Inactive Redirection of webpages online-residual virus?

[Inactive] Redirection of webpages online-residual virus?

I already know I have had a recent run in with some viruses as malwarebytes' anti malware picked up a few. As well as that there had been tell tale signs of false security alerts shown on the start up panel. After deleting these viruses the false security alerts have stopped however I still notice from time to time that webpages are being redirected. Superantispyware and malwarebytes' anti malware are not picking up any viruses; however to be sure I was looking to get some information on whether my system is still infected.
Malwarebytes' antimalwares log when infected:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5426

Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000

31/12/2010 12:37:20
mbam-log-2010-12-31 (12-37-20).txt

Scan type: Quick scan
Objects scanned: 184855
Time elapsed: 21 minute(s), 24 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 25
Registry Values Infected: 3
Registry Data Items Infected: 1
Folders Infected: 1
Files Infected: 11

Memory Processes Infected:
c:\programdata\vtebhbgvhkfvrdi.exe (Spyware.Zbot) -> 684 -> Unloaded process successfully.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\stllssvrIDriverT (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127AD2-394B-70F5-C650-B97867BAA1F7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{19127AD2-394B-70F5-C650-B97867BAA1F7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{3446AF26-B8D7-199B-4CFC-6FD764CA5C9F} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{3446AF26-B8D7-199B-4CFC-6FD764CA5C9F} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\VtEBhBGvHKFVrdI.exe (Spyware.Zbot) -> Value: VtEBhBGvHKFVrdI.exe -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\nonep (VirTool.Obfuscator) -> Value: nonep -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> Value: UID -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
c:\Windows\System32\lowsec (Stolen.data) -> Quarantined and deleted successfully.


GMER 1.0.15.15530 - http://www.gmer.net
Rootkit quick scan 2011-01-01 15:31:48
Windows 6.0.6001 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HTS541660J9SA00 rev.SBBOC7KP
Running: q7tqgwuz.exe; Driver: C:\Users\naeem\AppData\Local\Temp\uxddapow.sys


---- Devices - GMER 1.0.15 ----

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-0 849011F8
Device \Driver\atapi \Device\Ide\IdePort0 849011F8
Device \Driver\atapi \Device\Ide\IdePort1 849011F8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-2 849011F8
Device \Driver\ao9tmpic \Device\Scsi\ao9tmpic1Port4Path0Target0Lun0 84DB31F8
Device \Driver\ao9tmpic \Device\Scsi\ao9tmpic1 84DB31F8
Device \FileSystem\Ntfs \Ntfs 849021F8

AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)

---- Threads - GMER 1.0.15 ----

Thread System [4:252] 84B4C53C
Thread System [4:256] 84B4E52D

---- EOF - GMER 1.0.15 ----


MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows Vista Home Basic Edition
Windows Information: Service Pack 1 (build 6001), 32-bit
Base Board Manufacturer: Dell Inc.
BIOS Manufacturer: Dell Inc.
System Manufacturer: Dell Inc.
System Product Name: MM061
Logical Drives Mask: 0x0000007c

Kernel Drivers (total 156):
0x8200A000 \SystemRoot\system32\ntkrnlpa.exe
0x823C3000 \SystemRoot\system32\hal.dll
0x8040E000 \SystemRoot\system32\kdcom.dll
0x80416000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x80476000 \SystemRoot\system32\PSHED.dll
0x80487000 \SystemRoot\system32\BOOTVID.dll
0x8048F000 \SystemRoot\system32\CLFS.SYS
0x804D0000 \SystemRoot\system32\CI.dll
0x80607000 \SystemRoot\system32\drivers\Wdf01000.sys
0x80683000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x80690000 \SystemRoot\System32\Drivers\spjl.sys
0x80790000 \SystemRoot\System32\Drivers\WMILIB.SYS
0x80799000 \SystemRoot\System32\Drivers\SCSIPORT.SYS
0x805B0000 \SystemRoot\system32\drivers\acpi.sys
0x807BF000 \SystemRoot\system32\drivers\msisadrv.sys
0x807C7000 \SystemRoot\system32\drivers\pci.sys
0x807EE000 \SystemRoot\System32\drivers\partmgr.sys
0x807FD000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x805F6000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x8260E000 \SystemRoot\system32\drivers\volmgr.sys
0x8261D000 \SystemRoot\System32\drivers\volmgrx.sys
0x82667000 \SystemRoot\system32\drivers\intelide.sys
0x8266E000 \SystemRoot\system32\drivers\PCIIDEX.SYS
0x8267C000 \SystemRoot\system32\DRIVERS\pciide.sys
0x82683000 \SystemRoot\System32\drivers\mountmgr.sys
0x82693000 \SystemRoot\system32\drivers\atapi.sys
0x8269B000 \SystemRoot\system32\drivers\ataport.SYS
0x826B9000 \SystemRoot\system32\drivers\fltmgr.sys
0x826EB000 \SystemRoot\system32\drivers\fileinfo.sys
0x826FB000 \SystemRoot\System32\Drivers\PxHelp20.sys
0x82704000 \SystemRoot\System32\Drivers\ksecdd.sys
0x86409000 \SystemRoot\system32\drivers\ndis.sys
0x86514000 \SystemRoot\system32\drivers\msrpc.sys
0x8653F000 \SystemRoot\system32\drivers\NETIO.SYS
0x86602000 \SystemRoot\System32\drivers\tcpip.sys
0x866EC000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x86802000 \SystemRoot\System32\Drivers\Ntfs.sys
0x86911000 \SystemRoot\system32\drivers\volsnap.sys
0x8694A000 \SystemRoot\System32\Drivers\spldr.sys
0x86952000 \SystemRoot\System32\Drivers\mup.sys
0x86961000 \SystemRoot\System32\drivers\ecache.sys
0x86988000 \SystemRoot\system32\drivers\disk.sys
0x86999000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x869BA000 \SystemRoot\system32\drivers\crcdisk.sys
0x869E3000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x869EE000 \SystemRoot\system32\DRIVERS\tunmp.sys
0x86707000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x869F7000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
0x86716000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0x8AA0B000 \SystemRoot\system32\DRIVERS\igdkmd32.sys
0x8B0BA000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x8B159000 \SystemRoot\System32\drivers\watchdog.sys
0x8B166000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x8A606000 \SystemRoot\system32\DRIVERS\bcmwl6.sys
0x8A708000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x8A713000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x8A751000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x8A760000 \SystemRoot\system32\DRIVERS\bcm4sbxp.sys
0x8A770000 \SystemRoot\system32\DRIVERS\ohci1394.sys
0x8A780000 \SystemRoot\system32\DRIVERS\1394BUS.SYS
0x8A78E000 \SystemRoot\system32\DRIVERS\sdbus.sys
0x8A7A8000 \SystemRoot\system32\DRIVERS\rimmptsk.sys
0x8A7B6000 \SystemRoot\system32\DRIVERS\rimsptsk.sys
0x8B178000 \SystemRoot\system32\DRIVERS\rixdptsk.sys
0x8A7CA000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x8B1C9000 \SystemRoot\system32\DRIVERS\SynTP.sys
0x8A7DD000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x8A7DF000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x8A7EA000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x8A7F5000 \SystemRoot\system32\DRIVERS\cdrblock.sys
0x8671A000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x8A7F8000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
0x86732000 \SystemRoot\System32\Drivers\aueit1z7.SYS
0x86768000 \SystemRoot\system32\DRIVERS\dne2000.sys
0x86787000 \SystemRoot\system32\DRIVERS\msiscsi.sys
0x867B5000 \SystemRoot\system32\DRIVERS\storport.sys
0x8B1F4000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x86579000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x8AA00000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x86590000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x865B3000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x865C2000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x865D6000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x865EB000 \SystemRoot\system32\DRIVERS\termdd.sys
0x82775000 \SystemRoot\system32\DRIVERS\mcdbus.sys
0x8A7FE000 \SystemRoot\system32\DRIVERS\swenum.sys
0x82792000 \SystemRoot\system32\DRIVERS\ks.sys
0x867F6000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x827BC000 \SystemRoot\system32\DRIVERS\umbus.sys
0x827C9000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x8B608000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x8B619000 \SystemRoot\system32\drivers\stwrt.sys
0x8B6BC000 \SystemRoot\system32\drivers\portcls.sys
0x8B6E9000 \SystemRoot\system32\drivers\drmk.sys
0x8B70E000 \SystemRoot\system32\DRIVERS\HSXHWAZL.sys
0x8B80F000 \SystemRoot\system32\DRIVERS\HSX_DPV.sys
0x8B912000 \SystemRoot\system32\DRIVERS\HSX_CNXT.sys
0x8B9C6000 \SystemRoot\system32\drivers\modem.sys
0x8B9D3000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0x8B9DC000 \SystemRoot\System32\Drivers\Null.SYS
0x8B9E3000 \SystemRoot\System32\Drivers\Beep.SYS
0x8B9EA000 \SystemRoot\System32\drivers\vga.sys
0x8B74B000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x8B9F6000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x8B800000 \SystemRoot\system32\drivers\rdpencdd.sys
0x8B76C000 \SystemRoot\System32\Drivers\Msfs.SYS
0x8B777000 \SystemRoot\System32\Drivers\Npfs.SYS
0x8B785000 \SystemRoot\System32\DRIVERS\rasacd.sys
0x8B78E000 \SystemRoot\system32\DRIVERS\tdx.sys
0x8B7A4000 \SystemRoot\system32\DRIVERS\smb.sys
0x8B7B8000 \SystemRoot\system32\drivers\afd.sys
0x8BA0D000 \SystemRoot\System32\DRIVERS\netbt.sys
0x8BA3F000 \SystemRoot\system32\DRIVERS\pacer.sys
0x8BA55000 \SystemRoot\system32\DRIVERS\netbios.sys
0x8BA63000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x8BA76000 \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys
0x8BA98000 \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
0x8BA9E000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x8BADA000 \SystemRoot\system32\drivers\nsiproxy.sys
0x8BAE4000 \SystemRoot\System32\Drivers\dfsc.sys
0x8BAFB000 \SystemRoot\system32\DRIVERS\cdrport.sys
0x8BAFD000 \SystemRoot\System32\Drivers\crashdmp.sys
0x8BB0A000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x8BB15000 \SystemRoot\System32\Drivers\dump_atapi.sys
0x93470000 \SystemRoot\System32\win32k.sys
0x8BB1D000 \SystemRoot\System32\drivers\Dxapi.sys
0x8BB27000 \SystemRoot\system32\DRIVERS\monitor.sys
0x93690000 \SystemRoot\System32\TSDDD.dll
0x936B0000 \SystemRoot\System32\cdd.dll
0x8BB36000 \SystemRoot\system32\drivers\luafv.sys
0xA5E05000 \SystemRoot\system32\drivers\spsys.sys
0xA5EB4000 \SystemRoot\system32\DRIVERS\lltdio.sys
0xA5EC4000 \SystemRoot\system32\DRIVERS\nwifi.sys
0xA5EEE000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xA5EF8000 \SystemRoot\system32\DRIVERS\rspndr.sys
0xA5F0B000 \SystemRoot\system32\drivers\HTTP.sys
0xA5F78000 \SystemRoot\System32\DRIVERS\srvnet.sys
0xA5F95000 \SystemRoot\system32\DRIVERS\bowser.sys
0xA5FAE000 \SystemRoot\System32\drivers\mpsdrv.sys
0xA5FC3000 \SystemRoot\system32\drivers\mrxdav.sys
0x8BB59000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x8BB78000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0xA5FE3000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x8BBB1000 \SystemRoot\System32\DRIVERS\srv2.sys
0xA7A02000 \SystemRoot\System32\DRIVERS\srv.sys
0xA7A50000 \??\C:\Windows\system32\Drivers\CVPNDRVA.sys
0xA7AE0000 \SystemRoot\system32\DRIVERS\dsunidrv.sys
0xA7AE2000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys
0xA7AE6000 \SystemRoot\system32\drivers\peauth.sys
0xA7BC4000 \SystemRoot\System32\Drivers\fastfat.SYS
0xA7BEC000 \SystemRoot\System32\Drivers\secdrv.SYS
0x8BBD9000 \SystemRoot\System32\drivers\tcpipreg.sys
0xA7BF6000 \SystemRoot\system32\DRIVERS\xaudio.sys
0x8BBE5000 \SystemRoot\system32\DRIVERS\cdfs.sys
0x777A0000 \Windows\System32\ntdll.dll
0x10000000 \Program Files\DAEMON Tools Lite\daemon.dll

