Solved spybot error message: microsoft-windows-redirectedhosts

[Resolved] spybot error message: microsoft-windows-redirectedhosts

Hi!

This is my first post. I have just run spybot and got several messages saying files were not scanned then the qoute "microsoft-windows-redirectedhosts" .

I know this has been addressed with another member, but then a warning was issued in the same post that the solution was for that member and does not apply to everyone. I did a "hijack this" scan and below is the log. I will appreciate any help with this.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:50:22 PM, on 10/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\system32\imapi.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: EndNoteWeb - {82D2E569-25A7-4e4d-9FA3-C5025B4B7912} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\avgtoolbar.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: EndNoteWeb - {945C8270-A848-11D5-A805-00B0D092F45B} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\avgtoolbar.dll
O3 - Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe "
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe "
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKCU\..\Run: [Network Associates Error Reporting Service] C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
O4 - HKUS\S-1-5-19\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

--
End of file - 8908 bytes

 

Welcome to WindowsBBS msallam

I'd like you to run another tool which will give us a better look at things.

• Download RSIT by random/random and save it to your desktop.
• Double click RSIT.exe to start the tool.
• At the disclaimer, please use the drop down box to select 3 months for the file/folder search, then click Continue.
• When the scan completes it will open a log named log.txt maximized, and a log named info.txt minimized.
• Please post the contents of log.txt here in your next reply.

 

spybot error message: microsoft-windows-redirectedhosts

Thanks for your reply. Below is the rsit log. While it was starting to scan it gave me this message:

"System denied write access to the hosts file" then I was asked to run this:

notepad C:\WINDOWS\system32\drivers\etc\hosts

I know this is another issue but do I go ahead and do the above?

Logfile of random's system information tool 1.04 (written by random/random)
Run by adilla at 2008-10-15 20:45:43
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 16 GB (31%) free of 51 GB
Total RAM: 502 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:49:03 PM, on 10/15/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\system32\imapi.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\adilla\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\adilla.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EndNoteWeb - {82D2E569-25A7-4e4d-9FA3-C5025B4B7912} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\avgtoolbar.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: EndNoteWeb - {945C8270-A848-11D5-A805-00B0D092F45B} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\avgtoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe "
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe "
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKCU\..\Run: [Network Associates Error Reporting Service] C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
O4 - HKUS\S-1-5-19\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: iPod Service - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

