13:34:57 ----A---- C:\Windows\system32\xmlfilter.dll
2008-08-16 13:34:57 ----A---- C:\Windows\system32\wsepno.dll
2008-08-16 13:34:57 ----A---- C:\Windows\system32\rtffilt.dll
2008-08-16 13:34:57 ----A---- C:\Windows\system32\offfilt.dll
2008-08-16 13:34:57 ----A---- C:\Windows\system32\nlhtml.dll
2008-08-16 13:34:57 ----A---- C:\Windows\system32\msscntrs.dll
2008-08-16 13:34:57 ----A---- C:\Windows\system32\mimefilt.dll
2008-08-16 13:34:57 ----A---- C:\Windows\system32\chsbrkr.dll
2008-08-16 13:34:56 ----A---- C:\Windows\system32\tquery.dll
2008-08-16 13:34:56 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2008-08-16 13:34:56 ----A---- C:\Windows\system32\SearchIndexer.exe
2008-08-16 13:34:56 ----A---- C:\Windows\system32\mssvp.dll
2008-08-16 13:34:56 ----A---- C:\Windows\system32\mssrch.dll
2008-08-16 13:34:56 ----A---- C:\Windows\system32\mssphtb.dll
2008-08-16 13:34:56 ----A---- C:\Windows\system32\mssph.dll
2008-08-16 13:34:56 ----A---- C:\Windows\system32\chtbrkr.dll
2008-08-16 10:26:06 ----D---- C:\ProgramData\WholeSecurity
2008-08-15 19:08:52 ----D---- C:\Program Files\Common Files\Canon
2008-08-14 07:32:56 ----D---- C:\Program Files\Registry Mechanic
2008-08-13 22:30:05 ----D---- C:\Program Files\Common Files\SWF Studio
2008-08-13 07:00:53 ----A---- C:\Windows\ntbtlog.txt
2008-08-13 03:06:28 ----A---- C:\Windows\system32\tzres.dll
2008-08-12 11:31:28 ----A---- C:\Windows\system32\IPSECSVC.DLL
2008-08-12 11:31:23 ----A---- C:\Windows\system32\es.dll
2008-08-12 11:31:19 ----A---- C:\Windows\system32\mshtml.dll
2008-08-12 11:31:19 ----A---- C:\Windows\system32\ieframe.dll
2008-08-12 11:31:18 ----A---- C:\Windows\system32\wininet.dll
2008-08-12 11:31:18 ----A---- C:\Windows\system32\urlmon.dll
2008-08-12 11:31:16 ----A---- C:\Windows\system32\mstime.dll
2008-08-12 11:31:12 ----A---- C:\Windows\system32\jsproxy.dll
2008-08-12 11:30:59 ----A---- C:\Windows\system32\inetcomm.dll
2008-08-12 08:45:29 ----AD---- C:\ProgramData\TEMP
2008-08-11 03:27:43 ----D---- C:\ProgramData\WindowsSearch
2008-08-01 20:49:59 ----D---- C:\Program Files\FreePOPs
2008-08-01 10:42:54 ----D---- C:\Program Files\YPOPs
2008-07-31 21:24:14 ----D---- C:\Users\Patrick\AppData\Roaming\Thunderbird
2008-07-31 21:24:01 ----D---- C:\Program Files\Mozilla Thunderbird
2008-07-26 15:23:30 ----A---- C:\Windows\system32\lvci11801048.dll
2008-07-25 11:14:43 ----D---- C:\Program Files\Windows Live Safety Center
2008-07-25 01:36:00 ----A---- C:\Windows\system32\DivXsm.exe
2008-07-25 01:34:54 ----A---- C:\Windows\system32\dpl100.dll
2008-07-25 01:34:52 ----A---- C:\Windows\system32\dtu100.dll
2008-07-25 01:34:50 ----A---- C:\Windows\system32\dpuGUI10.dll
2008-07-25 01:34:46 ----A---- C:\Windows\system32\dpv11.dll
2008-07-25 01:34:46 ----A---- C:\Windows\system32\dpus11.dll
2008-07-25 01:34:46 ----A---- C:\Windows\system32\dpuGUI11.dll
2008-07-25 01:34:46 ----A---- C:\Windows\system32\dpu11.dll
2008-07-25 01:34:46 ----A---- C:\Windows\system32\dpu10.dll
2008-07-25 01:34:42 ----A---- C:\Windows\system32\divx_xx07.dll
2008-07-25 01:34:40 ----A---- C:\Windows\system32\divx_xx11.dll
2008-07-25 01:34:40 ----A---- C:\Windows\system32\divx_xx0c.dll
2008-07-25 01:34:40 ----A---- C:\Windows\system32\divx_xx0a.dll
2008-07-25 01:34:36 ----A---- C:\Windows\system32\DivX.dll
2008-07-25 01:34:30 ----A---- C:\Windows\system32\DivXCodecVersionChecker.exe
2008-07-23 09:50:52 ----A---- C:\Windows\system32\qt-dx331.dll
2008-07-23 09:48:40 ----A---- C:\Windows\system32\ssldivx.dll
2008-07-23 09:48:40 ----A---- C:\Windows\system32\libdivx.dll
2008-07-23 09:47:34 ----A---- C:\Windows\system32\dtu100.dll.manifest
2008-07-23 09:47:34 ----A---- C:\Windows\system32\dpl100.dll.manifest
2008-07-23 09:46:38 ----A---- C:\Windows\system32\DivXWMPExtType.dll
2008-07-18 01:24:14 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2008-07-18 01:24:11 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2008-07-18 01:24:04 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2008-07-14 18:25:09 ----N---- C:\Windows\system32\pxhpinst.exe
2008-07-14 18:24:52 ----D---- C:\Program Files\Picasa2