Processes (total 67):
0 System Idle Process
4 System
460 C:\Windows\System32\smss.exe
540 csrss.exe
584 C:\Windows\System32\wininit.exe
596 csrss.exe
628 C:\Windows\System32\services.exe
640 C:\Windows\System32\lsass.exe
652 C:\Windows\System32\lsm.exe
724 C:\Windows\System32\winlogon.exe
840 C:\Windows\System32\svchost.exe
912 C:\Windows\System32\svchost.exe
960 C:\Windows\System32\svchost.exe
1064 C:\Windows\System32\svchost.exe
1144 C:\Windows\System32\svchost.exe
1176 C:\Windows\System32\svchost.exe
1264 C:\Windows\System32\audiodg.exe
1300 C:\Windows\System32\SLsvc.exe
1344 C:\Windows\System32\svchost.exe
1512 C:\Windows\System32\svchost.exe
1652 C:\Windows\System32\WLTRYSVC.EXE
1664 C:\Windows\System32\BCMWLTRY.EXE
1756 C:\Windows\System32\spoolsv.exe
1812 C:\Windows\System32\wlanext.exe
1824 C:\Windows\System32\svchost.exe
276 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
404 C:\Program Files\Bonjour\mDNSResponder.exe
512 C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
544 C:\PROGRA~1\McAfee\SITEAD~1\McSACore.exe
452 C:\Windows\System32\svchost.exe
1588 C:\Windows\System32\svchost.exe
1892 C:\Windows\System32\svchost.exe
1472 C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
2120 C:\Program Files\Dell Support Center\bin\sprtsvc.exe
2136 C:\Windows\System32\svchost.exe
2176 C:\Windows\System32\svchost.exe
2220 C:\Windows\System32\SearchIndexer.exe
2256 C:\Windows\System32\drivers\XAudio.exe
2404 C:\Windows\System32\rundll32.exe
2668 C:\Windows\System32\taskeng.exe
2836 C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
2952 C:\Windows\System32\taskeng.exe
3084 C:\Windows\System32\dwm.exe
3104 C:\Windows\explorer.exe
3308 C:\Program Files\iTunes\iTunesHelper.exe
3316 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
3388 C:\Windows\System32\hkcmd.exe
3412 C:\Windows\System32\igfxpers.exe
3432 C:\Windows\System32\WLTRAY.EXE
3460 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
3468 C:\Program Files\DivX\DivX Update\DivXUpdate.exe
3480 C:\Program Files\QuickTime\QTTask.exe
3492 C:\Program Files\Windows Media Player\wmpnscfg.exe
3548 C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
3572 C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
3920 C:\Program Files\Internet Explorer\ieuser.exe
3996 C:\Program Files\Windows Media Player\wmpnetwk.exe
876 C:\Windows\System32\wbem\unsecapp.exe
3404 WmiPrvSE.exe
3536 C:\Program Files\iPod\bin\iPodService.exe
4824 C:\Windows\servicing\TrustedInstaller.exe
4924 C:\Program Files\Mozilla Firefox\firefox.exe
3160 C:\Windows\System32\SearchProtocolHost.exe
4464 C:\Windows\System32\wuauclt.exe
2712 C:\Windows\System32\SearchFilterHost.exe
5984 C:\Users\naeem\Desktop\Downloads\MBRCheck.exe
3912 C:\Program Files\Internet Explorer\iexplore.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000002`85f00000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000000`05f00000 (NTFS)

PhysicalDrive0 Model Number: HitachiHTS541660J9SA00, Rev: SBBOC7KP

Size Device Name MBR Status
--------------------------------------------
55 GB \\.\PhysicalDrive0 Windows Vista MBR code detected
SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979


Done!

DDS (Ver_10-12-12.02) - NTFSx86
Run by naeem at 15:45:27.31 on 01/01/2011
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vistaâ„¢ Home Basic 6.0.6001.1.1252.44.1033.18.1014.294 [GMT 0:00]

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\WLTRYSVC.EXE
C:\Windows\System32\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\sdclt.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\naeem\Desktop\Downloads\dds.scr
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uWindow Title = Internet Explorer provided by Dell
uStart Page = hxxp://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=6070923
uDefault_Page_URL = hxxp://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=6070923
mStart Page = hxxp://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=6070923
mDefault_Page_URL = hxxp://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=6070923
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\tbVuz1.dll
uURLSearchHooks: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
mURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\tbVuz1.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No File
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0\bin\ssv.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\tbVuz1.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\bae\BAE.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\tbVuz1.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [Google Update] "c:\users\naeem\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [q4rXUZSI] c:\progra~2\q4rXUZSI.exe
uRun: [DkM6Aso5zwFyhTZu] c:\progra~2\DkM6Aso5zwFyhTZu.exe
uRun: [Krs0Y4coOSwsWbyt] c:\progra~2\Krs0Y4coOSwsWbyt.exe
uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
mRun: [%PROVIDERID%] "bin\sprtcmd.exe" /P %PROVIDERID%
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe "
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe "
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRunServices: [SSDPSRV] c:\windows\system32\ssdpsrv.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\vpncli~1.lnk - c:\windows\installer\{21e247d4-5e27-4bea-aa4d-19a81203fe2a}\Icon3E5562ED7.ico
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~3\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
DPF: {0DB074F0-617E-4EE9-912C-2965CF2AA5A4} - hxxp://download.microsoft.com/download/7/0/7/707a44ad-52ad-49af-b7ef-e21b6b0656e4/VirtualEarth3D.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: igfxcui - igfxdev.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\users\naeem\appdata\roaming\mozilla\firefox\profiles\n8eixg7h.default\
FF - prefs.js: browser.search.selectedEngine - Secure Search
FF - prefs.js: keyword.URL - hxxp://uk.search.yahoo.com/search?fr=mcafee&p=
FF - component: c:\users\naeem\appdata\roaming\mozilla\firefox\profiles\n8eixg7h.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\FFExternalAlert.dll
FF - component: c:\users\naeem\appdata\roaming\mozilla\firefox\profiles\n8eixg7h.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCore.dll
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\program files\java\jre1.6.0\bin\npjpi160.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npicaN.dll
FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - plugin: c:\users\naeem\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - %profile%\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}

============= SERVICES / DRIVERS ===============

R1 cdrblock;cdrblock;c:\windows\system32\drivers\cdrblock.sys [2008-2-14 10368]
R1 cdrport;cdrport;c:\windows\system32\drivers\cdrport.sys [2008-2-14 4608]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\SASDIFSV.SYS [2008-12-4 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2008-12-4 67656]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\sitead~1\mcsacore.exe [2010-12-25 88176]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.181\McCHSvc.exe [2010-1-15 227232]
S3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2008-12-4 12872]
S3 Symantec Core LC;Symantec Core LC;c:\progra~1\common~1\symant~1\ccpd-lc\symlcsvc.exe [2008-2-1 1251720]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\drivers\WSDPrint.sys [2008-9-22 16896]

=============== Created Last 30 ================

2011-01-01 14:57:43 -------- d-----w- c:\program files\Bonjour
2010-12-31 12:25:29 -------- d-----w- c:\program files\trend micro
2010-12-31 12:12:13 -------- d-----w- c:\users\naeem\appdata\roaming\Malwarebytes
2010-12-31 12:11:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-31 12:11:06 -------- d-----w- c:\progra~2\Malwarebytes
2010-12-31 12:11:02 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-31 12:11:02 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-31 12:03:33 6273872 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{1ee851a2-8243-43dc-b52d-085db5a82752}\mpengine.dll
2010-12-31 01:14:57 -------- d-----w- c:\progra~2\SUPERAntiSpyware.com
2010-12-31 01:13:08 -------- d-----w- c:\users\naeem\appdata\roaming\SUPERAntiSpyware.com
2010-12-31 01:13:08 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-12-31 01:10:48 -------- d-----w- c:\program files\common files\Wise Installation Wizard
2010-12-31 00:24:57 229376 ----a-w- c:\windows\system32\drivers\sstC555.sys
2010-12-31 00:24:56 118784 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\116C017.tmp
2010-12-31 00:24:47 428544 ----a-w- c:\progra~2\usOYKYjJhLIkjsj.dll
2010-12-25 15:51:00 -------- d-----w- c:\program files\common files\McAfee
2010-12-25 15:50:55 -------- d-----w- c:\program files\McAfee
2010-12-25 14:43:20 603648 ----a-w- c:\windows\system32\schedsvc.dll
2010-12-25 14:43:20 357376 ----a-w- c:\windows\system32\taskschd.dll
2010-12-25 14:43:19 345088 ----a-w- c:\windows\system32\wmicmiplugin.dll
2010-12-25 14:43:19 270336 ----a-w- c:\windows\system32\taskcomp.dll
2010-12-25 14:43:19 171520 ----a-w- c:\windows\system32\taskeng.exe
2010-12-25 14:43:04 2048 ----a-w- c:\windows\system32\tzres.dll
2010-12-25 14:42:01 66048 ----a-w- c:\program files\windows mail\wabmig.exe
2010-12-25 14:42:01 515584 ----a-w- c:\program files\windows mail\wab.exe
2010-12-25 14:42:01 33280 ----a-w- c:\program files\windows mail\wabfind.dll
2010-12-25 14:33:53 2409784 ----a-w- c:\program files\windows mail\OESpamFilter.dat
2010-12-09 22:49:17 348160 ----a-w- c:\program files\msvcr71.dll

==================== Find3M ====================

2010-12-09 22:49:17 232896 ----a-w- c:\program files\Azureus.exe
2010-11-29 17:38:30 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 17:38:30 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-10-28 15:02:24 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-10-28 13:03:07 292352 ----a-w- c:\windows\system32\atmfd.dll
2010-10-20 17:45:29 833024 ----a-w- c:\windows\system32\wininet.dll
2010-10-20 17:41:28 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-10-20 16:16:50 389632 ----a-w- c:\windows\system32\html.iec
2010-10-20 15:51:56 1383424 ----a-w- c:\windows\system32\mshtml.tlb
2010-10-19 10:41:44 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-10-18 14:01:05 81920 ----a-w- c:\windows\system32\consent.exe
2010-10-18 13:56:44 2037248 ----a-w- c:\windows\system32\win32k.sys
2010-10-07 12:23:02 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-10-07 12:23:02 197920 ----a-w- c:\windows\system32\dnssdX.dll
2010-10-07 12:23:02 107808 ----a-w- c:\windows\system32\dns-sd.exe
2010-04-06 10:05:08 165376 ----a-w- c:\program files\uninstall.exe
2009-06-22 18:45:12 199616 ------w- c:\program files\AzureusUpdater.exe

============= FINISH: 15:54:30.87 ===============


NLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft® Windows Vistaâ„¢ Home Basic
Boot Device: \Device\HarddiskVolume3
Install Date: 23/09/2007 16:04:24
System Uptime: 01/01/2011 15:33:25 (0 hours ago)