--
End of file - 8563 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\Windows Defender.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG8\avgssie.dll [2008-09-27 455960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-01-28 1554256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82D2E569-25A7-4e4d-9FA3-C5025B4B7912}]
EndNoteWeb - C:\Program Files\EndNote Web\ENWIEPlug.dll [2006-12-22 249856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 322368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
AVG Security Toolbar - C:\PROGRA~1\AVG\AVG8\avgtoolbar.dll [2008-09-27 2055960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2006-09-27 544032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{945C8270-A848-11D5-A805-00B0D092F45B} - EndNoteWeb - C:\Program Files\EndNote Web\ENWIEPlug.dll [2006-12-22 249856]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2006-09-27 544032]
{A057A204-BACC-4D26-9990-79A187E2698E} - AVG Security Toolbar - C:\PROGRA~1\AVG\AVG8\avgtoolbar.dll [2008-09-27 2055960]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender "=C:\Program Files\Windows Defender\MSASCui.exe [2006-10-05 866584]
"Network Associates Error Reporting Service "=C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe [2003-10-07 147514]
"McAfeeUpdaterUI "=C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe [2004-08-06 139320]
"HP Software Update "=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-17 49152]
"AVG8_TRAY "=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-10-03 1234712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer "=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2008-01-28 2097488]
"ctfmon.exe "=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"WinPatrol "=C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe [2006-07-20 230976]
"Network Associates Error Reporting Service "=C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe [2003-10-07 147514]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS "= "avgrsstx.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-07-19 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} "=C:\PROGRA~1\WINDOW~4\MpShHook.dll [2006-10-05 83224]
"{56F9679E-7826-4C84-81F3-532071A8BCC5} "=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2008-05-26 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername "=0
"legalnoticecaption "=
"legalnoticetext "=
"shutdownwithoutlogon "=1
"undockwithoutlogon "=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun "=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch "=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\sessmgr.exe "= "C:\WINDOWS\system32\sessmgr.exe:*isabledxpsp2res.dll,-22019 "
"C:\Program Files\Last.fm\LastFM.exe "= "C:\Program Files\Last.fm\LastFM.exe:*isabled:LastFM "
"C:\Program Files\MSN Messenger\msncall.exe "= "C:\Program Files\MSN Messenger\msncall.exe:*isabled:Windows Live Messenger 8.0 (Phone) "
"C:\Program Files\Messenger\msmsgs.exe "= "C:\Program Files\Messenger\msmsgs.exe:*isabled:Windows Messenger "
"C:\Program Files\TurboTax\Premier 2006\32bit\ttax.exe "= "C:\Program Files\TurboTax\Premier 2006\32bit\ttax.exe:LocalSubNetisabled:TurboTax "
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe "= "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger "
"C:\Program Files\Yahoo!\Messenger\YServer.exe "= "C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server "
"C:\Program Files\MSN Messenger\msnmsgr.exe "= "C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 "
"C:\Program Files\MSN Messenger\livecall.exe "= "C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) "
"C:\Program Files\iTunes\iTunes.exe "= "C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes "
"%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabledxpsp2res.dll,-22019 "
"%windir%\Network Diagnostic\xpnetdiag.exe "= "%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabledxpsp3res.dll,-20000 "
"C:\Program Files\Skype\Phone\Skype.exe "= "C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype "
"C:\Program Files\AVG\AVG8\avgemc.exe "= "C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe "
"C:\Program Files\AVG\AVG8\avgupd.exe "= "C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabledxpsp2res.dll,-22019 "
"C:\Program Files\MSN Messenger\msncall.exe "= "C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) "
"C:\Program Files\MSN Messenger\msnmsgr.exe "= "C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 "
"C:\Program Files\MSN Messenger\livecall.exe "= "C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) "
"%windir%\Network Diagnostic\xpnetdiag.exe "= "%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabledxpsp3res.dll,-20000 "

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{53e13038-f404-11db-927c-00c09fd11c62}]
shell\AutoRun\command - E:\setupSNK.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6dc9f2e8-6238-11dd-8ef4-00c09fd11c62}]
shell\AutoRun\command - E:\AutoRun.exe


