Alright I did what you asked but I could only get the main.txt logfile. For some reason the extra.txt file isn't showing up. Also, I think someone hacked into my computer. When I go to my email address the font size is different and there are these weird advertisements on it. Also since I downloaded Deckard's System Scanner my computer has been moving very very slow. I hope no one can see the logfile I posted here and use it to hack into my system. If so, I have to get a new system! BTW I tried over thre times to get the extra.txt file to show up but it didn't work. Here is my the main.txt logfile:
Deckard's System Scanner v20071014.68
Run by Areya on 2008-04-20 17:48:33
Computer is in Normal Mode.
--------------------------------------------------------------------------------
[color=\"red\"]Total Physical Memory: 510 MiB (512 MiB recommended).[/color]
[color=\"red\"]System Drive C: has 5.14 GiB (less than 15%) free.[/color]
-- HijackThis (run as Areya.exe) -----------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:48:37 PM, on 4/20/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\KTS\daemon.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\wanmpsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\AOL\1195356549\ee\AOLSoftware.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\America Online 8.0a\aoltray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Areya\Desktop\dss.exe
C:\PROGRA~1\Trend Micro\HijackThis\Areya.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - C:\PROGRA~1\VOL_TO~1\VOL_TO~1.DLL (file missing)
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: (no name) - {586E137D-73C5-464D-9339-FB5125DF6C7B} - C:\WINDOWS\system32\khfDwxvT.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7B9177DD-6B63-462B-B645-D0AB44B1A006} - C:\WINDOWS\system32\byXNghhG.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar.dll
O3 - Toolbar: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - C:\PROGRA~1\VOL_TO~1\VOL_TO~1.DLL (file missing)
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar.dll
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1195356549\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [-FreedomNeedsReboot] "C:\Program Files\Verizon\Verizon Internet Security Suite\ZkRunOnceR.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [wnaspid] C:\WINDOWS\system32\wnaspid.exe
O4 - HKLM\..\Run: [Verizon Custom Uninstall Tracking] C:\DOCUME~1\Areya\LOCALS~1\Temp\InstallHelper.exe /uninstalltrackingvendor=Verizon
O4 - HKCU\..\Run: [XPRepairPro2007] C:\Program Files\XP Repair Pro 2007\XPRepairPro.exe /r
O4 - HKCU\..\Run: [igndlm.exe] C:\Documents and Settings\Areya\My Documents\New Folder\Download Manager\DLM.exe /windowsstart /startifwork
O4 - HKCU\..\Run: [54ccd728deae4209d10415028f63f321] C:\DOCUME~1\Areya\Desktop\MONOPO~1.EXE /r
O4 - HKCU\..\Run: [afaa09c57f0255f0ae8743e836b707be] C:\DOCUME~1\Areya\Desktop\BURGER~1.EXE /r
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Global Startup: America Online 8.0 Tray Icon.lnk = C:\Program Files\America Online 8.0a\aoltray.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\googletoolbar.dll/cmsearch.html
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\googletoolbar.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\googletoolbar.dll/cmcache.html
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\googletoolbar.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\googletoolbar.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Areya\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02A2D714-433E-46E4-B217-7C3B3FAF8EAE} (ScrabbleCubes Control) -
