WiredWX Hobby Weather ToolsLog in

 


descriptionProtection Center Virus - Help! Part 2 EmptyProtection Center Virus - Help! Part 2

more_horiz
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML)
ActiveX: {1325db73-d9f1-48f8-8895-6d814ec58889} - Security Update for Windows XP (KB913433)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 11.0
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 11.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML Data Binding for Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Advanced Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows script 5.7
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
ActiveX: {8b15971b-5355-4c82-8c07-7e181ea07608} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\fxsocm.inf,Fax.Install.PerUser
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {94de52c8-2d59-4f1b-883e-79663d2d9a8c} - Fax Provider
ActiveX: {B508B3F1-A24A-32C0-B310-85786919EF28} - .NET Framework
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Task Scheduler
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
ActiveX: {DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D} - Microsoft .NET Framework 1.1 Security Update (KB953297)
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.WMV3 - C:\WINDOWS\System32\wmv9vcm.dll (Microsoft Corporation)

CREATERESTOREPOINT
Error starting restore point: 31
Error closing restore point: The sequence number is invalid.

========== Files/Folders - Created Within 30 Days ==========

[2010/06/02 20:10:51 | 000,000,000 | ---D | C] -- C:\Program Files\NOS
[2010/06/02 20:10:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NOS
[2010/06/02 19:30:56 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010/06/02 18:52:00 | 000,000,000 | ---D | C] -- C:\Program Files\Protection Center
[2010/05/17 17:38:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ProjRen\My Documents\PreHealthFall10
[2010/05/14 16:24:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ProjRen\My Documents\My Media
[2010/05/14 16:24:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\ProjRen\Application Data\OverDrive
[2010/05/14 16:23:07 | 000,000,000 | ---D | C] -- C:\Program Files\OverDrive Media Console
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/06/02 20:07:53 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/06/02 20:07:49 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010/06/02 20:07:37 | 000,000,236 | ---- | M] () -- C:\WINDOWS\tasks\OGALogon.job
[2010/06/02 20:07:36 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/06/02 20:07:31 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/06/02 20:07:31 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/06/02 20:07:27 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/06/02 20:07:26 | 2138,497,024 | -HS- | M] () -- C:\hiberfil.sys
[2010/06/02 20:06:30 | 006,291,456 | -H-- | M] () -- C:\Documents and Settings\ProjRen\NTUSER.DAT
[2010/06/02 20:05:53 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\ProjRen\ntuser.ini
[2010/06/02 19:38:05 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010/06/02 19:16:46 | 000,001,599 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\pornotube.com.lnk
[2010/06/02 19:16:46 | 000,001,595 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\nudetube.com.lnk
[2010/06/02 19:16:46 | 000,001,591 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\youporn.com.lnk
[2010/06/02 19:16:46 | 000,000,031 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\troj000.exe
[2010/06/02 19:16:46 | 000,000,031 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\spam003.exe
[2010/06/02 19:16:46 | 000,000,031 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\spam001.exe
[2010/06/02 19:08:56 | 000,001,614 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\Protection Center Support.lnk
[2010/06/02 19:08:56 | 000,000,704 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\Protection Center.lnk
[2010/06/02 19:06:18 | 000,002,497 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\Microsoft Office Word 2003.lnk
[2010/06/02 18:49:38 | 000,002,521 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\Microsoft Office Outlook 2003.lnk
[2010/06/02 10:26:04 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/05/20 08:06:21 | 000,001,915 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/19 13:13:27 | 000,002,369 | ---- | M] () -- C:\Documents and Settings\ProjRen\Desktop\ProMash.lnk
[2010/05/19 09:53:59 | 000,002,317 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\OverDrive Media Console.lnk
[2010/05/17 12:19:52 | 000,000,160 | ---- | M] () -- C:\Documents and Settings\ProjRen\webct_upload_applet.properties
[2010/05/14 17:51:02 | 000,002,137 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/05/14 08:13:54 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/06/02 19:38:05 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010/06/02 19:16:46 | 000,001,599 | ---- | C] () -- C:\Documents and Settings\ProjRen\Desktop\pornotube.com.lnk
[2010/06/02 19:16:46 | 000,001,595 | ---- | C] () -- C:\Documents and Settings\ProjRen\Desktop\nudetube.com.lnk
[2010/06/02 19:16:46 | 000,001,591 | ---- | C] () -- C:\Documents and Settings\ProjRen\Desktop\youporn.com.lnk
[2010/06/02 19:16:46 | 000,000,031 | ---- | C] () -- C:\Documents and Settings\ProjRen\Desktop\troj000.exe
[2010/06/02 19:16:46 | 000,000,031 | ---- | C] () -- C:\Documents and Settings\ProjRen\Desktop\spam003.exe
[2010/06/02 19:16:46 | 000,000,031 | ---- | C] () -- C:\Documents and Settings\ProjRen\Desktop\spam001.exe
[2010/06/02 19:08:56 | 000,001,614 | ---- | C] () -- C:\Documents and Settings\ProjRen\Desktop\Protection Center Support.lnk
[2010/06/02 19:08:56 | 000,000,704 | ---- | C] () -- C:\Documents and Settings\ProjRen\Desktop\Protection Center.lnk
[2010/05/20 08:06:21 | 000,001,915 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2010/05/14 16:23:08 | 000,002,317 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\OverDrive Media Console.lnk
[2010/01/22 11:49:09 | 000,000,028 | ---- | C] () -- C:\WINDOWS\pdf995.ini
[2009/08/03 16:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2009/01/14 14:17:04 | 000,197,672 | ---- | C] () -- C:\WINDOWS\System32\vpnapi.dll
[2008/12/11 02:38:37 | 000,001,152 | ---- | C] () -- C:\WINDOWS\System32\windrv.sys
[2007/03/31 15:17:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tosOBEX.INI
[2007/02/23 12:22:04 | 000,000,118 | ---- | C] () -- C:\WINDOWS\wpd99.drv
[2007/02/23 12:21:37 | 000,051,716 | ---- | C] () -- C:\WINDOWS\System32\pdf995mon.dll
[2007/01/12 15:24:41 | 000,000,221 | ---- | C] () -- C:\WINDOWS\NCLogConfig.ini
[2007/01/12 13:15:54 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2006/11/30 11:16:33 | 000,000,225 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2006/08/01 10:52:31 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/08/01 10:28:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\vpc32.INI
[2006/07/28 09:26:44 | 000,189,480 | ---- | C] () -- C:\WINDOWS\System32\CSGina.dll
[2006/07/22 14:57:35 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/07/22 14:55:14 | 000,000,138 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2006/07/22 14:33:38 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\stac97co.dll
[2006/07/22 14:33:08 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll
[2006/07/22 14:33:04 | 000,757,760 | ---- | C] () -- C:\WINDOWS\System32\bcm1xsup.dll
[2006/07/22 14:32:50 | 000,000,390 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2004/12/03 09:20:12 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll
[2004/09/23 04:09:06 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll
[2004/09/16 00:57:50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2004/08/11 18:24:19 | 000,000,791 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/08/11 18:11:31 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2004/07/21 11:04:02 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\TosBtHcrpAPI.dll
[2004/01/16 08:43:28 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\TBTMonUI.dll
[2003/07/30 09:33:26 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\TosHidAPI.dll
[2003/01/07 16:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2001/07/07 04:00:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini

========== Custom Scans ==========


< >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\*.exe /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2004/08/11 18:06:14 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2004/08/11 18:06:14 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2004/08/11 18:06:14 | 000,876,544 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\*.sys >
[2004/08/04 06:00:00 | 000,009,029 | ---- | M] () -- C:\WINDOWS\system32\ansi.sys
[2004/08/04 06:00:00 | 000,027,097 | ---- | M] () -- C:\WINDOWS\system32\country.sys
[2004/08/04 06:00:00 | 000,004,768 | ---- | M] () -- C:\WINDOWS\system32\himem.sys
[2004/08/04 06:00:00 | 000,042,809 | ---- | M] () -- C:\WINDOWS\system32\key01.sys
[2004/08/04 06:00:00 | 000,042,537 | ---- | M] () -- C:\WINDOWS\system32\keyboard.sys
[2004/08/04 06:00:00 | 000,027,866 | ---- | M] () -- C:\WINDOWS\system32\ntdos.sys
[2004/08/04 06:00:00 | 000,029,146 | ---- | M] () -- C:\WINDOWS\system32\ntdos404.sys
[2004/08/04 06:00:00 | 000,029,370 | ---- | M] () -- C:\WINDOWS\system32\ntdos411.sys
[2004/08/04 06:00:00 | 000,029,274 | ---- | M] () -- C:\WINDOWS\system32\ntdos412.sys
[2004/08/04 06:00:00 | 000,029,146 | ---- | M] () -- C:\WINDOWS\system32\ntdos804.sys
[2004/08/04 06:00:00 | 000,033,840 | ---- | M] () -- C:\WINDOWS\system32\ntio.sys
[2004/08/04 06:00:00 | 000,034,560 | ---- | M] () -- C:\WINDOWS\system32\ntio404.sys
[2004/08/04 06:00:00 | 000,035,648 | ---- | M] () -- C:\WINDOWS\system32\ntio411.sys
[2004/08/04 06:00:00 | 000,035,424 | ---- | M] () -- C:\WINDOWS\system32\ntio412.sys
[2004/08/04 06:00:00 | 000,034,560 | ---- | M] () -- C:\WINDOWS\system32\ntio804.sys
[2005/01/26 07:22:20 | 000,280,344 | ---- | M] (Zone Labs LLC) -- C:\WINDOWS\system32\vsdatant.sys
[2008/04/13 14:44:59 | 000,017,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\watchdog.sys
[2009/08/14 09:21:25 | 001,850,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\win32k.sys
[2008/12/11 02:38:37 | 000,001,152 | ---- | M] () -- C:\WINDOWS\system32\windrv.sys
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.dll >
[2008/04/13 20:11:48 | 000,004,255 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv01nt5.dll
[2008/04/13 20:11:48 | 000,003,967 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv02nt5.dll
[2008/04/13 20:11:48 | 000,003,615 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv05nt5.dll
[2008/04/13 20:11:48 | 000,003,647 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv07nt5.dll
[2008/04/13 20:11:48 | 000,003,135 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv08nt5.dll
[2008/04/13 20:11:48 | 000,003,711 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv09nt5.dll
[2008/04/13 20:11:48 | 000,003,775 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\adv11nt5.dll
[2008/04/13 20:11:50 | 000,021,183 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv01nt5.dll
[2008/04/13 20:11:50 | 000,011,359 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv02nt5.dll
[2008/04/13 20:11:50 | 000,025,471 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv04nt5.dll
[2008/04/13 20:11:50 | 000,014,143 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv06nt5.dll
[2008/04/13 20:11:50 | 000,017,279 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\atv10nt5.dll
[2008/04/13 20:11:50 | 000,015,423 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
[2008/04/13 20:12:05 | 000,003,901 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\siint5.dll
[2008/04/13 20:12:08 | 000,011,325 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\system32\drivers\vchnt5.dll

< %systemroot%\system32\drivers\*.ini >

< %systemroot%\system32\drivers\*.exe >

< %SYSTEMDRIVE%\*.* >
[2004/08/11 18:15:00 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2006/07/28 09:20:52 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2008/12/11 13:24:57 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2004/08/04 00:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2008/12/11 13:28:41 | 000,009,981 | ---- | M] () -- C:\ComboFix.txt
[2004/08/11 18:15:00 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2006/07/22 14:34:22 | 000,004,738 | RH-- | M] () -- C:\dell.sdr
[2010/06/02 20:07:26 | 2138,497,024 | -HS- | M] () -- C:\hiberfil.sys
[2006/09/25 11:03:10 | 000,000,034 | ---- | M] () -- C:\hpfsched.ini
[2006/07/31 15:48:05 | 000,004,128 | ---- | M] () -- C:\INFCACHE.1
[2004/08/11 18:15:00 | 000,000,000 | -H-- | M] () -- C:\IO.SYS
[2007/03/31 14:57:43 | 000,000,545 | -H-- | M] () -- C:\IPH.PH
[2004/08/11 18:15:00 | 000,000,000 | -H-- | M] () -- C:\MSDOS.SYS
[2004/08/04 06:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/08/25 07:53:10 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2010/06/02 20:07:25 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys

< %PROGRAMFILES%\*. >
[2010/06/02 19:37:33 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2006/07/22 14:37:00 | 000,000,000 | ---D | M] -- C:\Program Files\Apoint
[2008/12/05 18:20:16 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2010/04/16 11:38:39 | 000,000,000 | ---D | M] -- C:\Program Files\Autodesk
[2006/07/22 14:53:30 | 000,000,000 | ---D | M] -- C:\Program Files\BAE
[2009/11/06 14:42:21 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour
[2006/07/22 14:50:53 | 000,000,000 | ---D | M] -- C:\Program Files\Broadcom
[2010/05/07 08:41:11 | 000,000,000 | ---D | M] -- C:\Program Files\Celtx
[2006/08/01 10:35:20 | 000,000,000 | ---D | M] -- C:\Program Files\Chami
[2010/04/16 11:34:48 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2004/08/11 18:12:04 | 000,000,000 | ---D | M] -- C:\Program Files\ComPlus Applications
[2006/07/22 14:38:18 | 000,000,000 | ---D | M] -- C:\Program Files\CONEXANT
[2006/07/22 14:52:17 | 000,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2009/03/01 15:39:51 | 000,000,000 | ---D | M] -- C:\Program Files\DeductionPro 2008
[2006/07/22 14:52:39 | 000,000,000 | ---D | M] -- C:\Program Files\Dell
[2006/07/22 14:52:09 | 000,000,000 | ---D | M] -- C:\Program Files\Digital Line Detect
[2010/02/11 12:06:38 | 000,000,000 | ---D | M] -- C:\Program Files\DWG TrueView 2010
[2006/09/29 08:56:44 | 000,000,000 | ---D | M] -- C:\Program Files\fsupport
[2010/05/20 08:05:55 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2007/01/12 13:21:50 | 000,000,000 | ---D | M] -- C:\Program Files\Hewlett-Packard
[2007/01/12 13:24:38 | 000,000,000 | ---D | M] -- C:\Program Files\HP
[2006/09/25 11:14:17 | 000,000,000 | ---D | M] -- C:\Program Files\hp photosmart
[2009/02/22 13:32:49 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2010/03/31 10:50:57 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2009/11/06 14:44:50 | 000,000,000 | ---D | M] -- C:\Program Files\iPod
[2009/11/06 14:45:51 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes
[2009/11/17 09:38:21 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2008/12/22 01:32:04 | 000,000,000 | ---D | M] -- C:\Program Files\JRE
[2010/04/08 11:28:58 | 000,000,000 | ---D | M] -- C:\Program Files\LogoEase
[2006/08/07 10:46:34 | 000,000,000 | ---D | M] -- C:\Program Files\Macromedia
[2008/08/25 08:09:36 | 000,000,000 | ---D | M] -- C:\Program Files\Messenger
[2006/08/01 10:51:55 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft ActiveSync
[2010/03/02 05:26:43 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2004/08/11 18:15:24 | 000,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage
[2007/10/07 11:54:15 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2010/02/28 17:38:05 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2007/10/15 16:09:02 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2006/08/01 10:50:15 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2006/07/22 14:51:55 | 000,000,000 | ---D | M] -- C:\Program Files\Modem Helper
[2010/03/11 09:59:31 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2010/06/02 18:49:33 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2009/08/16 12:11:06 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2007/10/07 11:53:47 | 000,000,000 | ---D | M] -- C:\Program Files\MSECache