======List of files/folders created in the last 3 months======

2008-10-15 20:45:43 ----D---- C:\rsit
2008-10-12 20:47:43 ----D---- C:\Program Files\Trend Micro
2008-10-12 09:43:24 ----D---- C:\Program Files\Lavasoft
2008-10-08 22:31:56 ----D---- C:\Program Files\Common Files\xing shared
2008-10-08 22:26:50 ----D---- C:\Documents and Settings\adilla\Application Data\Windows Search
2008-09-27 11:30:12 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2008-09-27 11:29:53 ----D---- C:\Documents and Settings\adilla\Application Data\AVGTOOLBAR
2008-09-27 11:29:20 ----D---- C:\Program Files\AVG
2008-09-27 11:29:19 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\avg8
2008-09-11 02:18:18 ----A---- C:\WINDOWS\system32\bcmwlcoi.dll
2008-09-10 06:27:39 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-10 06:26:23 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2008-09-05 20:09:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951618-v2$
2008-09-05 20:08:26 ----D---- C:\Documents and Settings\adilla\Application Data\Windows Desktop Search
2008-09-05 20:07:12 ----D---- C:\Program Files\Windows Desktop Search
2008-09-05 20:06:54 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2008-09-05 20:06:43 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2008-09-01 22:48:06 ----D---- C:\Program Files\Unlocker
2008-08-31 10:56:17 ----D---- C:\Documents and Settings\adilla\Application Data\IObit
2008-08-30 10:00:56 ----D---- C:\Program Files\IObit
2008-08-25 04:41:18 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2008-08-24 12:04:28 ----D---- C:\WINDOWS\Prefetch
2008-08-24 11:54:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-08-24 11:54:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-08-24 11:54:05 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-08-24 11:53:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-08-24 11:53:44 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-08-24 11:53:32 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2008-08-24 11:53:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-08-24 11:53:12 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-08-24 11:53:03 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-08-24 11:52:51 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-08-24 11:45:11 ----D---- C:\WINDOWS\system32\scripting
2008-08-24 11:45:08 ----D---- C:\WINDOWS\l2schemas
2008-08-24 11:45:06 ----D---- C:\WINDOWS\system32\en
2008-08-24 11:45:06 ----D---- C:\WINDOWS\system32\bits
2008-08-24 11:38:45 ----D---- C:\WINDOWS\ServicePackFiles
2008-08-24 11:24:22 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2008-08-24 11:24:20 ----D---- C:\WINDOWS\EHome
2008-08-24 10:32:26 ----N---- C:\WINDOWS\system32\wlanapi.dll
2008-08-24 10:32:11 ----N---- C:\WINDOWS\system32\tspkg.dll
2008-08-24 10:32:02 ----N---- C:\WINDOWS\system32\spupdwxp.exe
2008-08-24 10:31:59 ----A---- C:\WINDOWS\system32\spdwnwxp.exe
2008-08-24 10:31:56 ----N---- C:\WINDOWS\system32\slserv.exe
2008-08-24 10:31:56 ----N---- C:\WINDOWS\system32\slrundll.exe
2008-08-24 10:31:56 ----N---- C:\WINDOWS\system32\slgen.dll
2008-08-24 10:31:56 ----N---- C:\WINDOWS\system32\slextspk.dll
2008-08-24 10:31:56 ----N---- C:\WINDOWS\system32\slcoinst.dll
2008-08-24 10:31:56 ----N---- C:\WINDOWS\slrundll.exe
2008-08-24 10:31:51 ----N---- C:\WINDOWS\system32\setupn.exe
2008-08-24 10:31:47 ----N---- C:\WINDOWS\system32\s3gnb.dll
2008-08-24 10:31:42 ----N---- C:\WINDOWS\system32\rasqec.dll
2008-08-24 10:31:41 ----N---- C:\WINDOWS\system32\qutil.dll
2008-08-24 10:31:39 ----N---- C:\WINDOWS\system32\qcliprov.dll
2008-08-24 10:31:39 ----N---- C:\WINDOWS\system32\qagentrt.dll
2008-08-24 10:31:39 ----N---- C:\WINDOWS\system32\qagent.dll
2008-08-24 10:31:31 ----N---- C:\WINDOWS\system32\onex.dll
2008-08-24 10:31:26 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2008-08-24 10:31:17 ----N---- C:\WINDOWS\system32\napstat.exe
2008-08-24 10:31:16 ----N---- C:\WINDOWS\system32\napmontr.dll
2008-08-24 10:31:16 ----N---- C:\WINDOWS\system32\napipsec.dll
