TheTechGuide Forum

General Category => Tech Clinic => Topic started by: indefatigablej on October 05, 2008, 01:55:32 PM

Title: Win32Agent Removal - Avast/HijackThis Log
Post by: indefatigablej on October 05, 2008, 01:55:32 PM

Hi, the other day I contracted this Trojan, and Avast has been unable to remove it. So far nothing adverse has happened to my computer, hoping to keep it that way! Thanks in advance for your help, and here is the relevent data from Avast's log:

10/2/2008 4:29:49 PM SYSTEM 1876 Sign of "VBS:Malware-gen" has been found in "C:\a.bat" file.
10/2/2008 4:31:14 PM SYSTEM 1876 Sign of "VBS:Malware-gen" has been found in "C:\a.bat" file.
10/3/2008 12:33:50 PM 1860 Sign of "VBS:Malware-gen" has been found in "C:\a.bat" file.
10/3/2008 12:34:04 PM 1860 Sign of "VBS:Malware-gen" has been found in "C:\DOCUME~1\JACKS~1.FIS\LOCALS~1\Temp\1.reg" file.
10/3/2008 12:59:51 PM 1876 Sign of "VBS:Malware-gen" has been found in "C:\a.bat" file.
10/3/2008 1:00:03 PM 1876 Sign of "VBS:Malware-gen" has been found in "C:\DOCUME~1\JACKS~1.FIS\LOCALS~1\Temp\1.reg" file.
10/3/2008 2:36:45 PM 1876 Sign of "Win32:Sality-gen" has been found in "D:\MediaMonkey_3.0.3.1183\MediaMonkey.3.0.2.1134-KeyGen_CiM\Keygen.exe" file.
10/3/2008 5:20:37 PM 1384 Sign of "Win32:Comet-B [Trj]" has been found in "C:\System Volume Information\_restore{BFAA719B-281F-45B6-9E39-9D4BB578C2A4}\RP118\A0023853.dll" file.
10/3/2008 11:12:56 PM 1384 Sign of "VBS:Malware-gen" has been found in "C:\System Volume Information\_restore{BFAA719B-281F-45B6-9E39-9D4BB578C2A4}\RP190\A0047876.bat" file.
10/3/2008 11:13:12 PM 1384 Sign of "VBS:Malware-gen" has been found in "C:\System Volume Information\_restore{BFAA719B-281F-45B6-9E39-9D4BB578C2A4}\RP190\A0047884.bat" file.
10/4/2008 12:34:35 AM 1384 Sign of "Win32:Sality-gen" has been found in "D:\RECYCLER\S-1-5-21-3426053798-2546815537-748918954-1005\Dd297.1183\MediaMonkey.3.0.2.1134-KeyGen_CiM.rar\Keygen.exe" file.
10/4/2008 9:54:01 PM
1876 Sign of "Win32:Agent-AAGI [Trj]" has been found in "C:\Documents and Settings\*IDENTITY*\Local Settings\Temporary Internet Files\Content.IE5\1I2FNQ9D\MAIN[1].exe" file.
10/5/2008 4:30:50 AM 1876 Sign of "Win32:Agent-AAGI [Trj]" has been found in "C:\WINDOWS\system32\rtrhthrtrb.exe" file.

And here is the HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:11:50 PM, on 10/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\system.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HPQ\SHARED\HPQWMI.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Sprint music manager\MEMonitor.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\MEDIAM~1\MEDIAM~2.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.Email Removed.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 (http://\"http://go.microsoft.com/fwlink/?LinkId=69157\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 (http://\"http://go.microsoft.com/fwlink/?LinkId=54896\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 (http://\"http://go.microsoft.com/fwlink/?LinkId=54896\")
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 (http://\"http://go.microsoft.com/fwlink/?LinkId=69157\")
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Java] system.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\RunServices: [Java] system.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - Startup: MEMonitor.lnk = C:\Program Files\Sprint music manager\MEMonitor.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q405&bd=pavilion&pf=laptop
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

--
End of file - 10683 bytes

Title: Win32Agent Removal - Avast/HijackThis Log
Post by: guestolo on October 05, 2008, 02:00:33 PM

Can you do the following
Download
[color=\"red\"]SDFix[/color] (http://\"http://downloads.andymanchesta.com/RemovalTools/SDFix.exe\")
Save it to your desktop

Reboot your computer in Safe Mode by doing the following :

Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.

In Safe mode
Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)
Go to START>>My Computer>>Double click to open the C:\ folder

Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt

Post that Report from SDFix please

In addition, Post a fresh hijackthis log

Title: Win32Agent Removal - Avast/HijackThis Log
Post by: indefatigablej on October 05, 2008, 03:21:16 PM