http://www.worldwinner.com/games/v46/scrab...rabblecubes.cabO16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file://C:\Program Files\Dream Chronicles 2 - The Eternal Maze\Images\stg_drm.ocx
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {1A1F56AA-3401-46F9-B277-D57F3421F821} (FunGamesLoader Object) -
http://gamesville.worldwinner.com/games/v4...GamesLoader.cabO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) -
http://us.dl1.yimg.com/download.yahoo.com/...nst20040510.cabO16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) -
http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.6.108.cabO16 - DPF: {58FC4C77-71C2-4972-A8CD-78691AD85158} (BJA Control) -
http://www.worldwinner.com/games/v57/bjattack/bja.cabO16 - DPF: {615F158E-D5CA-422F-A8E7-F6A5EED7063B} (Bejeweled Control) -
http://www.worldwinner.com/games/v46/bejeweled/bejeweled.cabO16 - DPF: {62969CF2-0F7A-433B-A221-FD8818C06C2F} (Blockwerx Control) -
http://www.worldwinner.com/games/v49/blockwerx/blockwerx.cabO16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.com/microsoftu...b?1185209455531O16 - DPF: {74E4A24D-5224-4F05-8A41-99445E0FC22B} (GameHouse Games Player) -
http://www.gamehouse.com/realarcade-webgam...houseplayer.cabO16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) -
http://www-307.ibm.com/pc/support/IbmEgath.cabO16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) -
http://www.worldwinner.com/games/shared/wwlaunch.cabO16 - DPF: {8FA2192F-B95D-40E3-898F-8D7ABB8E00D0} (SpinTop Games Launcher) -
http://www.gamehouse.com/realarcade-webgam...mesLauncher.cabO16 - DPF: {94299420-321F-4FF9-A247-62A23EBB640B} (WordMojo Control) -
http://www.worldwinner.com/games/v46/wordmojo/wordmojo.cabO16 - DPF: {97438FE9-D361-4279-BA82-98CC0877A717} (Cubis Control) -
http://www.worldwinner.com/games/v57/cubis/cubis.cabO16 - DPF: {9903F4ED-B673-456A-A15F-ED90C7DE9EF5} (Sol Control) -
http://www.worldwinner.com/games/v46/sol/sol.cabO16 - DPF: {A91FB93D-7561-4524-8484-5C27C8FA8D42} (WwLuxor Control) -
http://www.worldwinner.com/games/v49/luxor/luxor.cabO16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} (SwapIt Control) -
http://www.worldwinner.com/games/v67/swapit/swapit.cabO16 - DPF: {B06CE1BC-5D9D-4676-BD28-1752DBF394E0} (Hangman Control) -
http://www.worldwinner.com/games/v41/hangman/hangman.cabO16 - DPF: {BAE1D8DF-0B35-47E3-A1E7-EEB3FF2ECD19} (CPlayFirstddfotgControl Object) -
http://www.gamehouse.com/realarcade-webgam...erDashFloGo.cabO16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) -
http://www.gamehouse.com/realarcade-webgam...zylomplayer.cabO16 - DPF: {C5326A4D-E9AA-40AD-A09A-E74304D86B47} (DinerDash Control) -
http://www.worldwinner.com/games/v49/dinerdash/dinerdash.cabO16 - DPF: {C93C1C34-CEA9-49B1-9046-040F59E0E0D8} (Paint Control) -
http://www.worldwinner.com/games/v43/paint/paint.cabO16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file:///C:/Program%20Files/Sally's%20Salon/Images/armhelper.ocx
O16 - DPF: {CF969D51-F764-4FBF-9E90-475248601C8A} (FamilyFeud Control) -
http://www.worldwinner.com/games/v47/famil.../familyfeud.cabO16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) -
http://www.gamehouse.com/realarcade-webgam...inematycoon.cabO16 - DPF: {E70E3E64-2793-4AEF-8CC8-F1606BE563B0} (WWSpades Control) -
