Someone is controlling my computer

I am having a problem with someone controlling my computer. I am running Verizon Fios with windows XP. I have run spysweeper, spybot, adaware, and also scans with norton AV. Everything comes back clean. Someone has access where the mouse will move around, open and close programs, scroll windows etc. any ideas how to block this. I am also running Zone Alarm. Windows processes do not show any odd programs running

 

Welcome to WindowsBBS Serefrig

Download Deckard's System Scanner (dss.exe) and save it to your desktop.

• Close all applications and windows.
• Double click on dss.exe to run it and follow the prompts.
• When the scan is complete, two text files will open; main.txt, which will be maximized and extra.txt, which will be minimized.

Post the contents of main.txt only for now.


I would also like for you to see if the activity stops when all internet access is stopped. 2 ways to test this.

1. Right click the Zone Alarm icon near the clock and select 'Stop all internet activity'.
2. Physically disconnect the internet connection from the back of the computer.

 

I believe I may have found the problem. I found a trojan in the winlogon.exe. It was called Trojan-Proxy.Agent.JO. The only program that picked it up was Spyware doctor. Seems ok right now. I did shutdown all activity thru zone alarm and the problem did continue. I also unplugged the cable which did stop the activity. Thanks for the help

 

Just to be sure there's not something else lurking about, I still recommend posting the Deckard's log. I would also suggest you do an online scan with Kaspersky.

 

Heres The Log


Deckard's System Scanner v20071014.68
Run by Jack on 2008-03-19 23:38:26
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
59: 2008-03-20 03:38:38 UTC - RP254 - Deckard's System Scanner Restore Point
58: 2008-03-18 03:10:38 UTC - RP253 - Installed BitDefender Antivirus 2008
57: 2008-03-18 02:27:12 UTC - RP252 - Uniblue RegistryBooster
56: 2008-03-18 00:34:03 UTC - RP251 - System Checkpoint
55: 2008-03-14 02:31:41 UTC - RP250 - Norton AntiVirus post configuration restore point


-- First Restore Point --
1: 2007-12-19 22:41:10 UTC - RP196 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Jack.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:39:57 PM, on 3/19/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\ehome\ehSched.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\ehome\ehRec.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\1\dss.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Jack.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sony.com/vaiopeople
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O4 - HKLM\..\Run: [VAIO Recovery] "C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe "
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe "
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe "
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe "
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe "
O4 - HKCU\..\Run: [IncrediMail] "C:\Program Files\IncrediMail\bin\IncMail.exe" /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: PACSPTISVR - Unknown owner - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\PACSPT~1.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\halsv.exe
O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\Sony\Sony TV Tuner Library\RM_SV.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\VmGateway.exe
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Video\GPVSvr.exe
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe

--
End of file - 7759 bytes

-- File Associations -----------------------------------------------------------

All associations okay.


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R3 BDSelfPr - c:\program files\bitdefender\bitdefender 2008\bdselfpr.sys <Not Verified; BitDefender S.R.L.; BitDefender>

S3 pfc (Padus ASPI Shell) - c:\windows\system32\drivers\pfc.sys (file missing)
S3 SDTHOOK - c:\windows\system32\drivers\sdthook.sys <Not Verified; Panda Software; Panda® Antivirus>


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>

S2 CLTNetCnService (Symantec Lic NetConnect service) - "c:\program files\common files\symantec shared\ccsvchst.exe" /h cccommon (file missing)
S3 PACSPTISVR - c:\progra~1\common~1\sonysh~1\avlib\pacspt~1.exe <Not Verified; ; PACSPTISVR Module>


-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.


