1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved dds log files please let me know

Discussion in 'Malware and Virus Removal Archive' started by shadend, 2009/08/03.

Page 1 of 2
  1. 2009/08/03
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    [Resolved] dds log files please let me know

    trying to find out if malware is still on my comp cuasing my previously reported problem with my task manager,lemme know!



    DDS (Ver_09-07-30.01) - NTFSx86
    Run by owner at 15:48:53.71 on Mon 08/03/2009
    Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_13
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.479.35 [GMT -7:00]

    AV: avast! antivirus 4.8.1335 [VPS 090803-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

    ============== Running Processes ===============

    C:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
    svchost.exe
    svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    svchost.exe
    C:\Program Files\Windows Live\Family Safety\fsssvc.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe -k imgsvc
    C:\Program Files\Webroot\Washer\WasherSvc.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\owner\Desktop\dds.scr

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://www.daemon-search.com/startpage
    BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - c:\program files\windows live\family safety\fssbho.dll
    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
    BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
    BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
    BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
    BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
    uRun: [MsnMsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
    uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe "
    uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
    uRun: [Window Washer] c:\program files\webroot\washer\wwDisp.exe
    mRun: [SoundMan] SOUNDMAN.EXE
    mRun: [SiSUSBRG] c:\windows\SiSUSBrg.exe
    mRun: [LanguageShortcut] "c:\program files\cyberlink\powerdvd\language\Language.exe "
    mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe "
    mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin
    mRun: [MSConfig] c:\windows\pchealth\helpctr\binaries\MSConfig.exe /auto
    mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office10\EXCEL.EXE/3000
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
    DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1238892772765
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
    Notify: WBSrv - c:\program files\stardock\object desktop\windowblinds\wbsrv.dll
    AppInit_DLLs: wbsys.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

    ================= FIREFOX ===================

    FF - ProfilePath - c:\docume~1\owner\applic~1\mozilla\firefox\profiles\pw4tnfqk.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.timeanddate.com/worldclock/city.html?n=256
    FF - plugin: c:\program files\microsoft\office live\npOLW.dll
    FF - plugin: c:\program files\mozilla firefox\plugins\npPandoWebInst.dll
    FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
    FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

    ---- FIREFOX POLICIES ----
    FF - user.js: yahoo.homepage.dontask - true
    ============= SERVICES / DRIVERS ===============

    R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-8-2 114768]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-8-2 20560]
    R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2009-8-2 138680]
    R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-4-4 55152]
    R2 fsssvc;Windows Live Family Safety;c:\program files\windows live\family safety\fsssvc.exe [2009-2-6 533360]
    R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0;c:\program files\common files\nero\nero backitup 4\NBService.exe [2008-9-29 935208]
    R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
    R2 wwEngineSvc;Window Washer Engine;c:\program files\webroot\washer\WasherSvc.exe [2009-8-3 598856]
    R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2009-8-2 254040]
    R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2009-8-2 352920]
    S3 SiSCom;SISCom_Com;\??\c:\documents and settings\owner\desktop\setup\utildll\siscom.sys --> c:\documents and settings\owner\desktop\setup\utildll\SiSCom.sys [?]

    =============== Created Last 30 ================

    2009-08-03 15:46 <DIR> --d----- c:\program files\MSConfig CleanUp
    2009-08-03 15:45 <DIR> --d----- c:\program files\common files\Stardock
    2009-08-03 15:45 163,456 a------- c:\windows\system32\drivers\vidstub.sys
    2009-08-03 15:25 <DIR> --d----- c:\program files\common files\Webroot Shared
    2009-08-03 15:25 <DIR> --d----- c:\docume~1\owner\applic~1\Webroot
    2009-08-03 15:25 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Webroot
    2009-08-03 13:13 <DIR> --d----- c:\program files\Webroot
    2009-08-03 13:13 194,888 a------- c:\windows\Unwash6.exe
    2009-08-02 20:29 69 a------- c:\windows\ftk.INI
    2009-08-02 20:28 109,248 a------- c:\windows\system\MSWINSCK.OCX
    2009-08-02 20:23 <DIR> --d----- C:\****emall
    2009-08-02 20:20 <DIR> --d----- c:\program files\AccessData
    2009-08-02 19:51 89 a------- c:\windows\system32\_system.ini
    2009-08-02 18:27 <DIR> --d----- c:\program files\Guitar Pro 5
    2009-08-02 17:52 <DIR> --d----- c:\program files\common files\DivX Shared
    2009-08-02 17:52 <DIR> --d----- c:\program files\DivX
    2009-08-02 16:19 <DIR> --d----- c:\program files\Sony
    2009-08-02 11:24 <DIR> --d----- c:\program files\WinAVI Video Converter
    2009-08-01 23:10 <DIR> --d----- c:\program files\sisagp
    2009-08-01 22:46 109,248 a------- c:\windows\system32\MSWINSCK.OCX
    2009-08-01 22:35 <DIR> --d----- c:\program files\PC Drivers HeadQuarters
    2009-08-01 20:11 552 a------- c:\windows\system32\d3d8caps.dat
    2009-08-01 19:43 0 a------- c:\windows\system32\VGAunistlog.ini
    2009-08-01 19:39 337,320 a------- c:\windows\difxapi.dll
    2009-08-01 19:39 49,152 a------- c:\windows\InstFunc.exe
    2009-08-01 19:39 12,288 a------- c:\windows\InstFunc.dll
    2009-08-01 19:23 36,992 a------- c:\windows\system32\drivers\SISAGPX.SYS
    2009-08-01 19:22 172,032 a------- c:\windows\system32\SiSInst.dll
    2009-08-01 19:22 258,048 a------- c:\windows\system32\SiSParse.dll
    2009-08-01 19:22 49,152 a------- c:\windows\system32\SiSBase.dll
    2009-08-01 19:22 19,200 a------- c:\windows\system32\drivers\srvkp.sys
    2009-08-01 19:22 3,467,776 ac------ c:\windows\system32\dllcache\sisgrv.dll
    2009-08-01 19:22 3,467,776 a------- c:\windows\system32\sisgrv.dll
    2009-08-01 19:22 1,571,001 a------- c:\windows\system32\sisgl.dll
    2009-08-01 19:22 65,536 a------- c:\windows\system32\sis760.bin
    2009-08-01 19:22 65,536 a------- c:\windows\system32\sis741.bin
    2009-08-01 19:22 49,152 a------- c:\windows\system32\sis660.bin
    2009-08-01 19:22 323,584 ac------ c:\windows\system32\dllcache\sisgrp.sys
    2009-08-01 19:22 323,584 a------- c:\windows\system32\drivers\sisgrp.sys
    2009-08-01 18:58 7,168 a------- c:\windows\system32\instFunc.dll
    2009-08-01 18:49 <DIR> --d----- c:\docume~1\alluse~1\applic~1\PC Drivers HeadQuarters
    2009-08-01 18:49 <DIR> --d----- c:\docume~1\owner\applic~1\GetRightToGo
    2009-07-20 17:43 1,089,593 -c------ c:\windows\system32\dllcache\ntprint.cat
    2009-07-20 16:18 <DIR> --d----- c:\windows\system32\XPSViewer
    2009-07-20 16:15 597,504 -c------ c:\windows\system32\dllcache\printfilterpipelinesvc.exe
    2009-07-20 16:15 575,488 -c------ c:\windows\system32\dllcache\xpsshhdr.dll
    2009-07-20 16:15 89,088 -c------ c:\windows\system32\dllcache\filterpipelineprintproc.dll
    2009-07-20 16:15 575,488 -------- c:\windows\system32\xpsshhdr.dll
    2009-07-20 16:15 117,760 -------- c:\windows\system32\prntvpt.dll
    2009-07-20 16:15 1,676,288 -c------ c:\windows\system32\dllcache\xpssvcs.dll
    2009-07-20 16:15 1,676,288 -------- c:\windows\system32\xpssvcs.dll
    2009-07-20 15:57 <DIR> --dsh--- c:\documents and settings\owner\IECompatCache
    2009-07-12 20:19 <DIR> --d----- c:\docume~1\owner\applic~1\Steinberg
    2009-07-12 20:13 <DIR> --d----- c:\program files\Steinberg
    2009-07-12 20:12 147,425 a------- c:\windows\system32\SYNSOACC-Aide.chm
    2009-07-12 20:12 120,468 a------- c:\windows\system32\SYNSOACC-Hilfe.chm
    2009-07-12 20:12 114,279 a------- c:\windows\system32\SYNSOACC-Help.chm
    2009-07-12 20:12 45,056 a------- c:\windows\system32\Synsopos.exe
    2009-07-12 20:12 16,896 a------- c:\windows\system32\drivers\SynasUSB.sys
    2009-07-12 20:12 400,384 a------- c:\windows\system32\SYNSOACC.dll
    2009-07-12 20:12 147,456 a------- c:\windows\system32\SynsoLChk.dll
    2009-07-12 20:12 17,784 a------- c:\windows\system32\drivers\NSynas32.sys
    2009-07-12 20:12 <DIR> --d----- c:\program files\Syncrosoft
    2009-07-12 12:25 368,640 a------- c:\windows\system32\ReWire.dll
    2009-07-12 12:25 233,472 a------- c:\windows\system32\REX Shared Library.dll
    2009-07-12 11:55 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Propellerhead Software
    2009-07-12 11:55 <DIR> --d----- c:\docume~1\owner\applic~1\Propellerhead Software
    2009-07-12 11:54 <DIR> --d----- c:\program files\Propellerhead
    2009-07-10 19:24 21,840 a------t c:\windows\system32\SIntfNT.dll
    2009-07-10 19:24 17,212 a------t c:\windows\system32\SIntf32.dll
    2009-07-10 19:24 12,067 a------t c:\windows\system32\SIntf16.dll
    2009-07-10 18:13 25,739 a------- c:\windows\DIIUnin.dat
    2009-07-10 18:13 2,829 a------- c:\windows\DIIUnin.pif
    2009-07-10 18:13 94,208 a------- c:\windows\DIIUnin.exe
    2009-07-10 18:11 <DIR> --d----- C:\Diablo II
    2009-07-09 14:35 <DIR> --d----- c:\program files\common files\Macrovision Shared
    2009-07-08 19:21 2,570,520 a----r-- c:\windows\system32\drivers\LV302V32.SYS
    2009-07-08 19:14 1,374,232 a------- c:\windows\system32\D3DCompiler_36.dll
    2009-07-08 19:13 1,123,696 a------- c:\windows\system32\D3DCompiler_33.dll
    2009-07-08 19:13 443,752 a------- c:\windows\system32\d3dx10_33.dll
    2009-07-08 19:13 3,495,784 a------- c:\windows\system32\d3dx9_33.dll
    2009-07-08 19:13 255,848 a------- c:\windows\system32\xactengine2_6.dll
    2009-07-08 19:13 251,672 a------- c:\windows\system32\xactengine2_5.dll
    2009-07-08 19:13 2,414,360 a------- c:\windows\system32\d3dx9_31.dll
    2009-07-08 19:13 237,848 a------- c:\windows\system32\xactengine2_4.dll
    2009-07-08 19:13 15,128 a------- c:\windows\system32\x3daudio1_1.dll
    2009-07-08 19:13 236,824 a------- c:\windows\system32\xactengine2_3.dll
    2009-07-08 19:13 62,744 a------- c:\windows\system32\xinput1_2.dll
    2009-07-08 19:12 2,297,552 a------- c:\windows\system32\d3dx9_26.dll
    2009-07-08 19:12 <DIR> --d----- c:\windows\Logs
    2009-07-08 19:10 <DIR> --d----- c:\program files\common files\Logitech
    2009-07-08 19:07 <DIR> --d----- c:\docume~1\owner\applic~1\Command & Conquer 3 Tiberium Wars