======List of files/folders modified in the last 3 months======

2008-10-12 07:24:40 ----D---- C:\Windows\Temp
2008-10-12 07:24:30 ----RD---- C:\Program Files
2008-10-12 06:52:09 ----D---- C:\Windows\System32
2008-10-12 06:52:09 ----D---- C:\Windows\inf
2008-10-12 06:52:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2008-10-12 06:48:37 ----D---- C:\Windows\Prefetch
2008-10-12 06:47:56 ----D---- C:\Windows\system32\drivers
2008-10-12 06:32:36 ----D---- C:\Users\Patrick\AppData\Roaming\Skype
2008-10-12 00:56:19 ----SD---- C:\Windows\Downloaded Program Files
2008-10-12 00:00:05 ----D---- C:\Users\Patrick\AppData\Roaming\skypePM
2008-10-11 16:25:37 ----D---- C:\ProgramData\Google Updater
2008-10-11 03:57:35 ----SHD---- C:\System Volume Information
2008-10-11 02:12:37 ----D---- C:\Windows\system32\catroot2
2008-10-11 01:55:40 ----SHD---- C:\Windows\Installer
2008-10-09 21:18:53 ----D---- C:\Downloads
2008-10-07 23:05:00 ----D---- C:\Windows
2008-10-05 22:21:58 ----D---- C:\ProgramData\Yahoo! Companion
2008-10-02 21:44:09 ----SD---- C:\Users\Patrick\AppData\Roaming\Microsoft
2008-10-02 04:19:27 ----D---- C:\ProgramData\SiteAdvisor
2008-10-02 04:19:08 ----D---- C:\Program Files\McAfee
2008-10-01 18:29:37 ----D---- C:\ProgramData\McAfee
2008-09-29 02:23:47 ----D---- C:\Windows\system32\catroot
2008-09-24 18:00:13 ----D---- C:\Program Files\Common Files\Logishrd
2008-09-24 15:47:21 ----D---- C:\Windows\twain_32
2008-09-24 15:44:21 ----HD---- C:\Program Files\InstallShield Installation Information
2008-09-24 15:44:21 ----D---- C:\Program Files\Logitech
2008-09-24 15:38:41 ----D---- C:\ProgramData\LogiShrd
2008-09-24 15:38:23 ----D---- C:\ProgramData\Logitech
2008-09-19 18:49:54 ----D---- C:\Windows\system32\config
2008-09-19 18:49:34 ----D---- C:\Windows\Tasks
2008-09-19 18:49:34 ----D---- C:\Windows\system32\Tasks
2008-09-19 18:49:34 ----D---- C:\Windows\system32\spool
2008-09-19 18:49:34 ----D---- C:\Windows\system32\Msdtc
2008-09-19 18:49:34 ----D---- C:\Windows\system32\CodeIntegrity
2008-09-19 18:49:19 ----D---- C:\Windows\system32\wbem
2008-09-19 18:49:19 ----D---- C:\Windows\registration
2008-09-19 15:08:18 ----HD---- C:\ProgramData
2008-09-19 15:08:18 ----D---- C:\ProgramData\Apple Computer
2008-09-17 16:36:15 ----D---- C:\Windows\system32\WDI
2008-09-17 15:47:23 ----RSD---- C:\Windows\assembly
2008-09-15 23:21:55 ----D---- C:\Windows\system32\Macromed
2008-09-12 17:58:10 ----D---- C:\Windows\winsxs
2008-09-12 17:21:47 ----D---- C:\Program Files\Microsoft Games
2008-09-10 03:14:11 ----D---- C:\Windows\AppPatch
2008-09-10 03:05:31 ----D---- C:\ProgramData\Microsoft Help
2008-09-08 18:18:08 ----D---- C:\Program Files\Common Files