Thanks for the quick reply man! Should I bother doinganother thorough Avast scan at this point?Here's the SDfix report:Microsoft Windows XP [Version 5.1.2600]Running From: C:\SDFixChecking Services :Restoring Default Security ValuesRestoring Default Hosts FileRebootingChecking Files : Trojan Files Found:C:\WINDOWS\system32\system.exe - Deleted Removing Temp FilesADS Check : Final Check :catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.netRootkit scan 2008-10-05 16:21:14Windows 5.1.2600 Service Pack 2 NTFSscanning hidden processes ...scanning hidden services & system hive ...scanning hidden registry entries ...scanning hidden files ...scan completed successfullyhidden processes: 0hidden services: 0hidden files: 0Remaining Services : Authorized Application Key Export:[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019""C:\\Program Files\\EarthLink TotalAccess\\TaskPanl.exe"="C:\\Program Files\\EarthLink TotalAccess\\TaskPanl.exe:*:Enabled:Earthlink""C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL""C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL""C:\\Program Files\\America Online 9.0\\wEmail Removedexe"="C:\\Program Files\\America Online 9.0\\wEmail Removedexe:*:Enabled:America Online 9.0""C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger""C:\\WINDOWS\\system32\\usmt\\migwiz.exe"="C:\\WINDOWS\\system32\\usmt\\migwiz.exe:*:Enabled:Files and Settings Transfer Wizard""C:\\Program Files\\Laplink\\PCsync\\SFTHost.exe"="C:\\Program Files\\Laplink\\PCsync\\SFTHost.exe:*:Enabled:PCsync Host Module""C:\\Program Files\\SoulseekNS\\slsk.exe"="C:\\Program Files\\SoulseekNS\\slsk.exe:*:Enabled:SoulSeek""C:\\Program Files\\BitLord2\\BitLord.exe"="C:\\Program Files\\BitLord2\\BitLord.exe:*:Enabled:Bitlord2""C:\\Program Files\\BitLord\\BitLord.exe"="C:\\Program Files\\BitLord\\BitLord.exe:*:Enabled:BitLord""C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe:*:Enabled:Yahoo! Messenger""C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"="C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe:*:Enabled:Yahoo! FT Server""C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour""C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019""C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL""C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL""C:\\Program Files\\America Online 9.0\\wEmail Removedexe"="C:\\Program Files\\America Online 9.0\\wEmail Removedexe:*:Enabled:America Online 9.0"Remaining Files :File Backups: - C:\SDFix\backups\backups.zipFiles with Hidden Attributes :Tue 27 Feb 2007 146,432 ..SHR --- "C:\Program Files\Sprint music manager\Setup.exe"Thu 22 Feb 2007 53,248 A.SHR --- "C:\Program Files\Sprint music manager\_Setupx.dll"Fri 3 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00052933.DLL"Fri 3 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00052934.dll"Fri 3 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00052935.DLL"Fri 3 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00052936.DLL"Fri 3 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00052937.dll"Fri 3 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00052938.dll"Fri 3 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00052939.DLL"Fri 3 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00052940.DLL"Fri 3 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00052941.DLL"Fri 3 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00052942.DLL"Fri 3 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00052943.DLL"Fri 3 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00052944.DLL"Fri 3 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00052945.DLL"Fri 3 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00052946.DLL"Fri 3 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00052947.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00052948.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00052949.DLL"Fri 3 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00052950.DLL"Fri 3 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00052951.DLL"Fri 3 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00052952.DLL"Fri 3 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00052953.DLL"Fri 3 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00052954.DLL"Fri 3 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00052955.DLL"Fri 3 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00052956.DLL"Fri 3 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00052957.DLL"Fri 3 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00052958.DLL"Fri 3 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00052964.DLL"Fri 3 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00052965.dll"Fri 3 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00052966.DLL"Fri 3 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00052967.DLL"Fri 3 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00052968.dll"Fri 3 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00052969.dll"Fri 3 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00052970.DLL"Fri 3 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00052971.DLL"Fri 3 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00052972.DLL"Fri 3 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00052973.DLL"Fri 3 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00052974.DLL"Fri 3 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00052975.DLL"Fri 3 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00052976.DLL"Fri 3 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00052977.DLL"Fri 3 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00052978.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00052979.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00052980.DLL"Fri 3 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00052981.DLL"Fri 3 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00052982.DLL"Fri 3 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00052983.DLL"Fri 3 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00052984.DLL"Fri 3 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00052985.DLL"Fri 3 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00052986.DLL"Fri 3 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00052987.DLL"Fri 3 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00052988.DLL"Fri 3 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00052989.DLL"Fri 3 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00053630.DLL"Fri 3 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00053631.dll"Fri 3 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00053632.DLL"Fri 3 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00053633.DLL"Fri 3 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00053634.dll"Fri 3 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00053635.dll"Fri 3 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00053636.DLL"Fri 3 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00053637.DLL"Fri 3 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00053638.DLL"Fri 3 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00053639.DLL"Fri 3 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00053640.DLL"Fri 3 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00053641.DLL"Fri 3 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00053642.DLL"Fri 3 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00053643.DLL"Fri 3 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00053644.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00053645.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00053646.DLL"Fri 3 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00053647.DLL"Fri 3 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00053648.DLL"Fri 3 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00053649.DLL"Fri 3 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00053650.DLL"Fri 3 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00053651.DLL"Fri 3 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00053652.DLL"Fri 3 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00053653.DLL"Fri 3 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00053654.DLL"Fri 3 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00053655.DLL"Fri 3 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00053692.DLL"Fri 3 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00053693.dll"Fri 3 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00053694.DLL"Fri 3 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00053695.DLL"Fri 3 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00053696.dll"Fri 3 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00053697.dll"Fri 3 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00053698.DLL"Fri 3 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00053699.DLL"Fri 3 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00053700.DLL"Fri 3 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00053701.DLL"Fri 3 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00053702.DLL"Fri 3 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00053703.DLL"Fri 3 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00053704.DLL"Fri 3 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00053705.DLL"Fri 3 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00053706.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00053707.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00053708.DLL"Fri 3 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00053709.DLL"Fri 3 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00053710.DLL"Fri 3 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00053711.DLL"Fri 3 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00053712.DLL"Fri 3 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00053713.DLL"Fri 3 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00053714.DLL"Fri 3 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00053715.DLL"Fri 3 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00053716.DLL"Fri 3 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00053717.DLL"Fri 3 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00053775.DLL"Fri 3 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00053776.dll"Fri 3 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00053777.DLL"Fri 3 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00053778.DLL"Fri 3 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00053779.dll"Fri 3 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00053780.dll"Fri 3 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00053781.DLL"Fri 3 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00053782.DLL"Fri 3 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00053783.DLL"Fri 3 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00053784.DLL"Fri 3 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00053785.DLL"Fri 3 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00053786.DLL"Fri 3 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00053787.DLL"Fri 3 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00053788.DLL"Fri 3 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00053789.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00053790.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00053791.DLL"Fri 3 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00053792.DLL"Fri 3 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00053793.DLL"Fri 3 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00053794.DLL"Fri 3 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00053795.DLL"Fri 3 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00053796.DLL"Fri 3 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00053797.DLL"Fri 3 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00053798.DLL"Fri 3 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00053799.DLL"Fri 3 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00053800.DLL"Fri 3 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00053804.DLL"Fri 3 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00053805.dll"Fri 3 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00053806.DLL"Fri 3 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00053807.DLL"Fri 3 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00053808.dll"Fri 3 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00053809.dll"Fri 3 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00053810.DLL"Fri 3 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00053811.DLL"Fri 3 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00053812.DLL"Fri 3 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00053813.DLL"Fri 3 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00053814.DLL"Fri 3 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00053815.DLL"Fri 3 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00053816.DLL"Fri 3 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00053817.DLL"Fri 3 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00053818.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00053819.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00053820.DLL"Fri 3 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00053821.DLL"Fri 3 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00053822.DLL"Fri 3 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00053823.DLL"Fri 3 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00053824.DLL"Fri 3 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00053825.DLL"Fri 3 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00053826.DLL"Fri 3 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00053827.DLL"Fri 3 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00053828.DLL"Fri 3 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00053829.DLL"Fri 3 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00053912.DLL"Fri 3 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00053913.dll"Fri 3 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00053914.DLL"Fri 3 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00053915.DLL"Fri 3 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00053916.dll"Fri 3 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00053917.dll"Fri 3 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00053918.DLL"Fri 3 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00053919.DLL"Fri 3 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00053920.DLL"Fri 3 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00053921.DLL"Fri 3 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00053922.DLL"Fri 3 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00053923.DLL"Fri 3 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00053924.DLL"Fri 3 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00053925.DLL"Fri 3 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00053926.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00053927.DLL"Fri 3 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00053928.DLL"Fri 3 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00053929.DLL"Fri 3 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00053930.DLL"Fri 3 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00053931.DLL"Fri 3 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00053932.DLL"Fri 3 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00053933.DLL"Fri 3 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00053934.DLL"Fri 3 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00053935.DLL"Fri 3 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00053936.DLL"Fri 3 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00053937.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055573.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055574.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055575.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055576.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055577.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055578.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055579.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055580.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055581.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055582.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055583.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055584.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055585.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055586.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055587.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055588.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055589.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055590.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055591.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055592.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055593.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055594.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055595.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055596.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055597.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055598.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055659.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055660.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055661.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055662.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055663.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055664.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055665.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055666.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055667.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055668.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055669.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055670.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055671.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055672.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055673.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055674.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055675.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055676.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055677.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055678.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055679.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055680.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055681.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055682.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055683.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055684.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055688.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055689.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055690.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055691.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055692.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055693.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055694.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055695.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055696.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055697.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055698.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055699.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055700.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055701.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055702.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055703.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055704.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055705.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055706.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055707.