    ==================== Find3M ====================

    2009-07-03 10:09 915,456 a------- c:\windows\system32\wininet.dll
    2009-06-16 07:36 119,808 a------- c:\windows\system32\t2embed.dll
    2009-06-16 07:36 81,920 a------- c:\windows\system32\fontsub.dll
    2009-06-05 02:58 9,728 a------- c:\windows\system32\SiSPIns2.dll
    2009-06-03 12:09 1,291,264 a------- c:\windows\system32\quartz.dll
    2009-05-07 08:32 345,600 a------- c:\windows\system32\localspl.dll
    2009-03-16 14:35 525,128 a------- c:\program files\DXSETUP.exe
    2009-03-16 14:35 94,024 a------- c:\program files\DSETUP.dll

    ============= FINISH: 15:49:55.23 ===============



    attach:




    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_09-07-30.01)

    Microsoft Windows XP Professional
    Boot Device: \Device\HarddiskVolume1
    Install Date: 3/26/2009 12:32:05 AM
    System Uptime: 8/3/2009 3:25:39 PM (0 hours ago)

    Motherboard: ASUSTeK Computer INC. | | P5S800-VM
    Processor: Intel(R) Celeron(R) CPU 3.06GHz | CPU 1 | 3051/133mhz

    ==== Disk Partitions =========================

    A: is Removable
    C: is FIXED (NTFS) - 39 GiB total, 2.526 GiB free.
    D: is FIXED (NTFS) - 35 GiB total, 7.402 GiB free.
    E: is CDROM (CDFS)
    F: is FIXED (NTFS) - 180 GiB total, 2.827 GiB free.
    G: is CDROM ()

    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    RP186: 8/1/2009 6:49:40 PM - Installed Driver Detective
    RP187: 8/1/2009 7:23:56 PM - good setting
    RP188: 8/1/2009 10:35:16 PM - Installed Driver Detective
    RP189: 8/1/2009 10:47:36 PM - Removed Driver Detective
    RP190: 8/1/2009 11:04:50 PM - Installed Driver Detective
    RP191: 8/1/2009 11:10:06 PM - Installed SiSAGP driver
    RP192: 8/2/2009 11:00:37 AM - Configured Driver Detective
    RP193: 8/2/2009 4:19:39 PM - Installed Vegas Pro 9.0
    RP194: 8/3/2009 3:01:37 AM - Software Distribution Service 3.0
    RP195: 8/3/2009 3:29:26 PM - Restore Operation

    ==== Installed Programs ======================

    "Nero SoundTrax Help
    µTorrent
    7-Zip 4.65
    AAC Decoder
    AccessData Forensic Toolkit
    Acrobat.com
    Adobe AIR
    Adobe Anchor Service CS4
    Adobe Bridge CS4
    Adobe CMaps CS4
    Adobe Color - Photoshop Specific CS4
    Adobe Color EU Extra Settings CS4
    Adobe Color JA Extra Settings CS4
    Adobe Color NA Recommended Settings CS4
    Adobe Color Video Profiles CS CS4
    Adobe CSI CS4
    Adobe Default Language CS4
    Adobe Device Central CS4
    Adobe Drive CS4
    Adobe ExtendScript Toolkit CS4
    Adobe Extension Manager CS4
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Fonts All
    Adobe Linguistics CS4
    Adobe Media Player
    Adobe Output Module
    Adobe PDF Library Files CS4
    Adobe Photoshop CS4
    Adobe Photoshop CS4 Support
    Adobe Reader 9.1
    Adobe Search for Help
    Adobe Service Manager Extension
    Adobe Setup
    Adobe Type Support CS4
    Adobe Update Manager CS4
    Adobe WinSoft Linguistics Plugin
    Adobe XMP Panels CS4
    AdobeColorCommonSetCMYK
    AdobeColorCommonSetRGB
    Advertising Center
    Apple Software Update
    ASIO4ALL
    AutoUpdate
    avast! Antivirus
    BootSkin
    Choice Guard
    Codec Pack - All In 1 6.0.3.0
    Connect
    Counter-Strike 1.6
    Critical Update for Windows Media Player 11 (KB959772)
    Diablo II
    DivX Codec
    DivX Converter
    DivX Player
    DivX Plus DirectShow Filters
    DivX Version Checker
    DivX Web Player
    DNA
    DolbyFiles
    DVD Suite
    Guitar Pro 5.2
    H.264 Decoder
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB952287)
    Hotfix for Windows XP (KB954550-v5)
    Hotfix for Windows XP (KB954708)
    Hotfix for Windows XP (KB961118)
    ImagXpress
    Java(TM) 6 Update 13
    Junk Mail filter update
    kuler
    Logitech QuickCam
    Logitech QuickCam Driver Package
    Logitech Updater
    Menu Templates - Starter Kit
    Microsoft .NET Framework 2.0 Service Pack 2
    Microsoft .NET Framework 3.0 Service Pack 2
    Microsoft .NET Framework 3.5 SP1
    Microsoft Application Error Reporting
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft National Language Support Downlevel APIs
    Microsoft Office Live Add-in 1.3
    Microsoft Office XP Professional with FrontPage
    Microsoft Search Enhancement Pack
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Sync Framework Runtime Native v1.0 (x86)
    Microsoft Sync Framework Services Native v1.0 (x86)
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    MKV Splitter
    Movie Templates - Starter Kit
    Mozilla Firefox (3.0.12)
    MSConfig CleanUp 1.2
    MSVCRT
    MSXML 4.0 SP2 (KB954430)
    Nero 9
    Nero BurningROM
    Nero BurnRights
    Nero ControlCenter
    Nero CoverDesigner
    Nero CoverDesigner Help
    Nero Disc Copy Gadget
    Nero Disc Copy Gadget Help
    Nero DiscSpeed
    Nero DriveSpeed
    Nero Express
    Nero InfoTool
    Nero Installer
    Nero PhotoSnap
    Nero PhotoSnap Help
    Nero Recode
    Nero Recode Help
    Nero Rescue Agent
    Nero RescueAgent Help
    Nero ShowTime
    Nero StartSmart
    Nero StartSmart Help
    Nero Vision
    Nero WaveEditor
    Nero WaveEditor Help
    NeroBurningROM
    NeroExpress
    neroxml
    Pando Media Booster
    PDF Settings CS4
    Photoshop Camera Raw
    PowerDVD
    QuickTime
    Realtek AC'97 Audio
    Reason 4.0
    SecurDisc Viewer
    Security Update for CAPICOM (KB931906)
    Security Update for Windows Internet Explorer 7 (KB938127-v2)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB961260)
    Security Update for Windows Internet Explorer 7 (KB963027)
    Security Update for Windows Internet Explorer 8 (KB969897)
    Security Update for Windows Internet Explorer 8 (KB972260)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB938464-v2)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB954459)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956841)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958215)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958690)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960714)
    Security Update for Windows XP (KB960715)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB961371)
    Security Update for Windows XP (KB961373)
    Security Update for Windows XP (KB961501)
    Security Update for Windows XP (KB968537)
    Security Update for Windows XP (KB969898)
    Security Update for Windows XP (KB970238)
    Security Update for Windows XP (KB971633)
    Security Update for Windows XP (KB973346)
    Segoe UI
    SiSAGP driver
    SiSRaidPackage
    Skype web features
    Skypeâ„¢ 4.1
    SoulSeek 157 NS 13c
    SoundTrax
    Suite Shared Configuration CS4
    Switch Sound File Converter
    Syncrosoft's License Control
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
    Update for Windows Internet Explorer 8 (KB969497)
    Update for Windows XP (KB951978)
    Update for Windows XP (KB955839)
    Update for Windows XP (KB961503)
    Update for Windows XP (KB967715)
    VC80CRTRedist - 8.0.50727.762
    Vegas Pro 9.0
    VLC media player 0.9.9
    WebFldrs XP
    WinAVI Video Converter
    Window Washer
    WindowBlinds
    Windows Genuine Advantage Notifications (KB905474)
    Windows Internet Explorer 7
    Windows Internet Explorer 8
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Family Safety
    Windows Live Mail
    Windows Live Messenger
    Windows Live Photo Gallery
    Windows Live Sign-in Assistant
    Windows Live Sync
    Windows Live Toolbar
    Windows Live Upload Tool
    Windows Live Writer
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows XP Service Pack 3
    WinRAR archiver
    Yahoo! Messenger