2008-09-01 07:20:39 ----SD---- C:\ProgramData\Microsoft
2008-08-31 09:04:54 ----D---- C:\Program Files\Common Files\InstallShield
2008-08-29 22:52:44 ----D---- C:\ProgramData\Yahoo!
2008-08-29 22:52:19 ----A---- C:\YServer.txt
2008-08-29 18:51:38 ----D---- C:\Windows\Downloaded Installations
2008-08-29 03:02:09 ----D---- C:\Program Files\Windows Live
2008-08-28 10:13:18 ----D---- C:\ProgramData\WLInstaller
2008-08-28 10:07:50 ----D---- C:\ProgramData\Skype
2008-08-28 09:32:30 ----D---- C:\Users\Patrick\AppData\Roaming\Adobe
2008-08-27 06:17:17 ----D---- C:\Windows\system32\URTTemp
2008-08-27 06:17:17 ----D---- C:\Program Files\Internet Explorer
2008-08-27 06:10:35 ----D---- C:\Program Files\Microsoft Works
2008-08-27 06:10:32 ----D---- C:\Program Files\Common Files\microsoft shared
2008-08-27 00:55:30 ----D---- C:\Windows\Help
2008-08-27 00:52:36 ----D---- C:\Program Files\Microsoft Office
2008-08-27 00:51:22 ----A---- C:\Windows\ODBC.INI
2008-08-26 22:49:19 ----D---- C:\My Documents
2008-08-26 22:47:05 ----D---- C:\ISA Server 2006 Enterprise Edition CD
2008-08-26 22:45:35 ----D---- C:\Advanced Searchbar
2008-08-26 22:45:28 ----D---- C:\Program Files\Mozilla Firefox
2008-08-26 22:33:25 ----D---- C:\Windows\Panther
2008-08-26 22:30:56 ----D---- C:\HP_Administrator
2008-08-26 22:30:55 ----SHD---- C:\Boot
2008-08-26 22:30:41 ----D---- C:\Windows\Minidump
2008-08-26 13:28:12 ----A---- C:\Windows\system32\mrt.exe
2008-08-25 18:28:11 ----D---- C:\Windows\system
2008-08-25 18:26:39 ----D---- C:\Users\Patrick\AppData\Roaming\Macromedia
2008-08-22 03:02:39 ----A---- C:\Windows\win.ini
2008-08-21 05:29:28 ----D---- C:\Program Files\Windows Live Toolbar
2008-08-20 08:21:40 ----D---- C:\Windows\ShellNew
2008-08-20 08:20:27 ----RSD---- C:\Windows\Fonts
2008-08-20 08:20:27 ----D---- C:\Program Files\Common Files\System
2008-08-20 05:32:02 ----D---- C:\Windows\rescache
2008-08-20 05:14:09 ----D---- C:\Windows\system32\en-US
2008-08-19 23:08:45 ----D---- C:\Program Files\Microsoft Silverlight
2008-08-17 19:53:25 ----SD---- C:\Windows\system32\Microsoft
2008-08-16 16:11:00 ----D---- C:\ProgramData\Google
2008-08-16 16:11:00 ----D---- C:\Program Files\Google
2008-08-16 14:08:51 ----D---- C:\Program Files\MySpace
2008-08-16 14:01:53 ----D---- C:\Windows\PolicyDefinitions
2008-08-16 12:48:56 ----D---- C:\Users\Patrick\AppData\Roaming\Yahoo!
2008-08-13 03:14:26 ----D---- C:\Windows\system32\migration
2008-08-13 03:14:24 ----D---- C:\Program Files\Windows Mail
2008-08-11 20:23:57 ----SHD---- C:\$Recycle.Bin
2008-08-10 21:02:34 ----D---- C:\Windows\system32\NDF
2008-08-10 14:11:48 ----RD---- C:\Users
2008-07-31 21:24:23 ----D---- C:\Users\Patrick\AppData\Roaming\Mozilla