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055708.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055709.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055710.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055711.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055712.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055713.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055718.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055719.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055720.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055721.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055722.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055723.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055724.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055725.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055726.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055727.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055728.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055729.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055730.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055731.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055732.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055733.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055734.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055735.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055736.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055737.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055738.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055739.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055740.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055741.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055742.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055743.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055746.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055747.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055748.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055749.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055750.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055751.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055752.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055753.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055754.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055755.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055756.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055757.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055758.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055759.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055760.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055761.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055762.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055763.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055764.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055765.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055766.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055767.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055768.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055769.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055770.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055771.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055816.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055817.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055818.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055819.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055820.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055821.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055822.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055823.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055824.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055825.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055826.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055827.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055828.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055829.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055830.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055831.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055832.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055833.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055834.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055835.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055836.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055837.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055838.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055839.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055840.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055841.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055846.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055847.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055848.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055849.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055850.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055851.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055852.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055853.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055854.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055855.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055856.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055857.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055858.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055859.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055860.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055861.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055862.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055863.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055864.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055865.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055866.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055867.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055868.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055869.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055870.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055871.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055877.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055878.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055879.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055880.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055881.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055882.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055883.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055884.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055885.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055886.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055887.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055888.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055889.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055890.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055891.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055892.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055893.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055894.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055895.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055896.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055897.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055898.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055899.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055900.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055901.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055902.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055906.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055907.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055908.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055909.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055910.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055911.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055912.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055913.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055914.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055915.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055916.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055917.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055918.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055919.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055920.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055921.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055922.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055923.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055924.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055925.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055926.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055927.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055928.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055929.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055930.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055931.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055935.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055936.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055937.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055938.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055939.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055940.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055941.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055942.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055943.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055944.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055945.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055946.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055947.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055948.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055949.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055950.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055951.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055952.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055953.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055954.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055955.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055956.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055957.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055958.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055959.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055960.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055965.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055966.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055967.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055968.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055969.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055970.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00055971.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00055972.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00055973.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00055974.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00055975.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00055976.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00055977.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00055978.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00055979.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055980.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00055981.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00055982.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00055983.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00055984.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00055985.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00055986.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00055987.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00055988.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00055989.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00055990.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00055994.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00055995.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00055996.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00055997.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00055998.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00055999.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00056000.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00056001.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00056002.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00056003.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00056004.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00056005.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00056006.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00056007.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00056008.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00056009.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00056010.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00056011.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00056012.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00056013.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00056014.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00056015.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00056016.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00056017.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00056018.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00056019.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00056023.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00056024.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00056025.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00056026.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00056027.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00056028.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00056029.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00056030.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00056031.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00056032.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00056033.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00056034.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00056035.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00056036.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00056037.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00056038.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00056039.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00056040.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00056041.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00056042.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00056043.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00056044.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00056045.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00056046.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00056047.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00056048.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00056053.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00056054.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00056055.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00056056.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00056057.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00056058.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00056059.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00056060.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00056061.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00056062.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00056063.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00056064.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00056065.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00056066.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00056067.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00056068.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00056069.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00056070.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00056071.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00056072.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00056073.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00056074.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00056075.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00056076.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00056077.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00056078.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00056082.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00056083.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00056084.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00056085.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00056086.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00056087.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00056088.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00056089.DLL"Sat 4 Oct 2008 34,304 A..H. --- "C:\RECYCLER\NPROTECT\00056090.DLL"Sat 4 Oct 2008 32,768 A..H. --- "C:\RECYCLER\NPROTECT\00056091.DLL"Sat 4 Oct 2008 27,648 A..H. --- "C:\RECYCLER\NPROTECT\00056092.DLL"Sat 4 Oct 2008 29,184 A..H. --- "C:\RECYCLER\NPROTECT\00056093.DLL"Sat 4 Oct 2008 33,792 A..H. --- "C:\RECYCLER\NPROTECT\00056094.DLL"Sat 4 Oct 2008 65,024 A..H. --- "C:\RECYCLER\NPROTECT\00056095.DLL"Sat 4 Oct 2008 27,136 A..H. --- "C:\RECYCLER\NPROTECT\00056096.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00056097.DLL"Sat 4 Oct 2008 36,352 A..H. --- "C:\RECYCLER\NPROTECT\00056098.DLL"Sat 4 Oct 2008 48,640 A..H. --- "C:\RECYCLER\NPROTECT\00056099.DLL"Sat 4 Oct 2008 30,720 A..H. --- "C:\RECYCLER\NPROTECT\00056100.DLL"Sat 4 Oct 2008 44,032 A..H. --- "C:\RECYCLER\NPROTECT\00056101.DLL"Sat 4 Oct 2008 25,600 A..H. --- "C:\RECYCLER\NPROTECT\00056102.DLL"Sat 4 Oct 2008 29,696 A..H. --- "C:\RECYCLER\NPROTECT\00056103.DLL"Sat 4 Oct 2008 55,808 A..H. --- "C:\RECYCLER\NPROTECT\00056104.DLL"Sat 4 Oct 2008 61,440 A..H. --- "C:\RECYCLER\NPROTECT\00056105.DLL"Sat 4 Oct 2008 42,496 A..H. --- "C:\RECYCLER\NPROTECT\00056106.DLL"Sat 4 Oct 2008 53,760 A..H. --- "C:\RECYCLER\NPROTECT\00056107.DLL"Sat 4 Oct 2008 75,776 A..H. --- "C:\RECYCLER\NPROTECT\00056112.DLL"Sat 4 Oct 2008 64,512 A..H. --- "C:\RECYCLER\NPROTECT\00056113.dll"Sat 4 Oct 2008 41,472 A..H. --- "C:\RECYCLER\NPROTECT\00056114.DLL"Sat 4 Oct 2008 18,432 A..H. --- "C:\RECYCLER\NPROTECT\00056115.DLL"Sat 4 Oct 2008 52,224 A..H. --- "C:\RECYCLER\NPROTECT\00056116.dll"Sat 4 Oct 2008 19,968 A..H. --- "C:\RECYCLER\NPROTECT\00056117.dll"Sat 4 Oct 2008 37,888 A..H. --- "C:\RECYCLER\NPROTECT\00056118.DLL"Sat 4 Oct 2008 26,112 A..H. --- "C:\RECYCLER\NPROTECT\00056119.DLL"Sat 4 Oct 2008 34,304 A