http://www.worldwinner.com/games/v47/wwspades/wwspades.cabO16 - DPF: {EA6246B4-F380-443F-8727-9AEA3371146C} (CPlayFirstWeddingDashControl Object) -
http://www.gamehouse.com/realarcade-webgam...WeddingDash.cabO20 - Winlogon Notify: fccyxvvt - fccyxvvt.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: KpyM Telnet SSH Server v1.16 - Kroum Grigorov - C:\Program Files\KTS\daemon.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
--
End of file - 13290 bytes
-- Files created between 2008-03-20 and 2008-04-20 -----------------------------
2008-04-20 16:22:58 0 dr-h----- C:\Documents and Settings\Areya\Recent
2008-04-19 21:23:50 0 d-------- C:\Program Files\DeSmuME
2008-04-19 16:51:39 0 d-------- C:\Program Files\Trend Micro
2008-04-18 21:23:19 0 d-------- C:\Documents and Settings\Areya\Application Data\Home Sweet Home
2008-04-18 15:54:48 0 d-------- C:\Program Files\Dream Day - First Home
2008-04-18 15:52:19 0 d-------- C:\Program Files\Home Sweet Home
2008-04-18 08:23:34 0 d-------- C:\Program Files\Dream Chronicles 2
2008-04-17 21:31:04 0 d-------- C:\Documents and Settings\Areya\Application Data\Eyeblaster
2008-04-17 18:24:34 0 d-------- C:\Program Files\Pcsx2_0.9.4
2008-04-16 12:04:06 0 d-------- C:\Program Files\Diner Dash 2
2008-04-11 14:11:24 0 d-------- C:\Trial YouInWeb Ready-Site PRO2.0
2008-04-09 17:52:57 0 d-------- C:\Program Files\KTS
2008-04-09 17:00:09 0 --a------ C:\Documents and Settings\Areya\telnet
2008-04-07 14:19:40 0 d-------- C:\Documents and Settings\Areya\vacprojects
2008-04-07 11:54:31 0 d-------- C:\Program Files\Visicom Media
2008-04-06 19:02:58 1158 --a------ C:\WINDOWS\mozver.dat
2008-04-06 14:30:56 0 d-------- C:\Documents and Settings\Areya\Application Data\CrystalButton
2008-04-06 12:04:32 0 d-------- C:\Program Files\Paint.NET
2008-04-05 17:01:09 0 d-------- C:\Documents and Settings\Areya\Application Data\Nvu
2008-04-05 17:01:02 0 d-------- C:\Program Files\Nvu
2008-04-04 16:13:09 0 d-------- C:\Documents and Settings\Areya\Application Data\FileZilla
2008-04-04 12:09:29 0 d-------- C:\Program Files\FreshWebmaster
2008-04-02 18:32:41 0 d-------- C:\Documents and Settings\Areya\Application Data\Malwarebytes
2008-04-02 18:31:23 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-04-02 18:31:21 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-04-02 08:21:29 0 d-------- C:\Program Files\Doggie Dash
2008-04-01 22:53:29 326717 --ahs---- C:\WINDOWS\system32\GhhgNXyb.ini2
2008-04-01 10:54:22 24576 --a------ C:\WINDOWS\system32\wnaspid.exe <Not Verified; ; KS3071109>
2008-04-01 10:54:21 0 dr-hs---- C:\Program Files\SCPP
2008-04-01 08:30:41 0 d-------- C:\Program Files\Google
2008-04-01 07:56:44 275402 --ahs---- C:\WINDOWS\system32\TvxwDfhk.ini2
2008-04-01 02:14:05 0 d-------- C:\Program Files\GameHouse
2008-04-01 01:21:09 0 d-------- C:\Program Files\Cake Mania 2
2008-04-01 00:45:07 0 d-------- C:\Program Files\uTorrent
2008-04-01 00:44:57 0 d-------- C:\Documents and Settings\Areya\Application Data\uTorrent
2008-03-31 22:19:18 54 --a------ C:\smp.bat
2008-03-31 21:56:57 0 d-------- C:\Documents and Settings\Areya\Application Data\Grisoft
2008-03-31 20:50:44 0 d-------- C:\Documents and Settings\Areya\Application Data\WinRAR
2008-03-30 23:51:52 0 d-------- C:\Program Files\The KMPlayer
2008-03-30 10:06:44 0 d-------- C:\ae3c534e3061c8c3d292e1193ea3fa
2008-03-30 10:04:00 56 -r-hs---- C:\WINDOWS\system32\3EC04BFBFF.sys
2008-03-30 10:03:57 1682 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2008-03-27 22:26:30 0 d-------- C:\Documents and Settings\Areya\Application Data\Oberon Games