    ==== Event Viewer Messages From Past Week ========

    8/2/2009 9:01:55 PM, error: Dhcp [1002] - The IP address lease 192.168.2.2 for the Network Card with network address 0015F2DD088A has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
    8/1/2009 9:16:24 PM, error: Dhcp [1002] - The IP address lease 192.168.2.4 for the Network Card with network address 0015F2DD088A has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
    8/1/2009 7:44:43 PM, error: Service Control Manager [7031] - The Windows Live Family Safety service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.
    8/1/2009 7:44:38 PM, error: Service Control Manager [7034] - The SeaPort service terminated unexpectedly. It has done this 1 time(s).
    8/1/2009 7:00:08 PM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\sisgrp.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 6.14.10.3611.
    8/1/2009 4:45:22 PM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC000007F' while processing the file 'desktop.ini' on the volume 'HarddiskVolume4'. It has stopped monitoring the volume.
    8/1/2009 10:51:13 PM, error: Service Control Manager [7031] - The Windows Live Family Safety service terminated unexpectedly. It has done this 3 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.
    8/1/2009 10:51:09 PM, error: Service Control Manager [7034] - The Windows Installer service terminated unexpectedly. It has done this 1 time(s).
    8/1/2009 10:23:56 PM, error: Service Control Manager [7031] - The Windows Live Family Safety service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.
    8/1/2009 10:23:52 PM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
    7/31/2009 7:31:33 PM, error: Service Control Manager [7034] - The Application Layer Gateway Service service terminated unexpectedly. It has done this 1 time(s).

    ==== End Of File ===========================
     
    shadend,
    #1
  2. 2009/08/03
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Print these instructions out.

    NOTE. If any of the programs listed below refuse to run, try renaming executive file to something else; for instance, rename hijackthis.exe to scanner.exe

    ***VERY IMPORTANT! Make sure, you update Superantispyware, and Malwarebytes before running the scans.***

    STEP 1. Download SUPERAntiSpyware Free for Home Users:
    http://www.superantispyware.com/

    * Double-click SUPERAntiSpyware.exe and use the default settings for installation.
    * An icon will be created on your desktop. Double-click that icon to launch the program.
    * If asked to update the program definitions, click "Yes ". If not, update the definitions before scanning by selecting "Check for Updates ". (If you encounter any problems while downloading the updates, manually download and unzip them from here: http://www.superantispyware.com/definitions.html.)
    * Close SUPERAntiSpyware.

    PHYSICALLY DISCONNECT FROM THE INTERNET

    Restart computer in Safe Mode.
    To enter Safe Mode, restart computer, and keep tapping F8 key, until menu appears; select Safe Mode; you'll see "Safe Mode" in all four corners of your screen

    * Open SUPERAntiSpyware.
    * Click Scan your Computer... button.
    * Click Scanning Preferences/Control Center... button.
    * Under General and Startup tab, make sure, Start SUPERAntiSpyware when Windows starts option is UN-checked.
    * Click the Scanning Control tab.
    * Under Scanner Options make sure the following are checked (leave all others unchecked):
    - Close browsers before scanning.
    - Terminate memory threats before quarantining.
    * Click the Close button to leave the control center screen.
    * On the left, make sure you check C:\Fixed Drive.
    * On the right, choose Perform Complete Scan.
    * Click Next to start the scan. Please be patient while it scans your computer.
    * After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.
    * Make sure everything has a checkmark next to it and click Next.
    * A notification will appear that Quarantine and Removal is Complete. Click OK and then click the Finish button to return to the main menu.
    * If asked if you want to reboot, click Yes.
    * To retrieve the removal information after reboot, launch SUPERAntispyware again.
    - Click Preferences, then click the Statistics/Logs tab.
    - Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    - If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    - Please copy and paste the Scan Log results in your next reply.
    * Click Close to exit the program.
    Post SUPERAntiSpyware log.

    RECONNECT TO THE INTERNET

    RESTART COMPUTER!

    STEP 2. Download Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php to your desktop.
    (Malwarebytes is free to use as a manual scanner. Payment is only required if you wish to have it run and update automatically which is not necessary for our purposes)

    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform full scan, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    * When completed, a log will open in Notepad.
    * Post the log back here.

    The log can also be found here:
    C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
    Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

    RESTART COMPUTER!

    STEP 3. Download GMER: http://www.gmer.net/files.php, by clicking on Download EXE button.
    Alternative downloads:
    - http://majorgeeks.com/GMER_d5198.html
    - http://www.softpedia.com/get/Interne...ers/GMER.shtml
    Double click on downloaded .exe file, select Rootkit tab and click the Scan button.
    When scan is completed, click Save button, and save the results as gmer.log
    Warning ! Please, do not select the "Show all" checkbox during the scan.
    Post the log to your next reply.

    RESTART COMPUTER

    STEP 4. Download HijackThis:
    http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
    by clicking on Download HijackThis Installer
    Install, and run it.
    Post HijackThis log.
    Do NOT attempt to "fix" anything!


    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     
    broni,
    #2


  3. to hide this advert.

  4. 2009/08/04
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    superantispyware log

    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 08/04/2009 at 06:44 PM

    Application Version : 4.27.1000

    Core Rules Database Version : 4038
    Trace Rules Database Version: 1978

    Scan type : Complete Scan
    Total Scan Time : 01:10:04

    Memory items scanned : 227
    Memory threats detected : 0
    Registry items scanned : 5688
    Registry threats detected : 0
    File items scanned : 12075
    File threats detected : 0
     
    shadend,
    #3
  5. 2009/08/04
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    logs

    having trouble posting the logs,ill try once more
     
    Last edited: 2009/08/04
    shadend,
    #4
  6. 2009/08/04
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    Malwarebytes' Anti-Malware log

    Malwarebytes' Anti-Malware 1.40
    Database version: 2561
    Windows 5.1.2600 Service Pack 3

    8/4/2009 7:09:09 PM
    mbam-log-2009-08-04 (19-09-09).txt

    Scan type: Full Scan
    Objects scanned: 86182
    Time elapsed: 15 minute(s), 5 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 5
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\n.cs4 (Backdoor.Ciadoor) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{0958c4c9-77b0-4aa8-9364-7886bfca7e39} (Backdoor.Ciadoor) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{e14dce67-8fb7-4721-8149-179baa4d792c} (Backdoor.Ciadoor) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{c9f1c5a0-f3d8-48e2-8b8c-3e86b4cac7e3} (Backdoor.Ciadoor) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{e14dce67-8fb7-4721-8149-179baa4d792c} (Backdoor.Ciadoor) -> Quarantined and deleted successfully.