Title: Win32Agent Removal - Avast/HijackThis Log
Post by: guestolo on October 05, 2008, 04:12:18 PM

Quote

Should I bother doing
another thorough Avast scan at this point?

No, not quite yet, if you could
Can I see a couple other logs

Download [color=\"blue\"]random's system information tool (RSIT)[/color] by [color=\"#6600cc\"]random/random[/color] from >>[color=\"red\"]here[/color]<< (http://\"http://images.malwareremoval.com/random/RSIT.exe\") and save it to your desktop.

Double click on RSIT.exe to launch program.
Click Continue at the disclaimer screen.
Your firewall may alert you that RSIT is requesting Internet access. Please allow it.
Once it has finished, two logs will open: log.txt[color=\"red\"]<-- this will be maximized[/color] and info.txt[color=\"red\"]<-- this will be minimized[/color].

Post both those logs please

Note: If you have trouble posting either of those logs
Can you upload them, I'll give instructions if needed

Title: Win32Agent Removal - Avast/HijackThis Log
Post by: indefatigablej on October 05, 2008, 05:09:46 PM

OK...

log.txt:

Logfile of random's system information tool 1.04 (written by random/random)
Microsoft Windows XP Professional Service Pack 2
System drive C: has 39 GB (51%) free of 76 GB
Total RAM: 1022 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:41:59 PM, on 10/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HPQ\SHARED\HPQWMI.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\BitLord\BitLord.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Documents and Settings\IDENTITY\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\IDENTITY.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.Email Removed.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 (http://\"http://go.microsoft.com/fwlink/?LinkId=69157\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 (http://\"http://go.microsoft.com/fwlink/?LinkId=54896\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 (http://\"http://go.microsoft.com/fwlink/?LinkId=54896\")
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 (http://\"http://go.microsoft.com/fwlink/?LinkId=69157\")
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - Startup: MEMonitor.lnk = C:\Program Files\Sprint music manager\MEMonitor.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q405&bd=pavilion&pf=laptop
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

--
End of file - 10458 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Norton SystemWorks One Button Checkup.job
C:\WINDOWS\tasks\Symantec NetDetect.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 54248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-07-23 1410344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar3.dll [2007-01-20 2403392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll [2008-10-02 737776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar3.dll [2007-01-20 2403392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-06 64512]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-09-28 344064]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2005-06-19 729178]
"hpWirelessAssistant"=C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe [2005-05-04 794624]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2006-10-25 282624]
"ccApp"=C:\Program Files\Common Files\Symantec Shared\ccApp.exe [2007-01-10 115816]
"LSBWatcher"=c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe [2004-10-14 253952]
"Cpqset"=C:\Program Files\HPQ\Default Settings\cpqset.exe [2005-08-01 233534]
"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\point32.exe [2005-06-10 217088]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-07-19 78008]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-06-19 570664]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-10-30 68856]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-10 15360]
"Yahoo! Pager"=C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE [2007-08-30 4670704]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2008-07-23 21738792]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]

C:\Documents and Settings\JACK S. FISCHER\Start Menu\Programs\Startup
MEMonitor.lnk - C:\Program Files\Sprint music manager\MEMonitor.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-09-27 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\EarthLink TotalAccess\TaskPanl.exe"="C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink"
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe"="C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe"="C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\America Online 9.0\wEmail Removedexe"="C:\Program Files\America Online 9.0\wEmail Removedexe:*:Enabled:America Online 9.0"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Files and Settings Transfer Wizard"
"C:\Program Files\Laplink\PCsync\SFTHost.exe"="C:\Program Files\Laplink\PCsync\SFTHost.exe:*:Enabled:PCsync Host Module"
"C:\Program Files\SoulseekNS\slsk.exe"="C:\Program Files\SoulseekNS\slsk.exe:*:Enabled:SoulSeek"
"C:\Program Files\BitLord2\BitLord.exe"="C:\Program Files\BitLord2\BitLord.exe:*:Enabled:Bitlord2"
"C:\Program Files\BitLord\BitLord.exe"="C:\Program Files\BitLord\BitLord.exe:*:Enabled:BitLord"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe"="C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe"="C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Program Files\America Online 9.0\wEmail Removedexe"="C:\Program Files\America Online 9.0\wEmail Removedexe:*:Enabled:America Online 9.0"

