anascoo
زيزوومى مميز
غير متصل
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
كود:
Deckard's System Scanner v20071014.68
Run by u on 2008-11-21 08:30:04
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
System Restore is disabled; attempting to re-enable...success.
-- Last 1 Restore Point(s) --
1: 2008-11-21 16:30:13 UTC - RP1 - System Checkpoint
Backed up registry hives.
Performed disk cleanup.
[color=red]Percentage of Memory in Use: 85% (more than 75%).[/color]
[color=red]Total Physical Memory: 503 MiB (512 MiB recommended).[/color]
-- HijackThis Clone ------------------------------------------------------------
Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-11-21 08:31:17
Platform: Windows XP Service Pack 3, v.5657 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.20900)
Boot mode: Normal
Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\TVR\RecSche.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\LClock\LClock.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSI\TV@Anywhere Utilities\P3XRCtl.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Styler\Styler.exe
C:\Program Files\mDSL\bin\EV-DO.exe
C:\Program Files\TVR\remote.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\u\Local Settings\Temp\xxx1684.exe
C:\DOCUME~1\u\LOCALS~1\Temp\~tmpc.exe
C:\Documents and Settings\u\Desktop\تجربة\fg677p1ca.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\u\Desktop\aljnteel_dss.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [URL]http://go.microsoft.com/fwlink/?LinkId=54896[/URL]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [URL]http://www.msn.com/?wl=true[/URL]
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = [URL]http://www.google.com/[/URL]
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8580
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [URL]http://go.microsoft.com/fwlink/?LinkId=69157[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [URL]http://go.microsoft.com/fwlink/?LinkId=54896[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [URL]http://go.microsoft.com/fwlink/?LinkId=54896[/URL]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [URL]http://go.microsoft.com/fwlink/?LinkId=69157[/URL]
O2 - BHO: XML module - {500BCA15-57A7-4eaf-8143-8C619470B13D} - C:\WINDOWS\system32\msxml71.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIEsBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Remote] "C:\Program Files\TVR\remote.exe"
O4 - HKLM\..\Run: [RecSche] "C:\Program Files\TVR\RecSche.exe"
O4 - HKLM\..\Run: [WinDVRCtrl] C:\WINDOWS\WDVRCtrl.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\W
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [Option Bib Logo Log] C:\Documents and Settings\All Users\Application Data\LICENSE ADMIN OPTION BIB\rect draw.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [LClock] C:\Program Files\LClock\LClock.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [32ford] C:\DOCUME~1\u\APPLIC~1\NURBTI~1\BoneLicense.exe
O4 - HKCU\..\Run: [MSFox] C:\DOCUME~1\u\LOCALS~1\Temp\xxx1684.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [LClock] C:\Program Files\LClock\LClock.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [LClock] C:\Program Files\LClock\LClock.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [LClock] C:\Program Files\LClock\LClock.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" (User 'Default user')
O4 - HKUS\.DEFAULT\..\Run: [LClock] C:\Program Files\LClock\LClock.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'Default user')
O4 - Startup: Styler.lnk = ?
O4 - Global Startup: TV Remote Control.lnk = C:\Program Files\MSI\TV@Anywhere Utilities\P3XRCtl.exe
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Free Download Manager تحميل الفيديو بواسطة - [URL]file://C:\Program[/URL] Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: تحميل المحددة بفري داونلود مانيجر - [URL]file://C:\Program[/URL] Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: تنزيل الكل بفري داونلود مانيجر - [URL]file://C:\Program[/URL] Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: تنزيل بفري داونلود مانيجر - [URL]file://C:\Program[/URL] Files\Free Download Manager\dllink.htm
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - (file missing)
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\SYSTEM\CCS\Services\Tcpip\..\{9365E9B3-562D-49DE-A789-9B3C647DFFFE}: NameServer = 212.0.138.10 212.0.138.11
O17 - HKLM\SYSTEM\CCS\Services\Tcpip\..\{EEFF9D9A-271C-4D1B-B56C-22ECD02A7BB1}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
--
End of file - 9475 bytes
-- File Associations -----------------------------------------------------------
[COLOR=red].cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%*[/COLOR]
[COLOR=red].cpl - cplfile - shell\runas\command - rundll32.exe shell32.dll,Control_RunDLLAsUser "%1",%*[/COLOR]
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R3 zteusbser (ZTE USB Device for Legacy Serial Communication) - c:\windows\system32\drivers\zteusbser.sys <Not Verified; ZTE Corpoation; ZTE Corpoation USB Modem/Serial Device Driver>
S2 OMSCAN - \sys??
? ? ? (file missing)
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
All services whitelisted.