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
     
    shadend,
    #5
  7. 2009/08/04
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    gmer log part one

    GMER 1.0.15.15011 [gmer.exe] - http://www.gmer.net
    Rootkit scan 2009-08-04 21:05:47
    Windows 5.1.2600 Service Pack 3


    ---- System - GMER 1.0.15 ----

    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwClose [0xF21486B8]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateKey [0xF2148574]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDeleteValueKey [0xF2148A52]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDuplicateObject [0xF214814C]
    SSDT spnt.sys ZwEnumerateKey [0xF746ECA2]
    SSDT spnt.sys ZwEnumerateValueKey [0xF746F030]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenKey [0xF214864E]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenProcess [0xF214808C]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenThread [0xF21480F0]
    SSDT spnt.sys ZwQueryKey [0xF746F108]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwQueryValueKey [0xF214876E]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwRestoreKey [0xF214872E]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwSetValueKey [0xF21488AE]

    INT 0x62 ? 85B8BBF8
    INT 0x74 ? 85734BF8
    INT 0x82 ? 85B8BBF8
    INT 0x83 ? 85B90BF8
    INT 0x84 ? 85734BF8
    INT 0x94 ? 85734BF8
    INT 0xB4 ? 85734BF8

    ---- Kernel code sections - GMER 1.0.15 ----

    ? spnt.sys The system cannot find the file specified. !
    .text USBPORT.SYS!DllUnload F69C68AC 5 Bytes JMP 857341D8
    .text a3oo9518.SYS F6949384 1 Byte [20]
    .text a3oo9518.SYS F6949384 37 Bytes [20, 00, 00, 68, 00, 00, 00, ...]
    .text a3oo9518.SYS F69493AA 24 Bytes [00, 00, 20, 00, 00, E0, 00, ...]
    .text a3oo9518.SYS F69493C4 3 Bytes [00, 00, 00]
    .text a3oo9518.SYS F69493C9 1 Byte [00]
    .text ...

    ---- User code sections - GMER 1.0.15 ----

    .text C:\Program Files\Windows Live\Family Safety\fsssvc.exe[180] ADVAPI32.dll!RegOpenKeyExA 77DD7852 5 Bytes JMP 0101F7BF C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Family Safety Service/Microsoft Corporation)
    .text C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] kernel32.dll!CreateThread + 1A 7C8106F1 4 Bytes CALL 0008ED99 C:\Program Files\Webroot\Washer\WasherSvc.exe (Window Washer Engine/Webroot Software, Inc.)

    ---- Kernel IAT/EAT - GMER 1.0.15 ----

    IAT \WINDOWS\System32\Drivers\SCSIPORT.SYS[ntoskrnl.exe!DbgBreakPoint] 85B902D8
    IAT pci.sys[ntoskrnl.exe!IoDetachDevice] [F74776D0] spnt.sys
    IAT pci.sys[ntoskrnl.exe!IoAttachDeviceToDeviceStack] [F747B708] spnt.sys
    IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [F7452046] spnt.sys
    IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [F7452142] spnt.sys
    IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [F74520C4] spnt.sys
    IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [F74527CE] spnt.sys
    IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [F74526A4] spnt.sys
    IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [F745DD7A] spnt.sys
    IAT \SystemRoot\system32\DRIVERS\USBPORT.SYS[ntoskrnl.exe!DbgBreakPoint] 857342D8
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlInitUnicodeString] 000000A5
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!swprintf] 000000E5
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeSetEvent] 000000F1
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoCreateSymbolicLink] 00000071
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoGetConfigurationInformation] 000000D8
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoDeleteSymbolicLink] 00000031
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmFreeMappingAddress] 00000015
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoFreeErrorLogEntry] 00000004
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoDisconnectInterrupt] 000000C7
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmUnmapIoSpace] 00000023
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!ObReferenceObjectByPointer] 000000C3
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IofCompleteRequest] 00000018
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlCompareUnicodeString] 00000096
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IofCallDriver] 00000005
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmAllocateMappingAddress] 0000009A
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoAllocateErrorLogEntry] 00000007
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoConnectInterrupt] 00000012
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoDetachDevice] 00000080
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeWaitForSingleObject] 000000E2
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeInitializeEvent] 000000EB
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeCancelTimer] 00000027
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlAnsiStringToUnicodeString] 000000B2
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlInitAnsiString] 00000075
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoBuildDeviceIoControlRequest] 00000009
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoQueueWorkItem] 00000083
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmMapIoSpace] 0000002C
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoInvalidateDeviceRelations] 0000001A
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoReportDetectedDevice] 0000001B
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoReportResourceForDetection] 0000006E
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlxAnsiStringToUnicodeSize] 0000005A
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!NlsMbCodePageTag] 000000A0
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!PoRequestPowerIrp] 00000052
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeInsertByKeyDeviceQueue] 0000003B
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!PoRegisterDeviceForIdleDetection] 000000D6
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!sprintf] 000000B3
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmMapLockedPagesSpecifyCache] 00000029
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!ObfDereferenceObject] 000000E3
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoGetAttachedDeviceReference] 0000002F
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoInvalidateDeviceState] 00000084
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!ZwClose] 00000053
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!ObReferenceObjectByHandle] 000000D1
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!ZwCreateDirectoryObject] 00000000
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoBuildSynchronousFsdRequest] 000000ED
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!PoStartNextPowerIrp] 00000020
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoCreateDevice] 000000FC
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlCopyUnicodeString] 000000B1
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoAllocateDriverObjectExtension] 0000005B
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlQueryRegistryValues] 0000006A
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!ZwOpenKey] 000000CB
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlFreeUnicodeString] 000000BE
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoStartTimer] 00000039
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeInitializeTimer] 0000004A
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoInitializeTimer] 0000004C
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeInitializeDpc] 00000058
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeInitializeSpinLock] 000000CF
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoInitializeIrp] 000000D0
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!ZwCreateKey] 000000EF
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlAppendUnicodeStringToString] 000000AA
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlIntegerToUnicodeString] 000000FB
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!ZwSetValueKey] 00000043
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeInsertQueueDpc] 0000004D
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KefAcquireSpinLockAtDpcLevel] 00000033
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoStartPacket] 00000085
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KefReleaseSpinLockFromDpcLevel] 00000045
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoBuildAsynchronousFsdRequest] 000000F9
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoFreeMdl] 00000002
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmUnlockPages] 0000007F
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoWriteErrorLogEntry] 00000050
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeRemoveByKeyDeviceQueue] 0000003C
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmMapLockedPagesWithReservedMapping] 0000009F
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmUnmapReservedMapping] 000000A8
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeSynchronizeExecution] 00000051
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoStartNextPacket] 000000A3
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeBugCheckEx] 00000040
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeRemoveDeviceQueue] 0000008F
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeSetTimer] 00000092
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!_allmul] 0000009D
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmProbeAndLockPages] 00000038
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!_except_handler3] 000000F5
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!PoSetPowerState] 000000BC
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoOpenDeviceRegistryKey] 000000B6
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlWriteRegistryValue] 000000DA
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlDeleteRegistryValue] 00000021
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!_aulldiv] 00000010
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!strstr] 000000FF
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!_strupr] 000000F3
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeQuerySystemTime] 000000D2
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoWMIRegistrationControl] 000000CD
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!KeTickCount] 0000000C
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoAttachDeviceToDeviceStack] 00000013
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoDeleteDevice] 000000EC
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!ExAllocatePoolWithTag] 0000005F
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoAllocateWorkItem] 00000097
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoAllocateIrp] 00000044
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoAllocateMdl] 00000017
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmBuildMdlForNonPagedPool] 000000C4
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmLockPagableDataSection] 000000A7
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoGetDriverObjectExtension] 0000007E
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmUnlockPagableImageSection] 0000003D
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!ExFreePoolWithTag] 00000064
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoFreeIrp] 0000005D
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!IoFreeWorkItem] 00000019
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!InitSafeBootMode] 00000073
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!RtlCompareMemory] 00000060
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!PoCallDriver] 00000081
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!memmove] 0000004F
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[ntoskrnl.exe!MmHighestUserAddress] 000000DC
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!KfAcquireSpinLock] 000000AD
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!READ_PORT_UCHAR] 000000D4
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!KeGetCurrentIrql] 000000A2
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!KfRaiseIrql] 000000AF
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!KfLowerIrql] 0000009C
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!HalGetInterruptVector] 000000A4
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!HalTranslateBusAddress] 00000072
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!KeStallExecutionProcessor] 000000C0
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!KfReleaseSpinLock] 000000B7
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!READ_PORT_BUFFER_USHORT] 000000FD
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!READ_PORT_USHORT] 00000093
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!WRITE_PORT_BUFFER_USHORT] 00000026
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[HAL.dll!WRITE_PORT_UCHAR] 00000036
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[WMILIB.SYS!WmiSystemControl] 000000F7
    IAT \SystemRoot\System32\Drivers\a3oo9518.SYS[WMILIB.SYS!WmiCompleteRequest] 000000CC
     
    shadend,
    #6
  8. 2009/08/05
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    gmer log part 2

