WiredWX Hobby Weather ToolsLog in

 


I think my computer is infected with suspicious.mh690.a virus , can anyone help?

2 posters

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyI think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
hi everyone , I'm new to these forums , my friend told me that this was a good place to fix my problems ?
well actually my brother's problems cause it's his laptop we're talking about.

so please tell me what do I need to do to make it possible for you guys to help me out ?

he's always used norton and never had any problems but now there's just one virus that keeps coming back , I think it's the one mentioned in the title of this topic?
I'm a big noob when it's about virus removals so I hope you guys can help me out ?
any thoughts ?
would be awesome if it can be fixed before he comes back from his holidays next week Smile...
many thanks in advance !

Mike.

log:

OTL logfile created on: 17/09/2010 14:21:14 - Run 1
OTL by OldTimer - Version 3.2.12.1 Folder = F:\
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16916)
Locale: 00000813 | Country: Belgiƫ | Language: NLB | Date Format: d/MM/yyyy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 70,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 87,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 191,57 Gb Total Space | 133,31 Gb Free Space | 69,59% Space Free | Partition Type: NTFS
Drive D: | 94,80 Gb Total Space | 94,71 Gb Free Space | 99,90% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 1,86 Gb Total Space | 1,32 Gb Free Space | 70,60% Space Free | Partition Type: FAT
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PC_VAN_STEVE
Current User Name: Steve
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/09/17 14:14:04 | 000,575,488 | ---- | M] (OldTimer Tools) -- F:\OTL.com
PRC - [2010/09/12 15:06:26 | 000,164,352 | -H-- | M] (Lktgtzvf Zk) -- C:\Windows\andy128.exe
PRC - [2010/02/11 23:17:58 | 000,034,816 | -H-- | M] () -- C:\Windows\pp14.exe
PRC - [2010/02/11 23:16:44 | 000,038,912 | ---- | M] () -- C:\Windows\ld16.exe
PRC - [2009/09/10 17:29:33 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmplayer.exe
PRC - [2009/08/25 00:49:41 | 000,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton AntiVirus\Engine\17.0.0.136\ccSvcHst.exe
PRC - [2009/05/19 11:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2009/04/02 19:05:22 | 000,102,400 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
PRC - [2009/03/31 10:39:36 | 000,233,472 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2008/10/29 08:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/08/04 01:02:20 | 000,036,352 | ---- | M] () -- C:\Program Files\Winamp\winampa.exe
PRC - [2008/01/29 17:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
PRC - [2008/01/11 22:16:38 | 000,039,792 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
PRC - [2007/09/21 01:32:50 | 000,561,152 | ---- | M] (C&E) -- C:\Program Files\C&E\OSD\osd.exe
PRC - [2007/07/24 18:02:44 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2007/07/24 18:02:42 | 000,174,616 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2007/05/10 17:10:06 | 004,468,736 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2006/12/08 19:52:04 | 000,204,800 | ---- | M] (Fujitsu Siemens Computers) -- C:\FirstSteps\OnlineDiagnostic\TestManager\TestHandler.exe
PRC - [2006/11/22 18:31:26 | 000,630,784 | ---- | M] (Motorola Inc.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe


========== Modules (SafeList) ==========

MOD - [2010/09/17 14:14:04 | 000,575,488 | ---- | M] (OldTimer Tools) -- F:\OTL.com
MOD - [2007/11/03 11:43:02 | 001,648,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.20656_none_463680b8218be5a3\comctl32.dll
MOD - [2006/11/02 11:44:49 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice Ex)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService)
SRV - [2010/02/11 23:17:44 | 000,050,688 | ---- | M] () [Auto | Start_Pending] -- C:\Windows\System32\fio32.dll -- (fioo32)
SRV - [2009/08/25 00:49:41 | 000,126,392 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files\Norton AntiVirus\Engine\17.0.0.136\ccSvcHst.exe -- (NAV)
SRV - [2009/08/05 22:48:42 | 000,704,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2009/05/19 11:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2009/03/31 10:39:36 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2008/04/07 10:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008/01/29 17:38:32 | 000,583,048 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe -- (LiveUpdate Notice Service)
SRV - [2007/11/03 10:17:36 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/09/04 02:01:50 | 000,053,248 | ---- | M] () [Auto | Stopped] -- C:\Program Files\C&E\OSD\OsdService\OsdService.exe -- (OsdService)
SRV - [2007/07/24 18:02:44 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
SRV - [2006/12/08 19:52:04 | 000,204,800 | ---- | M] (Fujitsu Siemens Computers) [Auto | Running] -- C:\FirstSteps\OnlineDiagnostic\TestManager\TestHandler.exe -- (TestHandler)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2010/09/12 15:20:08 | 000,124,976 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2010/02/13 22:33:51 | 000,024,856 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgfwd6x.sys -- (Avgfwfd)
DRV - [2010/02/11 23:17:44 | 000,059,264 | ---- | M] (FIO32) [Kernel | System | Running] -- C:\Windows\System32\drivers\fio32.sys -- (fio32)
DRV - [2009/08/30 02:17:21 | 000,338,480 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\NAV\1100000.088\SYMTDIV.SYS -- (SYMTDIv)
DRV - [2009/08/30 02:17:20 | 000,169,008 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\system32\drivers\NAV\1100000.088\SYMEFA.SYS -- (SymEFA)
DRV - [2009/08/30 02:17:18 | 000,328,752 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\NAV\1100000.088\SYMDS.SYS -- (SymDS)
DRV - [2009/08/30 02:16:50 | 000,114,736 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\NAV\1100000.088\Ironx86.SYS -- (SymIRON)
DRV - [2009/08/30 02:16:46 | 000,342,576 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\IPSDefs\20090828.002\IDSVix86.sys -- (IDSVix86)
DRV - [2009/08/30 02:16:41 | 000,506,928 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\BASHDefs\20090829.001\BHDrvx86.sys -- (BHDrvx86)
DRV - [2009/08/30 02:16:41 | 000,325,168 | R--- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\system32\drivers\NAV\1100000.088\SRTSP.SYS -- (SRTSP)
DRV - [2009/08/30 02:16:41 | 000,043,696 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\NAV\1100000.088\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV - [2009/08/29 11:00:00 | 001,323,568 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20090829.019\NAVEX15.SYS -- (NAVEX15)
DRV - [2009/08/29 11:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2009/08/29 11:00:00 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2009/08/29 11:00:00 | 000,084,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\Definitions\VirusDefs\20090829.019\NAVENG.SYS -- (NAVENG)
DRV - [2009/08/25 00:50:39 | 000,501,888 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\system32\drivers\NAV\1100000.088\ccHPx86.sys -- (ccHP)
DRV - [2009/08/05 22:48:42 | 000,054,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\fssfltr.sys -- (fssfltr)
DRV - [2009/03/31 10:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009/03/20 11:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009/03/20 11:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2009/03/20 11:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2008/04/30 18:18:47 | 000,211,000 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\system32\drivers\volsnap.sys -- (volsnap)
DRV - [2007/11/03 12:14:34 | 000,020,152 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2007/11/03 12:14:34 | 000,019,128 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2007/11/03 12:14:34 | 000,017,592 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2007/09/17 16:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007/09/05 01:20:00 | 000,005,120 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Program Files\C&E\OSD\OsdService\cebuffer.sys -- (CEBFilter)
DRV - [2007/09/01 01:18:06 | 000,004,608 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Program Files\C&E\OSD\OsdService\ceio.sys -- (CEIO)
DRV - [2007/08/31 23:22:26 | 000,007,168 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Program Files\C&E\OSD\OsdService\kbfiltr.sys -- (cKBFilter)
DRV - [2007/07/19 01:31:00 | 007,599,776 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2007/07/09 13:28:16 | 000,209,408 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\iaNvStor.sys -- (iaNvStor) Intel(R)
DRV - [2007/07/02 17:37:10 | 000,131,616 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvrd32.sys -- (nvrd32)
DRV - [2007/07/02 17:37:08 | 000,110,112 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2007/06/13 23:47:12 | 000,048,256 | ---- | M] (JMicron Technology Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\jraid.sys -- (JRAID)
DRV - [2007/06/01 17:10:38 | 000,753,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BisonCam.sys -- (Cam5603D)
DRV - [2007/05/10 18:25:12 | 001,775,712 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007/04/30 13:42:14 | 000,081,408 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2007/04/25 12:17:36 | 000,277,784 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\iaStor.sys -- (iaStor)
DRV - [2007/04/04 05:57:00 | 000,046,592 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\itecir.sys -- (itecir)
DRV - [2007/02/25 06:14:00 | 002,216,448 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32) Intel(R)
DRV - [2007/01/30 09:31:52 | 000,210,224 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\Si3531.sys -- (Si3531)
DRV - [2006/11/22 18:35:00 | 000,982,272 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2006/11/02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006/11/02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006/11/02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006/11/02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006/11/02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006/11/02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006/11/02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006/11/02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006/11/02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006/11/02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006/11/02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006/11/02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006/11/02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2006/11/02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006/11/02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006/11/02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006/11/02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2006/11/02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006/11/02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006/11/02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006/11/02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2006/11/02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006/11/02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006/11/02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006/11/02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006/11/02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006/11/02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006/11/02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006/11/02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006/11/02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006/11/02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006/11/02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006/11/02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006/11/02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006/11/02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006/11/02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006/11/02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006/11/02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006/11/02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006/11/02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)
DRV - [2006/10/18 13:20:00 | 000,005,504 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\SiRemFil.sys -- (SiRemFil)
DRV - [2004/11/01 10:21:00 | 000,010,368 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\SiWinAcc.sys -- (SiFilter)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.be/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_17.0.0.136\IPSFFPlgn\ [2010/09/12 15:20:17 | 000,000,000 | ---D | M]