-- Device Manager: Disabled ----------------------------------------------------
Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Mass Storage Controller
Device ID: PCI\VEN_104C&DEV_8033&SUBSYS_FF051179&REV_00\4&AD1B67F&0&23F0
Manufacturer:
Name: Mass Storage Controller
PNP Device ID: PCI\VEN_104C&DEV_8033&SUBSYS_FF051179&REV_00\4&AD1B67F&0&23F0
Service:
Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: PCI Modem
Device ID: PCI\VEN_8086&DEV_266D&SUBSYS_00011179&REV_03\3&B1BFB68&0&F3
Manufacturer:
Name: PCI Modem
PNP Device ID: PCI\VEN_8086&DEV_266D&SUBSYS_00011179&REV_03\3&B1BFB68&0&F3
Service:
-- Scheduled Tasks -------------------------------------------------------------
2008-11-21 08:00:04 252 --ah----- C:\WINDOWS\Tasks\A581269A91C6D6DA.job
-- Files created between 2008-10-21 and 2008-11-21 -----------------------------
2008-11-21 08:30:07 0 d--hs---- C:\System Volume Information
2008-11-21 03:06:00 103940 --a------ C:\WINDOWS\system32\msxml71.dll
2008-11-12 23:24:34 0 d-------- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2008-11-04 06:30:02 0 d-------- C:\WINDOWS\system32\PreInstall
2008-11-04 06:29:59 0 d--h----- C:\WINDOWS\$hf_mig$
2008-11-03 23:29:21 0 d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-11-03 21:01:41 0 d-------- C:\Documents and Settings\All Users\Application Data\LICENSE ADMIN OPTION BIB
2008-11-03 21:00:54 0 d-------- C:\Documents and Settings\u\Contacts
2008-11-03 21:00:33 0 d-------- C:\Program Files\Nurbtitlebolt
2008-11-03 21:00:21 0 d-------- C:\Documents and Settings\u\Application Data\Nurbtitlebolt
2008-11-03 20:58:57 0 d-------- C:\Program Files\Circle Developement
2008-11-03 20:58:42 0 d-------- C:\Program Files\Messenger Plus! Live
2008-11-03 20:36:44 0 d-------- C:\WINDOWS\system32\DRVSTORE
2008-11-03 20:09:23 0 d-------- C:\Program Files\Opera 9.5 beta
2008-11-03 20:07:59 0 d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-11-03 20:07:49 39936 --a------ C:\WINDOWS\system32\huffyuv.dll <Not Verified; Disappearing Inc.; Huffyuv>
2008-11-03 20:07:48 217088 --a------ C:\WINDOWS\system32\yv12vfw.dll <Not Verified; [URL="http://www.helixcommunity.org"]www.helixcommunity.org[/URL]; Helix YV12 YUV Codec>
2008-11-03 20:07:48 180224 --a------ C:\WINDOWS\system32\xvidvfw.dll
2008-11-03 20:07:48 765952 --a------ C:\WINDOWS\system32\xvidcore.dll
2008-11-03 20:07:48 558592 --a------ C:\WINDOWS\system32\x264vfw.dll
2008-11-03 20:07:48 630784 --a------ C:\WINDOWS\system32\vp7vfw.dll <Not Verified; On2.com; On2_VP70>
2008-11-03 20:07:48 438272 --a------ C:\WINDOWS\system32\vp6vfw.dll <Not Verified; On2.com; On2_VP6>
2008-11-03 20:07:48 144384 --a------ C:\WINDOWS\system32\Iacenc.dll <Not Verified; Intel Corporation; Indeo® audio software>
2008-11-03 20:07:48 217088 --a------ C:\WINDOWS\system32\i420vfw.dll <Not Verified; [URL="http://www.helixcommunity.org"]www.helixcommunity.org[/URL]; Helix I420 YUV Codec>
2008-11-03 20:07:47 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2008-11-03 20:07:47 196608 --a------ C:\WINDOWS\system32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>
2008-11-03 20:07:47 73728 --a------ C:\WINDOWS\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2008-11-03 20:07:47 639066 --a------ C:\WINDOWS\system32\divx.dll <Not Verified; DivX, Inc.; DivX®>
2008-11-03 20:07:46 10752 --a------ C:\WINDOWS\system32\ff_vfw.dll
2008-11-03 20:07:44 0 d-------- C:\Documents and Settings\u\Application Data\Real
2008-11-03 20:07:44 0 d-------- C:\Documents and Settings\All Users\Application Data\Real
2008-11-03 19:51:27 0 d--hs---- C:\Program Files\Common Files\WindowsLiveInstaller
2008-11-03 19:51:17 0 d-------- C:\Program Files\Windows Live
2008-11-03 19:51:11 0 d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-11-03 19:50:50 0 d-------- C:\Documents and Settings\All Users\Application Data\Yahoo!
2008-11-03 19:50:12 0 d-------- C:\Program Files\Yahoo!
