1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive [InActive]~tmpc.exe

Discussion in 'Malware and Virus Removal Archive' started by stinkingdog101, 2008/11/05.

  1. 2008/11/05
    stinkingdog101

    stinkingdog101 Inactive Thread Starter

    Joined:
    2005/04/24
    Messages:
    41
    Likes Received:
    0
    I have a virus that is a pain . I have tried several antiviruses but they either want money are inevffective like the Avast. Anyhow I would appreciate it if someone could figure what I need to do to get rid of this menace. Thanks
    Logfile of random's system information tool 1.04 (written by random/random)
    Run by Dad at 2008-11-05 20:49:16
    Microsoft® Windows Vistaâ„¢ Home Premium
    System drive C: has 165 GB (72%) free of 228 GB
    Total RAM: 1982 MB (51% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 8:49:36 PM, on 11/5/2008
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16757)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Windows\RtHDVCpl.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Lexmark 1300 Series\lxdcamon.exe
    C:\Windows\PixArt\Pac207\Monitor.exe
    C:\Windows\System32\bgsmsnd.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\Windows\System32\rundll32.exe
    C:\Program Files\SpiralFrog\Spiralfrog.exe
    C:\Program Files\AVG\AVG8\avgtray.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\DellSupport\DSAgnt.exe
    C:\Windows\ehome\ehtray.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Dell Support Center\bin\sprtcmd.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Registry Mechanic\RMTray.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Users\Dad\AppData\Local\Temp\xxx5370.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Verizon Wireless\V CAST Music Manager\MEMonitor.exe
    C:\Windows\system32\wuauclt.exe
    C:\Program Files\Internet Explorer\ieuser.exe
    C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Users\Dad\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OVGO942H\RSIT[1].exe
    C:\Program Files\trend micro\Dad.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
    O2 - BHO: pdfMachine - {56CF4856-ECB4-4e46-A897-A378821F97B9} - C:\Windows\system32\bgstb.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
    O3 - Toolbar: pdfMachine - {56CF4856-ECB4-4e46-A897-A378821F97B9} - C:\Windows\system32\bgstb.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe "
    O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
    O4 - HKLM\..\Run: [lxdcamon] "C:\Program Files\Lexmark 1300 Series\lxdcamon.exe "
    O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe "
    O4 - HKLM\..\Run: [bgsmsnd.exe] C:\Windows\system32\bgsmsnd.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [SpiralFrog] C:\Program Files\SpiralFrog\Spiralfrog.exe
    O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
    O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
    O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RMTray.exe /S
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [MSFox] C:\Users\Dad\AppData\Local\Temp\xxx5370.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O4 - Startup: MEMonitor.lnk = C:\Program Files\Verizon Wireless\V CAST Music Manager\MEMonitor.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O13 - Gopher Prefix:
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file:///C:/Program%20Files/Mystery%20P.I.%20-%20The%20Lottery%20Ticket/Images/stg_drm.ocx
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC} (PogoWebLauncher Control) - http://www.pogo.com/cdl/launcher/PogoWebLauncherInstaller.CAB
    O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-windows-i586-jc.cab
    O16 - DPF: {8FA2192F-B95D-40E3-898F-8D7ABB8E00D0} (SpinTop Games Launcher) - http://clubgames.pogo.com/online2/pogop/mahjong_escape_ancient_japan/SpinTopGamesLauncher.cab
    O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Mystery%20P.I.%20-%20The%20Lottery%20Ticket/Images/armhelper.ocx
    O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://games.myspace.com/Gameshell/GameHost/1.0/OberonGameHost.cab
    O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://clubgames.pogo.com/online2/pogop/bejeweled2/popcaploader_v6.cab
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
    O20 - AppInit_DLLs: avgrsstx.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
    O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: lxdcCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdcserv.exe
    O23 - Service: lxdc_device - - C:\Windows\system32\lxdccoms.exe
    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
    O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 10103 bytes