[2009/08/14 12:00:31 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\mozilla\Extensions
[2009/08/14 12:00:31 | 000,000,000 | ---D | M] -- C:\Users\Steve\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org

O1 HOSTS File: ([2010/02/11 23:17:20 | 000,000,827 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 85.13.206.114 uuu20091124.info
O1 - Hosts: 85.13.206.114 u07012010u.com
O2 - BHO: (Adobe PDF Reader Help bij koppelingen) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\17.0.0.136\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Captcha7] File not found
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [IaNvSrv] C:\Program Files\Intel\Intel Matrix Storage Manager\OROM\IaNvSrv\IaNvSrv.exe (Intel Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NPSStartup] File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [OSD] C:\Program Files\C&E\OSD\osd.exe (C&E)
O4 - HKLM..\Run: [pp] C:\Windows\pp14.exe ()
O4 - HKLM..\Run: [recinfo] File not found
O4 - HKLM..\Run: [recinfo106] c:\RecInfo\RecInfo.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [Symantec PIF AlertEng] C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
O4 - HKLM..\Run: [sysldtray] C:\Windows\ld16.exe ()
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [xuri49tkd] C:\Windows\andy128.exe (Lktgtzvf Zk)
O4 - HKCU..\Run: [aavkk] C:\Windows\System32\aa7vqkkffa7.exe File not found
O4 - HKCU..\Run: [aavvq1f] C:\Windows\System32\qqkf9a0vq.exe ()
O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [bbvqq7l] C:\Windows\System32\ql5g3bvvq.exe File not found
O4 - HKCU..\Run: [bqqlbb] C:\Windows\System32\bbvqq7lvg.exe File not found
O4 - HKCU..\Run: [dixdxdx] C:\Windows\System32\ndi1dxsnd.exe ()
O4 - HKCU..\Run: [faavqq] C:\Windows\System32\aavqq7lf.exe ()
O4 - HKCU..\Run: [fvvqq] C:\Windows\System32\vvqqlaavl.exe File not found
O4 - HKCU..\Run: [idssnni] C:\Windows\System32\nxn9iidx9s.exe File not found
O4 - HKCU..\Run: [iejdsmm] C:\Windows\System32\yhsgmmw.exe File not found
O4 - HKCU..\Run: [jncontmon] C:\Windows\System32\ssjitsys32.exe File not found
O4 - HKCU..\Run: [kaavkkf] C:\Windows\System32\avv6f5a2.exe File not found
O4 - HKCU..\Run: [lbbwl] C:\Windows\System32\qllg7bw1wq.exe File not found
O4 - HKCU..\Run: [lvllfv] C:\Windows\System32\aavqq7lf.exe ()
O4 - HKCU..\Run: [mmhxxs] C:\Windows\System32\mhh6ssm2.exe ()
O4 - HKCU..\Run: [mndpro32] C:\Windows\System32\primndd.exe File not found
O4 - HKCU..\Run: [ncstatsc] C:\Windows\System32\lsnccq.exe File not found
O4 - HKCU..\Run: [nddxnni] C:\Windows\System32\ddxn9iid.exe File not found
O4 - HKCU..\Run: [nniid] C:\Windows\System32\xn9iidx9s0n.exe File not found
O4 - HKCU..\Run: [pqezlr32] C:\Windows\System32\eyclcm.exe File not found
O4 - HKCU..\Run: [prodcmmp] C:\Windows\System32\ikddmch.exe File not found
O4 - HKCU..\Run: [qisdrmss] C:\Windows\System32\qodesnaq.exe File not found
O4 - HKCU..\Run: [qlbbwl] C:\Windows\System32\q0lggb1wqq.exe File not found
O4 - HKCU..\Run: [qlffa0] C:\Windows\System32\aavlaqq1a.exe ()
O4 - HKCU..\Run: [qqkffa0] C:\Windows\System32\faa7vqkk.exe ()
O4 - HKCU..\Run: [qqllf] C:\Windows\System32\vfv9qqlf9a.exe ()
O4 - HKCU..\Run: [rbrrmw] C:\Windows\System32\rrmmgwwr1.exe ()
O4 - HKCU..\Run: [rlbbww] C:\Windows\System32\qll6wwq2.exe File not found
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [udccndw2] C:\Windows\System32\psiomcp.exe File not found
O4 - HKCU..\Run: [vqf5a] C:\Windows\System32\qf9a0vq0k0f.exe ()
O4 - HKCU..\Run: [vvbvllg] C:\Windows\System32\6g7bvqq.exe File not found
O4 - HKCU..\Run: [vvqq6a] C:\Windows\System32\qqkf9a0vq.exe ()
O4 - HKCU..\Run: [vvqvqk] C:\Windows\System32\5faavqq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0i0c0xs.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0llfv9q.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0niid1y.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0oojz98.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0qql1fa.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0qql1ga.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0vfaavl.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0vqql1f.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0vvqf9a.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0wwr1lg.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1aqql1f.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1fv9qql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1gaavl9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1mmhxxr.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1q0llgv.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1qf9a0v.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1qg0a0v.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1vqggaa.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1vvqqla.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\21m0hhc.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\21q0llg.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\21rmccw.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\21vqgga.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2hhcrrm.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2llgvvq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2mh5c2s.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2ql5fvv.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2qlaa1l.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2ssnddy.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2vvqffa.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3hbbw2m.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\431bwmm.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\431faqq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\431vqgg.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4b2wqgg.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4lbbwll.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4snd5y1.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5dyytoo.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5f6avqq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5faavll.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5g1vqgg.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5ggbqql.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5iidt5n.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5k1zukk.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5lfv5q1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5m1bwmm.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5q1faqq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5qqla4v.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5rlb5w1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5t6d5y2.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5v6ffa2.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5xrh5c1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6avqq7l.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6gga2ql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6q7lfaa.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6qqlb5w.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7bwr9mm.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7lg1gaa.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7vqllf5.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7zuoojj.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8cx1rmm.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\9q0lg0a.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a0vqql1faa.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a1llggaq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a1llggaqql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a7vqlaqq1.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a7vqllf5vq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a8ql1faavla.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aa1llffaqql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aa1vqggaav.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aavll1vv.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aavqq7lf.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aavvqffaav.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\alaqggaav.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqffaavllf.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqq1a0vv.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqq1a0vvqf9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqql1faavl.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqqlaavl.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\av5q1faqq1a.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\av9q0lg0a.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avllfv9q.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avllfv9qql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avqq7lfaa7.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avv6ffa2.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avvqf9a0vqq.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bbwqqllg7.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bqqlbbwl9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bqqllgw0q0.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bv9q0lggb.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bww6qlgg.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bwwrggbr.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\c0xssn1h.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\css1ccxx.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ddyn9i0d.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ddyo0i0dyy.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\eezo4jzzu.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ezoojz98uo.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f2vvqffaavl.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f5vqqlff.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f5vqqlff6a.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f6qqlaavll.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fa0vqql1fa.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\faavll1v.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\faavll1vvq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fav9qqlf9a0.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ff6qqlaavll.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fpfukk1u0.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fq79a0vqql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fvvqf9a0.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g0bbwl9g0.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g1gaavl98g.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g3ggbr98mgb.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g6qqla4vll.