======List of files/folders created in the last 2 months======

2008-10-05 18:41:52 ----D---- C:\rsit
2008-10-05 16:05:51 ----D---- C:\WINDOWS\ERUNT
2008-10-05 16:04:18 ----D---- C:\SDFix
2008-10-05 15:11:19 ----D---- C:\Program Files\Trend Micro
2008-10-03 12:50:41 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\Nero
2008-10-03 12:50:04 ----A---- C:\WINDOWS\system32\MsiExec.exe.log
2008-10-03 12:46:18 ----D---- C:\Program Files\Nero
2008-10-03 12:46:18 ----D---- C:\Program Files\Common Files\Nero
2008-10-03 12:46:18 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
2008-10-03 12:42:18 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2008-10-03 12:42:10 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2008-09-28 04:17:35 ----A---- C:\WINDOWS\system32\javaws.exe
2008-09-28 04:17:35 ----A---- C:\WINDOWS\system32\javaw.exe
2008-09-28 04:17:35 ----A---- C:\WINDOWS\system32\java.exe
2008-09-24 23:10:02 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2008-09-24 23:09:34 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2008-09-24 23:09:17 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2008-09-24 16:10:25 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2008-09-24 16:08:17 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\Smith Micro
2008-09-24 15:51:36 ----N---- C:\WINDOWS\system32\spmsg.dll
2008-09-24 15:51:34 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2008-09-24 15:51:12 ----D---- C:\Program Files\Windows Media Connect 2
2008-09-24 15:50:59 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2008-09-24 15:49:06 ----HDC---- C:\WINDOWS\$NtUninstallKB925766$
2008-09-23 14:51:37 ----A---- C:\WINDOWS\iScreensaver.ini
2008-09-23 14:50:55 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\iScreensaver
2008-09-22 03:42:38 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-09-22 03:42:31 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-09-22 03:42:25 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$
2008-09-22 03:40:47 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-09-22 03:38:49 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-09-22 03:38:37 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-09-22 03:37:55 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-09-22 03:37:12 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-17 01:09:09 ----D---- C:\WINDOWS\system32\CatRoot_bak
2008-09-16 17:10:12 ----A---- C:\WINDOWS\ModemLog_SAMSUNG CDMA Modem.txt
2008-09-16 17:08:53 ----D---- C:\Program Files\Samsung
2008-09-16 17:07:39 ----D---- C:\Program Files\Sprint music manager
2008-09-16 17:06:51 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2008-09-16 17:05:50 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2008-09-16 17:05:08 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2008-09-16 11:56:29 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\WinRAR
2008-09-16 11:56:01 ----D---- C:\Program Files\WinRAR
2008-08-24 03:56:45 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\Canneverbe_Limited
2008-08-24 03:56:22 ----D---- C:\Program Files\CDBurnerXP
2008-08-24 02:02:28 ----D---- C:\temp
2008-08-18 14:12:33 ----A---- C:\WINDOWS\system32\muweb.dll
2008-08-18 14:12:33 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2008-08-18 14:12:33 ----A---- C:\WINDOWS\system32\mucltui.dll
2008-08-17 14:26:21 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\dvdcss
2008-08-15 15:56:08 ----D---- C:\Program Files\MagicDVDRipper
2008-08-13 19:14:54 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2008-08-13 17:34:47 ----D---- C:\Program Files\Bonjour
2008-08-13 17:22:23 ----D---- C:\Program Files\Common Files\Macrovision Shared
2008-08-13 17:10:24 ----D---- C:\Program Files\PowerISO
2008-08-12 20:20:17 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\vlc
2008-08-12 15:31:34 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\skypePM
2008-08-12 15:29:56 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\Skype
2008-08-12 15:29:12 ----D---- C:\Program Files\Skype
2008-08-12 15:29:12 ----D---- C:\Program Files\Common Files\Skype
2008-08-12 15:29:00 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2008-08-12 15:24:45 ----D---- C:\Documents and Settings\All Users\Application Data\Yahoo!
2008-08-12 15:20:33 ----A---- C:\YServer.txt
2008-08-12 15:20:15 ----D---- C:\Program Files\Yahoo!
2008-08-12 15:10:38 ----D---- C:\Program Files\VideoLAN
2008-08-12 02:09:38 ----D---- C:\Program Files\Common Files\DESIGNER
2008-08-12 02:09:11 ----D---- C:\Program Files\Microsoft.NET
2008-08-12 02:09:11 ----D---- C:\Program Files\Common Files\ODBC
2008-08-12 02:06:52 ----D---- C:\WINDOWS\SHELLNEW
2008-08-12 02:06:02 ----D---- C:\Program Files\Microsoft Office
2008-08-12 02:05:59 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-08-12 02:05:27 ----RHD---- C:\MSOCache
2008-08-11 19:40:00 ----D---- C:\Program Files\Lavasoft
2008-08-11 19:39:59 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-08-11 19:39:09 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2008-08-11 18:23:43 ----D---- C:\Program Files\MediaMonkey
2008-08-11 16:27:32 ----D---- C:\Program Files\BitLord
2008-08-11 16:16:21 ----D---- C:\Program Files\BitLord2
2008-08-11 15:59:32 ----D---- C:\Documents and Settings\All Users\Application Data\Soulseek
2008-08-11 15:59:18 ----D---- C:\Program Files\SoulseekNS
2008-08-11 15:15:16 ----D---- C:\Outlook
2008-08-11 13:04:16 ----D---- C:\WINDOWS\ie7updates
2008-08-11 13:04:01 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
2008-08-11 01:28:20 ----D---- C:\Program Files\Combined Community Codec Pack
2008-08-11 01:12:24 ----D---- C:\Leisure Suit Larry 2
2008-08-11 01:11:47 ----D---- C:\Purity
2008-08-11 00:10:40 ----SHD---- C:\Recycled
2008-08-10 23:52:07 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\Laplink
2008-08-10 23:51:41 ----D---- C:\Program Files\Laplink
2008-08-10 23:51:41 ----D---- C:\Program Files\Common Files\Laplink
2008-08-10 18:31:04 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2008-08-10 18:30:29 ----HDC---- C:\WINDOWS\$NtUninstallwinusb0100$
2008-08-10 18:26:42 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-08-10 18:26:42 ----A---- C:\WINDOWS\system32\WinusbCoInstaller.dll
2008-08-10 18:26:42 ----A---- C:\WINDOWS\system32\WdfCoInstaller01005.dll
2008-08-10 18:26:19 ----D---- C:\Program Files\Microsoft
2008-08-10 18:26:12 ----HDC---- C:\WINDOWS\$NtUninstallWETCable$
2008-08-10 17:41:28 ----D---- C:\Documents and Settings\All Users\Application Data\LightScribe
2008-08-10 17:40:59 ----HD---- C:\Program Files\Uninstall Information
2008-08-10 17:39:06 ----D---- C:\Program Files\Common Files\LightScribe
2008-08-10 17:37:51 ----D---- C:\WINDOWS\WBEM
2008-08-10 17:37:51 ----D---- C:\WINDOWS\system32\en-US
2008-08-10 17:36:23 ----HDC---- C:\WINDOWS\ie7
2008-08-10 17:36:10 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2008-08-10 17:35:53 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2008-08-10 17:35:24 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2008-08-10 17:34:50 ----N---- C:\WINDOWS\system32\xmllite.dll
2008-08-10 15:11:42 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2008-08-10 06:01:59 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-08-10 06:01:53 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-08-10 06:01:46 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-08-10 06:01:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950759$
2008-08-10 06:01:16 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2008-08-10 06:00:59 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-08-09 22:22:21 ----A---- C:\WINDOWS\system32\aswBoot.exe
2008-08-09 22:22:19 ----D---- C:\Program Files\Alwil Software
2008-08-09 16:08:18 ----D---- C:\Program Files\xerox
2008-08-09 16:08:17 ----D---- C:\Program Files\msn gaming zone
2008-08-09 16:08:17 ----D---- C:\Program Files\Common Files\mssoap
2008-08-09 15:51:30 ----A---- C:\WINDOWS\ntbtlog.txt
2008-08-09 14:50:28 ----A---- C:\WINDOWS\system32\MRT.INI
2008-08-09 14:49:29 ----A---- C:\WINDOWS\system32\MRT.exe
2008-08-09 14:20:54 ----D---- C:\WINDOWS\system32\appmgmt
2008-08-09 14:17:13 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\Starware