[2004/08/11 18:11:30 | 000,000,000 | ---D | M] -- C:\Program Files\MSN
[2004/08/11 18:11:36 | 000,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone
[2006/10/19 09:12:06 | 000,000,000 | ---D | M] -- C:\Program Files\MsnMusic
[2007/01/13 11:34:37 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
[2008/08/25 07:56:34 | 000,000,000 | ---D | M] -- C:\Program Files\NetMeeting
[2006/07/22 14:52:02 | 000,000,000 | ---D | M] -- C:\Program Files\NetWaiting
[2010/06/02 20:10:51 | 000,000,000 | ---D | M] -- C:\Program Files\NOS
[2006/08/01 11:06:49 | 000,000,000 | ---D | M] -- C:\Program Files\OfficeUpdate11
[2004/08/11 18:11:50 | 000,000,000 | ---D | M] -- C:\Program Files\Online Services
[2008/12/22 01:32:02 | 000,000,000 | ---D | M] -- C:\Program Files\OpenOffice.org 3
[2010/05/14 08:13:44 | 000,000,000 | ---D | M] -- C:\Program Files\Outlook Express
[2010/05/14 16:23:08 | 000,000,000 | ---D | M] -- C:\Program Files\OverDrive Media Console
[2010/01/22 11:45:37 | 000,000,000 | ---D | M] -- C:\Program Files\PDF995
[2006/10/19 09:15:51 | 000,000,000 | ---D | M] -- C:\Program Files\Photo Story 3 for Windows
[2008/05/20 16:26:33 | 000,000,000 | ---D | M] -- C:\Program Files\ProMash
[2010/06/02 19:09:13 | 000,000,000 | ---D | M] -- C:\Program Files\Protection Center
[2009/11/06 14:41:32 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2006/11/10 17:22:40 | 000,000,000 | ---D | M] -- C:\Program Files\Real
[2009/08/16 12:10:53 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2006/07/22 14:53:30 | 000,000,000 | ---D | M] -- C:\Program Files\SearchAssist
[2006/07/22 14:38:26 | 000,000,000 | ---D | M] -- C:\Program Files\Sigmatel
[2008/11/22 07:52:35 | 000,000,000 | ---D | M] -- C:\Program Files\SmartDraw 2009
[2006/07/22 14:55:13 | 000,000,000 | ---D | M] -- C:\Program Files\Sonic
[2006/08/01 10:32:01 | 000,000,000 | ---D | M] -- C:\Program Files\SSH Communications Security
[2006/08/01 10:25:58 | 000,000,000 | ---D | M] -- C:\Program Files\Symantec
[2010/06/02 20:08:53 | 000,000,000 | ---D | M] -- C:\Program Files\Symantec AntiVirus
[2007/06/18 10:11:25 | 000,000,000 | ---D | M] -- C:\Program Files\TaxCut04
[2008/12/14 17:11:01 | 000,000,000 | ---D | M] -- C:\Program Files\TaxCut06
[2009/02/22 13:30:20 | 000,000,000 | ---D | M] -- C:\Program Files\TaxCut08
[2006/07/22 14:55:19 | 000,000,000 | ---D | M] -- C:\Program Files\Toshiba
[2008/01/26 14:36:08 | 000,000,000 | ---D | M] -- C:\Program Files\TurboTax
[2004/08/11 18:20:34 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2007/11/30 12:46:04 | 000,000,000 | ---D | M] -- C:\Program Files\Unitronics
[2006/08/01 10:10:02 | 000,000,000 | ---D | M] -- C:\Program Files\University at Albany
[2009/01/06 11:06:25 | 000,000,000 | ---D | M] -- C:\Program Files\Web Album Generator
[2006/12/30 13:30:46 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Components
[2006/12/12 14:59:39 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Connect 2
[2008/08/25 07:56:28 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2008/08/25 07:56:28 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2004/08/11 18:13:20 | 000,000,000 | -H-D | M] -- C:\Program Files\WindowsUpdate
[2004/08/11 18:15:24 | 000,000,000 | ---D | M] -- C:\Program Files\xerox