    ---- User IAT/EAT - GMER 1.0.15 ----

    IAT C:\WINDOWS\system32\services.exe[592] @ C:\WINDOWS\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW] 00390002
    IAT C:\WINDOWS\system32\services.exe[592] @ C:\WINDOWS\system32\services.exe [KERNEL32.dll!CreateProcessW] 00390000
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [USER32.dll!SetWindowPlacement] [66603F0E] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [USER32.dll!GetWindowPlacement] [66603F30] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [USER32.dll!LoadImageW] [660436C6] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [USER32.dll!SendMessageW] [66044891] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\Explorer.EXE [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtCreateFile] [022F2F30] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDeviceIoControlFile] [022F2CA0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtClose] [022F2D00] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDuplicateObject] [022F2CD0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SendMessageW] [66044891] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!LoadImageW] [660436C6] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\WININET.dll [USER32.dll!LoadImageW] [660436C6] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\WININET.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\WININET.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\WININET.dll [USER32.dll!SendMessageW] [66044891] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!SizeofResource] [66041421] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!FindResourceW] [660435F1] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadResource] [660414E6] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [66040F28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!LoadStringW] [660414EB] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!LoadImageW] [660436C6] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SendMessageW] [66044891] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowPlacement] [66603F30] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\iphlpapi.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\Explorer.EXE[840] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\System32\svchost.exe [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\System32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\System32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ c:\windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ c:\windows\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ c:\windows\system32\iphlpapi.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\system32\WININET.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\System32\svchost.exe[872] @ C:\WINDOWS\System32\PSAPI.DLL [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW]
     
    shadend,
    #7
  9. 2009/08/05
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    gmer log part 3

    [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowPlacement] [66603F30] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\iphlpapi.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[976] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe[1568] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\CyberLink\Shared Files\RichVideo.exe[1660] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe[1676] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\svchost.exe [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
     
    shadend,
    #8
  10. 2009/08/05
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    gmer log part 4

    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ c:\windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\svchost.exe[1788] @ c:\windows\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\advapi32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\advapi32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\wininet.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\wininet.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\wininet.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Webroot\Washer\WasherSvc.exe[1820] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\SOUNDMAN.EXE[1896] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [011C4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [011C477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [011C477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [011C4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [011C4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [011C477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [011C4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [011C4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [011C4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [011C477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [011C4722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [011C4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [011C477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [011C4722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [011C4845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [011C47FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [011C4722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [011C477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [011C4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [011C47FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [011C4845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[2068] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\advapi32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\advapi32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\shell32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\shell32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\shell32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\shell32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\shell32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\TrojanHunter 5.0\THGuard.exe[2176] @ C:\WINDOWS\system32\shell32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtCreateFile] [01412F30] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDeviceIoControlFile] [01412CA0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtClose] [01412D00] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDuplicateObject] [01412CD0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowPlacement] [66603F30] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\WININET.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\WININET.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\WININET.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\WININET.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\iphlpapi.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\PSAPI.DLL [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Windows Live\Messenger\msnmsgr.exe[2224] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\DAEMON Tools Lite\daemon.exe[2312] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [012E4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [012E477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [012E4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA]
     
    shadend,
    #9
  11. 2009/08/05
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    gmer log part 5

    [012E4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [012E477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [012E4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [012E477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [012E4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [012E4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [012E477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [012E4722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!CallWindowProcW] [66604121] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [012E4722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [012E477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [012E4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [012E47FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [012E4845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!CallWindowProcW] [66604121] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!CallWindowProcA] [666040F4] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [012E4728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [012E477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [012E4722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [012E4845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowPlacement] [66603F30] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [012E47FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[2356] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!CallWindowProcW] [66604121] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtCreateFile] [00802F30] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDeviceIoControlFile] [00802CA0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtClose] [00802D00] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDuplicateObject] [00802CD0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowPlacement] [66603F30] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Documents and Settings\owner\Desktop\malware\gmer.exe[2652] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtCreateFile] [003E2F30] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDeviceIoControlFile] [003E2CA0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtClose] [003E2D00] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDuplicateObject] [003E2CD0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowPlacement] [66603F30] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe[2952] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\WS2HELP.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\NETAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\wuauclt.exe[3672] @ C:\WINDOWS\system32\IPHLPAPI.DLL [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtCreateFile] [00AD2F30] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDeviceIoControlFile] [00AD2CA0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtClose] [00AD2D00] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\kernel32.dll [ntdll.dll!NtDuplicateObject] [00AD2CD0] C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll (Camera Helper Library./Logitech Inc.)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongA] [66603E7C] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHLWAPI.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx] [66044845] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!DeferWindowPos] [66603E28] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!GetWindowPlacement] [66603F30] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\SHELL32.dll [USER32.dll!TrackPopupMenu] [660447FC] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\ole32.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\ole32.dll [USER32.dll!MoveWindow] [66603F52] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryW] [6604477F] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryExA] [66044722] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA] [66044728] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wblind.dll (WindowBlinds (32 bit XP)/Stardock Corporation)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowPos] [66603F82] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!GetWindowRect] [66603FB5] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
    IAT C:\WINDOWS\system32\NOTEPAD.EXE[3936] @ C:\WINDOWS\system32\USERENV.dll [USER32.dll!SetWindowLongW] [66603EA3] C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbhelp.dll (WindowBlinds Helper DLL/Stardock.Net, Inc)
     
    shadend,
    #10
  12. 2009/08/05
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    gmer log final part

    ---- Devices - GMER 1.0.15 ----

    Device \FileSystem\Ntfs \Ntfs 85B881F8

    AttachedDevice \FileSystem\Ntfs \Ntfs sisidex.sys (FileSpy Filter Driver/Windows (R) 2000 DDK provider)
    AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
    AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

    Device \Driver\usbohci \Device\USBPDO-0 857331F8
    Device \Driver\dmio \Device\DmControl\DmIoDaemon 85B8C1F8
    Device \Driver\dmio \Device\DmControl\DmConfig 85B8C1F8
    Device \Driver\dmio \Device\DmControl\DmPnP 85B8C1F8
    Device \Driver\dmio \Device\DmControl\DmInfo 85B8C1F8
    Device \Driver\usbohci \Device\USBPDO-1 857331F8
    Device \Driver\usbehci \Device\USBPDO-2 857111F8
    Device \Driver\usbohci \Device\USBPDO-3 857331F8

    AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

    Device \Driver\PCI_PNP2012 \Device\00000049 spnt.sys
    Device \Driver\Ftdisk \Device\HarddiskVolume1 85B8D1F8
    Device \Driver\Ftdisk \Device\HarddiskVolume2 85B8D1F8
    Device \Driver\Cdrom \Device\CdRom0 858221F8
    Device \Driver\Cdrom \Device\CdRom1 858221F8
    Device \Driver\Ftdisk \Device\HarddiskVolume3 85B8D1F8
    Device \Driver\Ftdisk \Device\HarddiskVolume4 85B8D1F8
    Device \Driver\NetBT \Device\NetBt_Wins_Export 855EA1F8
    Device \Driver\NetBT \Device\NetBT_Tcpip_{CC50DEB1-C811-4C01-9E34-75670901A840} 855EA1F8
    Device \Driver\NetBT \Device\NetbiosSmb 855EA1F8

    AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

    Device \Driver\sptd \Device\2380127012 spnt.sys

    AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

    Device \Driver\usbohci \Device\USBFDO-0 857331F8
    Device \Driver\usbohci \Device\USBFDO-1 857331F8
    Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 855711F8
    Device \Driver\usbohci \Device\USBFDO-2 857331F8
    Device \FileSystem\MRxSmb \Device\LanmanRedirector 855711F8
    Device \Driver\usbehci \Device\USBFDO-3 857111F8
    Device \Driver\Ftdisk \Device\FtControl 85B8D1F8
    Device \Driver\SiSRaid \Device\Scsi\SiSRaid1 85B8A1F8
    Device \Driver\a3oo9518 \Device\Scsi\a3oo95181Port3Path0Target0Lun0 857051F8
    Device \Driver\a3oo9518 \Device\Scsi\a3oo95181 857051F8
    Device \FileSystem\Cdfs \Cdfs 85278500

    ---- Registry - GMER 1.0.15 ----

    Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
    Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
    Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x83 0x5D 0x16 0xAD ...
    Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
    Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xA2 0xE8 0x4C 0x11 ...
    Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x55 0xCF 0x7D 0xAE ...
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x83 0x5D 0x16 0xAD ...
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xA2 0xE8 0x4C 0x11 ...
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
    Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x00 0x3E 0x9C 0xA4 ...
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools Lite\
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x83 0x5D 0x16 0xAD ...
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xA2 0xE8 0x4C 0x11 ...
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40
    Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x00 0x3E 0x9C 0xA4 ...