======List of files/folders modified in the last 2 months======

2008-10-05 18:41:40 ----D---- C:\WINDOWS\Prefetch
2008-10-05 18:39:10 ----D---- C:\WINDOWS
2008-10-05 17:57:39 ----D---- C:\WINDOWS\Temp
2008-10-05 16:47:44 ----A---- C:\WINDOWS\ModemLog_AC97 Soft Data Fax Modem with SmartCP.txt
2008-10-05 16:23:20 ----D---- C:\WINDOWS\system32
2008-10-05 16:23:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-10-05 16:18:52 ----D---- C:\WINDOWS\system32\ias
2008-10-05 16:18:51 ----D---- C:\WINDOWS\Registration
2008-10-05 15:57:50 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-10-05 15:57:40 ----D---- C:\WINDOWS\system32\CatRoot2
2008-10-05 15:11:19 ----D---- C:\Program Files
2008-10-03 12:57:29 ----SHD---- C:\WINDOWS\Installer
2008-10-03 12:49:14 ----RSD---- C:\WINDOWS\assembly
2008-10-03 12:48:56 ----D---- C:\WINDOWS\system32\drivers
2008-10-03 12:46:18 ----D---- C:\Program Files\Common Files
2008-10-03 12:46:14 ----D---- C:\WINDOWS\Cursors
2008-10-03 12:42:19 ----HD---- C:\WINDOWS\inf
2008-10-03 12:42:19 ----D---- C:\WINDOWS\system32\DirectX
2008-10-03 12:36:51 ----D---- C:\WINDOWS\WinSxS
2008-10-03 12:32:30 ----D---- C:\WINDOWS\ehome
2008-10-03 02:55:44 ----D---- C:\WINDOWS\system32\CatRoot
2008-09-29 12:07:54 ----D---- C:\Program Files\Norton SystemWorks Premier
2008-09-28 04:17:34 ----D---- C:\Program Files\Java
2008-09-24 23:10:05 ----A---- C:\WINDOWS\imsins.BAK
2008-09-24 15:51:20 ----A---- C:\WINDOWS\win.ini
2008-09-24 15:51:18 ----D---- C:\Program Files\Windows Media Player
2008-09-24 15:51:07 ----D---- C:\WINDOWS\Help
2008-09-24 15:49:48 ----RSHD---- C:\WINDOWS\system32\dllcache
2008-09-22 21:38:53 ----A---- C:\WINDOWS\cdplayer.ini
2008-09-22 03:42:33 ----D---- C:\Program Files\Messenger
2008-09-22 03:42:30 ----HD---- C:\WINDOWS\$hf_mig$
2008-09-22 03:38:26 ----D---- C:\Program Files\Internet Explorer
2008-09-19 18:01:19 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\Adobe
2008-09-17 02:15:39 ----D---- C:\WINDOWS\AppPatch
2008-09-17 01:09:09 ----D---- C:\WINDOWS\Debug
2008-09-16 17:20:47 ----D---- C:\Documents and Settings\JACK S. FISCHER\Application Data\Apple Computer
2008-09-16 17:05:20 ----D---- C:\WINDOWS\system32\LogFiles
2008-08-24 03:38:45 ----HD---- C:\Program Files\InstallShield Installation Information
2008-08-24 01:51:05 ----D---- C:\Documents and Settings
2008-08-13 17:36:37 ----D---- C:\Program Files\Adobe
2008-08-13 17:35:51 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2008-08-13 17:34:43 ----D---- C:\Program Files\Common Files\Adobe
2008-08-13 17:31:44 ----RSD---- C:\WINDOWS\Fonts
2008-08-12 16:17:51 ----SD---- C:\Documents and Settings\JACK S. FISCHER\Application Data\Microsoft
2008-08-12 02:10:21 ----D---- C:\WINDOWS\system32\config
2008-08-12 02:10:07 ----D---- C:\Program Files\Common Files\Microsoft Shared
2008-08-12 02:09:11 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-08-10 17:37:45 ----D---- C:\WINDOWS\Media
2008-08-10 15:21:15 ----D---- C:\WINDOWS\security
2008-08-10 15:17:39 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-08-10 15:17:39 ----D---- C:\Program Files\Common Files\InstallShield
2008-08-10 15:03:29 ----D---- C:\WINDOWS\SoftwareDistribution
2008-08-09 21:43:18 ----D---- C:\Program Files\Common Files\Symantec Shared
2008-08-09 21:41:52 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2008-08-09 21:38:13 ----SD---- C:\WINDOWS\Tasks
2008-08-09 15:57:00 ----D---- C:\My Downloads
2008-08-09 14:36:00 ----D---- C:\Documents and Settings\All Users\Application Data\Viewpoint
2008-08-09 14:35:13 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-08-09 14:24:13 ----D---- C:\WINDOWS\occache
2008-08-09 14:20:19 ----D---- C:\Program Files\QuickTime
2008-08-09 14:20:11 ----D---- C:\Program Files\HPQ