< %appdata%\*.* >
[2004/08/11 18:07:12 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\ProjRen\Application Data\desktop.ini


< MD5 for: AGP440.SYS >
[2004/08/04 06:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\i386\sp2.cab:AGP440.sys
[2004/08/04 06:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008/08/25 07:48:23 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008/08/25 07:48:23 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 14:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004/08/04 00:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\i386\AGP440.SYS
[2004/08/04 00:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys

< MD5 for: ATAPI.SYS >
[2004/08/04 06:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\i386\sp2.cab:atapi.sys
[2004/08/04 06:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008/08/25 07:48:23 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008/08/25 07:48:23 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/03 23:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\i386\atapi.sys
[2004/08/03 23:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004/08/03 23:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\atapi.sys

< MD5 for: DISK.SYS >
[2004/08/04 06:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\i386\sp2.cab:disk.sys
[2004/08/04 06:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:disk.sys
[2008/08/25 07:48:23 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:disk.sys
[2008/08/25 07:48:23 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:disk.sys
[2004/08/04 06:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\i386\disk.sys
[2004/08/04 06:00:00 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=00CA44E4534865F8A3B64F7C0984BFF0 -- C:\WINDOWS\$NtServicePackUninstall$\disk.sys
[2008/04/13 14:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\ServicePackFiles\i386\disk.sys
[2008/04/13 14:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) MD5=044452051F3E02E7963599FC8F4F3E25 -- C:\WINDOWS\system32\drivers\disk.sys

< MD5 for: EVENTLOG.DLL >
[2008/04/13 20:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/13 20:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll
[2004/08/04 06:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\i386\eventlog.dll
[2004/08/04 06:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: NETLOGON.DLL >
[2008/04/13 20:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008/04/13 20:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\netlogon.dll
[2004/08/04 06:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\i386\netlogon.dll
[2004/08/04 06:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004/08/04 06:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\i386\scecli.dll
[2004/08/04 06:00:00 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008/04/13 20:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/13 20:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: USBSTOR.SYS >
[2004/08/04 06:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\i386\sp2.cab:usbstor.sys
[2004/08/04 06:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:usbstor.sys
[2008/08/25 07:48:23 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:usbstor.sys
[2008/08/25 07:48:23 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:usbstor.sys
[2004/08/04 00:08:48 | 000,026,496 | ---- | M] (Microsoft Corporation) MD5=6CD7B22193718F1D17A47A1CD6D37E75 -- C:\WINDOWS\$NtServicePackUninstall$\usbstor.sys
[2008/04/13 14:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\ServicePackFiles\i386\usbstor.sys
[2008/04/13 14:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) MD5=A32426D9B14A089EAA1D922E0C5801A9 -- C:\WINDOWS\system32\drivers\usbstor.sys

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-05-26 13:21:40

========== Alternate Data Streams ==========

@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
< End of report >

descriptionProtection Center Virus - Help! Part 2 EmptyRe: Protection Center Virus - Help! Part 2

more_horiz
Hello.
Please post a full log.
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum