HIJACKTHIS SCANLogfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:56:53 PM, on 8/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\AOL\1186407170\ee\aolsoftware.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Instant Messenger Names\IM-svr.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
c:\program files\aim6\anotify.exe
C:\WINDOWS\system32\cmd.exe
C:\ComboFix\nircmd.cfexe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://us.rd.yahoo.com/customize/ie/defaul...rch/search.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://tvkeyz.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.yahoo.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.comR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://us.rd.yahoo.com/customize/ie/defaul...rch/search.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.comR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://us.rd.yahoo.com/customize/ie/defaul...//www.yahoo.comR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://downloads.yahoo.com/internetexplorer/welcome.phpR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!
R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
R3 - URLSearchHook: (no name) - {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn2\yt.dll
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn2\yt.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: MorpheusToolbar BHO - {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL
O2 - BHO: Yahoo! IE Suggest - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\Search\YSearchSuggest.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll
O2 - BHO: (no name) - {D73F49B1-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn2\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Morpheus Toolbar - {3F3714A9-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [F5D9050] C:\Program Files\Belkin\F5D9050\Belkinwcui.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [Messaging] C:\Program Files\Instant Messenger Names\IM-svr.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1186407170\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [OE_OEM] "C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Uniblue SpeedUpMyPC] C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe -s
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'Default user')
O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 5.0\resources\en-US\local\search.html
O8 - Extra context menu item: &Search -
http://edits.mywebsearch.com/toolbaredits/...html?p=ZNfox000O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\lisa\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) -
http://a1540.g.akamai.net/7/1540/52/200612...ex/qtplugin.cabO16 - DPF: {297DE2B6-509A-4B36-93C5-A65276606900} (RRAAINAX_02.RRAAINAX) -
http://www.in.honda.com/rraaapps/rraasec/c...AX/RraainAX.CABO16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {49A3DCEE-FC3C-11D4-83E5-0050DA33C619} (BVXPlayer Class) -
http://www.eminem.net/xplayer/xplayer.cabO16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) -
http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cabO16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) -
http://gamedownload.ijjimax.com/gamedownlo...Plugin11USA.cabO16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/Messe...nt.cab56907.cabO16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) -
http://gamedownload.ijjimax.com/gamedownlo...GPlugin9USA.cabO18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: WIKI.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: AutomatedSurfer (SurferService) - Unknown owner - C:\WINDOWS\system32\srvany.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
--
End of file - 17481 bytes
COMBOFIX SCANComboFix 07-08-09.3 - "lisa" 2007-08-12 17:59:42.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.516 [GMT -4:00]
* Created a new restore point
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\DOCUME~1\lisa\APPLIC~1.\macromedia\Flash Player\#SharedObjects\C3GEZLKT\www.broadcaster.com
C:\DOCUME~1\lisa\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com
C:\DOCUME~1\lisa\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com\settings.sol