    ---- EOF - GMER 1.0.15 ----
     
    shadend,
    #11
  13. 2009/08/05
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    mbam log

    Malwarebytes' Anti-Malware 1.40
    Database version: 2561
    Windows 5.1.2600 Service Pack 3

    8/4/2009 7:09:09 PM
    mbam-log-2009-08-04 (19-09-09).txt

    Scan type: Full Scan
    Objects scanned: 86182
    Time elapsed: 15 minute(s), 5 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 5
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\n.cs4 (Backdoor.Ciadoor) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Interface\{0958c4c9-77b0-4aa8-9364-7886bfca7e39} (Backdoor.Ciadoor) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{e14dce67-8fb7-4721-8149-179baa4d792c} (Backdoor.Ciadoor) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\Typelib\{c9f1c5a0-f3d8-48e2-8b8c-3e86b4cac7e3} (Backdoor.Ciadoor) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{e14dce67-8fb7-4721-8149-179baa4d792c} (Backdoor.Ciadoor) -> Quarantined and deleted successfully.

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
     
    shadend,
    #12
  14. 2009/08/05
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    hijack this log

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 9:11:17 PM, on 8/4/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\TrojanHunter 5.0\THGuard.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Family Safety\fsssvc.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Webroot\Washer\WasherSvc.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Documents and Settings\owner\Desktop\malware\HijackThis.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\NOTEPAD.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 5.0\THGuard.exe "
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe "
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1238892772765
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Window Washer Engine (wwEngineSvc) - Webroot Software, Inc. - C:\Program Files\Webroot\Washer\WasherSvc.exe

    --
    End of file - 7100 bytes




    thats it.posting this stuff was excruciating and i tried 3 times to post the superantispyware info but the site keeps telling me i have to wait for a moderator to approve it so no idea when that will appear.anyways the one program identified and removed 5 files that were infected but i do still have the same problem.let me know ,any help is hugely appreciated!
     
    shadend,
    #13
  15. 2009/08/05
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    I don't see much here, so let's try one more scan.

    Please download ComboFix from [color= "Red"]Here[/color] or [color= "#FF0000"]Here[/color] to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results ".
      • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      • Close any open browsers.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review.
    **Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

    Make sure, you re-enable your security programs, when you're done with Combofix.
     
    broni,
    #14
  16. 2009/08/10
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    combofix log

    ComboFix 09-08-10.01 - owner 08/10/2009 12:15.1.1 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.479.210 [GMT -7:00]
    Running from: c:\documents and settings\owner\Desktop\ComboFix.exe
    AV: avast! antivirus 4.8.1335 [VPS 090810-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    ?
    c:\recycler\S-1-5-21-1757981266-1409082233-682003330-1003

    .
    ((((((((((((((((((((((((( Files Created from 2009-07-10 to 2009-08-10 )))))))))))))))))))))))))))))))
    .

    2009-08-09 06:00 . 2009-08-09 06:00 -------- d--h--w- c:\windows\PIF
    2009-08-05 01:51 . 2009-08-05 01:51 -------- d-----w- c:\documents and settings\owner\Application Data\Malwarebytes
    2009-08-05 01:50 . 2009-08-03 20:36 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
    2009-08-05 01:50 . 2009-08-05 01:50 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
    2009-08-05 01:50 . 2009-08-05 01:51 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2009-08-05 01:50 . 2009-08-03 20:36 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
    2009-08-05 00:19 . 2009-08-05 00:31 117760 ----a-w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
    2009-08-05 00:19 . 2009-08-05 00:19 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
    2009-08-05 00:18 . 2009-08-05 00:18 -------- d-----w- c:\program files\SUPERAntiSpyware
    2009-08-05 00:18 . 2009-08-05 00:18 -------- d-----w- c:\documents and settings\owner\Application Data\SUPERAntiSpyware.com
    2009-08-05 00:17 . 2009-08-05 00:17 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
    2009-08-03 23:54 . 2009-08-03 23:54 -------- d-----w- c:\documents and settings\owner\Application Data\TrojanHunter
    2009-08-03 23:33 . 2009-08-03 23:34 -------- d-----w- c:\program files\TrojanHunter 5.0
    2009-08-03 23:13 . 2009-08-03 23:13 -------- d-----w- c:\documents and settings\owner\Local Settings\Application Data\Stardock
    2009-08-03 22:46 . 2009-08-03 22:46 -------- d-----w- c:\program files\MSConfig CleanUp
    2009-08-03 22:45 . 2009-08-03 23:10 -------- d-----w- c:\program files\Common Files\Stardock
    2009-08-03 22:45 . 2004-04-26 20:47 163456 ----a-w- c:\windows\system32\drivers\vidstub.sys
    2009-08-03 22:25 . 2009-08-03 22:25 -------- d-----w- c:\program files\Common Files\Webroot Shared
    2009-08-03 22:25 . 2009-08-03 22:25 -------- d-----w- c:\documents and settings\owner\Application Data\Webroot
    2009-08-03 22:25 . 2009-08-03 22:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Webroot
    2009-08-03 20:13 . 2009-08-03 20:13 -------- d-----w- c:\program files\Webroot
    2009-08-03 20:13 . 2007-11-26 21:47 194888 ----a-w- c:\windows\Unwash6.exe
    2009-08-03 18:11 . 2009-08-03 18:11 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Mozilla
    2009-08-03 03:20 . 2009-08-03 03:20 -------- d-----w- c:\program files\AccessData
    2009-08-03 01:27 . 2009-08-03 01:27 -------- d-----w- c:\program files\Guitar Pro 5
    2009-08-03 01:09 . 2009-08-10 06:30 -------- d-----w- c:\documents and settings\owner\Application Data\DivX
    2009-08-03 00:52 . 2009-08-03 00:54 -------- d-----w- c:\program files\Common Files\DivX Shared
    2009-08-03 00:52 . 2009-08-03 00:55 -------- d-----w- c:\program files\DivX
    2009-08-02 23:31 . 2009-08-02 23:31 -------- d-----w- c:\documents and settings\owner\Application Data\Publish Providers
    2009-08-02 23:27 . 2009-08-02 23:31 -------- d-----w- c:\documents and settings\owner\Application Data\Sony
    2009-08-02 23:27 . 2009-08-02 23:27 -------- d-----w- c:\documents and settings\owner\Local Settings\Application Data\Sony
    2009-08-02 23:21 . 2009-08-02 23:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Sony
    2009-08-02 23:19 . 2009-08-02 23:20 -------- d-----w- c:\program files\Sony
    2009-08-02 18:24 . 2009-08-02 18:24 -------- d-----w- c:\program files\WinAVI Video Converter
    2009-08-02 18:09 . 2009-02-05 20:06 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
    2009-08-02 18:09 . 2009-02-05 20:06 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
    2009-08-02 18:09 . 2009-02-05 20:05 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
    2009-08-02 18:09 . 2009-02-05 20:07 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
    2009-08-02 18:09 . 2009-02-05 20:07 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
    2009-08-02 18:09 . 2009-02-05 20:04 97480 ----a-w- c:\windows\system32\AvastSS.scr
    2009-08-02 18:09 . 2009-02-05 20:08 93296 ----a-w- c:\windows\system32\drivers\aswmon.sys
    2009-08-02 18:09 . 2009-02-05 20:08 94032 ----a-w- c:\windows\system32\drivers\aswmon2.sys
    2009-08-02 18:09 . 2009-02-05 20:11 1256296 ----a-w- c:\windows\system32\aswBoot.exe
    2009-08-02 18:00 . 2009-08-02 18:00 -------- d-----w- c:\documents and settings\owner\Local Settings\Application Data\WinAVI
    2009-08-02 06:10 . 2009-08-02 06:10 -------- d-----w- c:\program files\sisagp
    2009-08-02 05:46 . 2009-08-03 01:08 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
    2009-08-02 05:35 . 2009-08-02 05:35 -------- d-----w- c:\program files\PC Drivers HeadQuarters
    2009-08-02 03:11 . 2009-08-02 03:11 552 ----a-w- c:\windows\system32\d3d8caps.dat
    2009-08-02 02:39 . 2009-06-05 09:56 12288 ----a-w- c:\windows\InstFunc.dll
    2009-08-02 02:39 . 2006-04-28 08:56 49152 ----a-w- c:\windows\InstFunc.exe
    2009-08-02 02:39 . 2006-03-22 20:53 337320 ----a-w- c:\windows\difxapi.dll
    2009-08-02 02:23 . 2003-07-18 17:58 36992 ----a-w- c:\windows\system32\drivers\SISAGPX.SYS
    2009-08-02 02:22 . 2009-06-05 09:56 172032 ----a-w- c:\windows\system32\SiSInst.dll
    2009-08-02 02:22 . 2009-06-05 10:24 19200 ----a-w- c:\windows\system32\drivers\srvkp.sys
    2009-08-02 02:22 . 2009-06-05 09:56 258048 ----a-w- c:\windows\system32\SiSParse.dll
    2009-08-02 02:22 . 2009-06-05 09:56 49152 ----a-w- c:\windows\system32\SiSBase.dll
    2009-08-02 02:22 . 2009-06-05 10:24 1571001 ----a-w- c:\windows\system32\sisgl.dll
    2009-08-02 02:22 . 2009-06-05 10:07 3467776 -c--a-w- c:\windows\system32\dllcache\sisgrv.dll
    2009-08-02 02:22 . 2009-06-05 10:07 3467776 ----a-w- c:\windows\system32\sisgrv.dll
    2009-08-02 02:22 . 2006-01-19 09:34 49152 ----a-w- c:\windows\system32\sis660.bin
    2009-08-02 02:22 . 2005-10-07 14:13 65536 ----a-w- c:\windows\system32\sis760.bin
    2009-08-02 02:22 . 2005-10-07 14:13 65536 ----a-w- c:\windows\system32\sis741.bin
    2009-08-02 02:22 . 2009-06-05 10:02 323584 -c--a-w- c:\windows\system32\dllcache\sisgrp.sys
    2009-08-02 02:22 . 2009-06-05 10:02 323584 ----a-w- c:\windows\system32\drivers\sisgrp.sys
    2009-08-02 01:58 . 2004-10-15 09:48 7168 ----a-w- c:\windows\system32\instFunc.dll
    2009-08-02 01:49 . 2009-08-02 01:49 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Drivers HeadQuarters
    2009-08-02 01:49 . 2009-08-02 01:51 -------- d-----w- c:\documents and settings\owner\Application Data\GetRightToGo
    2009-07-21 04:43 . 2009-07-21 04:43 -------- d-----w- c:\documents and settings\owner\Local Settings\Application Data\PCHealth
    2009-07-20 23:18 . 2009-07-20 23:18 -------- d-----w- c:\windows\system32\XPSViewer
    2009-07-20 23:17 . 2009-07-20 23:17 -------- d-----w- c:\program files\MSBuild
    2009-07-20 23:17 . 2009-07-20 23:17 -------- d-----w- c:\program files\Reference Assemblies
    2009-07-20 23:15 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
    2009-07-20 23:15 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
    2009-07-20 23:15 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
    2009-07-20 23:15 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
    2009-07-20 23:15 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
    2009-07-20 23:15 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
    2009-07-20 23:15 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
    2009-07-20 22:57 . 2009-07-20 22:57 -------- d-sh--w- c:\documents and settings\owner\IECompatCache
    2009-07-13 03:19 . 2009-07-13 03:19 -------- d-----w- c:\documents and settings\owner\Application Data\Steinberg
    2009-07-13 03:13 . 2009-07-13 03:27 -------- d-----w- c:\program files\Steinberg
    2009-07-13 03:12 . 2009-07-13 03:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Pinnacle
    2009-07-13 03:12 . 2002-11-25 14:36 45056 ----a-w- c:\windows\system32\Synsopos.exe
    2009-07-13 03:12 . 2002-11-25 11:46 16896 ----a-w- c:\windows\system32\drivers\SynasUSB.sys
    2009-07-13 03:12 . 2009-07-13 03:12 -------- d-----w- c:\program files\Syncrosoft
    2009-07-13 03:12 . 2005-03-29 11:25 400384 ----a-w- c:\windows\system32\SYNSOACC.dll
    2009-07-13 03:12 . 2004-05-10 21:58 147456 ----a-w- c:\windows\system32\SynsoLChk.dll
    2009-07-13 03:12 . 2001-04-09 11:03 17784 ----a-w- c:\windows\system32\drivers\NSynas32.sys
    2009-07-12 22:13 . 2009-07-12 22:13 -------- d-----w- c:\program files\Common Files\Skype
    2009-07-12 19:25 . 2009-07-12 19:25 233472 ----a-w- c:\windows\system32\REX Shared Library.dll
    2009-07-12 19:25 . 2009-07-12 19:25 368640 ----a-w- c:\windows\system32\ReWire.dll
    2009-07-12 18:55 . 2009-07-12 18:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Propellerhead Software
    2009-07-12 18:55 . 2009-07-12 19:28 -------- d-----w- c:\documents and settings\owner\Application Data\Propellerhead Software
    2009-07-12 18:54 . 2009-07-12 18:54 -------- d-----w- c:\program files\Propellerhead