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g79q0lggb1v.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gaqql1gaa.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gb5vllgvv.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gb5w2mgww1g.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gb9w0rm0g0b.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gbbv5lggb.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gbqqlb98wq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gg6qqla4.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gg7bwrrl.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gq8gb1vqqlb.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gql987lg.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gv9q0lg0a.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gvvqqlaavl9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gww1g0bb.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h1cwwrh98.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h1rrmmhwwr.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h5c1rmcc.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hbww7rmhhb5.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hcrrmmhw.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hhb5rmmhbb6.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hwmm1w0r.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hxmcc1m0hhc.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\i1dyooiid.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ic4xnnixxs.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\id98ysn9.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ii7dyssn.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iicssn1ic.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iids4nddy.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iidttnd9y.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iidyy6sn.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\j1eyytj98.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l1aavl98g.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l1faavla.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l1faavlaqq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l1vvqqla.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l2gaqq1a.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l3llfv9qqlf.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l5fvvqff.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l5ggbq4l.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l9g0bw0q.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\laa1llffa.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\laavll1vvqq.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\laavllfv9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\laqq1a0vvqf.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lf5vqqlff6.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lf9a0vqql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lf9a0vqql1f.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lffa2qlaa.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lfv9qqlf.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lfvvqf9a0v.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lgaavvgav9q.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lgbqgg1q0ll.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lgga2qlaa1l.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lggbrr1b.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lggbww6ql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ll1faqq1a0.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ll1vvqqlaav.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llf5vqql.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llf5vqqlff6.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llfaa7vql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llff6qqla.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llffaqql1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llfv9qql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llfv9qqlf9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llgv9q0l.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llgw0q0l.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lvl9g0bw0q.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\m7hcxxr5hc.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mcc1m0hhcr9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mgww1ggbbwm.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mh98cwr9m0.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mm7hcwwrrm7.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mm7hcxxr5hc.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmgb9w0rm.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmgg1rrmm.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ncss1c0x.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nid98ysn9i0.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\oi2ytii1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\oii1ttooiyy.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\oii1ttoojyy.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\oiiddy7to.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ojyy1jjeezo.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q0lg0a0v.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q28ql1gaavl.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q6llfv5q1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qa8ql1faavl.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qffaavllfv9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qffaqql1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qfvvqqlaav.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qggb1wqqlb.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ql1gaavl.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ql1gaavl98g.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ql5fvvqffa.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qlaavl98.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qlaavlaqq1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qlf9a0vqql1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qlgg7bvqq7.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qll1vvqq.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qllfv9qqlf.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qllgw0q0.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq1a0vvqf9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq1bbvvqggb.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lfaa7vql.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lgaav.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lgaavvq7.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lgbbv.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qqlaavll1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qqlf9a0v.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qvqqlff6av.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rh5brrmbbww.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rh98cwr9m0h.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rlb9wwrl.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rllg2wrgg.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rmb9w0rm0.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rmb9w0rmm.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\s80c0xssn1i.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\snniy0s0nii.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tiidttod9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tnniyyt1nii.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ttjjet9o0.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ue80o0jeez.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uj9e0zu0o0j.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uoo1zzuu.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uoojz98uoj.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\v2qlaa1l.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\v2qlaa1llf.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\v9q0lg0a.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\v9qqlf9a.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vl9ggbv9q0l.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vlaqq1a0v.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vlbbvvqggb.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vllfv9qq.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vqffaavllf.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vqql1faavla.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vqqlbbvl9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vqqlf9a0vq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vvllfv9qq.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vvqf9a0v.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\w0q0lggb1.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\w1wqqlb9.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\w7rmhhb5rm.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wq4lbbwllg.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wqqlb98wql.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wqqllg7bw.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wr5lbbwll.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wrggbr98.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wrrmbbwwr.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ww1ggbbwm0.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ww7rmggb.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ww7rmhhb.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wwql9g0bw.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wwrrm7hc1cw.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xr9m0hccx1r.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xs1smmhx98.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xs2idss1.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xx1rmcc1m0.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xx6h5c2smc.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xx6hhc2snc.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xxrh9ccx.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\y0to0i0dyy.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\y80i0dyyt1o.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\yttod9y0to.exe ()
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\z1oojz98u.exe (Realtek Semiconductor Corp.)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zuupffzp9.exe (Realtek Semiconductor Corp.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll (Google Inc.)
O9 - Extra Button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe File not found
O13 - gopher Prefix: missing