2008-11-03 14:13:48 0 d-------- C:\Documents and Settings\u\Application Data\Macromedia
2008-11-03 14:10:16 96976 --a------ C:\WINDOWS\system32\drivers\klin.dat
2008-11-03 14:10:16 87855 --a------ C:\WINDOWS\system32\drivers\klick.dat
2008-11-03 14:08:48 8224 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2008-11-03 14:08:48 523296 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-11-03 14:08:48 0 d-------- C:\Program Files\Kaspersky Lab
2008-11-03 14:08:47 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-11-03 14:06:50 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2008-11-03 13:43:17 0 d-------- C:\Documents and Settings\u\Application Data\Adobe
2008-11-03 13:23:39 0 d-------- C:\Downloads
2008-11-03 13:18:05 0 d-------- C:\Documents and Settings\u\Application Data\Free Download Manager
2008-11-03 13:18:02 0 d-------- C:\Program Files\Free Download Manager
2008-11-03 13:18:02 0 d-------- C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG
2008-11-03 13:10:45 0 d-------- C:\Documents and Settings\u\Application Data\ZTEEVDO
2008-11-03 13:10:42 97920 --a------ C:\WINDOWS\system32\drivers\ZTEUsbser.sys <Not Verified; ZTE Corpoation; ZTE Corpoation USB Modem/Serial Device Driver>
2008-11-03 13:10:42 0 d-------- C:\Program Files\mDSL
2008-10-28 14:08:22 0 d-------- C:\WINDOWS\SHELLNEW
2008-10-28 14:08:19 0 d-------- C:\Program Files\Microsoft.NET
2008-10-27 12:01:55 0 d-------- C:\Documents and Settings\u\Application Data\Media Player Classic
2008-10-27 11:27:57 0 d-------- C:\Program Files\Realtek AC97
2008-10-27 11:27:55 40960 --a------ C:\WINDOWS\system32\ChCfg.exe
2008-10-27 11:27:51 1256 --a------ C:\WINDOWS\system32\drivers\alcxinit.dat
2008-10-27 11:27:51 176 --a------ C:\WINDOWS\system32\drivers\alcxhweq.dat
2008-10-27 11:27:51 176 --a------ C:\WINDOWS\system32\drivers\alcxeq.dat
2008-10-27 11:27:51 294912 --a------ C:\WINDOWS\alcupd.exe <Not Verified; Realtek Semiconductor Corp.; Realtek AC'97 Update driver Tool>
2008-10-27 11:27:51 200704 --a------ C:\WINDOWS\alcrmv.exe <Not Verified; Realtek Semiconductor Corp.; Realtek AC'97 Removing driver Tool>
2008-10-27 11:19:26 0 d-------- C:\Program Files\Teletext
2008-10-27 11:19:06 0 d-------- C:\Program Files\TVR
2008-10-27 11:17:47 45056 --a------ C:\WINDOWS\p3xunist.exe <Not Verified; Kworld Computer Co., Ltd.; TV713X BDA Uninstallation Program>
2008-10-27 11:17:04 0 d-------- C:\Program Files\MSI
2008-10-27 11:17:04 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-10-27 11:16:59 0 d-------- C:\Program Files\Common Files\InstallShield
2008-10-27 11:16:31 0 d-------- C:\WINDOWS\system32\XPSViewer
2008-10-27 11:16:31 0 d-------- C:\Program Files\MSBuild
2008-10-27 11:16:26 0 d-------- C:\Program Files\Reference Assemblies
2008-10-27 11:16:22 0 d-------- C:\Program Files\MSXML 6.0
2008-10-27 11:16:06 124928 -----n--- C:\WINDOWS\system32\prntvpt.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
2008-10-27 11:15:36 0 d--hs---- C:\Recycled
2008-10-27 11:15:32 0 d-------- C:\Documents and Settings\u\Application Data\Styler
2008-10-27 11:15:14 0 d-------- C:\Documents and Settings\u\Application Data\Identities
2008-10-27 11:14:45 0 d--h----- C:\Documents and Settings\u\Templates
2008-10-27 11:14:45 0 dr------- C:\Documents and Settings\u\Start Menu
2008-10-27 11:14:45 0 dr-h----- C:\Documents and Settings\u\SendTo
2008-10-27 11:14:45 0 dr-h----- C:\Documents and Settings\u\Recent
2008-10-27 11:14:45 0 d--h----- C:\Documents and Settings\u\PrintHood
2008-10-27 11:14:45 2883584 --ah----- C:\Documents and Settings\u\NTUSER.DAT
2008-10-27 11:14:45 0 d--h----- C:\Documents and Settings\u\NetHood
2008-10-27 11:14:45 0 dr------- C:\Documents and Settings\u\My Documents
2008-10-27 11:14:45 0 d--h----- C:\Documents and Settings\u\Local Settings
2008-10-27 11:14:45 0 dr------- C:\Documents and Settings\u\Favorites
2008-10-27 11:14:45 0 d-------- C:\Documents and Settings\u\Desktop
2008-10-27 11:14:45 0 d--hs---- C:\Documents and Settings\u\s
2008-10-27 11:14:45 0 dr-h----- C:\Documents and Settings\u\Application Data
2008-10-27 11:14:45 0 d-------- C:\Documents and Settings\u\Application Data\WinRAR
2008-10-27 11:14:45 0 d-------- C:\Documents and Settings\u\Application Data\uTorrent
2008-10-27 11:14:45 0 d-------- C:\Documents and Settings\u\Application Data\Desktopicon
2008-10-27 11:13:39 0 d---s---- C:\WINDOWS\system32\Microsoft
2008-10-27 11:13:39 0 d-------- C:\WINDOWS\Prefetch
2008-10-27 11:13:38 0 d--h----- C:\Documents and Settings\LocalService\Local Settings
2008-10-27 11:13:38 0 d--hs---- C:\Documents and Settings\LocalService\s