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-08-10 19:18 . 2009-04-05 00:12 -------- d-----w- c:\documents and settings\owner\Application Data\uTorrent
    2009-08-10 03:28 . 2009-04-05 00:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Soulseek
    2009-08-04 00:39 . 2009-06-04 03:20 -------- d-----r- c:\program files\Skype
    2009-08-03 22:58 . 2009-03-26 07:26 -------- d--h--w- c:\program files\InstallShield Installation Information
    2009-08-03 22:45 . 2009-04-05 04:24 -------- d-----w- c:\program files\Stardock
    2009-08-03 06:37 . 2009-04-11 21:57 -------- d-----w- c:\documents and settings\owner\Application Data\DNA
    2009-08-03 01:33 . 2009-03-26 08:26 23280 ----a-w- c:\documents and settings\owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-08-03 01:07 . 2009-04-11 21:57 -------- d-----w- c:\program files\DNA
    2009-08-02 00:36 . 2009-04-05 02:16 -------- d-----w- c:\program files\Microsoft Silverlight
    2009-07-30 23:56 . 2009-04-05 03:29 -------- d-----w- c:\program files\VideoLAN
    2009-07-27 19:09 . 2009-07-11 02:24 21840 ----atw- c:\windows\system32\SIntfNT.dll
    2009-07-27 19:09 . 2009-07-11 02:24 17212 ----atw- c:\windows\system32\SIntf32.dll
    2009-07-27 19:09 . 2009-07-11 02:24 12067 ----atw- c:\windows\system32\SIntf16.dll
    2009-07-18 03:58 . 2009-06-04 03:21 -------- d-----w- c:\documents and settings\owner\Application Data\Skype
    2009-07-18 00:15 . 2009-06-04 03:22 -------- d-----w- c:\documents and settings\owner\Application Data\skypePM
    2009-07-12 22:13 . 2009-06-04 03:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
    2009-07-12 09:37 . 2009-06-13 05:25 -------- d-----w- c:\program files\Counter-Strike 1.6
    2009-07-11 01:33 . 2009-07-11 01:13 25739 ----a-w- c:\windows\DIIUnin.dat
    2009-07-11 01:13 . 2009-07-11 01:13 2829 ----a-w- c:\windows\DIIUnin.pif
    2009-07-11 01:13 . 2009-07-11 01:13 94208 ----a-w- c:\windows\DIIUnin.exe
    2009-07-10 00:33 . 2009-07-10 00:33 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
    2009-07-09 21:55 . 2009-05-02 21:58 -------- d-----w- c:\program files\Common Files\Adobe
    2009-07-09 21:51 . 2009-07-09 21:51 -------- d-----w- c:\program files\Adobe Media Player
    2009-07-09 21:35 . 2009-07-09 21:35 -------- d-----w- c:\program files\Common Files\Macrovision Shared
    2009-07-09 02:10 . 2009-07-09 02:10 -------- d-----w- c:\program files\Common Files\Logitech
    2009-07-09 02:07 . 2009-07-09 02:07 -------- d-----w- c:\documents and settings\owner\Application Data\Command & Conquer 3 Tiberium Wars
    2009-07-06 14:03 . 2009-07-11 23:16 40776 ----a-w- c:\windows\Fonts\Flama_Espina.TTF
    2009-07-03 17:09 . 2004-08-04 07:56 915456 ----a-w- c:\windows\system32\wininet.dll
    2009-06-25 05:00 . 2009-06-25 04:45 -------- d-----w- c:\documents and settings\owner\Application Data\dvdcss
    2009-06-16 14:36 . 2004-08-04 07:56 119808 ----a-w- c:\windows\system32\t2embed.dll
    2009-06-16 14:36 . 2001-08-23 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
    2009-06-12 00:21 . 2009-06-12 00:21 -------- d-----w- c:\program files\Alwil Software
    2009-06-05 18:55 . 2009-07-11 23:16 45684 ----a-w- c:\windows\Fonts\Rom_Fatl _Gth_VErsal.ttf
    2009-06-05 09:58 . 2009-06-05 09:58 9728 ----a-w- c:\windows\system32\SiSPIns2.dll
    2009-06-04 03:22 . 2009-06-04 03:22 56 ---ha-w- c:\windows\system32\ezsidmv.dat
    2009-06-03 19:09 . 2004-08-04 07:56 1291264 ----a-w- c:\windows\system32\quartz.dll
    2009-06-03 00:58 . 2009-06-03 00:58 715248 ----a-w- c:\windows\system32\drivers\sptd.sys
    2009-03-16 21:35 . 2009-03-16 21:35 525128 ----a-w- c:\program files\DXSETUP.exe
    2009-03-16 21:35 . 2009-03-16 21:35 94024 ----a-w- c:\program files\DSETUP.dll
    2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
    2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "MsnMsgr "= "c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-07 3885408]
    "DAEMON Tools Lite "= "c:\program files\DAEMON Tools Lite\daemon.exe" [2007-12-29 486856]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SiSUSBRG "= "c:\windows\SiSUSBrg.exe" [2002-07-13 106496]
    "avast! "= "c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
    "THGuard "= "c:\program files\TrojanHunter 5.0\THGuard.exe" [2008-07-10 1056928]
    "SoundMan "= "SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2004-07-28 68096]

