moram ponovo da ozivim temu.
opet neki cudni problemi...
prvo mi je nestala ikonica od MY COMPUTER,ustvari nije nestala neko je ona ikonica koju kao da windows ne prepoznaje
drugi problem,real player mi stalno izbacuje ovaj prozor i da navodno ne pronalazi neki klip,kad kliknem na remove posle par sati ga ponovo izbaci
onda mi izbacuje ova dva prozora za koje nemam pojma sta su
evo i ova dva log fajla mozda pomognu...
ComboFix 08-04-16.5 - aleksandar 2008-04-17 14:42:46.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.632 [GMT 2:00]
Running from: C:\Documents and Settings\aleksandar\Desktop\ComboFix.exe
* Created a new restore point
* Resident AV is active
[color=red]
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/color]
.
((((((((((((((((((((((((( Files Created from 2008-03-17 to 2008-04-17 )))))))))))))))))))))))))))))))
.
2008-04-17 14:27 . 2008-04-17 14:27 <DIR> d-------- C:\VundoFix Backups
2008-04-15 20:59 . 2008-04-15 20:59 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-04-15 20:59 . 2008-04-15 20:59 1,409 --a------ C:\WINDOWS\QTFont.for
2008-04-14 18:07 . 2008-04-14 18:07 <DIR> d-------- C:\Program Files\Trend Micro
2008-04-09 21:51 . 2003-06-18 17:31 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
2008-04-09 21:50 . 2008-04-09 21:50 <DIR> d-------- C:\Program Files\Microsoft ActiveSync
2008-04-09 21:49 . 2008-04-09 21:50 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-04-09 21:49 . 2008-04-09 21:49 <DIR> d-------- C:\Program Files\Microsoft.NET
2008-04-07 16:25 . 2008-04-07 16:25 <DIR> d-------- C:\Program Files\uTorrent
2008-04-07 16:25 . 2008-04-17 12:24 <DIR> d-------- C:\Documents and Settings\aleksandar\Application Data\uTorrent
2008-04-06 22:18 . 2008-04-06 22:18 <DIR> d-------- C:\Program Files\Webteh
2008-04-04 22:38 . 2008-04-04 22:38 <DIR> d-------- C:\Program Files\EA SPORTS
2008-04-04 22:34 . 2004-08-04 06:58 14,848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys
2008-04-04 22:34 . 2004-08-04 06:58 14,848 --a--c--- C:\WINDOWS\system32\dllcache\kbdhid.sys
2008-04-04 22:34 . 2001-08-17 13:48 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2008-04-04 22:34 . 2001-08-17 13:48 12,160 --a--c--- C:\WINDOWS\system32\dllcache\mouhid.sys
2008-04-04 22:33 . 2004-04-14 11:08 44,064 --a------ C:\WINDOWS\system32\drivers\WmXlCore.sys
2008-04-04 22:33 . 2004-04-14 11:08 21,280 --a------ C:\WINDOWS\system32\drivers\WmFilter.sys
2008-04-04 22:33 . 2004-04-14 11:08 10,144 --a------ C:\WINDOWS\system32\drivers\WmBEnum.sys
2008-04-04 22:33 . 2004-04-14 11:08 5,600 --a------ C:\WINDOWS\system32\drivers\WmVirHid.sys
2008-04-04 22:32 . 2004-04-14 10:54 163,840 --a------ C:\WINDOWS\system32\WmJoyFrc.dll
2008-04-04 00:37 . 2008-04-11 15:11 <DIR> d-------- C:\Program Files\eMule
2008-04-02 12:18 . 2008-04-02 12:18 <DIR> d-------- C:\Documents and Settings\aleksandar\Application Data\ACD Systems
2008-04-01 20:07 . 2008-04-01 20:07 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Muzzy Lane Software
2008-04-01 15:56 . 2008-04-01 15:56 <DIR> d-------- C:\Program Files\Strategy First
2008-04-01 15:25 . 2008-04-01 15:25 <DIR> d-------- C:\Program Files\Alcohol Soft
2008-04-01 15:25 . 2005-04-25 10:43 159,616 --a------ C:\WINDOWS\system32\drivers\Vax347b.sys
2008-04-01 15:25 . 2004-04-30 09:33 5,248 --a------ C:\WINDOWS\system32\drivers\Vax347s.sys
2008-03-31 01:22 . 2008-04-09 21:51 376 --a------ C:\WINDOWS\ODBC.INI
2008-03-30 23:41 . 2008-03-30 23:42 <DIR> d-------- C:\Program Files\Live Poker
2008-03-30 22:52 . 2008-03-30 22:52 <DIR> d-------- C:\Program Files\QuickTime
