thank you cookiegal here's the log files
"g1tana" - 2007-07-09 20:41:20 - ComboFix 07-07-10.1 - Service Pack 2 [SAFE MODE]
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
-------\LEGACY_IPRIP
-------\LEGACY_NM
-------\LEGACY_NPF
-------\Iprip
-------\nm
-------\NPF
((((((((((((((((((((((((( Files Created from 2007-06-09 to 2007-07-09 )))))))))))))))))))))))))))))))
2007-07-09 20:31 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-09 04:13 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2007-07-09 04:13 <DIR> d-------- C:\WINDOWS\LastGood.Tmp
2007-07-09 00:39 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-07-08 22:43 <DIR> d-------- C:\Program Files\Trend Micro
2007-07-08 21:46 <DIR> d-------- C:\DOCUME~1\g1tana\APPLIC~1\SystemRequirementsLab
2007-07-08 00:37 <DIR> d-------- C:\Program Files\XP Repair Pro 2007
2007-07-08 00:21 36,864 --------- C:\WINDOWS\system32\wbsys.dll
2007-07-08 00:21 20,480 --a------ C:\WINDOWS\system32\wbload.dll
2007-07-08 00:21 <DIR> d-------- C:\Program Files\Stardock
2007-07-07 19:59 427,864 --a------ C:\WINDOWS\system32\XceedZip.dll
2007-07-07 19:58 <DIR> d-------- C:\Program Files\Driver-Soft
2007-07-07 16:20 <DIR> d-------- C:\Program Files\Security Task Manager
2007-07-06 21:51 164 --a------ C:\install.dat
2007-07-06 21:44 <DIR> d-------- C:\DOCUME~1\g1tana\APPLIC~1\GetRightToGo
2007-07-05 18:40 <DIR> d-------- C:\Program Files\Ableton
2007-07-05 18:40 <DIR> d-------- C:\DOCUME~1\g1tana\APPLIC~1\Ableton
2007-07-05 18:02 3 --a------ C:\WINDOWS\system32\ceme26.dll
2007-07-05 18:02 3 --a------ C:\WINDOWS\ceme26.dat
2007-07-05 18:02 <DIR> d-------- C:\Program Files\Celemony
2007-07-04 18:49 <DIR> d-------- C:\Program Files\Audacity
2007-07-03 12:47 <DIR> d-------- C:\Program Files\Marine Sharpshooter 3
2007-07-03 12:47 <DIR> d-------- C:\games
2007-07-02 16:41 <DIR> d-------- C:\DOCUME~1\g1tana\APPLIC~1\LimeWire
2007-07-01 23:18 <DIR> d-------- C:\WINDOWS\CAVTemp
2007-07-01 20:17 1,021,504 --a------ C:\WINDOWS\system32\vete.dll
2007-07-01 19:58 <DIR> d-------- C:\DOCUME~1\g1tana\APPLIC~1\SiteAdvisor
2007-07-01 19:27 77,824 --a------ C:\WINDOWS\system32\driverif.dll
2007-07-01 19:27 653,064 --a------ C:\WINDOWS\system32\imsinstall.dll
2007-07-01 19:27 645,904 --a------ C:\WINDOWS\system32\drivers\vetmonnt.sys
2007-07-01 19:27 59,144 --a------ C:\WINDOWS\zllsputility.exe
2007-07-01 19:27 21,605 --a------ C:\WINDOWS\system32\drivers\vet-filt.sys
2007-07-01 19:27 2,803,456 --a------ C:\WINDOWS\system32\imslsp.dll
2007-07-01 19:27 15,668 --a------ C:\WINDOWS\system32\drivers\vet-rec.sys
2007-07-01 19:27 12,288 --a------ C:\WINDOWS\system32\vetntmsg.dll
2007-07-01 19:27 115,088 --a------ C:\WINDOWS\system32\drivers\vetfddnt.sys
2007-07-01 19:26 <DIR> d-------- C:\WINDOWS\system32\ZoneLabs
2007-06-30 19:52 <DIR> d-------- C:\DOCUME~1\g1tana\APPLIC~1\Ahead
2007-06-30 19:50 <DIR> d-------- C:\Program Files\Nero
2007-06-30 19:50 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-06-30 19:43 <DIR> d-------- C:\DOCUME~1\g1tana\APPLIC~1\CyberLink
2007-06-30 19:37 <DIR> d-------- C:\MyWorks
2007-06-30 19:27 <DIR> d-------- C:\Program Files\Innovatools
2007-06-30 19:21 <DIR> d-------- C:\DOCUME~1\g1tana\APPLIC~1\InterVideo
2007-06-30 19:18 <DIR> d-------- C:\Program Files\InterActual
2007-06-30 19:17 831,600 --a------ C:\WINDOWS\system32\Ctaa1.dat
2007-06-30 19:17 77,824 --a------ C:\WINDOWS\system32\ctdvda32.dll
2007-06-30 19:17 333,600 --a------ C:\WINDOWS\system32\drivers\ctdvda2k.sys
2007-06-30 19:17 <DIR> d-------- C:\Program Files\InterVideo
2007-06-30 19:17 <DIR> d-------- C:\Program Files\Creative
2007-06-30 19:17 <DIR> d-------- C:\Program Files\Common Files\InterVideo
2007-06-27 17:29 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\McAfee
2007-06-27 17:23 <DIR> d-------- C:\Program Files\PowerISO
2007-06-26 19:08 <DIR> d-------- C:\Program Files\RegCure
2007-06-20 21:09 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Authentium
2007-06-20 21:07 <DIR> d-------- C:\Program Files\BT
2007-06-20 20:58 106,496 --a------ C:\WINDOWS\system32\atl71.dll
2007-06-20 20:58 <DIR> d-------- C:\Program Files\Common Files\Authentium Shared
2007-06-20 13:50 <DIR> d-------- C:\DOCUME~1\g1tana\APPLIC~1\Sammsoft
2007-06-18 11:31 <DIR> d-------- C:\DOCUME~1\g1tana\OngameNetwork
2007-06-16 15:36 <DIR> d-------- C:\WINDOWS\system32\FlashAX
2007-06-14 20:37 14 --a------ C:\DOCUME~1\g1tana\getfile.dat
2007-06-13 23:12 <DIR> d-------- C:\Program Files\F1 Challange KRC 2007