2008-10-27 11:13:38 0 d-------- C:\Documents and Settings\LocalService\Application Data
2008-10-27 11:13:38 0 d---s---- C:\Documents and Settings\LocalService\Application Data\Microsoft
2008-10-27 11:13:37 380928 --ah----- C:\Documents and Settings\LocalService\NTUSER.DAT
2008-10-27 11:12:36 0 d--h----- C:\Documents and Settings\NetworkService\Local Settings
2008-10-27 11:12:36 0 d--hs---- C:\Documents and Settings\NetworkService\s
2008-10-27 11:12:36 0 d-------- C:\Documents and Settings\NetworkService\Application Data
2008-10-27 11:12:36 0 d---s---- C:\Documents and Settings\NetworkService\Application Data\Microsoft
2008-10-27 11:12:35 380928 --ah----- C:\Documents and Settings\NetworkService\NTUSER.DAT
2008-10-27 11:11:10 380928 ---h----- C:\Documents and Settings\Default User\NTUSER.DAT
2008-10-27 11:11:09 499200 --a------ C:\WINDOWS\system32\HypnogenicRain.scr <Not Verified; Sencesa Group; Hypnogenic Rain Screensaver>
2008-10-27 11:11:09 0 d-------- C:\Program Files\Portable Appliances
2008-10-27 11:10:56 20120 --a------ C:\WINDOWS\sKzVistaUltimateSound(Loud).reg
2008-10-27 11:10:52 0 d-------- C:\Documents and Settings\Default User\Application Data\Desktopicon
2008-10-27 11:10:41 0 d-------- C:\Program Files\PowerCmd
2008-10-27 11:10:38 0 d-------- C:\Program Files\LClock
2008-10-27 11:10:32 164352 --a------ C:\WINDOWS\system32\unrar.dll
2008-10-27 11:10:30 0 d-------- C:\Program Files\K-Lite Codec Pack
2008-10-27 11:10:14 0 d-------- C:\Program Files\Common Files\Stardock
2008-10-27 11:09:55 0 d-------- C:\WINDOWS\Hunt Virus Utilities
2008-10-27 11:09:55 0 d-------- C:\Program Files\Hunt Virus Utilities
2008-10-27 11:09:52 0 d-------- C:\Program Files\HashTab Shell Extension
2008-10-27 11:09:37 0 d-------- C:\Program Files\Alky for Applications
2008-10-27 11:09:30 0 d-------- C:\Program Files\Sysinternals
2008-10-27 11:09:24 0 d-------- C:\Program Files\IZArc
2008-10-27 11:07:22 0 -rahs---- C:\MSDOS.SYS
2008-10-27 11:07:22 0 -rahs---- C:\IO.SYS
2008-10-27 11:07:22 0 --a------ C:\CONFIG.SYS
2008-10-27 11:07:22 0 --a------ C:\AUTOEXEC.BAT
2008-10-27 11:07:05 0 d-------- C:\WINDOWS\system32\dllcache
2008-10-27 11:06:24 0 d--hs---- C:\Documents and Settings\All Users\DRM
2008-10-27 11:06:06 0 d--h----- C:\Program Files\WindowsUpdate
2008-10-27 11:06:02 0 d-------- C:\Program Files\Online Services
2008-10-27 11:05:36 0 d---s---- C:\WINDOWS\Tasks
2008-10-27 11:05:35 0 d-------- C:\Program Files\Common Files\MSSoap
2008-10-27 11:05:31 0 d-------- C:\WINDOWS\srchasst
2008-10-27 11:05:21 0 d-------- C:\Program Files\Movie Maker
2008-10-27 11:04:56 0 d-------- C:\WINDOWS\system32\Restore
2008-10-27 11:04:06 21640 --a------ C:\WINDOWS\system32\emptyregdb.dat
2008-10-27 11:03:42 0 d-------- C:\WINDOWS\Registration
2008-10-27 11:03:24 0 dr------- C:\WINDOWS\Offline Web Pages
2008-10-27 11:03:24 0 d---s---- C:\WINDOWS\Downloaded Program Files
2008-10-27 11:02:37 0 d-------- C:\Documents and Settings\Default User\Application Data\WinRAR
2008-10-27 11:02:24 0 d-------- C:\Program Files\uTorrent
2008-10-27 11:02:19 0 d-------- C:\Documents and Settings\Default User\Application Data\uTorrent
2008-10-27 11:00:25 0 d-------- C:\Program Files\VistaExperience.org
2008-10-27 10:58:34 498176 --a------ C:\WINDOWS\system32\vLogon.scr <Not Verified; Microsoft Corporation; Microsoft? Windows? Operating System>
2008-10-27 10:58:34 382976 --a------ C:\WINDOWS\system32\Vista.scr <Not Verified; Microsoft Corporation; Microsoft? Windows? Operating System>
2008-10-27 10:58:34 117248 --a------ C:\WINDOWS\system32\Ribbons.scr <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
2008-10-27 10:58:34 117248 --a------ C:\WINDOWS\system32\Mystify.scr <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
2008-10-27 10:58:34 0 d-------- C:\Program Files\Windows Sidebar
2008-10-27 10:58:33 720412 --a------ C:\WINDOWS\system32\MGB_ScreenSaver.scr <Not Verified; Tenmiles Corporation; ScreenSwift Screen Saver>
2008-10-27 10:58:33 773120 --a------ C:\WINDOWS\system32\Bubbles.scr <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
2008-10-27 10:58:32 1263616 --a------ C:\WINDOWS\system32\Aurora.scr <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
2008-10-27 10:58:06 0 d-------- C:\Program Files\RocketDock
2008-10-27 10:57:58 0 d-------- C:\Program Files\Styler
2008-10-27 10:57:56 0 d-------- C:\Program Files\CCleaner
2008-10-27 10:57:29 0 d-------- C:\Program Files\7-Zip
2008-10-27 10:57:24 0 d-------- C:\Program Files\Desktop
2008-10-27 10:57:18 20992 --a------ C:\WINDOWS\system32\CabTool.exe <Not Verified; ; CAB Tool>
2008-10-27 10:57:18 0 d-------- C:\Program Files\System
2008-10-27 10:56:50 0 d-------- C:\Program Files\Stanimir Stoyanov
2008-10-27 10:56:37 0 d-------- C:\Program Files\Stardock
2008-10-27 10:56:31 0 d-------- C:\Program Files\Windows Media Connect 2
2008-10-27 10:56:17 0 d-------- C:\Program Files\Windows NT
2008-10-27 10:56:13 0 d-------- C:\WINDOWS\system32\MsDtc
2008-10-27 10:56:11 0 d-------- C:\WINDOWS\system32\Com
2008-10-27 10:43:20 0 d--hs---- C:\WINDOWS\Installer
2008-10-27 10:43:19 0 d-------- C:\Program Files\Common Files\ODBC
2008-10-27 10:43:15 0 d-------- C:\Program Files
2008-10-27 10:43:15 0 d-------- C:\Program Files\Common Files
2008-10-27 10:43:15 0 d-------- C:\Program Files\Common Files\SpeechEngines
2008-10-27 10:42:39 0 d--h----- C:\Documents and Settings\Default User\Templates
2008-10-27 10:42:39 0 dr------- C:\Documents and Settings\Default User\Start Menu
2008-10-27 10:42:39 0 dr-h----- C:\Documents and Settings\Default User\SendTo
2008-10-27 10:42:39 0 d--h----- C:\Documents and Settings\Default User\Recent
2008-10-27 10:42:39 0 d--h----- C:\Documents and Settings\Default User\PrintHood
2008-10-27 10:42:39 0 d--h----- C:\Documents and Settings\Default User\NetHood
2008-10-27 10:42:39 0 d-------- C:\Documents and Settings\Default User\My Documents
2008-10-27 10:42:39 0 dr-h----- C:\Documents and Settings\Default User\Local Settings
2008-10-27 10:42:39 0 d-------- C:\Documents and Settings\Default User\Favorites
2008-10-27 10:42:39 0 d-------- C:\Documents and Settings\Default User\Desktop
2008-10-27 10:42:39 0 d--hs---- C:\Documents and Settings\Default User\s
2008-10-27 10:42:39 0 d--h----- C:\Documents and Settings\All Users\Templates
2008-10-27 10:42:39 0 d-------- C:\Documents and Settings\All Users\Start Menu
2008-10-27 10:42:39 0 d-------- C:\Documents and Settings\All Users\Favorites
2008-10-27 10:42:39 0 dr------- C:\Documents and Settings\All Users\Documents
2008-10-27 10:42:39 0 d-------- C:\Documents and Settings\All Users\Desktop
2008-10-27 10:42:22 0 d-------- C:\WINDOWS\system32\CatRoot2
2008-10-27 10:42:22 0 d-------- C:\WINDOWS\system32\CatRoot
2008-10-27 10:42:17 0 dr-h----- C:\Documents and Settings\Default User\Application Data
2008-10-27 10:42:17 0 d---s---- C:\Documents and Settings\Default User\Application Data\Microsoft
2008-10-27 10:42:17 0 dr-h----- C:\Documents and Settings\All Users\Application Data
2008-10-27 10:42:17 0 d---s---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-10-27 10:39:53 0 d-------- C:\Documents and Settings
2008-10-27 10:35:08 0 d-a------ C:\WINDOWS
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\WinSxS
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Web
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\twain_32
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\wins
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\wbem
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\usmt
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\spool
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\ShellExt
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\Setup
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\scripting
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\ras
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\oobe
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\npp
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\mui
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\Macromed
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\inetsrv
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\IME
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\icsxml
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\ias
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\export
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\en
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\drivers
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\drivers\UMDF
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\drivers\etc
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\drivers\disdn
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\dhcp
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\config
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\3com_dmi
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\3076
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\2052
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\1054
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\1042
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\1041
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\1037
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\1033
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\1031
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\1028
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system32\1025
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\system
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\SoftwareDistribution
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\security
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Resources
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\repair
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Provisioning
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\PeerNet
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\pchealth
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Network Diagnostic
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\mui
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\msapps
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\msagent
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Media
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\L2Schemas
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\java
2008-10-27 10:35:08 0 d--h----- C:\WINDOWS\inf
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\ime
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Help
2008-10-27 10:35:08 0 dr--s---- C:\WINDOWS\Fonts
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\ehome
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Driver Cache
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Debug
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Cursors
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Connection Wizard
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\Config
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\AppPatch
2008-10-27 10:35:08 0 d-------- C:\WINDOWS\addins
2008-10-26 23:28:46 53248 --a------ C:\WINDOWS\system32\WSTDEC.dll <Not Verified; NXP Semiconductors; Windows Teletext Browser>
2008-10-26 23:28:45 565248 --a------ C:\WINDOWS\system32\UNINSTAL.EXE <Not Verified; ; Setup>
2008-10-26 23:28:45 307200 --a------ C:\WINDOWS\system32\cMPG2V.dll <Not Verified; CyberLink Corp.; CyberLink MPEG2 Encoder>
2008-10-26 23:28:44 233472 --a------ C:\WINDOWS\system32\cMPG1V.dll <Not Verified; CyberLink Corp.; CyberLink MPEG1 Encoder>
-- Find3M Report ---------------------------------------------------------------
2008-10-27 10:42:40 62 --ahs---- C:\Documents and Settings\u\Application Data\desktop.ini
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper s\{500BCA15-57A7-4eaf-8143-8C619470B13D}]
11/21/2008 03:06 AM 103940 --a------ C:\WINDOWS\system32\msxml71.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper s\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
07/29/2008 08:21 PM 62728 --a------ C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [05/01/2008 08:15 PM]
"Remote"="C:\Program Files\TVR\remote.exe" [02/14/2007 05:22 PM]
"RecSche"="C:\Program Files\TVR\RecSche.exe" [02/14/2007 05:25 PM]
"WinDVRCtrl"="C:\WINDOWS\WDVRCtrl.exe" []
"ScanRegistry"="C:\W" []
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [07/19/2005 02:09 AM]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [07/19/2005 02:06 AM]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [07/19/2005 02:10 AM]
"KernelFaultCheck"="C:\WINDOWS\system32\dumprep 0 -k" []
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [07/29/2008 08:20 PM]
"Option Bib Logo Log"="C:\Documents and Settings\All Users\Application Data\LICENSE ADMIN OPTION BIB\rect draw.exe" [11/21/2008 08:09 AM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [04/14/2008 12:00 PM]
"RocketDock"="C:\Program Files\RocketDock\RocketDock.exe" [09/02/2007 01:58 PM]
"LClock"="C:\Program Files\LClock\LClock.exe" [09/19/2004 10:27 AM]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [03/22/2008 10:18 PM]
"Free Download Manager"="C:\Program Files\Free Download Manager\fdm.exe" [01/29/2008 09:12 PM]
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [12/17/2007 05:13 PM]
"32ford"="C:\DOCUME~1\u\APPLIC~1\NURBTI~1\BoneLicense.exe" [11/03/2008 08:59 PM]
"MSFox"="C:\DOCUME~1\u\LOCALS~1\Temp\xxx1684.exe" [11/21/2008 03:05 AM]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"nltide_3"=rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
"ShowDeskFix"=regsvr32 /s /n /i:u shell32
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"RocketDock"="C:\Program Files\RocketDock\RocketDock.exe"
"LClock"=C:\Program Files\LClock\LClock.exe
C:\Documents and Settings\u\Start Menu\Programs\Startup\