Motherboard: Dell Inc. | | 0KD882
Processor: Genuine Intel(R) CPU T2080 @ 1.73GHz | Microprocessor | 1733/133mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 44 GiB total, 10.166 GiB free.
D: is FIXED (NTFS) - 10 GiB total, 9.057 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Cisco Systems VPN Adapter
Device ID: ROOT\NET\0000
Manufacturer: Cisco Systems
Name: Cisco Systems VPN Adapter
PNP Device ID: ROOT\NET\0000
Service: CVirtA

==== System Restore Points ===================


==== Installed Programs ======================

32 Bit HP CIO Components Installer
ACD/Labs Software in C:\Program Files\ACDFREE12\
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 7.0.8
Adobe Shockwave Player 11
AMR to MP3 Converter 1.4
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVS Update Manager 1.0
AVS Video Converter 6
AVS4YOU Software Navigator 1.3
Bonjour
Broadcom 440x 10/100 Integrated Controller
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Cisco Systems VPN Client 5.0.06.0160
Citrix Presentation Server Client
Compatibility Pack for the 2007 Office system
Conexant HDA D110 MDC V.92 Modem
Dell Support Center
Dell System Customization Wizard
Dell Wireless WLAN Card
DellSupport
Digital Line Detect
DivX Setup
DVD InfoEditor
EMCO Malware Destroyer
Free RAR Extract Frog
Google Chrome
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Intel(R) Graphics Media Accelerator Driver
Internet From BT
iTunes
Java(TM) SE Runtime Environment 6
Malwarebytes' Anti-Malware
McAfee Security Scan Plus
McAfee SiteAdvisor
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Mozilla Firefox (3.6.13)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
Norton Security Scan
OGA Notifier 2.0.0048.0
QuickSet
QuickTime
RealPlayer
RealUpgrade 1.0
Roxio Creator Audio
Roxio Creator BDAV Plugin
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator Tools
Roxio Express Labeler
Roxio MyDVD DE
Roxio Update Manager
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2288931)
Security Update for 2007 Microsoft Office System (KB2289158)
Security Update for 2007 Microsoft Office System (KB2344875)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB2345035)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office Outlook 2007 (KB2288953)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office PowerPoint Viewer (KB2413381)
Security Update for Microsoft Office Publisher 2007 (KB2284697)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
SigmaTel Audio
Sonic Activation Module
SUPERAntiSpyware Professional
Synaptics Pointing Device Driver
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Outlook 2007 Junk Email Filter (KB2466076)
URL Assistant
User's Guides
VC80CRTRedist - 8.0.50727.4053
VLC media player 1.0.5
Vuze
Vuze_Remote Toolbar

==== End Of File ===========================

 

Combofix post

ComboFix 11-01-02.02 - naeem 02/01/2011 23:27:59.1.2 - x86
Microsoft® Windows Vistaâ„¢ Home Basic 6.0.6001.1.1252.44.1033.18.1014.249 [GMT 0:00]
Running from: c:\users\naeem\Desktop\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Downloaded Program Files\f3initialsetup1.0.1.1.inf
c:\windows\system32\3300735087.dat
c:\windows\system32\drivers\sstC555.sys
c:\windows\system32\spool\prtprocs\w32x86\116C017.tmp

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_sstC555
-------\Service_sstC555


((((((((((((((((((((((((( Files Created from 2010-12-03 to 2011-01-03 )))))))))))))))))))))))))))))))
.

2011-01-03 00:00 . 2011-01-03 00:00 -------- d-----w- c:\users\Guest\AppData\Local\temp
2011-01-03 00:00 . 2011-01-03 00:00 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-01 14:57 . 2011-01-01 14:57 -------- d-----w- c:\program files\Bonjour
2010-12-31 12:25 . 2010-12-31 12:25 -------- d-----w- c:\program files\trend micro
2010-12-31 12:25 . 2010-12-31 12:26 -------- d-----w- C:\rsit
2010-12-31 12:12 . 2010-12-31 12:12 -------- d-----w- c:\users\naeem\AppData\Roaming\Malwarebytes
2010-12-31 12:11 . 2010-12-20 18:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-31 12:11 . 2010-12-31 12:11 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-31 12:11 . 2010-12-20 18:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-31 01:13 . 2010-12-31 01:20 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-12-31 01:13 . 2010-12-31 01:13 -------- d-----w- c:\users\naeem\AppData\Roaming\SUPERAntiSpyware.com
2010-12-31 01:10 . 2010-12-31 01:10 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-12-25 15:51 . 2010-12-25 15:51 -------- d-----w- c:\program files\Common Files\McAfee
2010-12-25 15:50 . 2010-12-25 16:45 -------- d-----w- c:\program files\McAfee
2010-12-25 14:43 . 2010-11-06 11:10 357376 ----a-w- c:\windows\system32\taskschd.dll
2010-12-25 14:43 . 2010-11-06 11:09 603648 ----a-w- c:\windows\system32\schedsvc.dll
2010-12-25 14:43 . 2010-11-06 11:10 345088 ----a-w- c:\windows\system32\wmicmiplugin.dll
2010-12-25 14:43 . 2010-11-06 11:10 270336 ----a-w- c:\windows\system32\taskcomp.dll
2010-12-25 14:43 . 2010-11-05 00:53 171520 ----a-w- c:\windows\system32\taskeng.exe
2010-12-25 14:43 . 2010-10-28 12:56 2048 ----a-w- c:\windows\system32\tzres.dll
2010-12-25 14:42 . 2010-10-12 15:48 33280 ----a-w- c:\program files\Windows Mail\wabfind.dll
2010-12-25 14:42 . 2010-10-12 13:52 66048 ----a-w- c:\program files\Windows Mail\wabmig.exe
2010-12-25 14:42 . 2010-10-12 13:52 515584 ----a-w- c:\program files\Windows Mail\wab.exe
2010-12-25 14:33 . 2010-11-03 10:51 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2010-12-09 22:49 . 2010-12-09 22:49 348160 ----a-w- c:\program files\msvcr71.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-09 22:49 . 2010-04-09 20:56 232896 ----a-w- c:\program files\Azureus.exe
2010-11-29 17:38 . 2010-11-29 17:38 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 17:38 . 2010-11-29 17:38 69632 ----a-w- c:\windows\system32\QuickTime.qts
2010-10-19 10:41 . 2010-03-07 23:04 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-10-07 12:23 . 2010-10-07 12:23 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-10-07 12:23 . 2010-10-07 12:23 197920 ----a-w- c:\windows\system32\dnssdX.dll
2010-10-07 12:23 . 2010-10-07 12:23 107808 ----a-w- c:\windows\system32\dns-sd.exe
2010-04-06 10:05 . 2010-04-09 20:57 165376 ----a-w- c:\program files\uninstall.exe
2009-06-22 18:45 . 2010-04-09 20:57 199616 ------w- c:\program files\AzureusUpdater.exe
2008-02-07 21:46 . 2008-02-07 21:46 13624 ----a-w- c:\program files\mozilla firefox\plugins\cgpcfg.dll
2008-02-07 21:46 . 2008-02-07 21:46 87360 ----a-w- c:\program files\mozilla firefox\plugins\CgpCore.dll
2008-02-07 21:46 . 2008-02-07 21:46 91448 ----a-w- c:\program files\mozilla firefox\plugins\confmgr.dll
2008-02-07 21:46 . 2008-02-07 21:46 21824 ----a-w- c:\program files\mozilla firefox\plugins\ctxlogging.dll
2008-02-07 21:46 . 2008-02-07 21:46 206136 ----a-w- c:\program files\mozilla firefox\plugins\ctxmui.dll
2008-02-07 21:46 . 2008-02-07 21:46 31544 ----a-w- c:\program files\mozilla firefox\plugins\icafile.dll
2008-02-07 21:46 . 2008-02-07 21:46 40248 ----a-w- c:\program files\mozilla firefox\plugins\icalogon.dll
2007-03-16 17:27 . 2007-03-16 17:27 479232 ----a-w- c:\program files\mozilla firefox\plugins\msvcm80.dll
2007-03-16 17:27 . 2007-03-16 17:27 548864 ----a-w- c:\program files\mozilla firefox\plugins\msvcp80.dll
2007-03-16 17:27 . 2007-03-16 17:27 626688 ----a-w- c:\program files\mozilla firefox\plugins\msvcr80.dll
2007-07-20 12:47 . 2007-07-20 12:47 981170 ----a-w- c:\program files\mozilla firefox\plugins\sslsdk_b.dll
2008-02-07 21:46 . 2008-02-07 21:46 24384 ----a-w- c:\program files\mozilla firefox\plugins\TcpPServ.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ba14329e-9550-4989-b3f2-9732e92d17cc} "= "c:\program files\Vuze_Remote\tbVuz1.dll" [2010-08-08 2515552]

[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
2010-08-08 14:08 2515552 ----a-w- c:\program files\Vuze_Remote\tbVuz1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{ba14329e-9550-4989-b3f2-9732e92d17cc} "= "c:\program files\Vuze_Remote\tbVuz1.dll" [2010-08-08 2515552]

[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{BA14329E-9550-4989-B3F2-9732E92D17CC} "= "c:\program files\Vuze_Remote\tbVuz1.dll" [2010-08-08 2515552]

[HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG "= "c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"Google Update "= "c:\users\naeem\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-03-29 136176]
"SUPERAntiSpyware "= "c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-12-31 2424560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2010-02-15 141608]
"GrooveMonitor "= "c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"IgfxTray "= "c:\windows\system32\igfxtray.exe" [2006-12-12 98304]
"HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2006-12-12 106496]
"Persistence "= "c:\windows\system32\igfxpers.exe" [2006-12-12 81920]
"Broadcom Wireless Manager UI "= "c:\windows\system32\WLTRAY.exe" [2007-12-08 3444736]
"TkBellExe "= "c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-25 202256]
"DivXUpdate "= "c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-03-05 1135912]
"QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]

c:\users\Guest\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [N/A]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
VPN Client.lnk - c:\windows\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico [2010-3-9 6144]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle "= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} "= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2010-12-31 01:20 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Digital Line Detect.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
backup=c:\windows\pss\Digital Line Detect.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^QuickSet.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\QuickSet.lnk
backup=c:\windows\pss\QuickSet.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^Users^naeem^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
path=c:\users\naeem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
backup=c:\windows\pss\MagicDisc.lnk.Startup
backupExtension=.Startup

[HKLM\~\startupfolder\C:^Users^naeem^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\users\naeem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
%ProgramFiles%\Windows Defender\MSASCui.exe -hide [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Broadcom Wireless Manager UI]
2007-12-08 14:34 3444736 ----a-w- c:\windows\System32\WLTRAY.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-12-29 10:40 687560 ----a-w- c:\program files\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupport]
2007-03-15 11:09 460784 ----a-w- c:\program files\DellSupport\DSAgnt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dscactivate]
2007-07-30 19:40 16384 ----a-w- c:\dell\dsca.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ECenter]
2007-03-16 10:50 17920 ----a-w- c:\dell\E-Center\EULALauncher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 11:44 31072 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
2006-12-12 10:03 106496 ----a-w- c:\windows\System32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
2006-12-12 10:02 98304 ----a-w- c:\windows\System32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2006-10-03 10:35 221184 ----a-w- c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2006-10-03 10:37 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
2006-12-12 10:02 81920 ----a-w- c:\windows\System32\igfxpers.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-29 17:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]
2006-11-05 10:22 221184 ----a-w- c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SigmatelSysTrayApp]
2007-02-08 05:11 303104 ----a-w- c:\windows\sttray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2007-09-23 15:15 77824 ----a-w- c:\program files\Java\jre1.6.0\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
2006-11-17 23:52 815104 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr]
2006-03-30 15:45 313472 ----a-r- c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2008-01-19 07:33 202240 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring "=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring "=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring "=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring "=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride "=dword:00000001