2007-06-12 20:52 <DIR> d-------- C:\DOCUME~1\g1tana\APPLIC~1\Help
2007-06-12 20:45 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\SecTaskMan
2007-06-11 04:12 <DIR> d-------- C:\Program Files\Windows Live
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
2007-07-09 07:04:21 -------- d-----w C:\Program Files\Windows Defender
2007-07-09 07:01:25 -------- d-----w C:\Program Files\Messenger
2007-07-09 07:00:32 -------- d-----w C:\Program Files\Google
2007-07-09 06:47:41 -------- d-----w C:\Program Files\Bonjour
2007-07-08 14:51:30 -------- d-----w C:\Program Files\EA SPORTS
2007-07-08 12:37:38 -------- d-----w C:\Program Files\VstPlugins
2007-07-06 20:22:31 -------- d-----w C:\Program Files\Card Tricks
2007-07-06 20:22:30 -------- d-----w C:\Program Files\Alwil Software
2007-07-06 20:22:21 -------- d-----w C:\Program Files\Activision
2007-07-06 10:53:24 -------- d-----w C:\Program Files\BitComet
2007-07-03 22:30:28 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-07-02 17:36:16 -------- d-----w C:\Program Files\Image-Line
2007-07-01 18:30:19 4,212 ---h--w C:\WINDOWS\system32\zllictbl.dat
2007-06-28 13:58:03 -------- d-----w C:\Program Files\Windows Live Safety Center
2007-06-27 11:27:17 2,560 ----a-w C:\WINDOWS\system32\BitCometRes.dll
2007-06-20 21:02:48 -------- d-----w C:\Program Files\Adverts
2007-06-20 21:02:48 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\grim regs
2007-06-20 14:23:09 -------- d-----w C:\Program Files\MSN Messenger
2007-06-12 18:14:36 825 --sha-w C:\WINDOWS\system32\mmf.sys
2007-06-11 03:12:05 -------- d-----w C:\Program Files\Messenger Plus! Live
2007-06-10 08:51:45 -------- d-----w C:\Program Files\Hide IP Platinum
2007-06-10 06:19:46 3,050 ----a-w C:\WINDOWS\system32\ealregsnapshot1.reg
2007-06-07 18:58:09 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\Talkback
2007-06-07 13:06:31 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\Ufasoft
2007-06-06 04:22:01 -------- d-----w C:\Program Files\DIKO
2007-05-30 18:36:41 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\Microsoft Corporation
2007-05-26 01:09:47 20,747 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys
2007-05-26 01:09:41 -------- d-----w C:\Program Files\Sitecom
2007-05-25 05:38:03 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\WildPackets
2007-05-24 18:07:41 -------- d-----w C:\Program Files\MSXML 4.0
2007-05-24 05:36:17 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\Samsung
2007-05-23 19:54:10 -------- d-----w C:\Program Files\Samsung
2007-05-21 20:37:48 -------- d-----w C:\Program Files\Belarc
2007-05-20 01:34:51 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\Apple Computer
2007-05-18 11:19:56 9 ----a-w C:\winmap.dll
2007-05-18 11:19:56 9 ----a-w C:\Program Files\install_log.dat
2007-05-17 00:51:43 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\SYSTRAN
2007-05-17 00:49:31 -------- d-----w C:\Program Files\SYSTRAN
2007-05-17 00:49:23 878,080 ----a-w C:\WINDOWS\system32\iconv.dll
2007-05-17 00:49:23 721,920 ----a-w C:\WINDOWS\system32\libxml2.dll
2007-05-17 00:49:23 51,200 ----a-w C:\WINDOWS\system32\libexslt.dll
2007-05-17 00:49:23 150,016 ----a-w C:\WINDOWS\system32\libxslt.dll
2007-05-16 15:12:02 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-05-14 17:17:47 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\My Games
2007-05-14 17:05:48 -------- d-----w C:\Program Files\Firaxis Games
2007-05-14 17:05:31 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\InstallShield
2007-05-14 05:17:14 -------- d-----w C:\DOCUME~1\g1tana\APPLIC~1\Google
2007-05-14 02:46:01 -------- d-----w C:\Program Files\Atari
2007-05-09 00:27:38 -------- d-----w C:\Program Files\QuickTime
2007-05-09 00:26:24 -------- d-----w C:\Program Files\Apple Software Update
2007-04-25 14:21:15 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-21 21:45:19 48,640 ----a-w C:\WINDOWS\mmfs.dll
2007-04-21 00:57:30 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-17 05:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-04-17 05:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-17 05:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-17 05:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-17 05:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-17 05:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-17 05:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-17 05:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