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
    Adobe PDF Reader Link Helper - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
    AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-09-01 455960]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{56CF4856-ECB4-4e46-A897-A378821F97B9}]
    pdfMachine - C:\Windows\system32\bgstb.dll [2007-11-19 270728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
    SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
    CBrowserHelperObject Object - C:\Program Files\Dell\BAE\BAE.dll [2006-11-09 98304]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    {56CF4856-ECB4-4e46-A897-A378821F97B9} - pdfMachine - C:\Windows\system32\bgstb.dll [2007-11-19 270728]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender "=C:\Program Files\Windows Defender\MSASCui.exe [2007-10-26 1006264]
    "RtHDVCpl "=C:\Windows\RtHDVCpl.exe [2007-03-15 4390912]
    "NvSvc "=C:\Windows\system32\nvsvc.dll [2007-09-22 86016]
    "NvCplDaemon "=C:\Windows\system32\NvCpl.dll [2007-09-22 8429568]
    "NvMediaCenter "=C:\Windows\system32\NvMcTray.dll [2007-09-22 81920]
    "ISUSScheduler "=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2006-10-03 81920]
    " "= []
    "dscactivate "=C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe [2007-11-15 16384]
    "ISUSPM Startup "=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2006-10-03 221184]
    "lxdcamon "=C:\Program Files\Lexmark 1300 Series\lxdcamon.exe [2007-04-30 20480]
    "Monitor "=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
    "SunJavaUpdateSched "=C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [2007-09-25 132496]
    "bgsmsnd.exe "=C:\Windows\system32\bgsmsnd.exe [2007-11-19 160136]
    "QuickTime Task "=C:\Program Files\QuickTime\QTTask.exe [2008-01-10 385024]
    "SpiralFrog "=C:\Program Files\SpiralFrog\Spiralfrog.exe [2007-12-18 163128]
    "DellSupportCenter "=C:\Program Files\Dell Support Center\bin\sprtcmd.exe [2008-08-13 206064]
    "AVG8_TRAY "=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-09-29 1234712]
    "avast! "=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-07-19 78008]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "WindowsWelcomeCenter "=C:\Windows\system32\oobefldr.dll [2006-11-02 2159104]
    "DellSupport "=C:\Program Files\DellSupport\DSAgnt.exe [2007-03-15 460784]
    "ehTray.exe "=C:\Windows\ehome\ehTray.exe [2006-11-02 125440]
    "DellSupportCenter "=C:\Program Files\Dell Support Center\bin\sprtcmd.exe [2008-08-13 206064]
    "updateMgr "=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472]
    "RegistryMechanic "=C:\Program Files\Registry Mechanic\RMTray.exe [2008-07-03 812952]
    "WMPNSCFG "=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-02 201728]
    "MSFox "=C:\Users\Dad\AppData\Local\Temp\xxx5370.exe [2008-11-05 78340]

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe

    C:\Users\Dad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    MEMonitor.lnk - C:\Program Files\Verizon Wireless\V CAST Music Manager\MEMonitor.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLS "= "avgrsstx.dll "

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "dontdisplaylastusername "=0
    "legalnoticecaption "=
    "legalnoticetext "=
    "shutdownwithoutlogon "=1
    "undockwithoutlogon "=1

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{812ff384-be4e-11dc-8dda-001aa05f4f47}]
    shell\AutoRun\command - setupSNK.exe