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 COH_Mon;COH_Mon;c:\windows\system32\Drivers\COH_Mon.sys [x]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2010-12-31 12872]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2009-02-20 717296]
S1 cdrblock;cdrblock;c:\windows\system32\DRIVERS\cdrblock.sys [2005-06-14 10368]
S1 cdrport;cdrport;c:\windows\system32\DRIVERS\cdrport.sys [2005-03-11 4608]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2010-12-31 12872]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.sys [2010-12-31 67656]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\SITEAD~1\mcsacore.exe [2010-11-24 88176]
S3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [2008-01-19 16896]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Contents of the 'Scheduled Tasks' folder

2010-12-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1929587906-3008405706-3419055590-1000Core.job
- c:\users\naeem\AppData\Local\Google\Update\GoogleUpdate.exe [2010-03-29 22:46]

2011-01-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1929587906-3008405706-3419055590-1000UA.job
- c:\users\naeem\AppData\Local\Google\Update\GoogleUpdate.exe [2010-03-29 22:46]

2011-01-02 c:\windows\Tasks\Norton Security Scan for naeem.job
- c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.0.52\Nss.exe [2010-03-12 10:04]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=6070923
mStart Page = hxxp://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=6070923
uInternet Settings,ProxyOverride = *.local
FF - ProfilePath - c:\users\naeem\AppData\Roaming\Mozilla\Firefox\Profiles\n8eixg7h.default\
FF - prefs.js: browser.search.selectedEngine - Secure Search
FF - prefs.js: keyword.URL - hxxp://uk.search.yahoo.com/search?fr=mcafee&p=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - %profile%\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-q4rXUZSI - c:\progra~2\q4rXUZSI.exe
HKCU-Run-DkM6Aso5zwFyhTZu - c:\progra~2\DkM6Aso5zwFyhTZu.exe
HKCU-Run-Krs0Y4coOSwsWbyt - c:\progra~2\Krs0Y4coOSwsWbyt.exe
HKLM-Run-%PROVIDERID% - bin\sprtcmd.exe
MSConfigStartUp-%PROVIDERID% - bin\sprtcmd.exe
MSConfigStartUp-ccApp - c:\program files\Common Files\Symantec Shared\ccApp.exe
MSConfigStartUp-Google Desktop Search - c:\program files\Google\Google Desktop Search\GoogleDesktop.exe
MSConfigStartUp-HP Software Update - c:\program files\HP\HP Software Update\HPWuSchd2.exe
MSConfigStartUp-hpqSRMon - c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe
MSConfigStartUp-ICSDCLT - c:\windows\rundll32.exe
MSConfigStartUp-Uniblue RegistryBooster 2009 - c:\program files\uniblue\registrybooster\StartRegistryBooster.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-03 00:07
Windows 6.0.6001 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial "=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(4876)
c:\progra~1\mcafee\sitead~1\saHook.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\System32\WLTRYSVC.EXE
c:\windows\system32\WLANExt.exe
c:\windows\System32\bcmwltry.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Cisco Systems\VPN Client\cvpnd.exe
c:\windows\system32\rundll32.exe
c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
c:\program files\Dell Support Center\bin\sprtsvc.exe
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\system32\sdclt.exe
c:\program files\Internet Explorer\IEUser.exe
c:\program files\Internet Explorer\iexplore.exe
c:\program files\Internet Explorer\iexplore.exe
.
**************************************************************************
.
Completion time: 2011-01-03 00:30:32 - machine was rebooted
ComboFix-quarantined-files.txt 2011-01-03 00:30

Pre-Run: 9,440,858,112 bytes free
Post-Run: 9,135,882,240 bytes free

 

Avira log

Avira AntiVir Personal
Report file date: 03 January 2011 12:38

Scanning for 2316275 virus strains and unwanted programs.

The program is running as an unrestricted full version.
Online services are available:

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows Vista
Windows version : (Service Pack 1) [6.0.6001]
Boot mode : Normally booted
Username : naeem
Computer name : LAPTOP1

Version information:
BUILD.DAT : 10.0.0.609 Bytes 13/12/2010 09:43:00
AVSCAN.EXE : 10.0.3.5 435368 Bytes 13/12/2010 08:39:56
AVSCAN.DLL : 10.0.3.0 46440 Bytes 01/04/2010 12:57:04
LUKE.DLL : 10.0.3.2 104296 Bytes 13/12/2010 08:40:06
LUKERES.DLL : 10.0.0.1 12648 Bytes 10/02/2010 23:40:49
VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 09:05:36
VBASE001.VDF : 7.11.0.0 13342208 Bytes 14/12/2010 12:27:33
VBASE002.VDF : 7.11.0.1 2048 Bytes 14/12/2010 12:27:34
VBASE003.VDF : 7.11.0.2 2048 Bytes 14/12/2010 12:27:35
VBASE004.VDF : 7.11.0.3 2048 Bytes 14/12/2010 12:27:35
VBASE005.VDF : 7.11.0.4 2048 Bytes 14/12/2010 12:27:35
VBASE006.VDF : 7.11.0.5 2048 Bytes 14/12/2010 12:27:35
VBASE007.VDF : 7.11.0.6 2048 Bytes 14/12/2010 12:27:35
VBASE008.VDF : 7.11.0.7 2048 Bytes 14/12/2010 12:27:35
VBASE009.VDF : 7.11.0.8 2048 Bytes 14/12/2010 12:27:35
VBASE010.VDF : 7.11.0.9 2048 Bytes 14/12/2010 12:27:36
VBASE011.VDF : 7.11.0.10 2048 Bytes 14/12/2010 12:27:36
VBASE012.VDF : 7.11.0.11 2048 Bytes 14/12/2010 12:27:36
VBASE013.VDF : 7.11.0.52 128000 Bytes 16/12/2010 12:27:36
VBASE014.VDF : 7.11.0.91 226816 Bytes 20/12/2010 12:27:37
VBASE015.VDF : 7.11.0.122 136192 Bytes 21/12/2010 12:27:38
VBASE016.VDF : 7.11.0.156 122880 Bytes 24/12/2010 12:27:38
VBASE017.VDF : 7.11.0.185 146944 Bytes 27/12/2010 12:27:39
VBASE018.VDF : 7.11.0.228 132608 Bytes 30/12/2010 12:27:39
VBASE019.VDF : 7.11.0.229 2048 Bytes 30/12/2010 12:27:39
VBASE020.VDF : 7.11.0.230 2048 Bytes 30/12/2010 12:27:40
VBASE021.VDF : 7.11.0.231 2048 Bytes 30/12/2010 12:27:40
VBASE022.VDF : 7.11.0.232 2048 Bytes 30/12/2010 12:27:40
VBASE023.VDF : 7.11.0.233 2048 Bytes 30/12/2010 12:27:40
VBASE024.VDF : 7.11.0.234 2048 Bytes 30/12/2010 12:27:40
VBASE025.VDF : 7.11.0.235 2048 Bytes 30/12/2010 12:27:40
VBASE026.VDF : 7.11.0.236 2048 Bytes 30/12/2010 12:27:40
VBASE027.VDF : 7.11.0.237 2048 Bytes 30/12/2010 12:27:40
VBASE028.VDF : 7.11.0.238 2048 Bytes 30/12/2010 12:27:40
VBASE029.VDF : 7.11.0.239 2048 Bytes 30/12/2010 12:27:41
VBASE030.VDF : 7.11.0.240 2048 Bytes 30/12/2010 12:27:41
VBASE031.VDF : 7.11.0.252 70144 Bytes 03/01/2011 12:27:41
Engineversion : 8.2.4.134
AEVDF.DLL : 8.1.2.1 106868 Bytes 13/12/2010 08:39:51
AESCRIPT.DLL : 8.1.3.51 1286524 Bytes 03/01/2011 12:27:45
AESCN.DLL : 8.1.7.2 127349 Bytes 13/12/2010 08:39:50
AESBX.DLL : 8.1.3.2 254324 Bytes 13/12/2010 08:39:50
AERDL.DLL : 8.1.9.2 635252 Bytes 13/12/2010 08:39:50
AEPACK.DLL : 8.2.4.7 512375 Bytes 03/01/2011 12:27:44
AEOFFICE.DLL : 8.1.1.10 201084 Bytes 13/12/2010 08:39:49
AEHEUR.DLL : 8.1.2.60 3158392 Bytes 03/01/2011 12:27:43
AEHELP.DLL : 8.1.16.0 246136 Bytes 13/12/2010 08:39:42
AEGEN.DLL : 8.1.5.0 397685 Bytes 13/12/2010 08:39:42
AEEMU.DLL : 8.1.3.0 393589 Bytes 13/12/2010 08:39:42
AECORE.DLL : 8.1.19.0 196984 Bytes 13/12/2010 08:39:41
AEBB.DLL : 8.1.1.0 53618 Bytes 13/12/2010 08:39:41
AVWINLL.DLL : 10.0.0.0 19304 Bytes 13/12/2010 08:39:56
AVPREF.DLL : 10.0.0.0 44904 Bytes 13/12/2010 08:39:54
AVREP.DLL : 10.0.0.8 62209 Bytes 17/06/2010 14:27:13
AVREG.DLL : 10.0.3.2 53096 Bytes 13/12/2010 08:39:54
AVSCPLR.DLL : 10.0.3.2 84328 Bytes 13/12/2010 08:39:56
AVARKT.DLL : 10.0.22.6 231784 Bytes 13/12/2010 08:39:52
AVEVTLOG.DLL : 10.0.0.8 203112 Bytes 13/12/2010 08:39:53
SQLITE3.DLL : 3.6.19.0 355688 Bytes 17/06/2010 14:27:22
AVSMTP.DLL : 10.0.0.17 63848 Bytes 13/12/2010 08:39:56
NETNT.DLL : 10.0.0.0 11624 Bytes 17/06/2010 14:27:21
RCIMAGE.DLL : 10.0.0.26 2550120 Bytes 28/01/2010 13:10:20
RCTEXT.DLL : 10.0.58.0 97128 Bytes 13/12/2010 08:40:20

Configuration settings for the scan:
Jobname.............................: Manual Selection
Configuration file..................: C:\ProgramData\Avira\AntiVir Desktop\PROFILES\folder.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, D:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: off
Integrity checking of system files..: off
Scan all files......................: Intelligent file selection
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Deviating risk categories...........: +APPL,

Start of the scan: 03 January 2011 12:38

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'plugin-container.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'SSScheduler.exe' - '1' Module(s) have been scanned
Scan process 'unsecapp.exe' - '1' Module(s) have been scanned
Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned
Scan process 'QTTask.exe' - '1' Module(s) have been scanned
Scan process 'DivXUpdate.exe' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'WLTRAY.EXE' - '1' Module(s) have been scanned
Scan process 'igfxpers.exe' - '1' Module(s) have been scanned
Scan process 'hkcmd.exe' - '1' Module(s) have been scanned
Scan process 'GrooveMonitor.exe' - '1' Module(s) have been scanned
Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
Scan process 'IEUser.exe' - '1' Module(s) have been scanned
Scan process 'Explorer.EXE' - '1' Module(s) have been scanned
Scan process 'Dwm.exe' - '1' Module(s) have been scanned
Scan process 'taskeng.exe' - '1' Module(s) have been scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
[INFO] Please restart the search with Administrator rights

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
[INFO] Please restart the search with Administrator rights
Boot sector 'D:\'
[INFO] No virus was found!
[INFO] Please restart the search with Administrator rights

Starting to scan executable files (registry).
The registry was scanned ( '1647' files ).


Starting the file scan:

Begin scan in 'C:\' <OS>
C:\Qoobox\Quarantine\C\Windows\System32\spool\prtprocs\w32x86\116C017.tmp.vir
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
Begin scan in 'D:\' <RECOVERY>

Beginning disinfection:
C:\Qoobox\Quarantine\C\Windows\System32\spool\prtprocs\w32x86\116C017.tmp.vir
[DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
[NOTE] The file was moved to the quarantine directory under the name '49467cde.qua'.