will post part 2 in the next post.

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} https://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.130.130.5 195.130.131.5
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: TaskMan - (C:\RECYCLER\S-1-5-21-9453028287-2195402786-460942194-7889\yv8g67.exe) - C:\RECYCLER\S-1-5-21-9453028287-2195402786-460942194-7889\yv8g67.exe File not found
O20 - HKCU Winlogon: Shell - (C:\RECYCLER\S-1-5-21-9453028287-2195402786-460942194-7889\yv8g67.exe) - C:\RECYCLER\S-1-5-21-9453028287-2195402786-460942194-7889\yv8g67.exe File not found
O20 - HKCU Winlogon: Shell - (C:\RECYCLER\S-1-5-21-0696118400-9589263110-934607090-2044\yv8g67.exe) - C:\RECYCLER\S-1-5-21-0696118400-9589263110-934607090-2044\yv8g67.exe (DYwV4Io)
O20 - HKCU Winlogon: Shell - (C:\RECYCLER\S-1-5-21-2972787768-0648270075-051722134-6211\yv8g67.exe) - C:\RECYCLER\S-1-5-21-2972787768-0648270075-051722134-6211\yv8g67.exe File not found
O20 - HKCU Winlogon: Shell - (C:\RECYCLER\S-1-5-21-3407310557-4765643528-991043864-4545\yv8g67.exe) - C:\RECYCLER\S-1-5-21-3407310557-4765643528-991043864-4545\yv8g67.exe File not found
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (C:\RECYCLER\S-1-5-21-8889533518-4275422991-170553123-7605\rundll32.exe) - C:\RECYCLER\S-1-5-21-8889533518-4275422991-170553123-7605\.exe File not found
O24 - Desktop WallPaper: C:\Users\Steve\Desktop\Steve\Foto's\Reis Turkije (Side) 2009\DSC01085.JPG
O24 - Desktop BackupWallPaper: C:\Users\Steve\Desktop\Steve\Foto's\Reis Turkije (Side) 2009\DSC01085.JPG
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{7855a3aa-c6e6-11de-92b9-001060d1402b}\Shell - "" = AutoRun
O33 - MountPoints2\{7855a3aa-c6e6-11de-92b9-001060d1402b}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\autorun.exe -- File not found
O33 - MountPoints2\G\Shell\AutoRun\command - "" = .\Docs\print.exe
O33 - MountPoints2\G\Shell\explore\command - "" = .\\\\Docs/print.exe
O33 - MountPoints2\G\Shell\open\command - "" = Docs////print.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found


SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {78310121-036D-427A-9FAA-A9D8135E5F8F} - .NET Framework
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.mkdmp3enc - C:\PROGRA~1\CYBERL~1\PowerDV\Kernel\Burner\MKDMP3Enc.ACM File not found
Drivers32: msacm.siren - C:\Windows\System32\sirenacm.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Error creating restore point.