2008-03-30 22:52 . 2008-03-30 22:52 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-03-30 22:36 . 2008-03-30 22:36 <DIR> d-------- C:\Documents and Settings\aleksandar\Application Data\Apple Computer
2008-03-30 22:33 . 2008-03-30 22:33 <DIR> d-------- C:\Program Files\Apple Software Update
2008-03-30 22:33 . 2008-03-30 22:33 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-03-30 22:12 . 2004-08-04 09:56 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2008-03-30 22:07 . 2008-03-30 22:07 0 --a------ C:\WINDOWS\ativpsrm.bin
2008-03-30 22:05 . 2007-12-20 21:05 593,920 --------- C:\WINDOWS\system32\ati2sgag.exe
2008-03-30 21:57 . 2008-03-30 21:57 <DIR> d-------- C:\WINDOWS\system32\Adobe
2008-03-30 02:02 . 2008-03-30 02:02 203,776 --a------ C:\WINDOWS\system32\clrviddc.dll
2008-03-30 01:59 . 2008-03-30 01:59 <DIR> d-------- C:\Program Files\Common Files\xing shared
2008-03-30 00:51 . 2008-03-30 00:51 <DIR> d-------- C:\WINDOWS\Sun
2008-03-30 00:50 . 2008-03-30 00:51 <DIR> d-------- C:\Program Files\Java
2008-03-30 00:50 . 2008-02-22 03:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-03-30 00:43 . 2008-03-30 00:43 <DIR> d-------- C:\Program Files\Common Files\Java
2008-03-30 00:38 . 2008-03-30 00:38 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\CyberLink
2008-03-30 00:38 . 2008-03-30 00:38 <DIR> d-------- C:\Documents and Settings\aleksandar\Application Data\CyberLink
2008-03-30 00:30 . 2008-03-30 00:31 <DIR> d-------- C:\Program Files\CyberLink
2008-03-29 22:01 . 2008-03-29 22:01 25 --a------ C:\WINDOWS\cdplayer.ini
2008-03-29 22:00 . 2008-03-29 22:01 <DIR> d-------- C:\Program Files\Real
2008-03-29 22:00 . 2008-03-30 01:59 <DIR> d-------- C:\Program Files\Common Files\Real
2008-03-29 21:56 . 2008-03-29 21:56 <DIR> d-------- C:\Program Files\CCleaner
2008-03-29 21:55 . 2008-03-29 21:55 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ashampoo
2008-03-29 21:55 . 2008-03-29 21:55 <DIR> d-------- C:\Documents and Settings\aleksandar\Application Data\Ashampoo
2008-03-29 21:54 . 2008-03-29 21:54 <DIR> d-------- C:\Program Files\Ashampoo
2008-03-29 21:50 . 2008-03-29 21:50 <DIR> d-------- C:\Program Files\Lavasoft
2008-03-29 21:50 . 2008-03-29 21:50 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-03-29 21:49 . 2008-03-29 21:49 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-03-29 21:48 . 2008-03-29 21:48 <DIR> d-------- C:\Program Files\Common Files\ACD Systems
2008-03-29 21:48 . 2008-03-29 21:48 <DIR> d-------- C:\Program Files\ACD Systems
2008-03-29 21:48 . 2008-03-29 21:48 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ACD Systems
2008-03-29 21:19 . 2007-07-30 20:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-03-29 21:19 . 2007-07-30 20:19 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-03-29 16:15 . 2008-03-29 20:42 <DIR> d-------- C:\Documents and Settings\aleksandar\Contacts
2008-03-29 16:14 . 2008-03-29 16:14 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-03-29 16:02 . 2008-03-29 16:14 <DIR> d-------- C:\Program Files\Windows Live
2008-03-29 16:02 . 2008-03-29 16:03 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2008-03-29 16:02 . 2008-03-29 16:02 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-03-29 04:21 . 2008-03-29 04:21 <DIR> d-------- C:\Program Files\Girder
2008-03-29 04:20 . 2008-03-29 04:20 <DIR> d-------- C:\Program Files\Foxit Software
2008-03-29 04:12 . 2007-07-09 15:16 582,656 -----c--- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2008-03-29 04:10 . 2008-04-16 13:03 <DIR> d-------- C:\ProgDVB