End of the scan: 03 January 2011 14:08
Used time: 1:29:37 Hour(s)

The scan has been done completely.

23335 Scanned directories
279104 Files were scanned
1 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
1 Files were moved to quarantine
0 Files were renamed
0 Files cannot be scanned
279103 Files not concerned
1187 Archives were scanned
0 Warnings
1 Notes

 

Extras.Txt

OTL Extras logfile created on: 03/01/2011 14:13:02 - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\naeem\Desktop\Downloads
Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

1,014.00 Mb Total Physical Memory | 177.00 Mb Available Physical Memory | 17.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 45.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 43.80 Gb Total Space | 5.83 Gb Free Space | 13.32% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 9.02 Gb Free Space | 90.18% Space Free | Partition Type: NTFS

Computer Name: LAPTOP1 | User Name: naeem | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0406FEC2-317F-4A2E-B9CF-53888579008C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1D8D6316-6DD1-4193-9415-E0D059EA22A1}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3C74DEC7-D26A-417F-973E-7EEF75B7C13B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{65AF58CA-2D18-4C91-AF39-7036250EA9C4}" = rport=427 | protocol=17 | dir=in | svc=hpslpsvc | app=c:\windows\system32\svchost.exe |
"{8550DF3D-F6CA-4E89-833D-D916A685D547}" = rport=10243 | protocol=6 | dir=out | app=system |
"{98D05152-B553-4FAB-93A9-39A906102AB2}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B18994B7-21C9-45F3-91CA-F41F095FFE1C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{C9FC7F32-221B-4201-9D81-97586A4D195B}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CC85FEC9-FA48-4634-97A1-AC5723FF3F7F}" = lport=10243 | protocol=6 | dir=in | app=system |
"{DB26EE9D-8AE0-4A16-9555-3EC091731A53}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F08C20AF-8D81-4054-8DB0-1D9E64E3EBF4}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04739727-8B98-4A2C-8E97-9A0CA850F997}" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"{154341B9-96EF-4669-A1AF-8C6727BC18A2}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqkygrp.exe |
"{1CC4582B-5F06-404D-B50E-79BF4D633338}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgplgtupl.exe |
"{2F657BC1-2F74-43E8-B588-C2D33B286A99}" = protocol=6 | dir=in | app=c:\program files\spotify\spotify.exe |
"{2F9F7E94-7354-46CB-97BE-036E644B3237}" = dir=in | app=e:\setup\hpznui01.exe |
"{3006A68B-CD2C-448F-B266-E4380E70EEA5}" = protocol=6 | dir=in | app=c:\program files\spotify\spotify.exe |
"{334824EC-DB24-4226-AFF5-28129BC1C8B9}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{34EF4CDC-E823-49DF-A573-015C0955C986}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3DB61790-41E9-4671-8944-CC373D841A0B}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{3F9E0737-A32B-40B7-A185-BC9D3AEDDBE0}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpoews01.exe |
"{42F7F492-6BEE-4B3D-BBEA-B2E400B2F871}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{434BBEA1-3B2D-4053-8FBE-EEB6DC051579}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4D49455C-406A-47EB-8970-10C6FAC999E2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{53023370-D1E2-43E8-9B90-DFF8AE813F53}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpiscnapp.exe |
"{54FA5C56-6AD4-4F31-9786-6D00CE70F3A3}" = protocol=6 | dir=out | app=system |
"{56967CE9-27FC-4648-AF3C-D1B097D9521B}" = protocol=6 | dir=in | app=c:\program files\azureus.exe |
"{63191B53-513E-4DF4-9862-99FFD77E4E83}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{69895146-384C-4FFA-B6DE-2C54A82A5BC7}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqpsapp.exe |
"{7B5D33C5-C5ED-422F-88CB-87F7AFF10D4E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8412E978-A107-419C-9F2C-359F25CB313E}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqpse.exe |
"{87444B27-7C51-4571-8CCB-6FA8FE7C3ADE}" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe |
"{88BDD878-2F6D-4C6E-A536-A88A1AA8EF65}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8B805E8B-6F2F-4C18-82C0-0B39643B29C3}" = protocol=17 | dir=in | app=c:\program files\spotify\spotify.exe |
"{8C7D51EE-42CA-4ACD-86AC-D766BEDDF88D}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqsudi.exe |
"{91591FB3-4320-4CD4-8645-53C169F5FB68}" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe |
"{922129EC-F522-46A0-AC56-61EF9C0B1BA7}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqgpc01.exe |
"{96254437-C1CC-4F0E-9A22-094CD10AA9ED}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqste08.exe |
"{9E94D086-AEED-4253-831A-5AA575891169}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{B16D47E7-6552-4AD6-AEB1-14EF799653FC}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{B54FFC68-7E6D-4B3D-B205-04C0C02CEE31}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B7E427BA-BC60-44C4-9DB1-0568E6E1F0A8}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{C016B099-BA0C-44D5-8B22-33904B5D7E63}" = dir=in | app=c:\program files\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{C1AD3D2B-D4F3-4F1B-BE13-36711F1A3917}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C9F958BD-5153-4C56-B2F8-0F91ED030F3F}" = dir=in | app=c:\program files\hp\digital imaging\bin\hposid01.exe |
"{CEEF99BD-529F-4B4B-AF3A-C3AEAC652AD4}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{D461F05E-375A-4CFE-91BE-94EA78F19995}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{D95A87EC-885D-452A-976E-7BD3F3A34D2C}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mna\mcnasvc.exe |
"{DB2F4A79-54D6-430E-A739-3188B6BC2D40}" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"{E3CB29F2-FA16-462F-B062-3B649E8A251B}" = protocol=17 | dir=in | app=c:\program files\azureus.exe |
"{E7B4731B-2869-46E1-A720-70487153E98E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{EF66EC09-034F-4BF2-93A9-1E0EB5309FE9}" = protocol=17 | dir=in | app=c:\program files\spotify\spotify.exe |
"{F14662D9-F6BA-4E80-ABFE-4024F8A2812B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F88B83C7-9494-4D51-B173-17E04051F8F7}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqtra08.exe |
"{F96934D2-529F-45FF-9C05-6B9ABB951870}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"TCP Query User{29A36DD0-F07B-4A00-8D81-1997C9FA6655}C:\program files\azureus.exe" = protocol=6 | dir=in | app=c:\program files\azureus.exe |
"TCP Query User{82730E5E-CD0C-4069-9801-BB4FBB969EBC}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"UDP Query User{08783C55-A3CA-4C77-A255-BFCBE13ED1B4}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"UDP Query User{AA156922-5ECF-4689-8F98-DF7EA4E2606B}C:\program files\azureus.exe" = protocol=17 | dir=in | app=c:\program files\azureus.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{13BA7B44-B712-4DEE-A7B8-1DD564F37AE5}" = Dell System Customization Wizard
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}" = Cisco Systems VPN Client 5.0.06.0160
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{2624B680-02BC-4CBC-839C-DA20DF6EF6EC}" = Citrix Presentation Server Client
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3248F0A8-6813-11D6-A77B-00B0D0160000}" = Java(TM) SE Runtime Environment 6
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Sonic Activation Module
"{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}" = McAfee SiteAdvisor
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = URL Assistant
"{4E5386F5-C0F6-4532-A54A-374865AEAB71}" = Cisco PEAP Module
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}" = User's Guides
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{612B9183-67A9-4B44-9877-2F059E35B86A}" = Broadcom 440x 10/100 Integrated Controller
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works
"{6FFB40A5-7F7D-4A32-8905-3CDF962EE1E4}" = Internet From BT
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76F9CF97-FC4B-4E20-B363-D127C888448F}" = Cisco LEAP Module
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}" = DellSupport
"{7F0C4457-8E64-491B-8D7B-991504365D1E}" = QuickSet
"{81063354-9060-42B2-A000-1EBE96778AA9}" = iTunes
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}" = Roxio Creator BDAV Plugin
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISER_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISER_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISER_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{AC76BA86-7AD7-1033-7B44-A70800000002}" = Adobe Reader 7.0.8
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B8C54AB1-7E1A-40E8-B794-EDB6E8921F3A}" = Dell Support Center
"{BF53252E-4AB2-4C7F-A0FD-6100755745E3}" = Cisco EAP-FAST Module
"{C615B4A6-DDE8-4325-BCF8-E53E913D95E9}_is1" = AMR to MP3 Converter 1.4
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator DE
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Professional
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D639085F-4B6E-4105-9F37-A0DBB023E2FB}" = Roxio MyDVD DE
"{E2091925-F2BF-4FA2-8CB2-9D0419820A66}" = DVD InfoEditor
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0
"8461-7759-5462-8226" = Vuze
"ACDLabs in C__Program_Files_ACDFREE12_" = ACD/Labs Software in C:\Program Files\ACDFREE12\
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"Broadcom 802.11b Network Adapter" = Dell Wireless WLAN Card
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3" = Conexant HDA D110 MDC V.92 Modem
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"DivX Setup.divx.com" = DivX Setup
"EMCO Malware Destroyer_is1" = EMCO Malware Destroyer
"ENTERPRISER" = Microsoft Office Enterprise 2007
"Free RAR Extract Frog" = Free RAR Extract Frog
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"NSS" = Norton Security Scan
"RealPlayer 12.0" = RealPlayer
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"VLC media player" = VLC media player 1.0.5
"Vuze_Remote Toolbar" = Vuze_Remote Toolbar

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 02/01/2011 21:53:55 | Computer Name = laptop1 | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 17379

Error - 02/01/2011 21:53:56 | Computer Name = laptop1 | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 02/01/2011 21:53:56 | Computer Name = laptop1 | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 18377

Error - 02/01/2011 21:53:56 | Computer Name = laptop1 | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 18377

Error - 02/01/2011 21:53:57 | Computer Name = laptop1 | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 02/01/2011 21:53:57 | Computer Name = laptop1 | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 19407

Error - 02/01/2011 21:53:57 | Computer Name = laptop1 | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 19407

Error - 02/01/2011 22:32:09 | Computer Name = laptop1 | Source = System Restore | ID = 8193
Description =

Error - 02/01/2011 22:32:10 | Computer Name = laptop1 | Source = System Restore | ID = 8210
Description =

Error - 03/01/2011 08:21:13 | Computer Name = laptop1 | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Users\naeem\AppData\Local\Temp\RarSFX0\redist.dll ".
Dependent
Assembly Microsoft.VC90.CRT,processorArchitecture= "x86 ",publicKeyToken= "1fc8b3b9a1e18e3b ",type= "win32 ",version= "9.0.30729.4148 "
could not be found. Please use sxstrace.exe for detailed diagnosis.

[ Broadcom Wireless LAN Events ]
Error - 16/05/2010 17:02:44 | Computer Name = laptop1 | Source = WLAN-Tray | ID = 0
Description = 22:02:39, Sun, May 16, 10 Error - Unable to gain access to user store


Error - 28/05/2010 03:12:59 | Computer Name = laptop1 | Source = WLAN-Tray | ID = 0
Description = 08:12:54, Fri, May 28, 10 Error - Unable to gain access to user store


Error - 18/06/2010 10:58:17 | Computer Name = laptop1 | Source = WLAN-Tray | ID = 0
Description = 15:58:13, Fri, Jun 18, 10 Error - Unable to gain access to user store


Error - 01/01/2011 07:38:06 | Computer Name = laptop1 | Source = WLAN-Tray | ID = 0
Description = 11:38:05, Sat, Jan 01, 11 Error - Unable to gain access to user store


[ OSession Events ]
Error - 22/12/2007 08:22:53 | Computer Name = laptop1 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.6021.5000. This session lasted 103
seconds with 60 seconds of active time. This session ended with a crash.

Error - 30/12/2007 16:40:31 | Computer Name = laptop1 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.6021.5000. This session lasted 1041
seconds with 360 seconds of active time. This session ended with a crash.