========== Files/Folders - Created Within 30 Days ==========

[2010/09/17 13:30:51 | 000,000,000 | ---D | C] -- C:\Windows\HaxFix
[2010/09/12 15:57:43 | 000,164,352 | ---- | C] (Lktgtzvf Zk) -- C:\Windows\System32\df1a245s4_1604.exe
[2010/09/12 15:20:09 | 000,124,976 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2010/09/12 15:20:08 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2010/09/12 15:19:51 | 000,338,480 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NAV\1100000.088\symtdiv.sys
[2010/09/12 15:19:51 | 000,328,752 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NAV\1100000.088\SymDS.sys
[2010/09/12 15:19:51 | 000,325,168 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NAV\1100000.088\srtsp.sys
[2010/09/12 15:19:51 | 000,169,008 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NAV\1100000.088\SymEFA.sys
[2010/09/12 15:19:51 | 000,043,696 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NAV\1100000.088\srtspx.sys
[2010/09/12 15:19:50 | 000,501,888 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NAV\1100000.088\ccHPx86.sys
[2010/09/12 15:19:50 | 000,114,736 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NAV\1100000.088\Ironx86.sys
[2010/09/12 15:19:42 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\NAV
[2010/09/12 15:19:42 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\NAV\1100000.088
[2010/09/12 15:19:40 | 000,000,000 | ---D | C] -- C:\Program Files\Norton AntiVirus
[2010/09/12 15:19:30 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller
[2010/09/12 15:06:26 | 000,164,352 | -H-- | C] (Lktgtzvf Zk) -- C:\Windows\andy128.exe
[2010/09/11 08:00:25 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\id98ysn9.exe
[2010/09/11 08:00:25 | 000,038,400 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4snd5y1.exe
[2010/09/10 18:16:04 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ncss1c0x.exe
[2010/09/10 18:16:04 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\c0xssn1h.exe
[2010/09/10 07:22:27 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\snniy0s0nii.exe
[2010/09/10 07:22:23 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iids4nddy.exe
[2010/09/10 07:22:22 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ii7dyssn.exe
[2010/09/09 18:24:46 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bwwrggbr.exe
[2010/09/09 18:24:44 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gb5w2mgww1g.exe
[2010/09/09 18:24:43 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wrggbr98.exe
[2010/09/09 07:18:37 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lvl9g0bw0q.exe
[2010/09/09 07:18:33 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5ggbqql.exe
[2010/09/09 07:18:32 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1q0llgv.exe
[2010/09/08 08:00:32 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\v9q0lg0a.exe
[2010/09/08 08:00:32 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lgga2qlaa1l.exe
[2010/09/07 18:31:42 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ll1faqq1a0.exe
[2010/09/07 18:31:42 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\laavll1vvqq.exe
[2010/09/07 18:31:41 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\faavll1v.exe
[2010/09/07 16:38:05 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lfaa7vql.exe
[2010/09/07 16:38:03 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llf5vqql.exe
[2010/09/07 07:20:59 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lgaavvq7.exe
[2010/09/07 07:20:58 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l1aavl98g.exe
[2010/09/07 07:20:57 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5qqla4v.exe
[2010/09/06 18:28:54 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ue80o0jeez.exe
[2010/09/06 18:28:53 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\z1oojz98u.exe
[2010/09/06 18:28:53 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\eezo4jzzu.exe
[2010/09/06 07:29:42 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zuupffzp9.exe
[2010/09/06 07:29:42 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fpfukk1u0.exe
[2010/09/06 07:29:41 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5k1zukk.exe
[2010/09/04 20:14:07 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\w0q0lggb1.exe
[2010/09/04 20:14:07 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bww6qlgg.exe
[2010/09/04 20:14:06 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4b2wqgg.exe
[2010/09/04 07:03:17 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fa0vqql1fa.exe
[2010/09/04 07:03:16 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qll1vvqq.exe
[2010/09/03 19:44:35 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hbww7rmhhb5.exe
[2010/09/03 19:44:34 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rmb9w0rmm.exe
[2010/09/02 22:14:32 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a8ql1faavla.exe
[2010/09/02 22:14:31 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qllfv9qqlf.exe
[2010/09/02 22:14:30 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vllfv9qq.exe
[2010/09/02 22:14:30 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0llfv9q.exe
[2010/09/02 22:06:00 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\av9q0lg0a.exe
[2010/09/02 22:06:00 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aa1vqggaav.exe
[2010/09/02 22:05:59 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5g1vqgg.exe
[2010/09/02 10:28:13 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lgbbv.exe
[2010/09/02 10:28:13 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bv9q0lggb.exe
[2010/09/02 10:28:13 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\431vqgg.exe
[2010/09/02 10:11:03 | 000,139,264 | ---- | C] (dev) -- C:\Users\Steve\AppData\Local\rdr_1283415062.exe
[2010/09/02 10:10:31 | 000,155,648 | -H-- | C] (Ehtpntcj Kjd) -- C:\Windows\andy127.exe
[2010/09/01 17:12:15 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ll1vvqqlaav.exe
[2010/09/01 17:12:14 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vlaqq1a0v.exe
[2010/09/01 16:27:13 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ww7rmhhb.exe
[2010/09/01 16:27:12 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rh5brrmbbww.exe
[2010/09/01 16:27:12 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hhb5rmmhbb6.exe
[2010/09/01 08:21:52 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avvqf9a0vqq.exe
[2010/09/01 08:21:52 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a7vqlaqq1.exe
[2010/09/01 08:21:51 | 000,044,544 | RHS- | C] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fvvqf9a0.exe
[2010/07/11 16:23:44 | 000,176,128 | ---- | C] (npi) -- C:\Users\Steve\AppData\Local\rdr_1278858222.exe
========== Files - Modified Within 30 Days ==========