2008-03-29 04:07 . 2008-03-29 04:07 <DIR> d-------- C:\Program Files\DVBViewerTE
2008-03-29 04:06 . 2008-03-29 04:06 <DIR> d-------- C:\Program Files\TechniSat DVB
2008-03-29 04:06 . 1998-09-24 14:03 171,967 --a------ C:\WINDOWS\system32\Odbcjet.hlp
2008-03-29 04:06 . 1998-09-24 14:03 7,348 --a------ C:\WINDOWS\system32\Odbcjet.cnt
2008-03-29 04:01 . 2006-03-14 03:22 349,184 -ra------ C:\WINDOWS\system32\drivers\SkyNET.sys
2008-03-29 03:39 . 2008-03-01 15:06 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll
2008-03-29 03:39 . 2007-07-01 05:31 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat
2008-03-29 03:39 . 2007-07-01 05:36 991,232 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
2008-03-29 03:39 . 2008-03-01 15:06 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll
2008-03-29 03:39 . 2008-03-01 15:06 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2008-03-29 03:39 . 2008-03-01 15:06 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll
2008-03-29 03:39 . 2008-03-01 15:06 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll
2008-03-29 03:39 . 2008-03-01 15:06 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2008-03-29 03:39 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-03-29 03:14 . 2008-03-29 03:14 <DIR> d-------- C:\WINDOWS\provisioning
2008-03-29 03:14 . 2008-03-29 03:14 <DIR> d-------- C:\WINDOWS\peernet
2008-03-29 03:13 . 2008-03-29 03:13 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2008-03-29 03:09 . 2008-03-29 03:09 <DIR> d-------- C:\WINDOWS\EHome
2008-03-29 03:05 . 2002-04-15 22:11 67,866 --------- C:\WINDOWS\system32\drivers\netwlan5.img
2008-03-29 03:05 . 2004-08-04 01:56 11,776 --------- C:\WINDOWS\system32\spnpinst.exe
2008-03-29 03:05 . 2004-08-02 15:20 7,208 --------- C:\WINDOWS\system32\secupd.sig
2008-03-29 03:05 . 2004-08-02 15:20 4,569 --------- C:\WINDOWS\system32\secupd.dat
2008-03-28 23:48 . 2008-03-29 21:57 <DIR> d-------- C:\Program Files\Google
2008-03-28 22:54 . 2008-03-28 22:54 <DIR> d-------- C:\WINDOWS\system32\bits
2008-03-28 22:53 . 2008-04-09 18:02 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2008-03-28 22:53 . 2004-08-04 09:56 438,784 --------- C:\WINDOWS\system32\xpob2res.dll
2008-03-28 22:53 . 2004-08-04 09:56 351,232 --a------ C:\WINDOWS\system32\winhttp.dll
2008-03-28 22:53 . 2004-08-04 09:56 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-15 18:59 196,608 ----a-w C:\WINDOWS\system32\drivers\aStandard.bin
2008-04-04 20:32 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-28 08:05 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-03-28 07:59 --------- d-----w C:\Program Files\Realtek
2008-03-28 07:54 --------- d-----w C:\Program Files\Intel
2008-03-28 06:31 558,142 ----a-w C:\WINDOWS\java\Packages\TRPZLBLN.ZIP
2008-03-28 06:31 155,995 ----a-w C:\WINDOWS\java\Packages\H3JVTFRH.ZIP
2008-03-28 06:31 --------- d-----w C:\Program Files\microsoft frontpage
2008-03-19 09:47 1,845,248 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-01 13:06 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-02-20 10:11 33,800 ----a-w C:\WINDOWS\system32\drivers\epfwtdir.sys
2008-02-20 10:02 29,704 ----a-w C:\WINDOWS\system32\drivers\easdrv.sys
2008-02-20 10:01 39,944 ----a-w C:\WINDOWS\system32\drivers\eamon.sys
2008-02-20 06:51 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 05:32 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 12:43 2097488]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-03-28 23:49 68856]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 09:56 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2006-10-30 13:49 16269312 C:\WINDOWS\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-16 12:04 2879488 C:\WINDOWS\SkyTel.exe]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 13:35 90112]
"egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-02-20 12:06 1443072]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2007-02-07 17:24 71216]
"LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [2007-02-07 17:21 54832]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-03-30 01:59 185896]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-31 23:13 385024]
C:\Documents and Settings\aleksandar\Start Menu\Programs\Startup\
Girder3.lnk - C:\Program Files\Girder\Girder.exe [2008-03-29 04:21:12 1830912]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2008-03-28 10:24:02 450560]
Server4PC.lnk - C:\Program Files\TechniSat DVB\bin\Server4PC.exe [2008-03-29 04:06:45 344064]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
R1 epfwtdir;epfwtdir;C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2008-02-20 12:11]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B};C:\Program Files\CyberLink\PowerDVD\
000.fcl [2006-11-02 17:51]
R3 SKYNET;TechniSat DVB-PC TV Star PCI;C:\WINDOWS\system32\DRIVERS\SkyNET.SYS [2006-03-14 03:22]
R3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D32.sys [2006-09-29 11:06]
R4 atidgllk;atidgllk;C:\WINDOWS\atidgllk.sys [2005-10-20 11:29]
S3 SetupNTGLM7X;SetupNTGLM7X;E:\NTGLM7X.sys []
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
\Shell\AutoRun\command - E:\SETUP.EXE /AUTORUN
\Shell\configure\command - E:\SETUP.EXE
\Shell\install\command - E:\SETUP.EXE
*Newly Created Service* - CATCHME
.
**************************************************************************
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-04-17 14:44:25
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{95808DC4-FA4A-4c74-92FE-5B863F82066B}]
"ImagePath"="\??\C:\Program Files\CyberLink\PowerDVD\
000.fcl"
.
Completion time: 2008-04-17 14:44:56
ComboFix-quarantined-files.txt 2008-04-17 12:44:54
Pre-Run: 36,515,622,912 bytes free
Post-Run: 36,779,003,904 bytes free
.
2008-04-10 15:03:34 --- E O F ---
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:52:00 PM, on 4/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\TechniSat DVB\bin\Server4PC.exe
C:\Program Files\TechniSat DVB\bin\Server4PC.exe
C:\Program Files\Girder\Girder.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.elitesecurity.org/f101-PC-DVB-kartice
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.914.9778\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Girder3.lnk = C:\Program Files\Girder\Girder.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Server4PC.lnk = C:\Program Files\TechniSat DVB\bin\Server4PC.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://www.update.microsoft.co...t/wuweb_site.cab?1206737098993
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://www.update.microsoft.co...t/muweb_site.cab?1206737727602
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) -
http://sdlc-esd.sun.com/ESD39/...nstall-6u5-windows-i586-jc.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{79AE1E22-6F62-4844-BBF8-E9BE33405ACA}: NameServer = 194.106.162.2,194.106.162.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{79AE1E22-6F62-4844-BBF8-E9BE33405ACA}: NameServer = 194.106.162.2,194.106.162.3
O17 - HKLM\System\CS3\Services\Tcpip\..\{79AE1E22-6F62-4844-BBF8-E9BE33405ACA}: NameServer = 194.106.162.2,194.106.162.3
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 8279 bytes