2008-08-24 10:31:16 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2008-08-24 10:31:11 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2008-08-24 10:31:11 ----N---- C:\WINDOWS\system32\mssha.dll
2008-08-24 10:30:48 ----N---- C:\WINDOWS\system32\mmcperf.exe
2008-08-24 10:30:48 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2008-08-24 10:30:48 ----N---- C:\WINDOWS\system32\mmcex.dll
2008-08-24 10:30:48 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2008-08-24 10:30:25 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2008-08-24 10:30:25 ----N---- C:\WINDOWS\system32\kmsvc.dll
2008-08-24 10:30:24 ----N---- C:\WINDOWS\system32\kbdpash.dll
2008-08-24 10:30:23 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2008-08-24 10:30:23 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2008-08-24 10:30:23 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2008-08-24 10:30:07 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2008-08-24 10:29:56 ----N---- C:\WINDOWS\system32\faxpatch.exe
2008-08-24 10:29:56 ----A---- C:\WINDOWS\003071_.tmp
2008-08-24 10:29:53 ----N---- C:\WINDOWS\system32\eapsvc.dll
2008-08-24 10:29:53 ----N---- C:\WINDOWS\system32\eapqec.dll
2008-08-24 10:29:53 ----N---- C:\WINDOWS\system32\eappprxy.dll
2008-08-24 10:29:53 ----N---- C:\WINDOWS\system32\eapphost.dll
2008-08-24 10:29:53 ----N---- C:\WINDOWS\system32\eappgnui.dll
2008-08-24 10:29:53 ----N---- C:\WINDOWS\system32\eappcfg.dll
2008-08-24 10:29:53 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2008-08-24 10:29:52 ----N---- C:\WINDOWS\system32\eapolqec.dll
2008-08-24 10:29:48 ----N---- C:\WINDOWS\system32\dot3ui.dll
2008-08-24 10:29:48 ----N---- C:\WINDOWS\system32\dot3svc.dll
2008-08-24 10:29:48 ----N---- C:\WINDOWS\system32\dot3msm.dll
2008-08-24 10:29:47 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2008-08-24 10:29:47 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2008-08-24 10:29:47 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2008-08-24 10:29:47 ----N---- C:\WINDOWS\system32\dot3api.dll
2008-08-24 10:29:45 ----N---- C:\WINDOWS\system32\dimsroam.dll
2008-08-24 10:29:45 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2008-08-24 10:29:44 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2008-08-24 10:29:39 ----N---- C:\WINDOWS\system32\credssp.dll
2008-08-24 10:29:31 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2008-08-24 10:29:30 ----N---- C:\WINDOWS\system32\azroles.dll
2008-08-24 10:29:28 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2008-08-24 10:29:28 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2008-08-24 10:29:26 ----N---- C:\WINDOWS\system32\ati3duag.dll
2008-08-24 10:29:26 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2008-08-24 10:29:26 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2008-08-24 10:29:26 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2008-08-24 10:29:26 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2008-08-16 20:55:23 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2008-08-16 20:55:12 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2008-08-16 20:54:59 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$
2008-08-16 20:53:11 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2008-08-16 20:49:11 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-08-16 20:48:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2008-08-16 20:46:09 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2008-08-13 06:56:40 ----A---- C:\WINDOWS\MusicRip.ini
2008-08-13 06:56:24 ----D---- C:\Documents and Settings\adilla\Application Data\ArcSoft
2008-08-13 06:52:03 ----D---- C:\Program Files\Common Files\ArcSoft
2008-08-13 06:52:02 ----D---- C:\Program Files\ArcSoft
2008-08-13 06:52:02 ----A---- C:\WINDOWS\PCDLIB32.DLL
2008-08-04 11:19:33 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
2008-08-04 11:11:40 ----D---- C:\Program Files\Nawras Internet-E220
2008-07-30 12:33:27 ----D---- C:\Program Files\Common Files\Adobe AIR
2008-07-30 12:31:18 ----D---- C:\Documents and Settings\adilla\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2008-07-30 12:10:31 ----D---- C:\Program Files\NOS
2008-07-30 12:10:31 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\NOS