[2010/09/17 14:24:53 | 001,572,864 | -HS- | M] () -- C:\Users\Steve\ntuser.dat
[2010/09/17 14:24:12 | 001,515,942 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010/09/17 14:24:12 | 000,689,618 | ---- | M] () -- C:\Windows\System32\perfh013.dat
[2010/09/17 14:24:12 | 000,610,142 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/09/17 14:24:12 | 000,122,796 | ---- | M] () -- C:\Windows\System32\perfc013.dat
[2010/09/17 14:24:12 | 000,103,924 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/09/17 14:18:09 | 000,027,335 | ---- | M] () -- C:\Users\Steve\AppData\Roaming\nvModes.001
[2010/09/17 14:17:44 | 000,003,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/09/17 14:17:44 | 000,003,072 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/09/17 14:17:42 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/09/17 14:17:39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/09/17 14:16:47 | 3219,562,496 | -HS- | M] () -- C:\hiberfil.sys
[2010/09/17 14:05:12 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2010/09/17 14:05:03 | 002,646,674 | -H-- | M] () -- C:\Users\Steve\AppData\Local\IconCache.db
[2010/09/17 13:21:47 | 001,585,306 | ---- | M] () -- C:\Windows\System32\drivers\NAV\1100000.088\Cat.DB
[2010/09/12 15:59:55 | 000,000,002 | ---- | M] () -- C:\Users\Steve\AppData\Local\010155555710297.xxe
[2010/09/12 15:57:43 | 000,164,352 | ---- | M] (Lktgtzvf Zk) -- C:\Windows\System32\df1a245s4_1604.exe
[2010/09/12 15:20:08 | 000,124,976 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2010/09/12 15:20:08 | 000,007,443 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2010/09/12 15:20:08 | 000,000,805 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2010/09/12 15:19:59 | 000,002,148 | ---- | M] () -- C:\Users\Public\Desktop\Norton AntiVirus.lnk
[2010/09/12 15:10:26 | 000,062,942 | ---- | M] () -- C:\Windows\fs1235.dat
[2010/09/12 15:07:52 | 000,000,002 | ---- | M] () -- C:\Users\Steve\AppData\Local\010157100535051.xxe
[2010/09/12 15:06:26 | 000,164,352 | -H-- | M] (Lktgtzvf Zk) -- C:\Windows\andy128.exe
[2010/09/11 08:12:25 | 000,000,680 | ---- | M] () -- C:\Users\Steve\AppData\Local\d3d9caps.dat
[2010/09/11 08:00:22 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\id98ysn9.exe
[2010/09/11 08:00:22 | 000,038,400 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4snd5y1.exe
[2010/09/10 18:16:00 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ncss1c0x.exe
[2010/09/10 18:16:00 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\c0xssn1h.exe
[2010/09/10 07:22:19 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\snniy0s0nii.exe
[2010/09/10 07:22:19 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iids4nddy.exe
[2010/09/10 07:22:19 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ii7dyssn.exe
[2010/09/09 18:24:40 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bwwrggbr.exe
[2010/09/09 18:24:39 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wrggbr98.exe
[2010/09/09 18:24:39 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gb5w2mgww1g.exe
[2010/09/09 07:18:30 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lvl9g0bw0q.exe
[2010/09/09 07:18:30 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5ggbqql.exe
[2010/09/09 07:18:29 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1q0llgv.exe
[2010/09/08 08:00:29 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\v9q0lg0a.exe
[2010/09/08 08:00:26 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lgga2qlaa1l.exe
[2010/09/07 18:31:36 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ll1faqq1a0.exe
[2010/09/07 18:31:36 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\laavll1vvqq.exe
[2010/09/07 18:31:36 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\faavll1v.exe
[2010/09/07 16:38:00 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lfaa7vql.exe
[2010/09/07 16:38:00 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llf5vqql.exe
[2010/09/07 07:20:54 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lgaavvq7.exe
[2010/09/07 07:20:54 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l1aavl98g.exe
[2010/09/07 07:20:54 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5qqla4v.exe
[2010/09/06 18:28:49 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\z1oojz98u.exe
[2010/09/06 18:28:49 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ue80o0jeez.exe
[2010/09/06 18:28:49 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\eezo4jzzu.exe
[2010/09/06 07:29:38 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zuupffzp9.exe
[2010/09/06 07:29:37 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fpfukk1u0.exe
[2010/09/06 07:29:37 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5k1zukk.exe
[2010/09/04 20:14:03 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\w0q0lggb1.exe
[2010/09/04 20:14:03 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bww6qlgg.exe
[2010/09/04 20:14:03 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4b2wqgg.exe
[2010/09/04 07:03:13 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qll1vvqq.exe
[2010/09/04 07:03:13 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fa0vqql1fa.exe
[2010/09/03 19:44:30 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rmb9w0rmm.exe
[2010/09/03 19:44:30 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hbww7rmhhb5.exe
[2010/09/02 22:14:27 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vllfv9qq.exe
[2010/09/02 22:14:27 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qllfv9qqlf.exe
[2010/09/02 22:14:27 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a8ql1faavla.exe
[2010/09/02 22:14:27 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0llfv9q.exe
[2010/09/02 22:05:55 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\av9q0lg0a.exe
[2010/09/02 22:05:55 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aa1vqggaav.exe
[2010/09/02 22:05:55 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5g1vqgg.exe
[2010/09/02 10:28:09 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lgbbv.exe
[2010/09/02 10:28:09 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bv9q0lggb.exe
[2010/09/02 10:28:09 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\431vqgg.exe
[2010/09/02 10:12:25 | 000,000,002 | ---- | M] () -- C:\Users\Steve\AppData\Local\0505256529857.xxe
[2010/09/02 10:12:08 | 000,000,002 | ---- | M] () -- C:\Users\Steve\AppData\Local\05651535410097.xxe
[2010/09/02 10:11:04 | 000,139,264 | ---- | M] (dev) -- C:\Users\Steve\AppData\Local\rdr_1283415062.exe
[2010/09/02 10:10:31 | 000,155,648 | -H-- | M] (Ehtpntcj Kjd) -- C:\Windows\andy127.exe
[2010/09/01 17:12:11 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vlaqq1a0v.exe
[2010/09/01 17:12:11 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ll1vvqqlaav.exe
[2010/09/01 16:27:10 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ww7rmhhb.exe
[2010/09/01 16:27:07 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rh5brrmbbww.exe
[2010/09/01 16:27:07 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hhb5rmmhbb6.exe
[2010/09/01 08:21:48 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fvvqf9a0.exe
[2010/09/01 08:21:48 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avvqf9a0vqq.exe
[2010/09/01 08:21:48 | 000,044,544 | RHS- | M] (Realtek Semiconductor Corp.) -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a7vqlaqq1.exe
[2010/08/31 07:32:16 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tnniyyt1nii.exe
[2010/08/31 07:32:16 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5iidt5n.exe
[2010/08/31 07:32:15 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iidttnd9y.exe
[2010/08/30 18:31:49 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1qf9a0v.exe
[2010/08/30 18:31:48 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0vvqf9a.exe
[2010/08/30 10:05:39 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hcrrmmhw.exe
[2010/08/30 10:05:39 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h5c1rmcc.exe
[2010/08/29 10:31:27 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5q1faqq.exe
[2010/08/28 20:36:11 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ff6qqlaavll.exe
[2010/08/28 20:36:11 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f2vvqffaavl.exe
[2010/08/28 20:36:11 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aavvqffaav.exe
[2010/08/28 07:17:11 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq1bbvvqggb.exe
[2010/08/28 07:17:11 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g79q0lggb1v.exe
[2010/08/28 07:17:11 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vlbbvvqggb.exe
[2010/08/28 07:17:11 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lgbqgg1q0ll.exe
[2010/08/27 19:04:31 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uoojz98uoj.exe
[2010/08/27 19:04:30 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7zuoojj.exe
[2010/08/27 19:04:30 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0oojz98.exe
[2010/08/27 08:08:12 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xs2idss1.exe
[2010/08/27 08:08:12 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ddyn9i0d.exe
[2010/08/27 08:08:12 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0niid1y.exe
[2010/08/27 07:34:12 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gvvqqlaavl9.exe
[2010/08/27 07:34:12 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0qql1ga.exe
[2010/08/26 18:57:25 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6qqlb5w.exe
[2010/08/26 18:57:25 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4lbbwll.exe
[2010/08/26 18:57:24 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bqqlbbwl9.exe
[2010/08/26 18:57:24 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wqqllg7bw.exe
[2010/08/26 10:11:48 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wqqlb98wql.exe
[2010/08/26 10:11:48 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qllgw0q0.exe
[2010/08/26 10:11:48 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lggbww6ql.exe
[2010/08/26 08:07:15 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\21rmccw.exe
[2010/08/26 08:07:14 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mm7hcwwrrm7.exe
[2010/08/26 08:07:14 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h1cwwrh98.exe
[2010/08/25 17:43:00 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2ql5fvv.exe
[2010/08/25 17:43:00 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avllfv9qql.exe
[2010/08/25 17:42:59 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l3llfv9qqlf.exe
[2010/08/25 14:24:03 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q6llfv5q1.exe
[2010/08/25 14:24:03 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f5vqqlff.exe
[2010/08/25 08:53:20 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lggbrr1b.exe
[2010/08/25 08:53:20 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gww1g0bb.exe
[2010/08/25 08:53:20 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gg7bwrrl.exe
[2010/08/24 07:11:43 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mh98cwr9m0.exe
[2010/08/24 07:11:42 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rh98cwr9m0h.exe
[2010/08/24 07:11:42 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2hhcrrm.exe
[2010/08/23 21:12:43 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llfv9qqlf9.exe
[2010/08/23 21:12:43 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqql1faavl.exe
[2010/08/23 21:12:42 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lfv9qqlf.exe
[2010/08/23 19:14:31 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ql5fvvqffa.exe
[2010/08/23 19:14:31 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6avqq7l.exe
[2010/08/23 19:14:31 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qfvvqqlaav.exe
[2010/08/23 07:12:11 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5m1bwmm.exe
[2010/08/23 07:12:11 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ww1ggbbwm0.exe
[2010/08/23 07:12:11 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmgb9w0rm.exe
[2010/08/22 08:50:23 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xx6h5c2smc.exe
[2010/08/22 08:50:23 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xs1smmhx98.exe
[2010/08/22 08:50:23 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2mh5c2s.exe
[2010/08/20 11:04:33 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q28ql1gaavl.exe
[2010/08/20 11:04:33 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llgv9q0l.exe
[2010/08/20 11:04:33 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6gga2ql.exe
[2010/08/20 08:03:36 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l9g0bw0q.exe
[2010/08/20 08:03:36 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l5ggbq4l.exe
[2010/08/20 08:03:36 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bqqllgw0q0.exe
[2010/08/19 19:17:53 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llffaqql1.exe
[2010/08/19 19:17:53 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lf9a0vqql.exe
[2010/08/19 19:17:52 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fq79a0vqql.exe
[2010/08/19 07:14:13 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1mmhxxr.exe
[2010/08/19 07:14:13 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mcc1m0hhcr9.exe
[2010/08/19 07:14:13 | 000,037,376 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\m7hcxxr5hc.exe
[2010/08/18 19:06:49 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h1rrmmhwwr.exe
[2010/08/18 19:06:49 | 000,043,008 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7bwr9mm.exe
[2010/08/18 19:06:48 | 000,037,888 | RHS- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hwmm1w0r.exe