-- Scheduled Tasks -------------------------------------------------------------

2008-02-28 21:09:01 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2007-08-24 23:50:00 258 --a------ C:\WINDOWS\Tasks\Registration reminder 3.job
2007-08-14 23:50:00 258 --a------ C:\WINDOWS\Tasks\Registration reminder 2.job
2007-08-09 22:50:00 258 --a------ C:\WINDOWS\Tasks\Registration reminder 1.job


-- Files created between 2008-02-19 and 2008-03-19 -----------------------------

2008-03-19 23:39:46 0 d-------- C:\Program Files\Trend Micro
2008-03-19 21:24:10 0 dr-h----- C:\Documents and Settings\Jack\Recent
2008-03-17 23:12:25 0 d-------- C:\Documents and Settings\Jack\Application Data\Bitdefender
2008-03-17 23:11:14 0 d-------- C:\Program Files\BitDefender
2008-03-17 23:11:14 0 d-------- C:\Documents and Settings\All Users\Application Data\BitDefender
2008-03-17 23:09:20 0 d-------- C:\Program Files\Common Files\BitDefender
2008-03-17 22:51:25 0 d-------- C:\kav
2008-03-17 22:25:00 0 d-------- C:\Documents and Settings\Jack\Application Data\Uniblue
2008-03-17 22:24:51 0 d-------- C:\Program Files\Uniblue
2008-03-17 21:57:03 0 d-------- C:\Program Files\Spyware Doctor
2008-03-17 21:57:03 0 d-------- C:\Documents and Settings\Jack\Application Data\PC Tools
2008-03-15 22:46:16 0 d-------- C:\Documents and Settings\Jack\Application Data\Help
2008-03-15 22:44:10 0 d-------- C:\Documents and Settings\All Users\Application Data\SecTaskMan
2008-03-15 22:44:02 0 d-------- C:\Program Files\Security Task Manager
2008-03-14 22:41:51 0 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-03-13 22:15:56 0 d-------- C:\Program Files\Symantec
2008-03-13 21:30:59 44928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS <Not Verified; Panda Software; Panda® Antivirus>
2008-03-13 18:53:07 2146336 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-03-13 18:50:07 0 d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-03-13 18:50:00 4212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-03-13 18:49:55 11264 --a------ C:\WINDOWS\system32\SpOrder.dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System>
2008-03-13 18:49:29 0 d-------- C:\WINDOWS\system32\ZoneLabs
2008-03-13 18:49:09 0 d-------- C:\WINDOWS\Internet Logs
2008-03-12 21:21:52 164 --a------ C:\install.dat
2008-03-11 22:30:09 0 d-------- C:\Program Files\Lavasoft
2008-03-11 22:30:09 0 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-03-11 22:29:19 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-03-10 23:25:47 0 d-------- C:\Program Files\Free Download Manager
2008-03-10 00:13:44 19 --a------ C:\WINDOWS\system32\ELosoft.DLL
2008-03-10 00:12:59 0 d-------- C:\Program Files\Lotto007
2008-03-10 00:07:44 0 d-------- C:\Documents and Settings\All Users\Application Data\IM
2008-03-09 23:50:21 0 d-------- C:\Program Files\RAR Password Cracker
2008-03-09 20:15:58 0 d-------- C:\VideoConvert
2008-03-09 20:14:30 0 d-------- C:\Program Files\OJOsoft
2008-03-08 23:07:34 0 d-------- C:\Documents and Settings\Jack\Application Data\DMCache
2008-03-07 22:50:04 0 d-------- C:\Program Files\AviSynth 2.5
2008-03-07 22:50:00 0 d-------- C:\Program Files\Red Kawa
2008-03-07 22:40:24 0 d-------- C:\Program Files\DVD Decrypter
2008-03-03 22:41:29 0 d-------- C:\WINDOWS\Lhsp
2008-03-03 22:41:16 0 d-------- C:\WINDOWS\speech
2008-03-02 21:33:22 0 d-------- C:\Documents and Settings\Jack\Application Data\LimeWire
2008-03-02 21:31:20 0 d-------- C:\Program Files\Conduit
2008-03-02 21:31:10 0 d-------- C:\Program Files\LimeWire Turbo Accelerator
2008-03-02 21:31:00 0 d-------- C:\Program Files\LimeWire
2008-03-02 21:20:42 0 d-------- C:\Program Files\Neoretix
2008-03-01 22:23:50 5 --a------ C:\WINDOWS\youtubex.dll
2008-03-01 22:23:49 0 d-------- C:\tmpDownload
2008-03-01 22:23:32 0 d-------- C:\Program Files\YoutubeGet
2008-02-28 21:24:34 0 d-------- C:\Program Files\iPod
2008-02-28 21:24:31 0 d-------- C:\Program Files\iTunes
2008-02-28 21:23:02 0 d-------- C:\Program Files\QuickTime