2007-04-17 05:44:20 271,224 ----a-w C:\WINDOWS\system32\mucltui.dll
2007-04-17 05:44:18 208,248 ----a-w C:\WINDOWS\system32\muweb.dll
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
2007-06-14 14:07 443968 --a------ C:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
2006-10-27 08:48 2210608 --a------ C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
2006-12-15 11:23 440056 --a------ C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
2006-09-01 04:33 322368 --a------ C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
2007-03-23 01:18 2403392 -ra------ c:\program files\google\googletoolbar2.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
2007-06-23 11:12 325048 --a------ C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxpers"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 08:47]
"Zone Labs Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2005-08-29 19:09]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-07-09 00:41]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-12 14:18]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-11 06:34]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" [2005-09-25 19:11]
"XPRepairPro2007"="C:\Program Files\XP Repair Pro 2007\XPRepairPro.exe" [2007-07-04 04:51]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-19 04:05]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"="C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [2006-10-27 08:48]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2007-07-09 00:41]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Driver]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Guard]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
backup=C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^g1tana^Start Menu^Programs^Startup^Adobe Gamma.lnk]
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
"C:\Program Files\D-Tools\daemon.exe" -lang 1033
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\igfxtray]
"C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
"C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\My Web Search Bar Search Scope Monitor]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files\PowerISO\PWRISOVM.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc p2psvc p2pimsvc p2pgasvc PNRPSvc
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
AutoRun\command- F1 Challange KRC 2007 setup.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7efdd7be-e9e7-11db-b868-000cf628600e}]
AutoRun\command- E:\Autorun.exe
Contents of the 'Scheduled Tasks' folder
2007-07-09 19:00:00 C:\WINDOWS\tasks\AC07797C9A64EF48.job
2007-07-07 20:12:00 C:\WINDOWS\tasks\AppleSoftwareUpdate.job
2007-07-08 02:30:00 C:\WINDOWS\tasks\ErrorKiller Scheduled Scan.job
2007-07-09 19:52:43 C:\WINDOWS\tasks\MP Scheduled Scan.job
2007-07-09 08:13:09 C:\WINDOWS\tasks\RegCure.job
**************************************************************************
catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer,
http://www.gmer.net
Rootkit scan 2007-07-09 20:50:17
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
Completion time: 2007-07-09 20:53:39 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-07-09 20:53
--- E O F ---
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:59:30, on 09/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\XP Repair Pro 2007\XPRepairPro.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Sitecom\Sitecom Wireless Network USB Adapter Turbo G WL-172\Installer\WLANUTL.EXE
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
https://login.live.com/ppsecure/sha1auth.srf?lc=2057
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: (no name) - {2C0A5F28-48D8-408B-9172-9C6121025BCE} - (no file)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKLM\..\Run: [igfxpers] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [XPRepairPro2007] C:\Program Files\XP Repair Pro 2007\XPRepairPro.exe /r
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Sitecom Wireless Utility.lnk = C:\Program Files\Sitecom\Sitecom Wireless Network USB Adapter Turbo G WL-172\Installer\WLANUTL.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1B4F9DD7-2D7C-44B5-9126-73206DA0AE75} (CNavigationManager Object) -
http://www.btsecurity.bt.com/bt/bin/wizard.exe
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IIS Admin (IISADMIN) - Macrovision Corporation - (no file)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 7986 bytes