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-07-19 26944]
R1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 36352]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-07-19 42912]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2008-07-07 56108]
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2006-09-02 186048]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2004-08-04 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-07-19 94416]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-07-19 23152]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-09-27 1345536]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2005-08-12 376320]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camc6aud.sys [2005-08-02 38016]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camc6hal.sys [2005-08-02 349312]
R3 catchme;catchme; \??\C:\DOCUME~1\JACKS~1.FIS\LOCALS~1\Temp\catchme.sys []
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-04 14080]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2005-08-22 1035008]
R3 HSFHWATI;HSFHWATI; C:\WINDOWS\system32\DRIVERS\HSFHWATI.sys [2005-08-22 231424]
R3 NPDriver;Norton UnErase Protection Driver; \??\C:\WINDOWS\system32\Drivers\NPDRIVER.SYS []
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2004-08-10 67584]
R3 SymEvent;SymEvent; \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS []
R3 SYMREDRV;SYMREDRV; C:\WINDOWS\System32\Drivers\SYMREDRV.SYS [2006-09-02 26432]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2005-06-19 190400]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-06-22 162176]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-10 26624]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-10 57600]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-10 17024]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-08-22 718464]
S1 eabfiltr;EABFiltr; \??\C:\WINDOWS\system32\drivers\EABFiltr.sys []
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-04 14848]
S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-10 60800]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2005-08-18 56648]
S3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 MHNDRV;MHN driver; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-10 61824]
S3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2005-06-10 21760]
S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-06-21 74496]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 SDdriver;SDdriver; \??\C:\WINDOWS\system32\Drivers\sddriver.sys []
S3 SPBBCDrv;SPBBCDrv; \??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys []
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2005-08-17 58352]
S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2005-08-17 8272]
S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2005-08-17 93872]
S3 sscdserd;SAMSUNG CDMA Modem Diagnostic Serial Port (WDM); C:\WINDOWS\system32\DRIVERS\sscdserd.sys [2005-08-17 73696]
S3 SYMDNS;SYMDNS; C:\WINDOWS\System32\Drivers\SYMDNS.SYS [2006-09-02 11968]
S3 SYMFW;SYMFW; C:\WINDOWS\System32\Drivers\SYMFW.SYS [2006-09-02 144832]
S3 SYMIDS;SYMIDS; C:\WINDOWS\System32\Drivers\SYMIDS.SYS [2006-09-02 39104]
S3 SYMNDIS;SYMNDIS; C:\WINDOWS\System32\Drivers\SYMNDIS.SYS [2006-09-02 33216]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-04 59264]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 winusb;WinUSB Service; C:\WINDOWS\system32\DRIVERS\WinUSB.SYS [2006-11-02 39368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-08-11 611664]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-07-19 16056]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-09-27 376832]
R2 Automatic LiveUpdate Scheduler;Automatic LiveUpdate Scheduler; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [2006-09-02 198336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-07-19 147640]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-10 108648]
R2 ccSetMgr;Symantec Settings Manager; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-10 108648]
R2 CLTNetCnService;Symantec Lic NetConnect service; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-10 108648]
R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2006-10-09 237568]
R2 ehSched;Media Center Scheduler Service; C:\WINDOWS\eHome\ehSched.exe [2005-08-06 102912]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-07-30 73728]
R2 LiveUpdate Notice Ex;LiveUpdate Notice Service Ex; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [2007-01-10 108648]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-06 99328]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
R2 NProtectService;Norton UnErase Protection; C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE [2005-11-03 95832]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 Speed Disk service;Speed Disk service; C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE [2005-11-03 176193]
R2 SymAppCore;Symantec AppCore Service; C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe [2006-09-02 46736]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-07-23 348344]
R3 hpqwmi;HP WMI Interface; C:\Program Files\HPQ\SHARED\HPQWMI.exe [2005-10-11 102400]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S2 LiveUpdate Notice Service;LiveUpdate Notice Service; C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [2008-01-29 583048]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-08-13 654848]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-02-05 138168]
S3 HP Port Resolver;HP Port Resolver; C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE [2005-05-20 81920]
S3 HP Status Server;HP Status Server; C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE [2004-10-16 73728]
S3 LiveUpdate;LiveUpdate; C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE [2006-09-02 2528960]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2004-08-10 14336]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Symantec Core LC;Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [2007-02-26 1174152]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-10 14336]

-----------------EOF-----------------

info.txt:

info.txt logfile of random's system information tool 1.04 2008-10-05 18:42:04

======Uninstall list======

-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL
-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{939F8208-C8CE-4AFF-B7BA-ACEB2E74A6CB}\Setup.exe"
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Anchor Service CS3-->MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3-->MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3-->MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting-->MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0-->MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps-->MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color - Photoshop Specific-->MsiExec.exe /I{A2D81E70-2A98-4A08-A628-94388B063C5E}
Adobe Color Common Settings-->MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
Adobe Color EU Extra Settings-->MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings-->MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings-->MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3-->MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3-->MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe ExtendScript Toolkit 2-->MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Fonts All-->MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}
Adobe Help Viewer CS3-->MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Linguistics CS3-->MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files-->MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop CS3-->C:\Program Files\Common Files\Adobe\Installers\2ac78060bc5856b0c1cf873bb919b58\Setup.exe
Adobe Photoshop CS3-->MsiExec.exe /I{0046FA01-C5B9-4985-BACB-398DC480FC05}
Adobe Reader 6.0.1-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A00000000001}
Adobe Setup-->MsiExec.exe /I{D1BB4446-AE9C-4256-9A7F-4D46604D2462}
Adobe Stock Photos CS3-->MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}
Adobe Type Support-->MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3-->MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client-->MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
Adobe XMP Panels CS3-->MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}
AppCore-->MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
Athlon 64 Processor Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C151CE54-E7EA-4804-854B-F515368B0798}\setup.exe" -l0x9
ATI Control Panel-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
BitLord 1.1-->C:\Program Files\BitLord\uninst.exe
ccCommon-->MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}
CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
Combined Community Codec Pack 2008-01-24-->"C:\Program Files\Combined Community Codec Pack\unins000.exe"
Component Framework-->MsiExec.exe /I{31478BE1-CDE5-4753-A8B2-F6D4BC1FBE09}
Conexant AC-Link Audio-->C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\HXFSetup.exe -U -ICPL309BA.INF
Connection Keep Alive-->MsiExec.exe /I{77364F85-6219-4CB8-AAA0-6D53368D683D}
Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar3.dll"
High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB896256)-->"C:\WINDOWS\$NtUninstallKB896256$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB915865)-->"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB926239)-->"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
HP Help and Support-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\setup.exe" -l0x9 -removeonly
HP User Guides 0008-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{43A6AA2A-74B5-4E1C-91DB-ECB2F99D9ED7}\setup.exe" -l0x9 -removeonly
HP Wireless Assistant 1.01 C1-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4302B2DD-D958-40E3-BAF3-B07FFE1978CE}\setup.exe" -l0x9 hpquninst
InterVideo WinDVD-->"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
J2SE Runtime Environment 5.0 Update 10-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100}
J2SE Runtime Environment 5.0 Update 5-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
Java(tm) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
LightScribe System Software 1.14.19.1-->MsiExec.exe /X{513148E7-B7A1-48B2-B518-668701E546F5}
LiveUpdate 3.1 (Symantec Corporation)-->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
LiveUpdate Notice (Symantec Corporation)-->MsiExec.exe /X{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}
Magic DVD Ripper V5.3 build 6-->"C:\Program Files\MagicDVDRipper\unins000.exe"
MediaMonkey 3.0-->"C:\Program Files\MediaMonkey\unins000.exe"
Microsoft .NET Framework 1.0 Hotfix (KB887998)-->"C:\WINDOWS\$NtUninstallKB887998$\spuninst\spuninst.exe"
Microsoft .NET Framework 1.0 Hotfix (KB930494)-->"C:\WINDOWS\$NtUninstallKB930494$\spuninst\spuninst.exe"
Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Access MUI (English) 2007-->MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE}
Microsoft Office Access Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Groove MUI (English) 2007-->MsiExec.exe /X{90120000-00BA-0409-0000-0000000FF1CE}
Microsoft Office Groove Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0114-0409-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (English) 2007-->MsiExec.exe /X{90120000-0044-0409-0000-0000000FF1CE}
Microsoft Office OneNote MUI (English) 2007-->MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}
Microsoft Office Outlook MUI (English) 2007-->MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Publisher MUI (English) 2007-->MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft WinUsb 1.0-->"C:\WINDOWS\$NtUninstallwinusb0100$\spuninst\spuninst.exe"
MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSRedist-->MsiExec.exe /I{D1725BDB-BA2B-4503-A8CB-F5C835D743FA}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
Nero 8-->MsiExec.exe /X{D6C9AF27-9414-46C8-B9D8-D878BA041033}
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Norton Cleanup-->MsiExec.exe /I{CA31120D-2101-484D-9FF1-195DE96FE346}
Norton Protection Center-->MsiExec.exe /I{9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8}
Norton SystemWorks (Symantec Corporation)-->"C:\Program Files\Common Files\Symantec Shared\SymSetup\{B9807C3D-B3DD-41B7-8321-53DDB3A3A888}\{B9807C3D-B3DD-41B7-8321-53DDB3A3A888}.exe" /X
Norton SystemWorks Premier-->MsiExec.exe /I{B9807C3D-B3DD-41B7-8321-53DDB3A3A888}
Norton SystemWorks-->MsiExec.exe /I{9E23C48E-5483-4971-BA50-089F2FABCD66}
Norton Utilities-->MsiExec.exe /I{6A7867BA-B7CA-4CC9-ACAB-85BA46865EE5}
PCsync-->MsiExec.exe /X{DDBC8703-AA18-491F-97BE-98D4543A901B}
PDF Settings-->MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PowerISO-->"C:\Program Files\PowerISO\uninstall.exe"
QuickTime-->MsiExec.exe /I{50D8FFDD-90CD-4859-841F-AA1961C7767A}
RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Security Update for 2007 Microsoft Office System (KB951596)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {1AFF2298-CC00-4A3B-866A-C62B8373794E}
Security Update for 2007 Microsoft Office System (KB951944)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {797AE457-BA17-4BBC-B501-25FB3A0103C7}
Security Update for Microsoft Office Excel 2007 (KB951546)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7399DD71-8E24-4E60-B6A8-6CED89C0AC26}
Security Update for Microsoft Office OneNote 2007 (KB950130)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {F1B2401C-B610-4BF2-AA1C-52C55827A8F4}
Security Update for Microsoft Office system 2007 (KB951808)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8F375E11-4FD6-4B89-9E2B-A76D48B51E00}
Security Update for Microsoft Office system 2007 (KB954326)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5F7F6FFF-395D-480E-8450-64F385D82C5F}
Security Update for Microsoft Office Word 2007 (KB95