-- Find3M Report ---------------------------------------------------------------

2008-03-19 21:25:31 0 d-------- C:\Program Files\Common Files\Symantec Shared
2008-03-19 19:13:50 0 d-------- C:\Program Files\Common Files
2008-03-16 22:45:36 0 d-------- C:\Documents and Settings\Jack\Application Data\OpenOffice.org2
2008-03-10 00:07:26 0 d-------- C:\Program Files\IncrediMail
2008-03-09 19:37:15 0 d-------- C:\Program Files\OnTarget2!-SS
2008-03-02 20:38:10 0 d-------- C:\Program Files\Azureus
2008-03-01 13:36:35 0 d-------- C:\Documents and Settings\Jack\Application Data\Azureus
2008-02-25 00:32:12 0 d-------- C:\Documents and Settings\Jack\Application Data\AdobeUM
2008-02-18 17:28:44 0 d-------- C:\Program Files\MediaMonkey
2008-02-04 15:34:28 0 d-------- C:\Documents and Settings\Jack\Application Data\Adobe


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VAIO Recovery "= "C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe" [04/20/2003 01:08 AM]
"Kernel and Hardware Abstraction Layer "= "KHALMNPR.EXE" [04/11/2007 03:32 PM C:\WINDOWS\KHALMNPR.Exe]
"ZoneAlarm Client "= "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [11/14/2007 04:05 PM]
"BitDefender Antiphishing Helper "= "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe" [10/09/2007 03:46 PM]
"BDAgent "= "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe" [02/16/2008 05:45 PM]
"ISTray "= "C:\Program Files\Spyware Doctor\pctsTray.exe" [02/01/2008 12:55 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IncrediMail "= "C:\Program Files\IncrediMail\bin\IncMail.exe" [03/09/2008 12:51 PM]
"ctfmon.exe "= "C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 03:56 AM]
"SpybotSD TeaTimer "= "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [01/28/2008 11:43 AM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [8/11/2007 10:23:50 PM]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoViewOnDrive "=0 (0x0)
"NoLogoff "=0 (0x0)
"NoWindowsUpdate "=0 (0x0)
"StartMenuLogOff "=0 (0x0)
"NoRecentDocsMenu "=1 (0x1)
"ClearRecentDocsOnExit "=1 (0x1)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@= "Service "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@= "Service "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=" "

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@= "Volume shadow copy "

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MSMSGS "= "C:\Program Files\Messenger\msmsgs.exe" /background
"Uniblue RegistryBooster 2 "=C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"ehTray "=C:\WINDOWS\ehome\ehtray.exe
"ATIPTA "=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
"High Definition Audio Property Page Shortcut "=HDAudPropShortcut.exe
"SoundMan "=SOUNDMAN.EXE
"AlcWzrd "=ALCWZRD.EXE
"Alcmtr "=ALCMTR.EXE
"CreateCD_Reminder "=C:\WINDOWS\Sonysys\VAIO Recovery\reminder.exe
"sHotKey "= "C:\Program Files\SONY\sHotKey\sHotKey.exe "
"VAIO Update 2 "= "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
"ezShieldProtector for Px "=C:\WINDOWS\System32\ezSP_Px.exe
"VAIOSurvey "=c:\program files\sony\vaio survey\surveysa.exe
"ZZZ "=C:\WINDOWS\Sonysys\Eflyer\SubFlyer.exe
"URLLSTCK.exe "=C:\Program Files\Norton Internet Security\UrlLstCk.exe
"SunJavaUpdateSched "= "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe "
"QuickTime Task "= "C:\Program Files\QuickTime\QTTask.exe" -atboottime
"Device Detector "=DevDetect.exe -autorun
"iTunesHelper "= "C:\Program Files\iTunes\iTunesHelper.exe "

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx scan




-- End of Deckard's System Scanner: finished at 2008-03-19 23:41:09 ------------

 

Looks good.