2008-03-27 20:37:30 0 d-------- C:\Documents and Settings\All Users\Application Data\AlawarGameBox
2008-03-27 20:37:10 0 d-------- C:\Program Files\Alawar
2008-03-27 20:09:55 0 d-------- C:\WINDOWS\system32\Adobe
2008-03-24 13:56:40 0 d-------- C:\Documents and Settings\Areya\Application Data\FloodLightGames
2008-03-24 13:56:40 0 d-------- C:\Documents and Settings\All Users\Application Data\FloodLightGames
2008-03-24 12:31:00 0 d-------- C:\Documents and Settings\Administrator\Application Data\Orbit
2008-03-24 10:56:45 0 d-------- C:\Documents and Settings\LocalService\Application Data\NCH Swift Sound
2008-03-24 10:44:33 0 d-------- C:\Documents and Settings\All Users\Application Data\DriveHQ
2008-03-24 10:44:13 0 d-------- C:\Documents and Settings\Areya\Application Data\DriveHQ
2008-03-23 17:43:21 0 d-------- C:\Documents and Settings\Areya\Application Data\NSS PKI Store
2008-03-23 17:43:20 0 d-------- C:\Documents and Settings\Areya\Application Data\AOL Communicator
2008-03-23 17:43:10 0 d-------- C:\Program Files\AOL Communicator
2008-03-23 11:35:46 0 d-------- C:\Install AOL Communicator
2008-03-23 11:35:22 0 d-------- C:\Install CompuServe7.0
2008-03-23 11:35:20 0 d-------- C:\Install Spinner
2008-03-23 11:35:18 0 d-------- C:\Install Winamp
2008-03-23 11:35:17 0 d-------- C:\Install ICQ
2008-03-23 11:35:15 0 d-------- C:\AOL Instant Messenger
2008-03-23 11:31:09 53248 --a------ C:\WINDOWS\AolCInUn.exe <Not Verified; Gtek; Gtek AolCInUn>
2008-03-23 11:30:52 0 d-------- C:\Program Files\America Online 8.0a
2008-03-23 08:01:22 0 d-------- C:\Program Files\ASCII
2008-03-20 14:12:09 0 d-------- C:\Documents and Settings\Areya\dwhelper
2008-03-20 11:46:05 0 d-------- C:\Program Files\Orbitdownloader
2008-03-20 11:22:12 0 d-------- C:\Documents and Settings\All Users\Application Data\Zabersoft
2008-03-20 09:59:51 0 d-------- C:\Documents and Settings\Areya\Application Data\Orbit
2008-03-20 08:50:35 0 d-------- C:\Documents and Settings\All Users\Application Data\BackToTheBeach
2008-03-20 08:50:02 0 d-------- C:\Program Files\BackToTheBeach
2008-03-20 08:31:17 0 d-------- C:\Program Files\Mozilla ActiveX Control v1.7.1
2008-03-20 07:30:52 0 d-------- C:\WINDOWS\DSL
2008-03-20 07:09:56 65536 --a------ C:\WINDOWS\wanmpsvc.exe <Not Verified; America Online, Inc.; America Online>
2008-03-20 07:08:42 0 d-------- C:\aolextras
2008-03-20 07:08:36 0 d-------- C:\Program Files\AOL Companion
2008-03-20 07:08:12 8552 --a------ C:\WINDOWS\system32\drivers\asctrm.sys <Not Verified; Windows ® 2000 DDK provider; Windows ® 2000 DDK driver>
2008-03-20 07:07:57 0 d-------- C:\Program Files\Real
2008-03-20 07:07:19 153088 --a------ C:\WINDOWS\system32\jgdwmie.dll <Not Verified; America Online; JG Decoder>
2008-03-20 07:07:19 24646 --a------ C:\WINDOWS\system32\aolddial.dll <Not Verified; America Online; AOLDDial Custom Dialer Module>
2008-03-20 07:07:19 0 d-------- C:\Program Files\Common Files\aolshare
2008-03-20 07:07:08 0 d-------- C:\Program Files\America Online 8.0
-- Find3M Report ---------------------------------------------------------------
2008-04-20 16:21:28 0 d-------- C:\Documents and Settings\Areya\Application Data\AVG7
2008-04-18 16:43:51 0 d-------- C:\Documents and Settings\Areya\Application Data\GameHouse
2008-04-18 14:12:47 592 --a------ C:\Documents and Settings\Areya\Application Data\AVSDVDPlayer.m3u
2008-04-18 08:24:29 0 d-------- C:\Documents and Settings\Areya\Application Data\PlayFirst