((((((((((((((((((((((((( Files Created from 2007-07-12 to 2007-08-12 )))))))))))))))))))))))))))))))
2007-08-12 17:56 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-08-12 17:32 376,901 --a------ C:\Program Files\Uninstall My Web Search.dll
2007-08-10 14:47 <DIR> d-------- C:\WINDOWS\system32\InstallShield Installation Information
2007-08-09 23:55 <DIR> d-------- C:\Program Files\Windows Live Safety Center
2007-08-09 11:22 665,424 --a------ C:\WINDOWS\system32\wmv8dmoe.dll
2007-08-09 11:22 572,752 --a------ C:\WINDOWS\system32\wmvdmoe.dll
2007-08-09 11:22 438,608 --a------ C:\WINDOWS\system32\wmv8dmod.dll
2007-08-09 11:22 1,683,792 --a------ C:\WINDOWS\system32\wmvcore2.dll
2007-08-09 11:22 <DIR> d-------- C:\DOCUME~1\lisa\APPLIC~1\Syntrillium
2007-08-09 11:21 <DIR> d-------- C:\Program Files\coolpro2
2007-08-09 02:59 <DIR> d-------- C:\Program Files\Music Fan's Factory
2007-08-09 02:48 <DIR> d-------- C:\Program Files\EasyMP3AudioMixer
2007-08-09 02:26 <DIR> d-------- C:\Program Files\FairStars Audio Converter
2007-08-09 02:19 <DIR> d-a------ C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
2007-08-09 02:18 876,544 --a------ C:\WINDOWS\system32\ARAudioEditor2.dll
2007-08-09 02:18 835,584 --a------ C:\WINDOWS\system32\arAudioCDGrabber2.dll
2007-08-09 02:18 602,112 --a------ C:\WINDOWS\system32\ARAudioTransform2.dll
2007-08-09 02:18 479,232 --a------ C:\WINDOWS\system32\ARAudioVisualization2.dll
2007-08-09 02:18 458,752 --a------ C:\WINDOWS\system32\ARAudioPlayer2.dll
2007-08-09 02:18 454,656 --a------ C:\WINDOWS\system32\ARAudioRecord2.dll
2007-08-09 02:18 36,864 --a------ C:\WINDOWS\system32\edtExt.dll
2007-08-09 02:18 348,160 --a------ C:\WINDOWS\system32\ARWMAFile2.dll
2007-08-09 02:18 327,680 --a------ C:\WINDOWS\system32\ARAudioGrabber2.dll
2007-08-09 02:18 237,568 --a------ C:\WINDOWS\system32\lame_enc.dll
2007-08-09 02:18 2,744,320 --a------ C:\WINDOWS\system32\xtp9700lib.dll
2007-08-09 02:18 180,224 --a------ C:\WINDOWS\system32\ARServiceBar.dll
2007-08-09 02:18 172,032 --a------ C:\WINDOWS\system32\ARoptions.dll
2007-08-09 02:18 118,784 --a------ C:\WINDOWS\system32\ARFolder.dll
2007-08-09 02:18 1,986,560 --a------ C:\WINDOWS\system32\ARAudioFile2.dll
2007-08-09 02:18 1,794,048 --a------ C:\WINDOWS\system32\ARAudioDesign2.dll
2007-08-09 02:18 1,212,416 --a------ C:\WINDOWS\system32\ARAudioInformation2.dll
2007-08-09 02:18 <DIR> d-------- C:\Program Files\Mightsoft
2007-08-09 02:12 <DIR> d-------- C:\Program Files\MP3 Convert Lord
2007-08-09 01:43 <DIR> d-------- C:\DOCUME~1\lisa\APPLIC~1\uTorrent
2007-08-09 00:03 <DIR> d-------- C:\Program Files\Paltalk Messenger Interop
2007-08-08 22:42 <DIR> d-------- C:\Program Files\SCAR 3.06
2007-08-08 20:25 <DIR> d-------- C:\Program Files\LeetScape
2007-08-06 09:33 33,588 -ra------ C:\WINDOWS\system32\drivers\wanatw4.sys
2007-08-06 09:32 <DIR> d-------- C:\Program Files\Common Files\aolshare
2007-08-06 09:32 <DIR> d-------- C:\Program Files\AOL 9.0
2007-08-06 09:15 <DIR> d-------- C:\Program Files\Uniblue
2007-08-06 09:15 <DIR> d-------- C:\DOCUME~1\lisa\APPLIC~1\Uniblue
2007-08-02 02:09 888,832 --a------ C:\WINDOWS\system32\securenet.dll
2007-08-02 01:01 <DIR> d-------- C:\Program Files\NudgeMania
2007-07-25 14:05 <DIR> d-------- C:\Program Files\Arturia
2007-07-24 12:12 44,544 --a------ C:\WINDOWS\system32\msxml4a.dll
2007-07-24 12:11 94,208 --a------ C:\WINDOWS\system32\DLLCPY32.dll
2007-07-24 12:11 65,536 --a------ C:\WINDOWS\system32\DLLPTL32.dll
2007-07-24 12:11 61,440 --a------ C:\WINDOWS\system32\DLLCDF32.dll
2007-07-24 12:11 57,344 --a------ C:\WINDOWS\system32\DLLTPO32.dll
2007-07-24 12:11 53,248 --a------ C:\WINDOWS\system32\DLLPRJ32.dll
2007-07-24 12:11 49,152 --a------ C:\WINDOWS\system32\DLLPRF32.dll
2007-07-24 12:11 49,152 --a------ C:\WINDOWS\system32\DLLIO32.dll
2007-07-24 12:11 462,848 --a------ C:\WINDOWS\system32\DLLAV32.dll
2007-07-24 12:11 45,056 --a------ C:\WINDOWS\system32\DLLIMG32.dll
2007-07-24 12:11 430,080 --a------ C:\WINDOWS\system32\MXRestore.exe
2007-07-24 12:11 40,960 --a------ C:\WINDOWS\system32\DLLRD32.dll
2007-07-24 12:11 38,912 --a------ C:\WINDOWS\system32\mgxasio.dll