    ======List of files/folders created in the last 3 months======

    2008-11-05 20:49:16 ----D---- C:\rsit
    2008-11-05 20:49:16 ----D---- C:\Program Files\trend micro
    2008-11-05 18:10:03 ----A---- C:\Windows\system32\aswBoot.exe
    2008-11-05 18:10:00 ----D---- C:\Program Files\Alwil Software
    2008-11-05 17:37:04 ----D---- C:\Program Files\Enigma Software Group
    2008-11-04 21:15:30 ----A---- C:\Windows\system32\EncDec.dll
    2008-11-04 21:15:29 ----A---- C:\Windows\system32\psisdecd.dll
    2008-11-04 21:15:29 ----A---- C:\Windows\system32\mcmde.dll
    2008-10-28 15:35:47 ----A---- C:\Windows\system32\win32spl.dll
    2008-10-28 15:35:46 ----A---- C:\Windows\system32\printcom.dll
    2008-10-25 12:44:59 ----D---- C:\Program Files\Apple Software Update
    2008-10-25 12:44:58 ----D---- C:\ProgramData\Apple
    2008-10-24 08:40:48 ----A---- C:\Windows\system32\netapi32.dll
    2008-10-15 22:20:55 ----A---- C:\Windows\system32\ntkrnlpa.exe
    2008-10-15 22:20:54 ----A---- C:\Windows\system32\ntoskrnl.exe
    2008-10-15 22:20:50 ----A---- C:\Windows\system32\mshtml.dll
    2008-10-15 22:20:49 ----A---- C:\Windows\system32\ieframe.dll
    2008-10-15 22:20:48 ----A---- C:\Windows\system32\wininet.dll
    2008-10-15 22:20:48 ----A---- C:\Windows\system32\urlmon.dll
    2008-10-15 22:20:48 ----A---- C:\Windows\system32\mshtmled.dll
    2008-10-15 22:20:48 ----A---- C:\Windows\system32\iertutil.dll
    2008-10-15 22:20:48 ----A---- C:\Windows\system32\dxtrans.dll
    2008-10-15 22:20:48 ----A---- C:\Windows\system32\dxtmsft.dll
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\pngfilt.dll
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\mstime.dll
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\jsproxy.dll
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\ieUnatt.exe
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\ieui.dll
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\iesetup.dll
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\iernonce.dll
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\ieapfltr.dll
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\ie4uinit.exe
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\icardie.dll
    2008-10-15 22:20:47 ----A---- C:\Windows\system32\advpack.dll
    2008-10-08 14:04:36 ----A---- C:\Windows\system32\xactengine2_8.dll
    2008-10-08 14:04:36 ----A---- C:\Windows\system32\x3daudio1_2.dll
    2008-10-08 14:04:35 ----A---- C:\Windows\system32\d3dx10_34.dll
    2008-10-08 14:04:35 ----A---- C:\Windows\system32\D3DCompiler_34.dll
    2008-10-08 14:04:34 ----A---- C:\Windows\system32\xinput1_3.dll
    2008-10-08 14:04:34 ----A---- C:\Windows\system32\d3dx9_34.dll
    2008-10-08 14:04:33 ----A---- C:\Windows\system32\xactengine2_7.dll
    2008-10-08 14:04:33 ----A---- C:\Windows\system32\d3dx10_33.dll
    2008-10-08 14:04:33 ----A---- C:\Windows\system32\D3DCompiler_33.dll
    2008-10-08 14:04:31 ----A---- C:\Windows\system32\xactengine2_6.dll
    2008-10-08 14:04:31 ----A---- C:\Windows\system32\xactengine2_5.dll
    2008-10-08 14:04:31 ----A---- C:\Windows\system32\d3dx9_33.dll
    2008-10-08 14:04:30 ----A---- C:\Windows\system32\d3dx10.dll
    2008-10-08 14:04:29 ----A---- C:\Windows\system32\xactengine2_4.dll
    2008-10-08 14:04:29 ----A---- C:\Windows\system32\x3daudio1_1.dll