2008-04-12 21:16:03 0 d-------- C:\Program Files\Verizon
2008-04-07 11:54:24 720896 --a------ C:\WINDOWS\iun6002.exe <Not Verified; Indigo Rose Corporation; Setup Factory 6.0 Runtime Module>
2008-04-06 18:01:16 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-04-06 18:00:46 0 d-------- C:\Program Files\Common Files
2008-04-06 11:51:20 0 d-------- C:\Program Files\vol_toolbar
2008-04-02 11:32:43 0 d-------- C:\Program Files\Windows NT
2008-04-02 06:41:45 0 d-------- C:\Program Files\Common Files\Motive
2008-03-31 23:26:26 26 --a------ C:\WINDOWS\popcinfo.dat
2008-03-27 20:33:05 0 d-------- C:\Program Files\Shockwave.com
2008-03-24 12:20:38 0 d-------- C:\Program Files\NCH Software
2008-03-24 11:02:41 0 d-------- C:\Program Files\NCH Swift Sound
2008-03-24 10:53:04 0 d-------- C:\Documents and Settings\Areya\Application Data\NCH Swift Sound
2008-03-23 20:53:13 0 d-------- C:\Documents and Settings\Areya\Application Data\IGN_DLM
2008-03-23 11:34:57 0 d-------- C:\Program Files\Common Files\AOL
2008-03-23 08:29:19 0 d-------- C:\Program Files\Common Files\InstallShield
2008-03-21 13:36:17 0 d-------- C:\Program Files\Common Files\Blizzard Entertainment
2008-03-21 08:16:22 0 d-------- C:\Program Files\RogueRemover FREE
2008-03-21 08:16:12 0 d-------- C:\Program Files\Luxor
2008-03-20 12:17:33 0 d-------- C:\Program Files\VideoLAN
2008-03-20 07:30:53 0 d-------- C:\Program Files\Common Files\SupportSoft
2008-03-20 07:08:11 0 d-------- C:\Program Files\Common Files\Real
2008-03-20 07:06:57 0 d-------- C:\Documents and Settings\Areya\Application Data\Mozilla
2008-03-20 05:27:07 0 d-------- C:\Program Files\LettersFall 100Percent
2008-03-19 16:21:14 0 d-------- C:\Program Files\Xvid
2008-03-19 16:21:04 0 d-------- C:\Program Files\DsNET Corp
2008-03-19 15:00:12 1028 --a------ C:\Documents and Settings\Areya\Application Data\AVIEncoder.wff
2008-03-19 14:29:46 0 d-------- C:\Program Files\MediaCoder
2008-03-19 12:38:55 0 d-------- C:\Documents and Settings\Areya\Application Data\AVSMedia
2008-03-19 12:20:32 0 d-------- C:\Program Files\Common Files\AVSMedia
2008-03-19 12:20:24 0 d-------- C:\Program Files\AVSMedia
2008-03-19 10:39:15 0 d-------- C:\Documents and Settings\Areya\Application Data\Complete Media Player
2008-03-18 07:26:16 0 d-------- C:\Documents and Settings\Areya\Application Data\Real
2008-03-18 03:48:20 0 d-------- C:\Program Files\Polaris
2008-03-15 21:38:04 0 d-------- C:\Program Files\Pool 'm Up
2008-03-15 21:22:26 335 --a------ C:\WINDOWS\mozregistry.dat
2008-03-15 19:16:16 31 --a------ C:\WINDOWS\popcinfot.dat
2008-03-11 08:59:57 0 d-------- C:\Program Files\Free Offers from Freeze.com
2008-03-11 06:08:00 0 d-------- C:\Program Files\GameSpy Arcade
2008-03-11 01:50:55 0 d-------- C:\Documents and Settings\Areya\Application Data\SprillBermudeEng
2008-03-10 09:36:37 0 d-------- C:\Program Files\Java
2008-03-09 23:06:05 0 d-------- C:\Program Files\bfgclient
2008-03-08 07:40:37 0 d-------- C:\Program Files\Marble Run
2008-03-08 06:54:58 0 d-------- C:\Program Files\Common Files\Adobe
2008-03-08 06:54:43 0 d-------- C:\Documents and Settings\Areya\Application Data\Leadertech
2008-03-08 06:43:51 0 d-------- C:\Program Files\LightDriver
2008-03-08 06:39:01 796672 --a------ C:\WINDOWS\GPInstall.exe <Not Verified; Qsc; GP-Install>
2008-03-08 05:59:22 0 d-------- C:\Documents and Settings\Areya\Application Data\Adobe
2008-03-07 21:55:43 0 d-------- C:\Program Files\DangerousHSGirls
2008-03-07 11:52:39 0 d-------- C:\Program Files\Yahoo!