======List of files/folders modified in the last 3 months======

2008-10-15 20:48:23 ----D---- C:\Program Files\Mozilla Firefox
2008-10-15 20:29:04 ----D---- C:\WINDOWS\Temp
2008-10-15 20:28:51 ----D---- C:\WINDOWS
2008-10-14 00:24:03 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-10-13 21:02:00 ----SHD---- C:\Config.Msi
2008-10-13 21:01:58 ----SHD---- C:\WINDOWS\Installer
2008-10-13 17:43:53 ----D---- C:\WINDOWS\system32\CatRoot2
2008-10-13 17:43:50 ----SD---- C:\WINDOWS\Tasks
2008-10-12 20:47:43 ----RD---- C:\Program Files
2008-10-12 09:45:20 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft
2008-10-12 09:44:49 ----D---- C:\WINDOWS\system32\drivers
2008-10-12 09:43:23 ----D---- C:\WINDOWS\system32
2008-10-12 09:42:20 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2008-10-10 02:01:41 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
2008-10-09 21:17:45 ----AD---- C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
2008-10-09 21:17:24 ----D---- C:\Program Files\SpywareBlaster
2008-10-08 22:31:56 ----D---- C:\Program Files\Common Files
2008-10-08 22:31:28 ----D---- C:\Program Files\Common Files\Real
2008-10-08 22:31:12 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2008-10-08 22:29:45 ----A---- C:\WINDOWS\system32\pndx5032.dll
2008-10-08 22:29:44 ----A---- C:\WINDOWS\system32\pndx5016.dll
2008-10-08 22:29:21 ----A---- C:\WINDOWS\system32\msvcr71.dll
2008-10-08 22:29:20 ----A---- C:\WINDOWS\system32\msvcp71.dll
2008-10-08 22:02:02 ----D---- C:\Documents and Settings\adilla\Application Data\Real
2008-10-04 13:23:39 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-10-03 20:03:43 ----HD---- C:\WINDOWS\inf
2008-09-27 11:29:02 ----D---- C:\WINDOWS\WinSxS
2008-09-27 11:29:02 ----D---- C:\Program Files\Common Files\Microsoft Shared
2008-09-23 22:50:23 ----D---- C:\WINDOWS\system32\config
2008-09-23 22:49:33 ----D---- C:\WINDOWS\system32\wbem
2008-09-23 22:49:32 ----D---- C:\WINDOWS\Registration
2008-09-23 22:47:52 ----A---- C:\WINDOWS\win.ini
2008-09-23 22:47:52 ----A---- C:\WINDOWS\system.ini
2008-09-10 06:50:42 ----D---- C:\WINDOWS\Debug
2008-09-05 21:06:54 ----D---- C:\WINDOWS\AppPatch
2008-09-05 20:09:32 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-09-05 20:09:31 ----D---- C:\WINDOWS\Help
2008-09-05 20:08:46 ----HD---- C:\WINDOWS\$hf_mig$
2008-09-05 20:07:49 ----SD---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft
2008-09-05 20:07:16 ----D---- C:\WINDOWS\system32\en-US
2008-09-05 20:07:12 ----D---- C:\WINDOWS\system32\GroupPolicy
2008-09-05 18:32:46 ----D---- C:\WINDOWS\system32\CatRoot
2008-08-26 16:28:12 ----A---- C:\WINDOWS\system32\MRT.exe
2008-08-24 12:03:44 ----D---- C:\WINDOWS\system32\Setup
2008-08-24 12:03:40 ----RSD---- C:\WINDOWS\Fonts
2008-08-24 11:52:53 ----D---- C:\Program Files\Messenger
2008-08-24 11:52:17 ----D---- C:\WINDOWS\security
2008-08-24 11:45:48 ----D---- C:\WINDOWS\network diagnostic
2008-08-24 11:45:47 ----D---- C:\WINDOWS\ime
2008-08-24 11:45:13 ----D---- C:\WINDOWS\system32\usmt
2008-08-24 11:45:06 ----D---- C:\WINDOWS\PeerNet
2008-08-24 11:45:05 ----D---- C:\Program Files\Movie Maker
2008-08-24 11:38:33 ----D---- C:\WINDOWS\system32\Restore
2008-08-24 11:38:33 ----D---- C:\WINDOWS\system32\npp
2008-08-24 11:38:29 ----D---- C:\WINDOWS\msagent
2008-08-24 11:38:26 ----D---- C:\WINDOWS\srchasst
2008-08-24 11:38:21 ----D---- C:\Program Files\NetMeeting
2008-08-24 11:38:18 ----D---- C:\WINDOWS\system32\Com
2008-08-24 11:38:12 ----D---- C:\Program Files\Windows Media Player
2008-08-24 11:38:11 ----D---- C:\Program Files\Windows NT
2008-08-24 11:38:10 ----D---- C:\Program Files\Outlook Express
2008-08-24 11:38:04 ----D---- C:\Program Files\Common Files\System
2008-08-24 11:37:22 ----D---- C:\WINDOWS\system32\oobe
2008-08-24 11:37:19 ----D---- C:\WINDOWS\system
2008-08-24 11:29:13 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-08-23 09:26:37 ----D---- C:\Program Files\Microsoft Silverlight
2008-08-16 20:47:52 ----D---- C:\Program Files\Internet Explorer
2008-08-16 20:47:33 ----D---- C:\WINDOWS\ie7updates
2008-08-13 06:59:53 ----D---- C:\WINDOWS\repair
2008-08-13 06:52:01 ----HD---- C:\Program Files\InstallShield Installation Information
2008-08-12 22:38:35 ----D---- C:\Program Files\Jewel Quest 2
2008-08-01 08:19:48 ----D---- C:\Documents and Settings\adilla\Application Data\Mozilla
2008-07-30 12:31:48 ----D---- C:\Documents and Settings\All Users.WINDOWS\Application Data\Adobe
2008-07-30 12:31:16 ----D---- C:\Documents and Settings\adilla\Application Data\Adobe
2008-07-30 12:28:57 ----D---- C:\Program Files\Adobe
2008-07-30 12:26:20 ----D---- C:\Program Files\Common Files\Adobe
2008-07-18 22:10:48 ----A---- C:\WINDOWS\system32\cdm.dll
2008-07-18 22:10:42 ----A---- C:\WINDOWS\system32\wuauclt.exe
2008-07-18 22:10:40 ----A---- C:\WINDOWS\system32\wups2.dll
2008-07-18 22:10:24 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2008-07-18 22:10:20 ----A---- C:\WINDOWS\system32\wups.dll
2008-07-18 22:09:46 ----A---- C:\WINDOWS\system32\wucltui.dll
2008-07-18 22:09:44 ----A---- C:\WINDOWS\system32\wuweb.dll
2008-07-18 22:09:44 ----A---- C:\WINDOWS\system32\wuapi.dll
2008-07-18 22:09:42 ----A---- C:\WINDOWS\system32\wuaueng.dll
2008-07-18 22:09:42 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2008-07-18 22:08:34 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2008-07-18 22:07:34 ----A---- C:\WINDOWS\system32\mucltui.dll
2008-07-18 22:07:32 ----A---- C:\WINDOWS\system32\muweb.dll
2008-07-18 22:07:32 ----A---- C:\WINDOWS\system32\mucltui.dll.mui