    2008-10-08 14:04:29 ----A---- C:\Windows\system32\d3dx9_32.dll
    2008-10-08 14:04:28 ----A---- C:\Windows\system32\xinput1_2.dll
    2008-10-08 14:04:28 ----A---- C:\Windows\system32\xactengine2_3.dll
    2008-10-08 14:04:28 ----A---- C:\Windows\system32\xactengine2_2.dll
    2008-10-08 14:04:28 ----A---- C:\Windows\system32\d3dx9_31.dll
    2008-10-08 14:04:27 ----A---- C:\Windows\system32\xinput1_1.dll
    2008-10-08 14:04:27 ----A---- C:\Windows\system32\xactengine2_1.dll
    2008-10-08 14:04:08 ----A---- C:\Windows\system32\d3dx9_30.dll
    2008-10-08 14:04:07 ----A---- C:\Windows\system32\xactengine2_0.dll
    2008-10-08 14:04:07 ----A---- C:\Windows\system32\x3daudio1_0.dll
    2008-10-08 14:04:07 ----A---- C:\Windows\system32\d3dx9_29.dll
    2008-10-08 14:04:06 ----A---- C:\Windows\system32\d3dx9_28.dll
    2008-10-08 14:04:05 ----A---- C:\Windows\system32\d3dx9_27.dll
    2008-10-08 14:04:05 ----A---- C:\Windows\system32\d3dx9_26.dll
    2008-10-08 14:04:04 ----A---- C:\Windows\system32\d3dx9_25.dll
    2008-10-08 14:04:03 ----A---- C:\Windows\system32\d3dx9_24.dll
    2008-10-08 13:57:51 ----A---- C:\Windows\game.ini
    2008-10-08 13:35:24 ----D---- C:\Program Files\Activision
    2008-10-08 08:46:53 ----D---- C:\Program Files\Call of Duty Game of the Year Edition
    2008-10-08 08:45:40 ----A---- C:\Windows\CoD.INI
    2008-10-02 17:59:06 ----D---- C:\ProgramData\Operation Mania
    2008-10-02 17:58:57 ----D---- C:\Users\Dad\AppData\Roaming\Pogo Games
    2008-10-02 17:27:32 ----D---- C:\Program Files\Eusing Free Registry Cleaner
    2008-09-09 18:53:20 ----A---- C:\Windows\system32\gameux.dll
    2008-09-09 18:53:20 ----A---- C:\Windows\system32\Apphlpdm.dll
    2008-09-09 18:53:19 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
    2008-09-09 18:52:19 ----A---- C:\Windows\system32\wmpeffects.dll
    2008-08-26 18:38:56 ----A---- C:\Windows\system32\wups2.dll
    2008-08-26 18:38:56 ----A---- C:\Windows\system32\wucltux.dll
    2008-08-26 18:38:56 ----A---- C:\Windows\system32\wuaueng.dll
    2008-08-26 18:38:56 ----A---- C:\Windows\system32\wuauclt.exe
    2008-08-26 18:38:27 ----A---- C:\Windows\system32\wups.dll
    2008-08-26 18:38:27 ----A---- C:\Windows\system32\wudriver.dll
    2008-08-26 18:38:27 ----A---- C:\Windows\system32\wuapi.dll
    2008-08-26 18:38:11 ----A---- C:\Windows\system32\wuwebv.dll
    2008-08-26 18:38:11 ----A---- C:\Windows\system32\wuapp.exe
    2008-08-17 07:55:15 ----D---- C:\Program Files\Microsoft Silverlight
    2008-08-16 18:14:44 ----D---- C:\ProgramData\XXUWONQEYG
    2008-08-13 19:31:34 ----A---- C:\Windows\system32\tzres.dll
    2008-08-13 07:43:15 ----A---- C:\Windows\system32\winipsec.dll
    2008-08-13 07:43:15 ----A---- C:\Windows\system32\polstore.dll
    2008-08-13 07:43:15 ----A---- C:\Windows\system32\IPSECSVC.DLL
    2008-08-13 07:43:15 ----A---- C:\Windows\system32\FwRemoteSvr.dll
    2008-08-13 07:43:13 ----A---- C:\Windows\system32\es.dll
    2008-08-13 07:42:56 ----A---- C:\Windows\system32\INETRES.dll
    2008-08-13 07:42:56 ----A---- C:\Windows\system32\inetcomm.dll
    2008-08-09 07:25:52 ----A---- C:\Windows\system32\STKIT432.DLL
    2008-08-09 07:25:52 ----A---- C:\Windows\system32\msxml.dll
    2008-08-09 07:25:49 ----D---- C:\Program Files\Registry Mechanic

    ======List of files/folders modified in the last 3 months======

    2008-11-05 20:49:36 ----D---- C:\Windows\Temp
    2008-11-05 20:49:16 ----RD---- C:\Program Files
    2008-11-05 18:47:58 ----SD---- C:\ProgramData\Microsoft
    2008-11-05 18:33:18 ----D---- C:\Windows\System32
    2008-11-05 18:33:14 ----D---- C:\Windows\inf
    2008-11-05 18:33:14 ----A---- C:\Windows\system32\PerfStringBackup.INI
    2008-11-05 18:31:09 ----D---- C:\Program Files\SpiralFrog
    2008-11-05 18:30:52 ----D---- C:\Windows\system32\drivers
    2008-11-05 18:29:58 ----AD---- C:\ProgramData\TEMP
    2008-11-05 18:27:46 ----D---- C:\Program Files\Google
    2008-11-05 17:37:10 ----D---- C:\Windows\system32\Tasks
    2008-11-05 17:37:04 ----D---- C:\Windows\Prefetch
    2008-11-05 17:31:39 ----HD---- C:\$AVG8.VAULT$
    2008-11-05 16:57:44 ----SHD---- C:\System Volume Information
    2008-11-05 16:56:44 ----D---- C:\Program Files\Oberon Media
    2008-11-05 16:53:08 ----SHD---- C:\Windows\Installer
    2008-11-05 16:53:06 ----D---- C:\ProgramData\Google
    2008-11-04 21:41:00 ----D---- C:\Windows\winsxs
    2008-11-04 21:40:59 ----D---- C:\Windows\ehome
    2008-11-04 21:13:53 ----D---- C:\Windows\system32\catroot
    2008-11-04 21:13:52 ----D---- C:\Windows\system32\catroot2
    2008-10-27 12:57:12 ----D---- C:\Program Files\Lx_cats
    2008-10-27 12:57:10 ----HD---- C:\ProgramData
    2008-10-16 07:17:26 ----D---- C:\Program Files\Windows Mail
    2008-10-16 07:17:25 ----D---- C:\Windows\system32\migration
    2008-10-16 07:17:25 ----D---- C:\Program Files\Internet Explorer
    2008-10-16 07:17:24 ----D---- C:\Windows\AppPatch
    2008-10-09 17:04:00 ----SD---- C:\Windows\Downloaded Program Files
    2008-10-08 14:04:27 ----RSD---- C:\Windows\assembly
    2008-10-08 14:04:12 ----D---- C:\Windows\Microsoft.NET
    2008-10-08 13:57:51 ----D---- C:\Windows
    2008-10-08 13:57:44 ----HD---- C:\Program Files\InstallShield Installation Information
    2008-10-07 13:19:40 ----A---- C:\Windows\system32\mrt.exe
    2008-09-04 18:46:14 ----D---- C:\Windows\system32\en-US
    2008-08-16 18:22:21 ----D---- C:\Program Files\BadgeHelp
    2008-08-09 07:42:28 ----D---- C:\Program Files\Common Files\Symantec Shared
    2008-08-09 07:39:30 ----D---- C:\ProgramData\Symantec

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2008-07-19 23152]
    R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2008-07-19 78416]
    R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2008-07-19 42912]
    R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2008-09-01 97928]
    R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2008-08-03 26824]
    R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
    R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2008-07-19 51280]
    R2 dsunidrv;DellSupport UniDriver; C:\Windows\system32\DRIVERS\dsunidrv.sys [2007-02-25 5376]
    R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
    R2 X4HSX32;X4HSX32; \??\C:\Program Files\GameTap\bin\Release\X4HSX32.Sys [2007-12-13 31400]
    R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 8192]
    R3 AvgWfpX;AVG Free8 Firewall Driver x86; C:\Windows\System32\Drivers\avgwfpx.sys [2008-08-03 69128]
    R3 DSproct;DSproct; \??\C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys [2006-10-05 4736]
    R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-10-18 986624]
    R3 HSXHWBS2;HSXHWBS2; C:\Windows\system32\DRIVERS\HSXHWBS2.sys [2006-10-18 258048]
    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-15 1744928]
    R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-03-15 1059112]
    R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-09-22 7478432]
    R3 PAC207;SoC PC-Camera; C:\Windows\system32\DRIVERS\PFC027.SYS [2006-12-05 507136]
    R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-10-18 659968]
    S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
    S3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6032.sys [2006-11-02 200704]
    S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
    S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
    S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
    S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
    S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
    S3 USB_RNDIS;Arris Remote NDIS Network Device Driver; C:\Windows\system32\DRIVERS\usb8023.sys [2006-11-02 14848]
    S3 usbbus;LGE CDMA Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys [2007-04-09 12672]
    S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys [2005-05-26 38144]
    S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys [2005-06-24 39036]
    S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
    S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-07-19 16056]
    R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-07-19 147640]
    R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-09-01 875288]
    R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-09-01 231704]
    R2 lxdc_device;lxdc_device; C:\Windows\system32\lxdccoms.exe [2007-05-25 537520]
    R2 lxdcCATSCustConnectService;lxdcCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxdcserv.exe [2007-05-25 99248]
    R2 RoxWatch9;Roxio Hard Drive Watcher 9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe [2006-11-05 159744]
    R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter); C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2008-08-13 201968]
    R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-08-04 386560]
    R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-07-19 250040]
    R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-07-23 348344]
    S3 DSBrokerService;DSBrokerService; C:\Program Files\DellSupport\brkrsvc.exe [2007-03-19 70656]
    S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
    S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2006-11-05 880640]
    S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-09-14 73728]