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 IKSysFlt;System Filter Driver; C:\Windows\system32\drivers\iksysflt.sys [2008-06-02 66952]
R1 IKSysSec;System Security Driver; C:\Windows\system32\drivers\iksyssec.sys [2008-06-10 81288]
R1 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2008-06-27 207656]
R1 MPFP;MPFP; C:\Windows\System32\Drivers\Mpfp.sys [2008-06-02 130424]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2006-10-10 5632]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [2007-02-27 32256]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2008-07-07 56108]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-02 983552]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2006-11-02 467456]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-01-18 19456]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-18 92160]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-28 29184]
R3 CXFALCON;Conexant Falcon II NTSC Video Capture; C:\Windows\system32\drivers\cxfalcon_IBV32.sys [2006-11-02 87168]
R3 E100B;Intel(R) PRO Adapter Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2008-01-18 159744]
R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2008-01-29 16168]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-10-25 2015192]
R3 L8042mou;SetPoint PS/2 Mouse Filter Driver; C:\Windows\system32\DRIVERS\L8042mou.Sys [2008-02-29 63120]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2008-02-29 35344]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2008-02-29 36880]
R3 LMouKE;SetPoint Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouKE.Sys [2008-02-29 79120]
R3 LVcKap;Logitech AEC Driver; C:\Windows\system32\DRIVERS\LVcKap.sys [2008-02-05 689176]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2008-02-05 25624]
R3 LVRS;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs.sys [2008-07-26 627864]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys [2008-07-26 41752]
R3 LVUVC;Logitech QuickCam Pro 9000(UVC); C:\Windows\system32\DRIVERS\lvuvc.sys [2008-02-05 4658456]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2008-06-27 79240]
R3 mfebopk;McAfee Inc. mfebopk; C:\Windows\system32\drivers\mfebopk.sys [2008-06-27 35240]
R3 mfesmfk;McAfee Inc. mfesmfk; C:\Windows\system32\drivers\mfesmfk.sys [2008-06-27 40488]
R3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2006-10-13 4422560]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-18 49664]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [2006-02-16 4096]
R3 usbaudio;USB Audio Driver (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-18 73088]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
S1 SABKUTIL;SABKUTIL; C:\Windows\system32\drivers\SABKUTIL.sys []
S3 ajc0kupv;ajc0kupv; C:\Windows\system32\drivers\ajc0kupv.sys []
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2008-04-28 220160]
S3 DFUBTUSB;WIDCOMM USB Bluetooth Driver in DFU State; C:\Windows\System32\Drivers\frmupgr.sys [2007-01-03 27536]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\Windows\system32\DRIVERS\L8042Kbd.sys [2008-02-29 20240]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\mbamswissarmy.sys [2008-08-17 38472]
S3 mferkdk;McAfee Inc. mferkdk; C:\Windows\system32\drivers\mferkdk.sys [2008-06-20 34152]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 pgfilter;pgfilter; \??\C:\Program Files\PeerGuardian2\pgfilter.sys [2007-06-02 8192]
S3 SABProcEnum;SABProcEnum; C:\Windows\system32\drivers\SABProcEnum.sys []
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-18 39936]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-09-10 116040]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-10-08 168432]
R2 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2008-05-02 121360]
R2 LVCOMSer;LVCOMSer; C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [2008-02-05 186904]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2008-02-05 150040]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [2008-09-08 198944]
R2 mcmscsvc;McAfee Services; C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe [2008-06-21 792184]
R2 McNASvc;McAfee Network Agent; c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe [2008-07-18 2482848]
R2 McProxy;McAfee Proxy Service; c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe [2008-07-09 358736]
R2 McShield;McAfee Real-time Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [2008-06-20 144704]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-03-19 335872]
R2 MpfService;McAfee Personal Firewall Service; C:\Program Files\McAfee\MPF\MPFSrv.exe [2008-07-09 884360]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\McAfee\MSK\MskSrver.exe [2008-07-09 25416]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2008-06-13 356920]
R2 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2008-08-07 1073544]
R3 McSysmon;McAfee SystemGuards; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [2008-06-20 605512]
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2008-02-05 141848]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-01-05 33800]
S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2008-08-16 29744]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-07-30 532264]
S3 McODS;McAfee Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe [2008-06-20 361800]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

-----------------EOF-----------------

Can anyone please help me. Thank you.

**Geri** · 15th October 2008

Hi pwilliamsaz
Help me out here.

What issuse did onecare find?

Are you just using onecare as a scanner only?
You can't have 2 anti virus programs running at a time.

Thanks
Geri