    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} "= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    2008-12-22 19:05 356352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
    2008-09-16 16:44 174328 ----a-w- c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs "=c:\windows\system32\wbsys.dll

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "c:\\Program Files\\SoulseekNS\\slsk.exe "=
    "c:\\Program Files\\uTorrent\\uTorrent.exe "=
    "c:\\Program Files\\Messenger\\msmsgs.exe "=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "=
    "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe "=
    "c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe "=
    "c:\\Program Files\\DNA\\btdna.exe "=
    "c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe "=
    "c:\\Program Files\\Counter-Strike 1.6\\hl.exe "=
    "c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe "=
    "c:\\WINDOWS\\system32\\sessmgr.exe "=
    "c:\\Program Files\\Skype\\Phone\\Skype.exe "=
    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe "=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe "=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "56802:TCP "= 56802:TCP:*:Disabled:pando Media Booster
    "56802:UDP "= 56802:UDP:*:Disabled:pando Media Booster
    "5353:TCP "= 5353:TCP:*:Disabled:Adobe CSI CS4

    R0 BootScreen;BootScreen;\SystemRoot\\SystemRoot\System32\drivers\vidstub.sys --> \SystemRoot\\SystemRoot\System32\drivers\vidstub.sys [?]
    R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [8/2/2009 11:09 AM 114768]
    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [7/28/2009 10:53 AM 9968]
    R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [7/28/2009 10:53 AM 72944]
    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [8/2/2009 11:09 AM 20560]
    R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [4/4/2009 7:16 PM 55152]
    R2 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [2/6/2009 6:08 PM 533360]
    R2 wwEngineSvc;Window Washer Engine;c:\program files\Webroot\Washer\WasherSvc.exe [8/3/2009 1:13 PM 598856]
    S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [7/28/2009 10:53 AM 7408]
    S3 SiSCom;SISCom_Com;\??\c:\documents and settings\owner\Desktop\Setup\utilDLL\SiSCom.sys --> c:\documents and settings\owner\Desktop\Setup\utilDLL\SiSCom.sys [?]

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
    "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll ",BrandIEActiveSetup SIGNUP
    .
    Contents of the 'Scheduled Tasks' folder

    2009-08-08 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 19:34]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.daemon-search.com/startpage
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
    FF - ProfilePath - c:\documents and settings\owner\Application Data\Mozilla\Firefox\Profiles\pw4tnfqk.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.timeanddate.com/worldclock/city.html?n=256
    FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll
    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

    ---- FIREFOX POLICIES ----
    FF - user.js: yahoo.homepage.dontask - true.

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-08-10 12:22
    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'winlogon.exe'(548)
    c:\program files\SUPERAntiSpyware\SASWINLO.dll
    c:\windows\system32\WININET.dll
    c:\program files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll
    .
    Completion time: 2009-08-10 12:25
    ComboFix-quarantined-files.txt 2009-08-10 19:25

    Pre-Run: 2,164,391,936 bytes free
    Post-Run: 2,164,772,864 bytes free

    WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT= "Microsoft Windows Recovery Console" /cmdcons
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS= "Microsoft Windows XP Professional" /noexecute=optin /fastdetect

    251 --- E O F --- 2009-08-03 10:02
     
    shadend,
    #15
  17. 2009/08/10
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    new hijackthis log

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:28:33 PM, on 8/10/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Windows Live\Family Safety\fsssvc.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Webroot\Washer\WasherSvc.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\notepad.exe
    C:\Program Files\uTorrent\uTorrent.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 5.0\THGuard.exe "
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe "
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1238892772765
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: C:\WINDOWS\system32\wbsys.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Window Washer Engine (wwEngineSvc) - Webroot Software, Inc. - C:\Program Files\Webroot\Washer\WasherSvc.exe

    --
    End of file - 6892 bytes
     
    shadend,
    #16
  18. 2009/08/10
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Uninstall Combofix:
    Go Start > Run
    Type in:
    combofix /u
    Note the space between the "combofix" and the "/u "
    Restart computer.


    Post fresh HJT log.

    What are the current issues?
     
    broni,
    #17
  19. 2009/08/10
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    new log

    my taskmanger continues to be unresponsive.upon opening it remains frozen and non-updating.after following the first bunch of steps the first time a few malware were found and deleted but this hasn't fixed the problem and repeat scans susing the same programs show nothing.heres the new hjt log after uninstalling combofix:




    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 1:07:44 PM, on 8/10/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Windows Live\Family Safety\fsssvc.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Webroot\Washer\WasherSvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Program Files\TrojanHunter 5.0\THGuard.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\wuauclt.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

    http://www.daemon-search.com/startpage

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

    http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL

    = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

    http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

    http://go.microsoft.com/fwlink/?LinkId=69157
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no

    file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -

    C:\Program Files\Common

    Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Windows Live Family Safety Browser Helper -

    {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows

    Live\Family Safety\fssbho.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no

    file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -

    C:\Program Files\Microsoft\Search Enhancement Pack\Search

    Helper\SEPsearchhelperie.dll
    O2 - BHO: Windows Live Sign-in Helper -

    {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common

    Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper -

    {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program

    Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper -

    {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows

    Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl -

    {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program

    Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: &Windows Live Toolbar -

    {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows

    Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter

    5.0\THGuard.exe "
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows

    Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools

    Lite\daemon.exe "
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft

    Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel -

    res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} -

    C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer -

    {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows

    Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -

    C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -

    {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network

    Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -

    C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger -

    {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

    Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine

    Advantage Validation Tool) -

    http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class)

    -

    http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/w

    uweb_site.cab?1238892772765
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -

    C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: C:\WINDOWS\system32\wbsys.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program

    Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software

    - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program

    Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program

    Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program

    Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. -

    C:\Program Files\Common Files\Macrovision Shared\FLEXnet

    Publisher\FNPLicensingService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun

    Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common

    Files\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program

    Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common

    Files\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program

    Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    O23 - Service: NMIndexingService - Unknown owner - C:\Program

    Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown

    owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Window Washer Engine (wwEngineSvc) - Webroot Software,

    Inc. - C:\Program Files\Webroot\Washer\WasherSvc.exe

    --
    End of file - 7111 bytes
     
    shadend,
    #18
  20. 2009/08/10
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please repost HJT log. Make sure "word wrap" in Notepad is disabled, because the log is very hard to read.
     
    broni,
    #19
  21. 2009/08/10
    shadend

    shadend Inactive Thread Starter

    Joined:
    2009/08/03
    Messages:
    26
    Likes Received:
    0
    new log-un wordwrapped

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 1:07:44 PM, on 8/10/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Windows Live\Family Safety\fsssvc.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Webroot\Washer\WasherSvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Program Files\TrojanHunter 5.0\THGuard.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\DAEMON Tools Lite\daemon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\system32\wuauclt.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 5.0\THGuard.exe "
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe "
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1238892772765
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O20 - AppInit_DLLs: C:\WINDOWS\system32\wbsys.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Window Washer Engine (wwEngineSvc) - Webroot Software, Inc. - C:\Program Files\Webroot\Washer\WasherSvc.exe

    --
    End of file - 7111 bytes
     
    shadend,
    #20
Page 1 of 2

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...