========== Files Created - No Company Name ==========

[2010/09/17 13:30:52 | 000,537,842 | ---- | C] () -- C:\HaxFix.exe
[2010/09/12 15:59:55 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\010155555710297.xxe
[2010/09/12 15:20:12 | 001,585,306 | ---- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\Cat.DB
[2010/09/12 15:20:09 | 000,007,443 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2010/09/12 15:20:09 | 000,000,805 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2010/09/12 15:19:59 | 000,002,148 | ---- | C] () -- C:\Users\Public\Desktop\Norton AntiVirus.lnk
[2010/09/12 15:19:46 | 000,003,375 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\SymEFA.inf
[2010/09/12 15:19:46 | 000,002,793 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\SymDS.inf
[2010/09/12 15:19:46 | 000,001,756 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\ccHPx86.inf
[2010/09/12 15:19:46 | 000,001,475 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\SymNetV.inf
[2010/09/12 15:19:46 | 000,001,447 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\SymNet.inf
[2010/09/12 15:19:46 | 000,001,389 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\srtspx.inf
[2010/09/12 15:19:46 | 000,001,383 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\srtsp.inf
[2010/09/12 15:19:46 | 000,000,743 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\Iron.inf
[2010/09/12 15:19:42 | 000,007,787 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\symnetv.cat
[2010/09/12 15:19:42 | 000,007,438 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\srtsp.cat
[2010/09/12 15:19:42 | 000,007,431 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\SymEFA.cat
[2010/09/12 15:19:42 | 000,007,429 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\srtspx.cat
[2010/09/12 15:19:42 | 000,007,425 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\SymDS.cat
[2010/09/12 15:19:42 | 000,007,424 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\iron.cat
[2010/09/12 15:19:42 | 000,007,396 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\cchpx86.cat
[2010/09/12 15:19:42 | 000,007,355 | R--- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\SymNet.cat
[2010/09/12 15:19:42 | 000,000,172 | ---- | C] () -- C:\Windows\System32\drivers\NAV\1100000.088\isolate.ini
[2010/09/12 15:09:14 | 000,062,942 | ---- | C] () -- C:\Windows\fs1235.dat
[2010/09/12 15:07:52 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\010157100535051.xxe
[2010/09/12 14:46:17 | 3219,562,496 | -HS- | C] () -- C:\hiberfil.sys
[2010/09/02 10:12:25 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\0505256529857.xxe
[2010/09/02 10:12:08 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\05651535410097.xxe
[2010/08/31 07:32:20 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tnniyyt1nii.exe
[2010/08/31 07:32:19 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iidttnd9y.exe
[2010/08/31 07:32:18 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5iidt5n.exe
[2010/08/30 18:31:52 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1qf9a0v.exe
[2010/08/30 18:31:51 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0vvqf9a.exe
[2010/08/30 10:05:43 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hcrrmmhw.exe
[2010/08/30 10:05:43 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h5c1rmcc.exe
[2010/08/29 10:31:30 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5q1faqq.exe
[2010/08/28 20:36:15 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ff6qqlaavll.exe
[2010/08/28 20:36:15 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f2vvqffaavl.exe
[2010/08/28 20:36:15 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aavvqffaav.exe
[2010/08/28 07:17:16 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g79q0lggb1v.exe
[2010/08/28 07:17:16 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lgbqgg1q0ll.exe
[2010/08/28 07:17:15 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq1bbvvqggb.exe
[2010/08/28 07:17:15 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vlbbvvqggb.exe
[2010/08/27 19:04:35 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uoojz98uoj.exe
[2010/08/27 19:04:34 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0oojz98.exe
[2010/08/27 19:04:33 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7zuoojj.exe
[2010/08/27 08:08:16 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xs2idss1.exe
[2010/08/27 08:08:16 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ddyn9i0d.exe
[2010/08/27 08:08:15 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0niid1y.exe
[2010/08/27 07:34:16 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gvvqqlaavl9.exe
[2010/08/27 07:34:15 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0qql1ga.exe
[2010/08/26 18:57:28 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bqqlbbwl9.exe
[2010/08/26 18:57:28 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6qqlb5w.exe
[2010/08/26 18:57:28 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wqqllg7bw.exe
[2010/08/26 18:57:28 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4lbbwll.exe
[2010/08/26 10:11:52 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wqqlb98wql.exe
[2010/08/26 10:11:52 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lggbww6ql.exe
[2010/08/26 10:11:51 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qllgw0q0.exe
[2010/08/26 08:07:25 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\21rmccw.exe
[2010/08/26 08:07:22 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h1cwwrh98.exe
[2010/08/26 08:07:19 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mm7hcwwrrm7.exe
[2010/08/25 17:43:04 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l3llfv9qqlf.exe
[2010/08/25 17:43:04 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avllfv9qql.exe
[2010/08/25 17:43:03 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2ql5fvv.exe
[2010/08/25 14:24:09 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q6llfv5q1.exe
[2010/08/25 14:24:06 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f5vqqlff.exe
[2010/08/25 08:53:30 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lggbrr1b.exe
[2010/08/25 08:53:27 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gg7bwrrl.exe
[2010/08/25 08:53:24 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gww1g0bb.exe
[2010/08/24 07:11:47 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rh98cwr9m0h.exe
[2010/08/24 07:11:47 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mh98cwr9m0.exe
[2010/08/24 07:11:46 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2hhcrrm.exe
[2010/08/23 21:12:47 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llfv9qqlf9.exe