2007-07-24 12:11 36,864 --a------ C:\WINDOWS\system32\DLLPNT32.dll
2007-07-24 12:11 32,768 --a------ C:\WINDOWS\system32\STRING32.dll
2007-07-24 12:11 32,768 --a------ C:\WINDOWS\system32\DLLMSC32.dll
2007-07-24 12:11 32,768 --a------ C:\WINDOWS\system32\DLLISO32.dll
2007-07-24 12:11 32,768 --a------ C:\WINDOWS\system32\DLLDIR32.dll
2007-07-24 12:11 24,576 --a------ C:\WINDOWS\system32\TTIC32.dll
2007-07-24 12:11 24,576 --a------ C:\WINDOWS\system32\TTI32.dll
2007-07-24 12:11 24,576 --a------ C:\WINDOWS\system32\DLLIX.dll
2007-07-24 12:11 188,416 --a------ C:\WINDOWS\system32\DLLRES32.dll
2007-07-24 12:11 163,840 --a------ C:\WINDOWS\system32\DLLDEV32.dll
2007-07-24 12:11 151,552 --a------ C:\WINDOWS\system32\DLLDRV32.dll
2007-07-24 12:11 114,688 --a------ C:\WINDOWS\system32\DLLCDA32.dll
2007-07-24 12:11 <DIR> d-------- C:\Program Files\Common Files\MAGIX Shared
2007-07-24 12:10 85,504 --a------ C:\WINDOWS\system32\HtmlWH.dll
2007-07-24 12:10 638,976 --a------ C:\WINDOWS\system32\mgxoschk.dll
2007-07-24 12:10 <DIR> d-------- C:\WINDOWS\system32\MAGIX
2007-07-24 12:10 <DIR> d-------- C:\MAGIX
2007-07-23 02:40 <DIR> d-------- C:\DOCUME~1\lisa\APPLIC~1\Ventrilo
2007-07-23 02:39 <DIR> d-------- C:\Program Files\Ventrilo
2007-07-15 01:55 <DIR> d-------- C:\DOCUME~1\lisa\APPLIC~1\.gaim
2007-07-12 00:02 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Gtek
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
2007-08-12 17:46 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\Skype
2007-08-12 17:41 --------- d-------- C:\Program Files\lg_fwupdate
2007-08-12 17:41 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\Messaging-Names
2007-08-12 17:34 --------- d-------- C:\Program Files\WildTangent
2007-08-12 17:33 --------- d-------- C:\Program Files\Viewpoint
2007-08-12 17:32 --------- d-------- C:\Program Files\MSN Messenger
2007-08-12 12:24 --------- d-------- C:\Program Files\Trend Micro
2007-08-12 00:03 --------- d-------- C:\Program Files\SwiftSwitch
2007-08-11 17:11 --------- d-------- C:\Program Files\iTunes
2007-08-11 17:11 --------- d-------- C:\Program Files\iPod
2007-08-11 17:03 --------- d-------- C:\Program Files\Apple Software Update
2007-08-09 15:21 --------- d-------- C:\Program Files\SCAR 2.03
2007-08-09 11:52 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-08-09 02:36 --------- d-------- C:\Program Files\Google
2007-08-09 02:34 --------- d-------- C:\Program Files\Image-Line
2007-08-09 02:33 --------- d-------- C:\Program Files\BitComet
2007-08-08 22:22 --------- d-------- C:\Program Files\FriendAdder Combo Pack
2007-08-08 22:21 --------- d-------- C:\Program Files\MySpace
2007-08-08 16:33 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\CyberLink
2007-08-08 12:48 1428 --a------ C:\WINDOWS\mozver.dat
2007-08-08 12:21 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\.gaim
2007-08-08 12:20 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\Xfire
2007-08-06 09:44 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\AOL
2007-08-06 09:39 --------- d-------- C:\Program Files\Common Files\AOL
2007-08-03 11:54 --------- d-------- C:\Program Files\LimeWire
2007-07-25 14:05 --------- d-------- C:\Program Files\VstPlugins
2007-07-23 18:17 8196 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2007-07-23 02:38 --------- d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-07-23 02:16 --------- d---s---- C:\Program Files\Xfire
2007-07-20 12:43 --------- d-------- C:\Program Files\AKProg
2007-07-15 17:09 --------- d-------- C:\Program Files\QuickTime
2007-07-15 01:54 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\Paltalk
2007-07-14 18:54 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\teamspeak2
2007-07-12 00:02 --------- d--h----- C:\DOCUME~1\lisa\APPLIC~1\Gtek
2007-07-11 11:39 304182 --a------ C:\StiImg.dat
2007-07-11 10:11 --------- d-------- C:\Program Files\Instant Messenger Names
2007-07-10 16:48 --------- d-------- C:\Program Files\VentSrv
2007-07-10 00:03 --------- d-------- C:\Program Files\Paltalk Messenger
2007-07-10 00:02 --------- d-------- C:\Program Files\xchat
2007-07-09 23:58 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\X-Chat 2
2007-07-09 23:18 --------- d-------- C:\Program Files\Teamspeak2_RC2