Error - 02/09/2008 06:21:24 | Computer Name = laptop1 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6308.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 6484
seconds with 5820 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 03/01/2011 08:12:03 | Computer Name = laptop1 | Source = WMPNetworkSvc | ID = 866312
Description =

Error - 03/01/2011 08:12:03 | Computer Name = laptop1 | Source = WMPNetworkSvc | ID = 866312
Description =

Error - 03/01/2011 08:12:05 | Computer Name = laptop1 | Source = Service Control Manager | ID = 7000
Description =

Error - 03/01/2011 08:12:05 | Computer Name = laptop1 | Source = Service Control Manager | ID = 7000
Description =

Error - 03/01/2011 08:12:05 | Computer Name = laptop1 | Source = Service Control Manager | ID = 7000
Description =

Error - 03/01/2011 08:12:05 | Computer Name = laptop1 | Source = Service Control Manager | ID = 7000
Description =

Error - 03/01/2011 08:12:31 | Computer Name = laptop1 | Source = DCOM | ID = 10016
Description =

Error - 03/01/2011 08:13:23 | Computer Name = laptop1 | Source = Service Control Manager | ID = 7000
Description =

Error - 03/01/2011 08:13:24 | Computer Name = laptop1 | Source = Service Control Manager | ID = 7000
Description =

Error - 03/01/2011 08:24:49 | Computer Name = laptop1 | Source = Service Control Manager | ID = 7006
Description =


< End of report >

 

OTL.Txt

OTL logfile created on: 03/01/2011 14:13:02 - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\naeem\Desktop\Downloads
Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

1,014.00 Mb Total Physical Memory | 177.00 Mb Available Physical Memory | 17.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 45.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 43.80 Gb Total Space | 5.83 Gb Free Space | 13.32% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 9.02 Gb Free Space | 90.18% Space Free | Partition Type: NTFS

Computer Name: LAPTOP1 | User Name: naeem | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/01/03 14:12:05 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\naeem\Desktop\Downloads\OTL.exe
PRC - [2010/12/25 16:46:56 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe
PRC - [2010/12/25 16:46:48 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/12/13 08:40:07 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010/12/13 08:39:56 | 000,435,368 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avscan.exe
PRC - [2010/12/13 08:39:54 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/12/13 08:39:54 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/12/13 08:39:53 | 000,389,288 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
PRC - [2010/11/24 11:07:58 | 000,088,176 | ---- | M] (McAfee, Inc.) -- c:\Program Files\McAfee\SiteAdvisor\McSACore.exe
PRC - [2010/10/16 00:40:40 | 000,037,664 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010/03/25 00:04:16 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2010/03/05 15:32:28 | 001,135,912 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2010/02/15 18:06:56 | 010,358,056 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunes.exe
PRC - [2010/01/15 12:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2010/01/14 21:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2009/11/17 12:07:46 | 001,528,624 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
PRC - [2008/10/29 06:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2007/07/11 07:15:58 | 000,202,800 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe


========== Modules (SafeList) ==========

MOD - [2011/01/03 14:12:05 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\naeem\Desktop\Downloads\OTL.exe
MOD - [2010/12/09 14:20:40 | 000,018,176 | ---- | M] (McAfee, Inc.) -- c:\Program Files\McAfee\SiteAdvisor\sahook.dll
MOD - [2010/08/31 15:39:57 | 001,684,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - [2010/12/13 08:40:07 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/12/13 08:39:54 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/11/24 11:07:58 | 000,088,176 | ---- | M] (McAfee, Inc.) [Auto | Running] -- c:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service)
SRV - [2010/10/16 00:40:40 | 000,037,664 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010/03/18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/01/15 12:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/11/17 12:07:46 | 001,528,624 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND)
SRV - [2009/08/24 12:16:12 | 000,378,368 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2008/02/01 07:39:46 | 001,251,720 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)
SRV - [2008/01/19 07:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/07/11 07:15:58 | 000,202,800 | ---- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter)
SRV - [2007/03/19 11:44:44 | 000,070,656 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\DellSupport\brkrsvc.exe -- (DSBrokerService)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\COH_Mon.sys -- (COH_Mon)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BCM42RLY.sys -- (BCM42RLY)
DRV - [2010/12/31 01:20:25 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010/12/31 01:20:25 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2010/12/31 01:20:25 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2010/12/13 08:40:21 | 000,135,096 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2010/12/13 08:40:21 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/06/17 14:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/11/17 12:07:06 | 000,308,859 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\CVPNDRVA.sys -- (CVPNDRVA)
DRV - [2009/02/20 21:33:35 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2008/11/16 18:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dne2000.sys -- (DNE)
DRV - [2008/07/28 17:19:28 | 000,116,736 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mcdbus.sys -- (mcdbus)
DRV - [2008/01/19 06:14:59 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV - [2007/12/06 21:52:42 | 001,044,984 | ---- | M] (Broadcom Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BCMWL6.SYS -- (BCM43XX)
DRV - [2007/09/23 22:55:55 | 000,020,152 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2007/09/23 22:55:55 | 000,019,128 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2007/09/23 22:55:55 | 000,017,592 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2007/03/12 04:49:54 | 000,045,568 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2007/02/25 11:10:48 | 000,005,376 | --S- | M] (Gteko Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\dsunidrv.sys -- (dsunidrv)
DRV - [2007/02/08 05:11:04 | 000,647,680 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2007/01/18 20:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)
DRV - [2006/12/12 10:49:56 | 001,476,608 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\igdkmd32.sys -- (igfx)
DRV - [2006/11/20 19:13:58 | 000,043,520 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2006/11/20 19:13:58 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2006/11/20 19:13:56 | 000,032,256 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2006/11/17 23:52:38 | 000,179,256 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SynTP.sys -- (SynTP)
DRV - [2006/11/11 23:10:40 | 000,986,624 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_DPV.sys -- (HSF_DPV)
DRV - [2006/11/11 23:10:40 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2006/11/11 23:10:38 | 000,659,968 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_CNXT.sys -- (winachsf)
DRV - [2006/11/11 23:10:38 | 000,206,848 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSXHWAZL.sys -- (HSXHWAZL)
DRV - [2006/11/02 09:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006/11/02 09:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006/11/02 09:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006/11/02 09:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006/11/02 09:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006/11/02 09:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006/11/02 09:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006/11/02 09:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006/11/02 09:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006/11/02 09:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006/11/02 09:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006/11/02 09:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006/11/02 09:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2006/11/02 09:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006/11/02 09:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006/11/02 09:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006/11/02 09:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2006/11/02 09:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006/11/02 09:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006/11/02 09:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006/11/02 09:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2006/11/02 09:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006/11/02 09:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006/11/02 09:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006/11/02 09:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006/11/02 09:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006/11/02 09:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006/11/02 09:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006/11/02 09:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006/11/02 09:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006/11/02 09:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006/11/02 09:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006/11/02 08:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006/11/02 08:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006/11/02 08:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006/11/02 08:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006/11/02 08:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006/11/02 08:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006/11/02 07:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006/11/02 07:36:43 | 002,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2006/11/02 07:30:55 | 000,200,704 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel(R)
DRV - [2006/11/02 07:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)
DRV - [2006/10/05 16:07:28 | 000,004,736 | ---- | M] (Gteko Ltd.) [Kernel | On_Demand | Stopped] -- C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys -- (DSproct)
DRV - [2005/06/14 18:34:12 | 000,010,368 | ---- | M] (Canopus Co,. Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\cdrblock.sys -- (cdrblock)
DRV - [2005/03/11 16:28:30 | 000,004,608 | ---- | M] (Canopus Co,. Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\cdrport.sys -- (cdrport)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=6070923
IE - HKLM\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuz1.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ig/dell?hl=en&client=dell-usuk&channel=uk&ibd=6070923
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKCU\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuz1.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Secure Search "
FF - prefs.js..browser.search.selectedEngine: "Secure Search "
FF - prefs.js..extensions.enabledItems: {ba14329e-9550-4989-b3f2-9732e92d17cc}:2.5.8.6
FF - prefs.js..keyword.URL: "http://uk.search.yahoo.com/search?fr=mcafee&p= "

FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2
FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor [2010/12/25 15:56:18 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/01/01 15:10:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/01/01 15:10:40 | 000,000,000 | ---D | M]

[2010/03/07 17:53:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\naeem\AppData\Roaming\mozilla\Extensions
[2011/01/02 18:38:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\naeem\AppData\Roaming\mozilla\Firefox\Profiles\n8eixg7h.default\extensions
[2010/12/25 15:52:11 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\naeem\AppData\Roaming\mozilla\Firefox\Profiles\n8eixg7h.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/04/09 20:56:50 | 000,000,000 | ---D | M] (Vuze Remote Toolbar) -- C:\Users\naeem\AppData\Roaming\mozilla\Firefox\Profiles\n8eixg7h.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
[2010/03/07 17:52:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2008/02/07 21:46:12 | 000,087,360 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\CgpCore.dll
[2008/02/07 21:46:20 | 000,091,448 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\confmgr.dll
[2008/02/07 21:46:16 | 000,021,824 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\ctxlogging.dll
[2007/03/16 17:27:00 | 000,479,232 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\msvcm80.dll
[2007/03/16 17:27:00 | 000,548,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\msvcp80.dll
[2007/03/16 17:27:00 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\msvcr80.dll
[2008/02/07 21:48:26 | 000,419,136 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\npicaN.dll
[2008/02/07 21:46:12 | 000,024,384 | ---- | M] (Citrix Systems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\TcpPServ.dll
[2010/12/25 14:00:08 | 000,001,538 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2010/12/25 14:00:08 | 000,000,947 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2010/12/25 14:00:09 | 000,000,769 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2010/12/25 16:48:34 | 000,002,027 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\McSiteAdvisor.xml
[2010/12/25 14:00:09 | 000,001,135 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2011/01/03 00:05:48 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuz1.dll (Conduit Ltd.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll File not found
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuz1.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files\Vuze_Remote\tbVuz1.dll (Conduit Ltd.)
O4 - HKLM..\Run: [%PROVIDERID%] File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll (Sun Microsystems, Inc.)
O9 - Extra Button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab (Reg Error: Key error.)
O16 - DPF: {0DB074F0-617E-4EE9-912C-2965CF2AA5A4} http://download.microsoft.com/download/7/0/7/707a44ad-52ad-49af-b7ef-e21b6b0656e4/VirtualEarth3D.cab (SentinelVE3D Class)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.168.4.100 194.168.8.100
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Users\naeem\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\naeem\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 21:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: midi - wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - midimap.dll (Microsoft Corporation)
Drivers32: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32: vidc.cvid - iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - ff_vfw.dll ()
Drivers32: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.iyuv - iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32: vidc.uyvy - msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yuy2 - msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvu9 - tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - msyuv.dll (Microsoft Corporation)
Drivers32: wave - wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - msacm32.drv (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/01/03 12:32:15 | 000,000,000 | ---D | C] -- C:\Users\naeem\AppData\Roaming\Avira
[2011/01/03 12:24:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2011/01/03 12:23:49 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2011/01/03 12:23:48 | 000,135,096 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2011/01/03 12:23:48 | 000,061,960 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2011/01/03 12:23:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2011/01/03 12:23:43 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2011/01/03 00:06:25 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2011/01/02 23:16:27 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011/01/02 23:16:26 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011/01/02 23:16:26 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011/01/02 23:15:13 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011/01/02 23:15:06 | 000,000,000 | ---D | C] -- C:\ComboFix
[2011/01/02 23:13:20 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2011/01/02 21:31:33 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/01/01 15:10:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011/01/01 15:09:17 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2011/01/01 14:57:43 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2010/12/31 14:07:48 | 000,000,000 | ---D | C] -- C:\Users\naeem\Desktop\Documents\tdsskiller
[2010/12/31 13:34:28 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2010/12/31 12:25:29 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010/12/31 12:25:25 | 000,000,000 | ---D | C] -- C:\rsit
[2010/12/31 12:12:13 | 000,000,000 | ---D | C] -- C:\Users\naeem\AppData\Roaming\Malwarebytes
[2010/12/31 12:11:07 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/12/31 12:11:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2010/12/31 12:11:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/12/31 12:11:02 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/12/31 12:11:02 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/12/31 01:14:57 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2010/12/31 01:13:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2010/12/31 01:13:08 | 000,000,000 | ---D | C] -- C:\Users\naeem\AppData\Roaming\SUPERAntiSpyware.com
[2010/12/31 01:13:08 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2010/12/31 01:10:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2010/12/31 00:31:59 | 000,000,000 | ---D | C] -- C:\Users\naeem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy Scan
[2010/12/31 00:24:47 | 000,428,544 | ---- | C] (Point Corp) -- C:\ProgramData\usOYKYjJhLIkjsj.dll
[2010/12/25 15:51:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\McAfee
[2010/12/25 15:50:55 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee
[2010/12/09 23:13:09 | 000,000,000 | ---D | C] -- C:\Users\naeem\Desktop\Desktop\The XX
[2010/12/09 22:49:17 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\msvcr71.dll
[2010/04/09 20:57:15 | 000,165,376 | ---- | C] (Vuze Inc.) -- C:\Program Files\uninstall.exe
[2010/04/09 20:57:12 | 000,199,616 | ---- | C] (Vuze Inc.) -- C:\Program Files\AzureusUpdater.exe
[2010/04/09 20:56:52 | 000,232,896 | ---- | C] (Vuze Inc.) -- C:\Program Files\Azureus.exe