    -----------------EOF-----------------
    info.txt logfile of random's system information tool 1.04 2008-11-05 20:49:39

    ======Uninstall list======

    Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
    Adobe Reader 7.0.9-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70900000002}
    AOL Install-->MsiExec.exe /I{2357B8BC-88C9-4A72-818C-050CC4EB0778}
    Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
    avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll ",RunSetup
    AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
    BroadGun pdfMachine-->C:\Windows\system32\spool\DRIVERS\W32X86\3\bgssetup.exe -uninstall
    Browser Address Error Redirector-->MsiExec.exe /I{62230596-37E5-4618-A329-0D21F529A86F}
    Call of Duty Game of the Year Edition-->C:\PROGRA~1\CALLOF~1\Uninstall\Unwise.exe /u C:\PROGRA~1\CALLOF~1\Uninstall\Install.log
    Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0409
    Conexant D850 PCI V.92 Modem-->C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1\HXFSETUP.EXE -U -IDel200fz.inf
    Dell Support Center (Support Software)-->MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1}
    Dell System Customization Wizard-->MsiExec.exe /I{13BA7B44-B712-4DEE-A7B8-1DD564F37AE5}
    DellSupport-->MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}
    Digital Line Detect-->C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x0009 -removeonly
    EarthLink Setup Files-->MsiExec.exe /X{5E68BB65-4059-4FE5-AAC4-0CD1D79BBDE2}
    Games, Music, & Photos Launcher-->MsiExec.exe /I{3E25E350-949F-4DB7-8288-2A60E018B4C1}
    GameTap-->C:\Program Files\InstallShield Installation Information\{67E158AF-8856-4337-B483-EA21930786AF}\setup.exe -runfromtemp -l0x0009 -removeonly
    Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}
    GTA2-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2987EE84-C4EE-4FF5-8160-32DE00D6ABC6}\Setup.exe" -l0x9
    HijackThis 2.0.2--> "C:\Program Files\trend micro\HijackThis.exe" /uninstall
    Hot Rod American Street Drag-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{003E4AFB-085E-4599-B53E-A15736948F2A}\setup.exe"
    Internet Service Offers Launcher-->MsiExec.exe /I{CCFF1E13-77A2-4032-8B12-7566982A27DF}
    Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
    Lexmark 1300 Series-->C:\Program Files\Lexmark 1300 Series\Install\x86\Uninst.exe
    LG USB Modem driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\Setup.exe" -l0x9 LG
    Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
    Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
    Microsoft Works-->MsiExec.exe /I{6D52C408-B09A-4520-9B18-475B81D393F1}
    Modem Diagnostic Tool-->MsiExec.exe /I{F63A3748-B93D-4360-9AD4-B064481A5C7B}
    Mozilla Firefox (2.0.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
    MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}
    NetWaiting-->C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe -runfromtemp -l0x0009 -removeonly
    NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
    NVIDIANetworkDiagnostic-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{EFAD4066-CAF3-4B27-9669-12EED352C376}
    Pro Bass Fishing-->C:\Windows\IsUninst.exe -f "C:\Program Files\Pro Bass Fishing\Uninst.isu "
    Product Documentation Launcher-->MsiExec.exe /I{89CEAE14-DD0F-448E-9554-15781EC9DB24}
    QuickTime-->MsiExec.exe /I{6EC874C2-F950-4B7E-A5B7-B1066D6B74AA}
    Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
    Registry Mechanic 8.0--> "C:\Program Files\Registry Mechanic\unins000.exe" /Log
    Roxio Creator Audio-->MsiExec.exe /I{83FFCFC7-88C6-41c6-8752-958A45325C82}
    Roxio Creator BDAV Plugin-->MsiExec.exe /I{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}
    Roxio Creator Copy-->MsiExec.exe /I{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}
    Roxio Creator Data-->MsiExec.exe /I{0D397393-9B50-4c52-84D5-77E344289F87}
    Roxio Creator DE-->MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}
    Roxio Creator Tools-->MsiExec.exe /I{0394CDC8-FABD-4ed8-B104-03393876DFDF}
    Roxio Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
    Roxio MyDVD DE-->MsiExec.exe /I{D639085F-4B6E-4105-9F37-A0DBB023E2FB}
    Roxio Update Manager-->MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
    SceneCaster-->C:\Program Files\SceneCaster\Version 3.11.16\SceneCaster_Uninstall.exe
    Sonic Activation Module-->MsiExec.exe /I{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}
    SpiralFrog Download Manager 0.8.24-->MsiExec.exe /X{95738B44-49CF-4C62-A620-320F1007B14A}
    User's Guides-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}\setup.exe"
    V CAST Music Manager -->C:\PROGRA~1\VERIZO~1\VCASTM~1\Setup.exe /remove /q0
    Yahoo! Install Manager-->C:\Windows\system32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
    Yahoo! Messenger-->C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG

    Securitycenter WMI appears to be broken

    ======Environment variables======

    "ComSpec "=%SystemRoot%\system32\cmd.exe
    "FP_NO_HOST_CHECK "=NO
    "OS "=Windows_NT
    "Path "=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\9.0\DLLShared\;C:\Program Files\QuickTime\QTSystem\
    "PATHEXT "=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
    "PROCESSOR_ARCHITECTURE "=x86
    "TEMP "=%SystemRoot%\TEMP
    "TMP "=%SystemRoot%\TEMP
    "USERNAME "=SYSTEM
    "windir "=%SystemRoot%
    "PROCESSOR_LEVEL "=15
    "PROCESSOR_IDENTIFIER "=x86 Family 15 Model 75 Stepping 2, AuthenticAMD
    "PROCESSOR_REVISION "=4b02
    "NUMBER_OF_PROCESSORS "=2
    "RoxioCentral "=C:\Program Files\Common Files\Roxio Shared\9.0\Roxio Central33\
    "CLASSPATH "=.;C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
    "QTJAVA "=C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip

    -----------------EOF-----------------
     
  2. 2008/11/06
    Aaflac

    Aaflac Inactive

    Joined:
    2008/11/02
    Messages:
    294
    Likes Received:
    1
    Please run HijackThis, Scan
    Check box for:

    O4 - HKCU\..\Run: [MSFox] C:\Users\Dad\AppData\Local\Temp\xxx5370.exe

    Select: Fix checked

    ~~~~
    Now, download ATF Cleaner

    Double-click ATF-Cleaner.exe to run the program
    Click Select All
    Click: Empty Selected

    Click Exit to close the ATF Cleaner program.

    ~~~~
    Next, download Malwarebytes' Anti-Malware (MBAM)
    Save the program to the Desktop
    Close all Windows, including this one. (Print the instructions first)

    On the Desktop, double-click mbam-setup.exe to install the program, and follow the prompts
    • If an update is found, MBAM will download and install the latest.
    • Click OK
    At the main program window
    • Make sure the following is checked: Perform Quick Scan
    • Click: Scan (The scan may take some time to finish, so please be patient.)
    • When the scan completes, a message box appears, click OK

    At the main Scanner screen:
    • Click on: Show Results
    • A screen displaying the malware found shows
    • Make sure everything found is checked, and click: Remove Selected
    • When the disinfection is complete, you may be prompted to Restart. Please do so.
    • When MBAM finishes removing the malware, a log opens in Notepad
    • The log is automatically saved and can be viewed by clicking the Logs tab.
    ~~~~
    Run HijackThis once again to obtain a new log.

    ~~~~
    Please provide the MBAM report, and a new HijackThis log in your reply.
     

  3. to hide this advert.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.