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-09-27 97928]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-09-27 26824]
R1 eabfiltr;EABFiltr; \??\C:\WINDOWS\system32\drivers\EABFiltr.sys []
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 NaiAvTdi1;NaiAvTdi1; C:\WINDOWS\system32\drivers\mvstdi5x.sys [2005-01-14 58464]
R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2004-05-05 4228]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
R2 AvgTdiX;AVG Free8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2008-09-27 76040]
R2 MCSTRM;MCSTRM; C:\WINDOWS\system32\drivers\MCSTRM.sys [2007-03-10 8413]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-16 13059]
R2 SVKP;SVKP; \??\C:\WINDOWS\system32\SVKP.sys []
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2008-09-11 1386624]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camc6aud.sys [2006-03-21 38144]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camc6hal.sys [2006-03-21 349696]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 EntDrv51;EntDrv51; \??\C:\WINDOWS\system32\drivers\EntDrv51.sys []
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-12-14 1038208]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2004-12-14 207232]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-07-19 1049180]
R3 NaiAvFilter1;NaiAvFilter1; C:\WINDOWS\system32\drivers\naiavf5x.sys [2005-01-14 108480]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2008-02-25 105088]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-09-15 213696]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2006-07-06 168448]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-12-14 703232]
S1 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2008-04-13 31744]
S2 pciinfo;HP Pci Information; \??\C:\DOCUME~1\adilla\LOCALS~1\Temp\HPISPz\hpdom\pciinfo.sys []
S3 BCM42RLY;BCM42RLY; \??\C:\WINDOWS\System32\BCM42RLY.SYS []
S3 eabusb;eabusb; \??\C:\WINDOWS\system32\drivers\eabusb.sys []
S3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys []
S3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2007-04-19 88960]
S3 Jukebox3;Jukebox3; C:\WINDOWS\system32\DRIVERS\ctpdusb.sys [2004-09-30 16880]
S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
S3 NETGEAR_WG511_SERVICE;NETGEAR WG511T Wireless Adapter Service; C:\WINDOWS\system32\DRIVERS\wg511nd5.sys [2004-08-13 395840]
S3 NTProcDrv;Process creation detector for NT.; \??\C:\Program Files\EndTask\EndTask Pro\NtProcDrv.sys []
S3 RT73;Linksys Home Wireless-G USB Adapter Driver; C:\WINDOWS\system32\DRIVERS\rt73.sys [2005-11-24 245248]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS []
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys []
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-10-12 611664]
R2 avg8emc;AVG Free8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-09-27 875288]
R2 avg8wd;AVG Free8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-09-27 231704]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.EXE [1999-12-12 44032]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2005-12-22 98304]
R2 McAfeeFramework;McAfee Framework Service; C:\Program Files\Network Associates\Common Framework\FrameworkService.exe [2004-08-06 102463]
R2 McShield;Network Associates McShield; C:\Program Files\Network Associates\VirusScan\Mcshield.exe [2004-09-22 221191]
R2 McTaskManager;Network Associates Task Manager; C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe [2004-09-22 28672]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-10-05 13592]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
S3 hpqwmi;HP WMI Interface; C:\Program Files\HPQ\SHARED\HPQWMI.exe [2005-10-11 102400]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe []
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S4 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
S4 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]