========== Files - Modified Within 30 Days ==========

[2011/01/03 14:11:17 | 000,003,680 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/01/03 14:11:17 | 000,003,680 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/01/03 14:01:08 | 000,000,906 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1929587906-3008405706-3419055590-1000UA.job
[2011/01/03 12:11:12 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/01/03 12:11:07 | 1063,718,912 | -HS- | M] () -- C:\hiberfil.sys
[2011/01/03 00:05:48 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2011/01/02 23:02:42 | 125,624,216 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011/01/02 00:05:18 | 000,000,558 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for naeem.job
[2011/01/01 11:37:25 | 000,000,000 | ---- | M] () -- C:\Windows\System32\null
[2010/12/31 21:01:01 | 000,000,854 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1929587906-3008405706-3419055590-1000Core.job
[2010/12/31 15:32:40 | 000,000,258 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2010/12/31 15:30:54 | 000,002,565 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
[2010/12/31 14:13:06 | 000,002,052 | ---- | M] () -- C:\Windows\epplauncher.mif
[2010/12/31 11:52:55 | 000,428,544 | ---- | M] (Point Corp) -- C:\ProgramData\usOYKYjJhLIkjsj.dll
[2010/12/31 00:58:34 | 000,000,336 | ---- | M] () -- C:\ProgramData\Krs0Y4coOSwsWbyt
[2010/12/31 00:31:59 | 000,000,280 | ---- | M] () -- C:\ProgramData\~q4rXUZSI
[2010/12/31 00:31:59 | 000,000,176 | ---- | M] () -- C:\ProgramData\~q4rXUZSIr
[2010/12/31 00:31:58 | 000,000,336 | ---- | M] () -- C:\ProgramData\q4rXUZSI
[2010/12/26 09:28:33 | 000,422,144 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010/12/25 16:52:54 | 019,985,265 | ---- | M] () -- C:\Users\naeem\Desktop\Documents\vlc-1.1.5-win32.exe
[2010/12/20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/12/20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/12/13 08:40:21 | 000,135,096 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2010/12/13 08:40:21 | 000,061,960 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2010/12/10 03:02:19 | 000,612,100 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/12/10 03:02:19 | 000,109,516 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/12/09 22:49:17 | 000,232,896 | ---- | M] (Vuze Inc.) -- C:\Program Files\Azureus.exe
[2010/12/09 22:45:51 | 002,398,623 | ---- | M] () -- C:\Program Files\swt.jar
[2010/12/09 22:41:25 | 013,869,900 | ---- | M] () -- C:\Program Files\Azureus2.jar

========== Files Created - No Company Name ==========

[2011/01/02 23:16:27 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011/01/02 23:16:26 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011/01/02 23:16:26 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011/01/02 23:16:26 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011/01/02 23:16:26 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011/01/02 23:02:44 | 1063,718,912 | -HS- | C] () -- C:\hiberfil.sys
[2010/12/31 15:32:40 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010/12/31 14:13:06 | 000,002,052 | ---- | C] () -- C:\Windows\epplauncher.mif
[2010/12/31 13:33:59 | 125,624,216 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010/12/31 00:58:34 | 000,000,336 | ---- | C] () -- C:\ProgramData\Krs0Y4coOSwsWbyt
[2010/12/31 00:31:59 | 000,000,280 | ---- | C] () -- C:\ProgramData\~q4rXUZSI
[2010/12/31 00:31:59 | 000,000,176 | ---- | C] () -- C:\ProgramData\~q4rXUZSIr
[2010/12/31 00:31:58 | 000,000,336 | ---- | C] () -- C:\ProgramData\q4rXUZSI
[2010/12/25 16:52:35 | 019,985,265 | ---- | C] () -- C:\Users\naeem\Desktop\Documents\vlc-1.1.5-win32.exe
[2010/10/14 09:03:40 | 000,000,127 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010/05/25 21:47:48 | 000,000,004 | ---- | C] () -- C:\Users\naeem\AppData\Roaming\ovczpx.dat
[2010/04/09 20:57:15 | 000,055,652 | ---- | C] () -- C:\Program Files\Vuze.ico
[2010/04/09 20:57:13 | 002,398,623 | ---- | C] () -- C:\Program Files\swt.jar
[2010/04/09 20:57:12 | 000,017,719 | ---- | C] () -- C:\Program Files\GPL.txt
[2010/04/09 20:57:12 | 000,000,150 | ---- | C] () -- C:\Program Files\installer.log
[2010/04/09 20:56:54 | 013,869,900 | ---- | C] () -- C:\Program Files\Azureus2.jar
[2010/04/09 20:56:52 | 000,000,050 | ---- | C] () -- C:\Program Files\Azureus.exe.vmoptions
[2010/04/09 20:56:52 | 000,000,025 | ---- | C] () -- C:\Program Files\Azureus.properties
[2010/03/16 13:16:39 | 000,054,784 | ---- | C] () -- C:\Windows\System32\bcmwlrmt.dll
[2009/11/17 12:08:34 | 000,197,424 | ---- | C] () -- C:\Windows\System32\vpnapi.dll
[2009/08/03 15:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009/02/20 21:33:35 | 000,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2008/07/20 21:45:58 | 000,004,892 | ---- | C] () -- C:\Users\naeem\AppData\Local\d3d9caps.dat
[2008/04/26 18:17:48 | 000,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2008/01/21 21:10:21 | 000,000,050 | ---- | C] () -- C:\Windows\cdplayer.ini
[2007/11/05 21:02:10 | 000,000,952 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys
[2007/09/27 19:30:53 | 000,021,504 | ---- | C] () -- C:\Users\naeem\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/09/27 18:40:20 | 000,000,286 | ---- | C] () -- C:\Users\naeem\AppData\Roaming\wklnhst.dat
[2007/09/23 22:56:34 | 000,204,800 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1114.dll
[2007/09/23 22:56:34 | 000,061,440 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll
[2007/09/23 22:56:18 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2007/09/23 22:56:08 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2006/12/12 11:13:50 | 000,204,800 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1147.dll
[2006/12/12 10:02:50 | 000,053,248 | ---- | C] () -- C:\Windows\System32\oemdspif.dll
[2006/12/12 10:01:48 | 000,077,824 | ---- | C] () -- C:\Windows\System32\hccutils.dll
[2006/11/07 19:25:58 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2006/11/02 10:25:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2006/11/02 07:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/09/16 22:36:50 | 000,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll
[2006/09/16 22:36:50 | 000,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll

========== LOP Check ==========

[2010/03/11 12:39:21 | 000,000,000 | ---D | M] -- C:\Users\naeem\AppData\Roaming\Advanced Chemistry Development
[2010/12/30 17:15:55 | 000,000,000 | ---D | M] -- C:\Users\naeem\AppData\Roaming\Azureus
[2009/02/20 21:41:07 | 000,000,000 | ---D | M] -- C:\Users\naeem\AppData\Roaming\DAEMON Tools
[2009/02/20 21:33:19 | 000,000,000 | ---D | M] -- C:\Users\naeem\AppData\Roaming\DAEMON Tools Lite
[2009/02/20 21:41:07 | 000,000,000 | ---D | M] -- C:\Users\naeem\AppData\Roaming\DAEMON Tools Pro
[2010/03/12 15:05:58 | 000,000,000 | ---D | M] -- C:\Users\naeem\AppData\Roaming\ICAClient
[2009/01/02 22:05:58 | 000,000,000 | ---D | M] -- C:\Users\naeem\AppData\Roaming\LimeWire
[2007/09/27 18:40:40 | 000,000,000 | ---D | M] -- C:\Users\naeem\AppData\Roaming\Template
[2009/02/20 21:18:43 | 000,000,000 | ---D | M] -- C:\Users\naeem\AppData\Roaming\Uniblue
[2007/10/24 21:02:14 | 000,000,000 | ---D | M] -- C:\Users\naeem\AppData\Roaming\VideoReDoPlus
[2011/01/03 02:54:03 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2006/09/18 21:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2008/01/19 07:45:45 | 000,333,203 | RHS- | M] () -- C:\bootmgr
[2006/11/10 21:59:07 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2011/01/03 00:30:52 | 000,020,386 | ---- | M] () -- C:\ComboFix.txt
[2006/09/18 21:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
[2007/09/23 22:56:43 | 000,004,249 | RH-- | M] () -- C:\dell.sdr
[2011/01/03 12:11:07 | 1063,718,912 | -HS- | M] () -- C:\hiberfil.sys
[2010/03/16 13:15:22 | 000,022,729 | ---- | M] () -- C:\newfile.enc
[2010/03/16 13:15:22 | 000,022,729 | ---- | M] () -- C:\newkey
[2011/01/03 12:11:04 | 1377,525,760 | -HS- | M] () -- C:\pagefile.sys
[2011/01/02 23:01:49 | 000,000,260 | ---- | M] () -- C:\rkill.log
[2009/09/22 14:48:40 | 000,000,909 | ---- | M] () -- C:\updatedatfix.log

< %systemroot%\Fonts\*.com >
[2006/11/02 12:35:34 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 12:35:34 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 12:35:34 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2006/11/02 12:35:34 | 000,030,808 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 21:37:34 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/06/06 20:49:18 | 000,302,592 | ---- | M] (Hewlett-Packard Corporation) -- C:\Windows\System32\spool\prtprocs\w32x86\hpzpp692.dll
[2008/01/19 07:34:28 | 000,089,600 | ---- | M] (Hewlett-Packard Corporation) -- C:\Windows\System32\spool\prtprocs\w32x86\HPZPPLHN.DLL
[2006/10/26 19:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >
[2008/05/04 21:07:59 | 000,001,658 | -H-- | M] () -- C:\Users\naeem\AppData\Roaming\Microsoft\LastFlashConfig.WFC