2007-07-09 19:03 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\IMVU
2007-07-09 16:49 --------- d-------- C:\DOCUME~1\lisa\APPLIC~1\Apple Computer
2007-07-09 16:38 --------- d-------- C:\Program Files\Skype
2007-07-09 16:38 --------- d-------- C:\Program Files\Common Files\Skype
2007-07-02 00:48 --------- d--h----- C:\DOCUME~1\lisa\APPLIC~1\ijjigame
2007-07-01 16:51 --------- d-------- C:\Program Files\Common Files\Apple
2007-06-15 20:38 --------- d-------- C:\Program Files\Red Kawa
2007-06-12 19:00 36112 --a------ C:\WINDOWS\system32\drivers\tmpreflt.sys
2007-06-12 19:00 203024 --a------ C:\WINDOWS\system32\drivers\tmxpflt.sys
2007-06-12 18:52 1126328 --a------ C:\WINDOWS\system32\drivers\VsapiNT.sys
2007-06-12 10:17 --------- d-------- C:\Program Files\ICQToolbar
2007-05-21 15:26 56 -r-hs---- C:\WINDOWS\system32\1C194419CA.sys
2007-05-16 11:12 86528 --------- C:\WINDOWS\system32\dllcache\directdb.dll
2007-05-16 11:12 85504 --------- C:\WINDOWS\system32\dllcache\wabimp.dll
2007-05-16 11:12 683520 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-05-16 11:12 683520 --------- C:\WINDOWS\system32\dllcache\inetcomm.dll
2007-05-16 11:12 510976 --------- C:\WINDOWS\system32\dllcache\wab32.dll
2007-05-16 11:12 1314816 --------- C:\WINDOWS\system32\dllcache\msoe.dll
2007-05-01 19:58:12 56 --sh--r C:\WINDOWS\system32\66CC7CB99A.sys
2006-10-25 20:31:46 56 --sh--r C:\WINDOWS\system32\DC6D0D0B59.sys
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 16:01]
"SigmatelSysTrayApp"="stsystra.exe" [2005-03-23 01:20 C:\WINDOWS\stsystra.exe]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2005-06-17 09:56]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-08-05 23:05]
"DMXLauncher"="C:\Program Files\Dell\Media Experience\DMXLauncher.exe" [2005-10-05 05:12]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 12:44]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 12:44]
"pccguide.exe"="C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe" [2005-08-30 18:36]
"DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-09-08 07:20]
"AOLDialer"="C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" [2006-10-23 08:50]
"F5D9050"="C:\Program Files\Belkin\F5D9050\Belkinwcui.exe" [2006-02-14 14:19]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" [2007-05-06 08:47]
"Lexmark X1100 Series"="C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" [2003-08-19 06:43]
"PSPVideo9"="C:\Program Files\pspvideo9\pspVideo9.exe" [2005-10-29 20:56]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-02-15 10:57]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 15:10]
"LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 22:55]
"LGODDFU"="C:\Program Files\lg_fwupdate\fwupdate.exe" [2007-05-11 23:20]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-04-02 11:01]
"InCD"="C:\Program Files\Nero\Nero 7\InCD\InCD.exe" [2007-03-02 09:33]
"Messaging"="C:\Program Files\Instant Messenger Names\IM-svr.EXE" [2006-11-15 21:33]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 06:24]
"HostManager"="C:\Program Files\Common Files\AOL\1186407170\ee\AOLSoftware.exe" [2006-09-25 20:52]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-07-31 18:44]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OE_OEM"="C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe" [2006-04-11 19:39]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 07:00]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-28 01:19]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 12:24]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 17:45]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 11:09]
"Aim6"="" []
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [2007-06-11 18:16]
"Uniblue SpeedUpMyPC"="C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe" [2007-07-05 12:31]
C:\Documents and Settings\lisa\Start Menu\Programs\Startup\
LimeWire On Startup.lnk - C:\Program Files\LimeWire\LimeWire.exe [2006-08-22 11:45:55]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 23:05:26]
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-03-03 02:03:10]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=WIKI.DLL