Title: Win32Agent Removal - Avast/HijackThis Log
Post by: guestolo on October 05, 2008, 05:30:40 PM

We should rid you of older versions of Java
Please download [color=\"#0000FF\"]JavaRa[/color] (http://\"http://prm753.bchea.org/click/click.php?id=9\")[/url] and unzip it to your Desktop.

Double click JavaRa.exe then click Remove Older Versions.

Follow any prompts; a log will popup (JavaRa.log)-- please post the contents of this log later in your next reply

In addition, I assume you just installed Avast! AntiVirus
I also see Norton's AV running

It's not wise running more than one AntiVirus software
This will cause system instabilities and can slow the performance of your computer noticeably

I suggest that you keep the AntiVirus software your happiest with and uninstall the other

Reboot the computer afterwards, back in Windows, post one last fresh hijackthis log and the log from JavaRA please

Title: Win32Agent Removal - Avast/HijackThis Log
Post by: indefatigablej on October 06, 2008, 01:02:15 AM

Again, thanks for the help...

JavaRa log:

JavaRa 1.11 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Mon Oct 06 02:23:23 2008

Found and removed: C:\Program Files\Java\jre1.5.0_05

Found and removed: C:\Program Files\Java\jre1.5.0_10

Found and removed: C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64

Found and removed: Software\JavaSoft\Java2D\1.5.0_05

Found and removed: Software\JavaSoft\Java2D\1.5.0_10

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510005

Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D511000

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510005

Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D511000

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510005

Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D511000

Found and removed: SOFTWARE\Classes\JavaPlugin.150_05

Found and removed: SOFTWARE\Classes\JavaPlugin.150_10

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_05

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_10

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_05

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_10

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510005

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D511000

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510005

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D511000

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150050}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150100}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_05

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_10

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_05\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_10\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\core1.zip

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\core2.zip

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls\C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\core3.zip

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

------------------------------------

Finished reporting.

HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:35:00 AM, on 10/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
C:\WINDOWS\system32\IoctlSvc.exe
C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HPQ\SHARED\HPQWMI.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.Email Removed.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 (http://\"http://go.microsoft.com/fwlink/?LinkId=69157\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 (http://\"http://go.microsoft.com/fwlink/?LinkId=54896\")
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 (http://\"http://go.microsoft.com/fwlink/?LinkId=54896\")
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 (http://\"http://go.microsoft.com/fwlink/?LinkId=69157\")
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - Startup: MEMonitor.lnk = C:\Program Files\Sprint music manager\MEMonitor.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q405&bd=pavilion&pf=laptop
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\NPROTECT.EXE
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

--
End of file - 10156 bytes

Title: Win32Agent Removal - Avast/HijackThis Log
Post by: guestolo on October 06, 2008, 07:20:46 AM

It looks ok
Are you choosing to keep both AntiVirus software installed?

Title: Win32Agent Removal - Avast/HijackThis Log
Post by: indefatigablej on October 06, 2008, 01:02:24 PM

[quote name=\'guestolo\' post=\'444205\' date=\'Oct 6 2008, 08:56 AM\']It looks ok
Are you choosing to keep both AntiVirus software installed?[/quote]

I like Norton's tools, I'll disable the AV part of it and keep Avast running, so I can get the best of both worlds. Sound good?

Was wondering, would you consider yourself a kind of anti-virus 'activist'?

*J*

Title: Win32Agent Removal - Avast/HijackThis Log
Post by: guestolo on October 06, 2008, 09:13:06 PM

Quote

Was wondering, would you consider yourself a kind of anti-virus 'activist'?

Nope, but if you find that your system is a bit slower with 2 running on startup
Think about this topic

I'll lock it as your problems appear somewhat resolved, take care