SDFix: Version 1.234
Run by Nikki on Wed 10/08/2008 at 09:34 PM
Microsoft Windows XP [Version 5.1.2600]
Running From: C:\SDFix
Checking Services :
Restoring Default Security Values
Restoring Default Hosts File
Rebooting
Checking Files :
Trojan Files Found:
C:\Program Files\VnrBlock\VnrBlock21.exe - Deleted
C:\Program Files\VnrBlock\xoffdic.gz - Deleted
C:\Program Files\VnrBlock\xtarga.gz - Deleted
C:\WINDOWS\pskt.ini - Deleted
Folder C:\Program Files\VnrBlock - Removed
Removing Temp Files
ADS Check :
Final Check :
catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-10-08 22:21:00
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
Remaining Services :
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled

xpsp2res.dll,-22019"
"C:\\PROGRA~1\\ExamSoft\\SofTest\\SoftLnch.exe"="C:\\PROGRA~1\\ExamSoft\\SofTest\\SoftLnch.exe:*:Enabled:SofLaunch"
"C:\\PROGRA~1\\ExamSoft\\SofTest\\softest.exe"="C:\\PROGRA~1\\ExamSoft\\SofTest\\SofTest.exe:*:Enabled:SofTest"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\GameHouse\\TextTwist\\TextTwist.exe"="C:\\Program Files\\GameHouse\\TextTwist\\TextTwist.exe:*:Enabled:Super TextTwist"
"C:\\Program Files\\Yahoo! Games\\Bejeweled 2 Deluxe\\WinBej2.exe"="C:\\Program Files\\Yahoo! Games\\Bejeweled 2 Deluxe\\WinBej2.exe:*:Enabled:Bejeweled2"
"C:\\Program Files\\Microsoft Office\\OFFICE11\\FRONTPG.EXE"="C:\\Program Files\\Microsoft Office\\OFFICE11\\FRONTPG.EXE:*:Enabled:Microsoft Office FrontPage"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled

xpsp3res.dll,-20000"
"C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
"C:\\Program Files\\BearShare\\BearShare.exe"="C:\\Program Files\\BearShare\\BearShare.exe:*:Enabled:BearShare"
"C:\\Program Files\\AIM\\aim.exe"="C:\\Program Files\\AIM\\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"="C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe:*:Enabled:AOL Loader"
"C:\\Program Files\\AIM6\\aim6.exe"="C:\\Program Files\\AIM6\\aim6.exe:*:Enabled:AIM"
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"="C:\\Program Files\\Real\\RealPlayer\\realplay.exe:*:Enabled:RealPlayer"
"C:\\Program Files\\Network Associates\\Common Framework\\FrameworkService.exe"="C:\\Program Files\\Network Associates\\Common Framework\\FrameworkService.exe:*:Enabled:Framework Service"
"C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"="C:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe:*:Enabled:EasyShare"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled

xpsp2res.dll,-22019"
"C:\\StubInstaller.exe"="C:\\StubInstaller.exe:*:Enabled:LimeWire swarmed installer"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled

xpsp3res.dll,-20000"
"C:\\Program Files\\Microsoft Office\\OFFICE11\\FRONTPG.EXE"="C:\\Program Files\\Microsoft Office\\OFFICE11\\FRONTPG.EXE:*:Enabled:Microsoft Office FrontPage"
"C:\\Program Files\\AIM\\aim.exe"="C:\\Program Files\\AIM\\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
Remaining Files :
File Backups: - C:\SDFix\backups\backups.zip
Files with Hidden Attributes :
Wed 13 Oct 2004 1,694,208 ..SH. --- "C:\Program Files\Messenger\msmsgs.exe"
Wed 7 Dec 2005 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Fri 9 Sep 2005 22,016 ...H. --- "C:\Documents and Settings\Nikki\My Documents\~WRL3844.tmp"
Thu 25 Sep 2008 57,344 ...H. --- "C:\Documents and Settings\nlittle\My Documents\~WRL4013.tmp"
Wed 31 Jan 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Tue 27 Nov 2007 122,880 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0012.tmp"
Tue 27 Nov 2007 133,120 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0014.tmp"
Tue 27 Nov 2007 128,000 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0062.tmp"
Tue 27 Nov 2007 130,048 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0198.tmp"
Tue 27 Nov 2007 123,904 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0204.tmp"
Tue 27 Nov 2007 134,656 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0268.tmp"
Tue 27 Nov 2007 128,000 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0335.tmp"
Tue 27 Nov 2007 126,464 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0493.tmp"
Tue 27 Nov 2007 134,656 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0583.tmp"
Tue 27 Nov 2007 128,512 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0635.tmp"
Tue 27 Nov 2007 132,608 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0652.tmp"
Tue 27 Nov 2007 127,488 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0711.tmp"
Tue 27 Nov 2007 124,416 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0798.tmp"
Tue 27 Nov 2007 132,608 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0826.tmp"
Tue 27 Nov 2007 128,000 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL0943.tmp"
Tue 27 Nov 2007 133,120 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1044.tmp"
Tue 27 Nov 2007 124,416 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1091.tmp"
Tue 27 Nov 2007 128,512 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1096.tmp"
Tue 27 Nov 2007 125,440 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1332.tmp"
Tue 27 Nov 2007 132,608 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1511.tmp"
Tue 27 Nov 2007 127,488 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1792.tmp"
Tue 27 Nov 2007 125,952 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1794.tmp"
Tue 27 Nov 2007 124,416 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1824.tmp"
Tue 27 Nov 2007 126,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1943.tmp"
Tue 27 Nov 2007 131,584 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1964.tmp"
Tue 27 Nov 2007 132,608 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL1987.tmp"
Tue 27 Nov 2007 131,584 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2024.tmp"
Tue 27 Nov 2007 128,000 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2111.tmp"
Tue 27 Nov 2007 126,464 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2360.tmp"
Tue 27 Nov 2007 123,904 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2371.tmp"
Tue 27 Nov 2007 126,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2472.tmp"
Tue 27 Nov 2007 129,024 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2611.tmp"
Tue 27 Nov 2007 128,000 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2671.tmp"
Tue 27 Nov 2007 128,512 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2689.tmp"
Tue 27 Nov 2007 127,488 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2691.tmp"
Tue 27 Nov 2007 128,512 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2705.tmp"
Tue 27 Nov 2007 126,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2750.tmp"
Tue 27 Nov 2007 126,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2933.tmp"
Tue 27 Nov 2007 131,584 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL2999.tmp"
Tue 27 Nov 2007 130,560 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3302.tmp"
Tue 27 Nov 2007 124,416 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3371.tmp"
Tue 27 Nov 2007 130,560 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3509.tmp"
Tue 27 Nov 2007 125,952 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3570.tmp"
Tue 27 Nov 2007 124,416 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3685.tmp"
Tue 27 Nov 2007 128,000 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3747.tmp"
Tue 27 Nov 2007 130,560 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3757.tmp"
Tue 27 Nov 2007 126,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3823.tmp"
Tue 27 Nov 2007 126,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3859.tmp"
Tue 27 Nov 2007 135,168 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3868.tmp"
Tue 27 Nov 2007 131,584 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3899.tmp"
Tue 27 Nov 2007 130,560 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3977.tmp"
Tue 27 Nov 2007 128,512 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL3992.tmp"
Tue 27 Nov 2007 134,656 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL4029.tmp"
Tue 27 Nov 2007 125,952 ...H. --- "C:\Documents and Settings\nlittle\My Documents\7cr\~WRL4053.tmp"
Mon 6 Feb 2006 190,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL0448.tmp"
Mon 6 Feb 2006 191,488 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL0602.tmp"
Mon 6 Feb 2006 191,488 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL0721.tmp"
Tue 28 Mar 2006 582,656 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL0735.tmp"
Mon 6 Feb 2006 193,536 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL0830.tmp"
Mon 6 Feb 2006 190,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL0877.tmp"
Mon 6 Feb 2006 188,928 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL1007.tmp"
Thu 23 Mar 2006 712,704 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL1012.tmp"
Mon 6 Feb 2006 190,464 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL1095.tmp"
Mon 6 Feb 2006 187,904 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL1184.tmp"
Mon 27 Mar 2006 712,704 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL1336.tmp"
Mon 6 Feb 2006 190,464 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL1586.tmp"
Mon 6 Feb 2006 190,464 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL1868.tmp"
Mon 6 Feb 2006 192,512 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL1902.tmp"
Mon 6 Feb 2006 190,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL1934.tmp"
Mon 6 Feb 2006 192,512 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL1957.tmp"
Thu 2 Feb 2006 192,512 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL2282.tmp"
Mon 6 Feb 2006 190,464 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL2539.tmp"
Mon 6 Feb 2006 190,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL2650.tmp"
Mon 6 Feb 2006 192,512 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL2685.tmp"
Mon 6 Feb 2006 190,464 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL2828.tmp"
Mon 6 Feb 2006 193,024 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL2899.tmp"
Mon 6 Feb 2006 195,072 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL2977.tmp"
Mon 6 Feb 2006 195,072 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL3399.tmp"
Mon 6 Feb 2006 190,976 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL3512.tmp"
Mon 6 Feb 2006 188,416 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Civ Pro\~WRL4024.tmp"
Mon 27 Aug 2007 34,304 ...H. --- "C:\Documents and Settings\nlittle\My Documents\CommLaw Survey\~WRL0381.tmp"
Wed 16 Nov 2005 50,688 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL0004.tmp"
Tue 25 Oct 2005 129,536 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL0874.tmp"
Tue 25 Oct 2005 131,072 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL1242.tmp"
Thu 17 Nov 2005 51,712 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL1805.tmp"
Mon 24 Oct 2005 122,880 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL2297.tmp"
Thu 17 Nov 2005 52,224 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL2543.tmp"
Thu 17 Nov 2005 51,712 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL2871.tmp"
Mon 24 Oct 2005 28,160 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL3731.tmp"
Thu 17 Nov 2005 51,712 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL3838.tmp"
Tue 25 Oct 2005 129,024 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL3853.tmp"
Thu 17 Nov 2005 52,736 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL4006.tmp"
Thu 17 Nov 2005 51,712 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL4072.tmp"
Thu 17 Nov 2005 52,736 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Contracts\~WRL4094.tmp"
Thu 1 Feb 2007 117,248 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Copyright\~WRL2116.tmp"
Thu 10 May 2007 710,656 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Copyright\~WRL3967.tmp"
Wed 9 Nov 2005 21,504 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Crim Law\~WRL0336.tmp"
Wed 9 Nov 2005 23,040 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Crim Law\~WRL3437.tmp"
Wed 5 Mar 2008 29,696 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Crim Pro\~WRL0005.tmp"
Sat 8 Mar 2008 69,632 ...H. --- "C:\Documents and Settings\nlittle\My Documents\Crim Pro\~WRL0020.tmp"