< %PROGRAMFILES%\*.* >
[2010/12/09 22:49:17 | 000,232,896 | ---- | M] (Vuze Inc.) -- C:\Program Files\Azureus.exe
[2010/12/09 22:49:17 | 000,000,548 | ---- | M] () -- C:\Program Files\Azureus.exe.manifest
[2010/01/13 10:41:00 | 000,000,050 | ---- | M] () -- C:\Program Files\Azureus.exe.vmoptions
[2009/06/22 18:45:12 | 000,000,025 | ---- | M] () -- C:\Program Files\Azureus.properties
[2010/12/09 22:41:25 | 013,869,900 | ---- | M] () -- C:\Program Files\Azureus2.jar
[2009/06/22 18:45:12 | 000,199,616 | ---- | M] (Vuze Inc.) -- C:\Program Files\AzureusUpdater.exe
[2009/01/19 22:28:05 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini
[2009/06/22 18:45:18 | 000,017,719 | ---- | M] () -- C:\Program Files\GPL.txt
[2010/04/09 20:57:48 | 000,000,150 | ---- | M] () -- C:\Program Files\installer.log
[2010/12/09 22:49:17 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Program Files\msvcr71.dll
[2010/12/09 22:45:51 | 002,398,623 | ---- | M] () -- C:\Program Files\swt.jar
[2010/04/06 10:05:08 | 000,165,376 | ---- | M] (Vuze Inc.) -- C:\Program Files\uninstall.exe
[2009/06/22 18:45:12 | 000,055,652 | ---- | M] () -- C:\Program Files\Vuze.ico

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2006/11/02 10:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2006/11/02 10:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2006/11/02 10:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 10:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 10:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/03/24 01:44:04 | 000,000,286 | -HS- | M] () -- C:\Users\naeem\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >
[2009/01/19 22:26:30 | 000,008,192 | ---- | M] () -- C:\Windows\security\database\edb.chk
[2009/01/19 22:25:59 | 001,048,576 | ---- | M] () -- C:\Windows\security\database\edb.log
[2009/01/19 22:25:59 | 001,048,576 | ---- | M] () -- C:\Windows\security\database\edbres00001.jrs
[2009/01/19 22:25:59 | 001,048,576 | ---- | M] () -- C:\Windows\security\database\edbres00002.jrs
[2009/01/19 22:25:59 | 001,048,576 | ---- | M] () -- C:\Windows\security\database\edbtmp.log
[2009/01/19 22:25:59 | 001,056,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\security\database\tmp.edb

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >
[2010/03/07 18:09:53 | 000,008,088 | ---- | M] () -- C:\ProgramData\hpzinstall.log
[2010/12/31 00:58:34 | 000,000,336 | ---- | M] () -- C:\ProgramData\Krs0Y4coOSwsWbyt
[2010/12/31 15:32:40 | 000,000,258 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2010/12/31 00:31:58 | 000,000,336 | ---- | M] () -- C:\ProgramData\q4rXUZSI
[2010/12/31 11:52:55 | 000,428,544 | ---- | M] (Point Corp) -- C:\ProgramData\usOYKYjJhLIkjsj.dll
[2008/04/26 18:02:58 | 000,004,977 | ---- | M] () -- C:\ProgramData\ywasvxup.hvs
[2010/12/31 00:31:59 | 000,000,280 | ---- | M] () -- C:\ProgramData\~q4rXUZSI
[2010/12/31 00:31:59 | 000,000,176 | ---- | M] () -- C:\ProgramData\~q4rXUZSIr

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >

< %SystemRoot%\system32\fonts\*.* >

< %systemroot%\system32\winlog\*.* >

< %systemroot%\system32\Language\*.* >

< %systemroot%\system32\Settings\*.* >

< %systemroot%\system32\*.quo >

< %SYSTEMROOT%\AppPatch\*.exe >

< %SYSTEMROOT%\inf\*.exe >

< %SYSTEMROOT%\Installer\*.exe >

< %systemroot%\system32\config\*.bak2 >

< %systemroot%\system32\Computers\*.* >

< %SystemRoot%\system32\Sound\*.* >

< %SystemRoot%\system32\SpecialImg\*.* >

< %SystemRoot%\system32\code\*.* >

< %SystemRoot%\system32\draft\*.* >

< %SystemRoot%\system32\MSSSys\*.* >

< %ProgramFiles%\Javascript\*.* >

< %systemroot%\pchealth\helpctr\System\*.exe /s >

< %systemroot%\Web\*.exe >

< %systemroot%\system32\msn\*.* >

< %systemroot%\system32\*.tro >

< %AppData%\Microsoft\Installer\msupdates\*.* >

< %ProgramFiles%\Messenger\*.* >

< %systemroot%\system32\systhem32\*.* >

< %systemroot%\system\*.exe >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\ Auto Update\Results\Install|LastSuccessTime /rs >


========== Alternate Data Streams ==========

@Alternate Data Stream - 76 bytes -> C:\Users\naeem\Desktop\Documents\tdsskiller:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\naeem\Desktop\Documents\Downloads:Roxio EMC Stream
@Alternate Data Stream - 76 bytes -> C:\Users\naeem\Desktop\Desktop\The XX:Roxio EMC Stream

< End of report >

 

More scans

The laptops working completely fine except for the issue with webpages being directed.

OTL:
All processes killed
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\%PROVIDERID% deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DDE87865-83C5-48c4-8357-2F5B1AA84522}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DDE87865-83C5-48c4-8357-2F5B1AA84522}\ not found.
Starting removal of ActiveX control {0CCA191D-13A6-4E29-B746-314DEE697D83}
C:\Windows\Downloaded Program Files\PhotoUploader5.inf not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{0CCA191D-13A6-4E29-B746-314DEE697D83}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CCA191D-13A6-4E29-B746-314DEE697D83}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{0CCA191D-13A6-4E29-B746-314DEE697D83}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CCA191D-13A6-4E29-B746-314DEE697D83}\ not found.
Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
C:\Windows\Downloaded Program Files\erma.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
C:\Windows\epplauncher.mif moved successfully.
C:\ProgramData\usOYKYjJhLIkjsj.dll moved successfully.
C:\ProgramData\Krs0Y4coOSwsWbyt moved successfully.
C:\ProgramData\~q4rXUZSI moved successfully.
C:\ProgramData\~q4rXUZSIr moved successfully.
C:\ProgramData\q4rXUZSI moved successfully.
C:\Users\naeem\AppData\Roaming\ovczpx.dat moved successfully.
C:\Users\naeem\AppData\Roaming\Uniblue\Registry Booster2 folder moved successfully.
C:\Users\naeem\AppData\Roaming\Uniblue folder moved successfully.
ADS C:\Users\naeem\Desktop\Documents\tdsskiller:Roxio EMC Stream deleted successfully.
ADS C:\Users\naeem\Desktop\Documents\Downloads:Roxio EMC Stream deleted successfully.
ADS C:\Users\naeem\Desktop\Desktop\The XX:Roxio EMC Stream deleted successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\\DisableMonitoring deleted successfully.
========== FILES ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Aliya
->Temp folder emptied: 0 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: naeem
->Temp folder emptied: 12909781 bytes
->Temporary Internet Files folder emptied: 59302476 bytes
->Java cache emptied: 2027 bytes
->FireFox cache emptied: 60481953 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 5264 bytes

User: Public
->Temp folder emptied: 0 bytes

User: Shahbano
->Temp folder emptied: 0 bytes

User: TEMP
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 108466 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 127.00 mb


[EMPTYFLASH]

User: Aliya

User: All Users

User: Default

User: Default User

User: Guest
->Flash cache emptied: 0 bytes

User: naeem
->Flash cache emptied: 0 bytes

User: Public

User: Shahbano

User: TEMP

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.20.1 log created on 01042011_035045

Files\Folders moved on Reboot...
C:\Users\naeem\AppData\Local\Temp\Low\~DFA8B6.tmp moved successfully.
C:\Users\naeem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\EH02BXZH\google_co_uk[3].htm moved successfully.
C:\Users\naeem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\A0AB7674-8D67-4F4D-B5E1-96FAEADFB79D.dat moved successfully.
C:\Users\naeem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
C:\Windows\temp\JETAA61.tmp moved successfully.

Registry entries deleted on Reboot...


Security check:

Results of screen317's Security Check version 0.99.7
Windows Vista Service Pack 1 (UAC is enabled)
Out of date service pack!!
Internet Explorer 7 Out of date!
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Enabled!
Avira AntiVir Personal - Free Antivirus
McAfee Security Scan Plus
WMI entry may not exist for antivirus; attempting automatic update.
Avira successfully updated!
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
Java(TM) 6 Update 23
Java(TM) SE Runtime Environment 6
Out of date Java installed!
Adobe Flash Player 10.1.102.64
Adobe Reader 7.0.8
Out of date Adobe Reader installed!
Mozilla Firefox (3.6.13)
````````````````````````````````
Process Check:
objlist.exe by Laurent
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
``````````End of Log````````````


ESET online scanner

C:\Users\naeem\AppData\Local\Downloaded Installations\{98D0FE33-6A9E-4A01-A115-F4506174D0CC}\Movavi Video Converter 6.msi probably a variant of Win32/Agent.IQJZIJC trojan
C:\_OTL\MovedFiles\01042011_035045\C_ProgramData\usOYKYjJhLIkjsj.dll a variant of Win32/Kryptik.JJN trojan

 

The problem doesn't seem to be apparent in internet explorer yet. I haven't tried google chrome as I don't have it downloaded.

OTL newer:

All processes killed
========== OTL ==========
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
C:\Users\naeem\AppData\Local\Downloaded Installations\{98D0FE33-6A9E-4A01-A115-F4506174D0CC}\Movavi Video Converter 6.msi moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Aliya
->Temp folder emptied: 0 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Guest
->Temp folder emptied: 461837 bytes
->Temporary Internet Files folder emptied: 5046489 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 4117052 bytes
->Flash cache emptied: 581 bytes

User: naeem
->Temp folder emptied: 11558116 bytes
->Temporary Internet Files folder emptied: 50833712 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 92613147 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 20248 bytes

User: Public
->Temp folder emptied: 0 bytes

User: Shahbano
->Temp folder emptied: 0 bytes

User: TEMP
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 248940 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 157.00 mb


[EMPTYFLASH]

User: Aliya

User: All Users

User: Default

User: Default User

User: Guest
->Flash cache emptied: 0 bytes

User: naeem
->Flash cache emptied: 0 bytes

User: Public

User: Shahbano

User: TEMP

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.20.1 log created on 01052011_225835

Files\Folders moved on Reboot...
C:\Users\naeem\AppData\Local\Temp\Low\~DF5CD2.tmp moved successfully.
C:\Users\naeem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IDAYSJZK\google_co_uk[1].htm moved successfully.
File move failed. C:\Users\naeem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\A0AB7674-8D67-4F4D-B5E1-96FAEADFB79D.dat scheduled to be moved on reboot.
C:\Users\naeem\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
C:\Windows\temp\JETEEA1.tmp moved successfully.

Registry entries deleted on Reboot...

 

It seems that the redirection issues only occur during use with mozilla firefox browser while internet explorer seems fine for now.

 

GooredFix by jpshortstuff (03.07.10.1)
Log created at 14:10 on 07/01/2011 (naeem)
Firefox version 3.6.13 (en-GB)

========== GooredScan ==========

Removing Orphan:
"smartwebprinting@hp.com "= "C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2" -> Success!

========== GooredLog ==========

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd} [17:52 07/03/2010]
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [17:14 03/01/2011]
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [17:59 03/01/2011]

C:\Users\naeem\Application Data\Mozilla\Firefox\Profiles\n8eixg7h.default\extensions\
{20a82645-c095-46ed-80e3-08825760534b} [15:52 25/12/2010]
{ba14329e-9550-4989-b3f2-9732e92d17cc} [20:56 09/04/2010]

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{20a82645-c095-46ed-80e3-08825760534b} "= "c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [16:59 18/08/2009]
"{B7082FAA-CB62-4872-9106-E42DD88EDE45} "= "C:\Program Files\McAfee\SiteAdvisor" [15:50 25/12/2010]

-=E.O.F=-