Styler.lnk - C:\Documents and Settings\u\Application Data\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe [10/27/2008 11:14:58 AM]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
TV Remote Control.lnk - C:\Program Files\MSI\TV@Anywhere Utilities\P3XRCtl.exe [10/27/2008 11:17:04 AM]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLowDiskSpaceChecks"=1 (0x1)
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoLowDiskSpaceChecks"=1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy]
C:\WINDOWS\System32\dimsntfy.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
C:\Program Files\Stardock\ Desktop\WindowBlinds\wbsrv.dll 05/12/2008 10:49 AM 210168 C:\Program Files\Stardock\ Desktop\WindowBlinds\WbSrv.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
eapsvcs eaphost
dot3svc dot3svc
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
napagent
hkmsvc
*Newly Created Service* - SRSERVICE
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
RUNDLL32 advpack.dll,LaunchINFSection Sidebar.inf,Register
-- End of Deckard's System Scanner: finished at 2008-11-21 08:32:37 ------------
كود:
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft Windows XP Professional (build 2600) SP 3.0
Architecture: X86; Language: English
CPU 0: Intel(R) Pentium(R) M processor 1.86GHz
Percentage of Memory in Use: 84%
Physical Memory (total/avail): 502.42 MiB / 78.7 MiB
Pagefile Memory (total/avail): 1221.34 MiB / 606.6 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1894.25 MiB
C: is Fixed (FAT32) - 25.57 GiB total, 16.97 GiB free.
D: is Fixed (NTFS) - 12.02 GiB total, 1.91 GiB free.
E: is Fixed (NTFS) - 12.12 GiB total, 8.57 GiB free.
F: is Fixed (NTFS) - 6.17 GiB total, 2.19 GiB free.
G: is CDROM (No Media)
[URL="file://\\.\PHYSICALDRIVE0"]\\.\PHYSICALDRIVE0[/URL] - TOSHIBA MK6034GSX - 55.89 GiB - 4 partitions
\PARTITION0 (bootable) - Unknown - 25.58 GiB - C:
\PARTITION1 - Extended w/Extended Int 13 - 30.31 GiB - D: - E: - F:
-- Security Center -------------------------------------------------------------
AUOptions is scheduled to auto-install.
-- Environment Variables -------------------------------------------------------
ALKY=C:\Program Files\Alky for Applications\Libraries\
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\u\Application Data
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=ISMA3EL-D67B82E
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\u
LOGONSERVER=\\ISMA3EL-D67B82E
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Alky for Applications\Libraries\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 13 Stepping 8, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0d08
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\u\LOCALS~1\Temp
TMP=C:\DOCUME~1\u\LOCALS~1\Temp
USERDOMAIN=ISMA3EL-D67B82E
USERNAME=u
USERPROFILE=C:\Documents and Settings\u
windir=C:\WINDOWS
-- User Profiles ---------------------------------------------------------------
u [I](admin)[/I]
-- Add/Remove Programs ---------------------------------------------------------
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
µTorrent --> "C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
7-Zip 4.57 --> "C:\Program Files\7-Zip\Uninstall.exe"
Alky for Applications (Windows XP) --> MsiExec.exe /X{BB05D173-9681-4812-A7FA-BD4042A3DA00}
CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
Free Download Manager 2.5 --> "C:\Program Files\Free Download Manager\unins000.exe"
Gadget Installer --> MsiExec.exe /I{3F3733A5-8322-454D-A638-3B74E1C83752}
HashTab 2.0.8 --> C:\Program Files\HashTab Shell Extension\uninst.exe
Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hunt Virus Utilities --> "C:\WINDOWS\Hunt Virus Utilities\uninstall.exe" "/U:C:\Program Files\Hunt Virus Utilities\Uninstall\uninstall.xml"
IconPackager --> C:\PROGRA~1\STARDOCK\~1\ICONPA~1\iconpackager.exe /uninstallwise
Intel(R) Graphics Media Accelerator Driver for Mobile --> RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_2792 PCI\VEN_8086&DEV_2592
IZArc 3.81 --> "C:\Program Files\IZArc\unins000.exe"
K-Lite Mega Codec Pack 1.67 --> "C:\Program Files\K-Lite Codec Pack\unins000.exe"
Kaspersky Internet Security 2009 --> MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
Kaspersky Internet Security 2009 --> MsiExec.exe /I{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}
Kels' CPL Bonus Pack! --> rundll32.exe advpack.dll,LaunchINFSection CPLBonus.inf,uninstall
LClock --> C:\Program Files\LClock\Uninstall.exe
Messenger Plus! Live & Sponsor (CiD) --> "C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft Office 2007 Recent Documents Gadget --> MsiExec.exe /X{90120000-008A-0409-0000-0000000FF1CE}
Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110401-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2005 SP1 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30304 --> MsiExec.exe /X{C9B26742-06BE-3B75-B1DE-7B91B5956A04}
Mozilla Firefox (2.0.0.14) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSI 8624 BDA Driver --> C:\WINDOWS\p3xunist.exe
MSXML 6.0 Parser (KB933579) --> MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Opera --> C:\PROGRA~1\OPERA9~1.5BE\uninst\unwise.exe C:\PROGRA~1\OPERA9~1.5BE\uninst\install.log
PowerCmd 1.9 --> "C:\Program Files\PowerCmd\unins000.exe"
Realtek AC'97 Audio --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x9 -removeonly
RocketDock 1.3.5 --> "C:\Program Files\RocketDock\unins000.exe"
Styler --> MsiExec.exe /I{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}
sudani mDSL --> "C:\Program Files\mDSL\unins000.exe"
[EMAIL="TV@Anywhere"]TV@Anywhere[/EMAIL] Utilities --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{477AB148-138C-46D2-820B-0DBFA744CEE8}\setup.exe" -l0x9 -uninst
TVR --> C:\Program Files\TVR\Uninstal.EXE
Unlocker 1.8.7 --> C:\Program Files\Unlocker\uninst.exe
WindowBlinds --> C:\PROGRA~1\Stardock\~1\WINDOW~1\UNWISE.EXE C:\PROGRA~1\Stardock\~1\WINDOW~1\INSTALL.LOG
Windows Live installer --> MsiExec.exe /X{A7E4ECCA-4A8E-4258-8EC8-2DCCF5B11320}
Windows Live Messenger --> MsiExec.exe /X{508CE775-4BA4-4748-82DF-FE28DA9F03B0}
Windows Live Sign-in Assistant --> MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
Windows Sidebar --> RUNDLL32 advpack.dll,LaunchINFSection Sidebar.inf,UnInstall
WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
XML Paper Specification Shared Components Pack 1.0 -->
Yahoo! Messenger --> C:\PROGRA~1\YAHOO!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\YAHOO!\MESSEN~1\INSTALL.LOG
-- Application Event Log -------------------------------------------------------
Event Record #/Type150 / Error
Event Submitted/Written: 11/14/2008 02:14:24 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application yahoomessenger.exe, version 9.0.0.922, faulting module yahoomessenger.exe, version 9.0.0.922, fault address 0x001703df.
Processing media-specific event for [yahoomessenger.exe!ws!]
Event Record #/Type149 / Error
Event Submitted/Written: 11/14/2008 11:50:08 AM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application yahoomessenger.exe, version 9.0.0.922, faulting module yahoomessenger.exe, version 9.0.0.922, fault address 0x001703df.
Processing media-specific event for [yahoomessenger.exe!ws!]
Event Record #/Type145 / Error
Event Submitted/Written: 11/10/2008 01:13:27 PM
Event ID/Source: 1068 / Userenv
Event Description:
Windows ended GPO processing because the computer shut down or the user logged off.
Event Record #/Type127 / Error
Event Submitted/Written: 11/05/2008 03:15:07 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application yahoomessenger.exe, version 9.0.0.922, faulting module yahoomessenger.exe, version 9.0.0.922, fault address 0x00170663.
Processing media-specific event for [yahoomessenger.exe!ws!]
Event Record #/Type97 / Error
Event Submitted/Written: 11/03/2008 02:11:38 PM
Event ID/Source: 8 / crypt32
Event Description:
Failed auto update retrieval of third-party root list sequence number from: <[URL]http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt[/URL]> with error: This network connection does not exist.
-- Security Event Log ----------------------------------------------------------
No Errors/Warnings found.
-- System Event Log ------------------------------------------------------------
Event Record #/Type1038 / Error
Event Submitted/Written: 11/21/2008 01:06:07 AM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The OMSCAN service failed to start due to the following error:
%%2
Event Record #/Type1020 / Error
Event Submitted/Written: 11/21/2008 00:43:38 AM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The OMSCAN service failed to start due to the following error:
%%2
Event Record #/Type1000 / Error
Event Submitted/Written: 11/20/2008 08:25:07 AM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The OMSCAN service failed to start due to the following error:
%%2
Event Record #/Type977 / Error
Event Submitted/Written: 11/20/2008 06:04:03 AM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The OMSCAN service failed to start due to the following error:
%%2
Event Record #/Type959 / Error
Event Submitted/Written: 11/20/2008 01:33:34 AM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The OMSCAN service failed to start due to the following error:
%%2
-- End of Deckard's System Scanner: finished at 2008-11-21 08:32:37 ------------