2008-03-07 09:18:19 0 d-------- C:\Program Files\Infogrames Interactive
2008-03-07 09:17:51 0 d-------- C:\Documents and Settings\Areya\Application Data\GetRightToGo
2008-03-04 19:28:11 0 d-------- C:\Program Files\Pacific Heroes
2008-03-04 07:19:06 0 d-------- C:\Documents and Settings\Areya\Application Data\Macromedia
2008-03-03 23:21:46 0 d-------- C:\Program Files\ReflexiveArcade
2008-03-03 23:11:08 409600 --a------ C:\WINDOWS\system32\wrap_oal.dll <Not Verified; Creative Labs; Creative Labs OpenAL32>
2008-03-03 23:11:07 114688 --a------ C:\WINDOWS\system32\OpenAL32.dll <Not Verified; Portions © Creative Labs Inc. and NVIDIA Corp.; Standard OpenAL(tm) Library>
2008-03-03 23:05:31 0 d-------- C:\Program Files\MySpace
2008-03-03 21:01:12 0 d-------- C:\Program Files\Common Files\Symantec Shared
2008-03-02 23:24:58 0 dr-h----- C:\Documents and Settings\Areya\Application Data\SecuROM
2008-03-02 22:31:09 0 d-------- C:\Program Files\Common Files\DirectX
2008-03-02 22:28:02 0 d-------- C:\Program Files\EA GAMES
2008-03-02 20:17:43 394 --a------ C:\Documents and Settings\Areya\Application Data\ParisChase.MCS
2008-03-02 19:38:57 0 d-------- C:\Program Files\Sega
2008-03-02 19:28:41 0 d-------- C:\Program Files\Aspyr
2008-03-02 17:04:03 0 d-------- C:\Documents and Settings\Areya\Application Data\InstallShield
2008-03-02 05:15:57 0 d--h----- C:\Documents and Settings\Areya\Application Data\ijjigame
2008-03-01 15:28:42 0 d-------- C:\Documents and Settings\Areya\Application Data\Total Eclipse
2008-03-01 00:44:14 0 d-------- C:\Program Files\GameTop.com
2008-02-22 03:35:17 0 d-------- C:\Documents and Settings\Areya\Application Data\vlc
2008-02-18 23:09:01 0 --a------ C:\WINDOWS\popcreg.dat
2008-02-18 15:03:35 439296 --a------ C:\WINDOWS\GOTOASSIST[1].EXE <Not Verified; Citrix Online; GoToAssist>
2008-02-12 11:12:00 1242 --a------ C:\WINDOWS\system32\tmp.reg
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22}]
C:\PROGRA~1\VOL_TO~1\VOL_TO~1.DLL
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{586E137D-73C5-464D-9339-FB5125DF6C7B}]
C:\WINDOWS\system32\khfDwxvT.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7B9177DD-6B63-462B-B645-D0AB44B1A006}]
C:\WINDOWS\system32\byXNghhG.dll
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22}"= C:\PROGRA~1\VOL_TO~1\VOL_TO~1.DLL [ ]
[-HKEY_CLASSES_ROOT\CLSID\{4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22}]
[HKEY_CLASSES_ROOT\vol_toolbar.VOL_TOOLBAR]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [04/20/2008 08:45 AM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [09/25/2007 02:11 AM]
"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [05/16/2006 12:58 PM]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" []
"RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [03/23/2008 11:31 AM]
"YSearchProtection"="C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe" [06/08/2007 10:59 AM]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" []
"VerizonServicepoint.exe"="C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" []
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" []
"Smapp"="C:\Program Files\Analog Devices\SoundMAX\Smtray.exe" [06/26/2002 04:36 PM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [11/17/2007 01:04 AM]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [07/09/2001 11:50 AM]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [06/21/2005 05:48 PM]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [06/21/2005 05:44 PM]
"HostManager"="C:\Program Files\Common Files\AOL\1195356549\ee\AOLSoftware.exe" [09/25/2006 08:52 PM]
"AGRSMMSG"="AGRSMMSG.exe" [04/28/2006 03:54 AM C:\WINDOWS\AGRSMMSG.exe]
"-FreedomNeedsReboot"="C:\Program Files\Verizon\Verizon Internet Security Suite\ZkRunOnceR.exe" []
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [06/11/2007 05:25 AM]
"wnaspid"="C:\WINDOWS\system32\wnaspid.exe" [03/26/2008 10:47 PM]
"Verizon Custom Uninstall Tracking"="C:\DOCUME~1\Areya\LOCALS~1\Temp\InstallHelper.exe" []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"XPRepairPro2007"="C:\Program Files\XP Repair Pro 2007\XPRepairPro.exe" []
"igndlm.exe"="C:\Documents and Settings\Areya\My Documents\New Folder\Download Manager\DLM.exe" [03/05/2007 05:57 PM]
"54ccd728deae4209d10415028f63f321"="C:\DOCUME~1\Areya\Desktop\MONOPO~1.exe" []
"afaa09c57f0255f0ae8743e836b707be"="C:\DOCUME~1\Areya\Desktop\BURGER~1.exe" []
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" []
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 12:24 PM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 08:00 AM]
"BitTorrent DNA"="C:\Program Files\DNA\btdna.exe" []
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [01/28/2008 11:43 AM]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoDispBackgroundPage"=0 (0x0)
"DisableRegistryTools"=0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\fccyxvvt]
fccyxvvt.dll
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Notification Packages"= scecli
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
-- End of Deckard's System Scanner: finished at 2008-04-20 17:49:11 ------------