-----------------EOF-----------------

I appreciate this. Thanks

 

Double check the contents of your hosts file. Click Start>Run and type or paste that command.

notepad C:\WINDOWS\system32\drivers\etc\hosts

Then hit enter. A default hosts file will look like the one I've included in the quote box below.

If your's contains more than that, copy it and post it here (unless you know that you've installed a custom hosts file. I'll be reviewing your log while you check.

 

Hi

The informtation was the same except for several additional lines which I've pasted below:Its not allowing me to paste all of the lines as they exceed the 55000 characters limit:

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 123topsearch.com
127.0.0.1 www.123topsearch.com
127.0.0.1 132.com
127.0.0.1 www.132.com
127.0.0.1 www.136136.net
127.0.0.1 136136.net
127.0.0.1 163ns.com
127.0.0.1 www.163ns.com
127.0.0.1 171203.com
127.0.0.1 17-plus.com
127.0.0.1 1800searchonline.com
127.0.0.1 www.1800searchonline.com
127.0.0.1 180searchassistant.com
127.0.0.1 www.180searchassistant.com
127.0.0.1 www.180solutions.com
127.0.0.1 180solutions.com
127.0.0.1 181.365soft.info
127.0.0.1 www.181.365soft.info
127.0.0.1 www.1987324.com
127.0.0.1 1987324.com
127.0.0.1 1clickpcfix.com
127.0.0.1 www.1clickpcfix.com
127.0.0.1 1-domains-registrations.com
127.0.0.1 www.1-domains-registrations.com
127.0.0.1 www.1sexparty.com
127.0.0.1 1sexparty.com
127.0.0.1 www.1stantivirus.com
127.0.0.1 1stantivirus.com
127.0.0.1 www.1stpagehere.com
127.0.0.1 1stpagehere.com
127.0.0.1 www.1stsearchportal.com
127.0.0.1 1stsearchportal.com
127.0.0.1 2.82211.net
127.0.0.1 www.2006ooo.com
127.0.0.1 2006ooo.com
127.0.0.1 www.2007-download.com
127.0.0.1 2007-download.com
127.0.0.1 2008search-destroy.com
127.0.0.1 www.2008search-destroy.com
127.0.0.1 2008-search-destroy.com
127.0.0.1 www.2008-search-destroy.com
127.0.0.1 www.2020search.com
127.0.0.1 2020search.com
127.0.0.1 20x2p.com
127.0.0.1 www.24.365soft.info
127.0.0.1 24.365soft.info
127.0.0.1 24-7pharmacy.info
127.0.0.1 www.24-7pharmacy.info
127.0.0.1 24-7searching-and-more.com
127.0.0.1 www.24-7searching-and-more.com
127.0.0.1 www.24teen.com
127.0.0.1 24teen.com
127.0.0.1 2ndpower.com
127.0.0.1 www.2search.com
127.0.0.1 2search.com
127.0.0.1 www.2search.org
127.0.0.1 2search.org

This was just part of it.

Thanks

 

Yep, that's a custom hosts file, and the cause of the Spybot message. Have a look at the following two links and see if you better understand.

http://forums.spybot.info/showthread.php?t=7820
http://forums.spybot.info/showthread.php?t=9114