[2010/08/23 21:12:47 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqql1faavl.exe
[2010/08/23 21:12:46 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lfv9qqlf.exe
[2010/08/23 19:14:36 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ql5fvvqffa.exe
[2010/08/23 19:14:36 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qfvvqqlaav.exe
[2010/08/23 19:14:35 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6avqq7l.exe
[2010/08/23 07:12:15 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ww1ggbbwm0.exe
[2010/08/23 07:12:14 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5m1bwmm.exe
[2010/08/23 07:12:14 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmgb9w0rm.exe
[2010/08/22 08:50:27 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xx6h5c2smc.exe
[2010/08/22 08:50:27 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xs1smmhx98.exe
[2010/08/22 08:50:26 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2mh5c2s.exe
[2010/08/20 11:04:38 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q28ql1gaavl.exe
[2010/08/20 11:04:37 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llgv9q0l.exe
[2010/08/20 11:04:36 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6gga2ql.exe
[2010/08/20 08:03:43 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l5ggbq4l.exe
[2010/08/20 08:03:40 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bqqllgw0q0.exe
[2010/08/20 08:03:39 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l9g0bw0q.exe
[2010/08/19 19:17:57 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llffaqql1.exe
[2010/08/19 19:17:57 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lf9a0vqql.exe
[2010/08/19 19:17:57 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fq79a0vqql.exe
[2010/08/19 07:14:18 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mcc1m0hhcr9.exe
[2010/08/19 07:14:17 | 000,037,376 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\m7hcxxr5hc.exe
[2010/08/19 07:14:16 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1mmhxxr.exe
[2010/08/18 19:06:53 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h1rrmmhwwr.exe
[2010/08/18 19:06:52 | 000,043,008 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7bwr9mm.exe
[2010/08/18 19:06:52 | 000,037,888 | RHS- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hwmm1w0r.exe
[2010/07/11 16:24:47 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\010110154524997.xxe
[2010/06/29 20:28:16 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\0554999559954.xxe
[2010/06/29 20:27:09 | 000,122,880 | ---- | C] () -- C:\Users\Steve\AppData\Local\rdr_1277836026.exe
[2010/06/24 20:47:52 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\04855511005551.xxe
[2010/06/24 20:42:27 | 000,156,160 | ---- | C] () -- C:\Users\Steve\AppData\Local\rdr_1277404945.exe
[2010/06/17 21:47:42 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\097101524998102.xxe
[2010/06/17 21:46:34 | 000,121,856 | ---- | C] () -- C:\Users\Steve\AppData\Local\rdr_1276803988.exe
[2010/06/17 20:40:34 | 000,000,535 | ---- | C] () -- C:\Program Files\game.cfg
[2010/06/15 20:48:48 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\05154484910053.xxe
[2010/06/12 17:22:54 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\0995154505553.xxe
[2010/06/12 17:22:48 | 000,000,002 | ---- | C] () -- C:\Users\Steve\AppData\Local\0535049569854.xxe
[2010/06/12 14:16:11 | 087,012,465 | ---- | C] () -- C:\Program Files\CarriĆØre.sav
[2010/02/25 22:25:04 | 000,324,009 | ---- | C] () -- C:\Program Files\hall_of_fame.bin
[2010/02/14 09:26:17 | 000,000,680 | ---- | C] () -- C:\Users\Steve\AppData\Local\d3d9caps.dat
[2010/02/11 23:58:14 | 000,000,049 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2010/02/11 23:17:44 | 000,050,688 | ---- | C] () -- C:\Windows\System32\fio32.dll
[2010/02/11 23:17:29 | 000,019,456 | RHS- | C] () -- C:\Program Files\captcha.dll
[2009/12/14 21:10:28 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2009/12/14 21:10:28 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2009/11/16 09:22:41 | 000,000,215 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2009/06/24 08:18:48 | 000,035,628 | ---- | C] () -- C:\ProgramData\LUUnInstall.LiveUpdate
[2009/02/18 10:36:37 | 000,000,000 | ---- | C] () -- C:\Windows\System32\drivers\nfr.dll.gpref
[2009/02/18 10:30:12 | 000,000,000 | ---- | C] () -- C:\Windows\System32\drivers\nfr.dll.assembly
[2008/09/28 14:55:36 | 000,027,335 | ---- | C] () -- C:\Users\Steve\AppData\Roaming\nvModes.001
[2008/09/28 14:55:35 | 000,027,335 | ---- | C] () -- C:\Users\Steve\AppData\Roaming\nvModes.dat
[2008/09/28 14:20:19 | 000,028,672 | ---- | C] () -- C:\Users\Steve\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/04/30 18:29:12 | 000,167,936 | ---- | C] () -- C:\Windows\System32\nvccoin.dll
[2008/04/30 18:28:37 | 000,753,456 | ---- | C] () -- C:\Windows\System32\drivers\BisonCam.sys
[2008/04/30 18:28:37 | 000,015,190 | ---- | C] () -- C:\Windows\M2000Twn.ini
[2008/04/30 18:18:47 | 000,211,000 | ---- | C] () -- C:\Windows\System32\drivers\volsnap.sys
[2007/10/25 18:26:10 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2006/11/02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/08/11 18:52:02 | 000,012,288 | ---- | C] () -- C:\Windows\System32\EvOnlDiag.dll

part 3 in post 3

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
========== Custom Scans ==========


< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2006/11/02 11:47:18 | 000,228,968 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll
[2007/11/03 11:11:30 | 000,223,232 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll

< %systemroot%\system32\*.exe /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2008/04/30 18:41:21 | 016,781,312 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2008/04/30 18:41:11 | 000,102,400 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2008/04/30 18:41:21 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2008/04/30 18:41:34 | 017,043,456 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2008/04/30 18:41:35 | 006,029,312 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

< %systemroot%\system32\*.sys >
[2006/11/02 09:09:42 | 000,009,029 | ---- | M] () -- C:\Windows\System32\ANSI.SYS
[2008/04/30 18:14:19 | 000,224,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys
[2006/11/02 09:09:45 | 000,027,097 | ---- | M] () -- C:\Windows\System32\country.sys
[2009/03/31 10:39:36 | 000,036,608 | ---- | M] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2006/11/02 09:09:41 | 000,004,768 | ---- | M] () -- C:\Windows\System32\HIMEM.SYS
[2006/11/02 09:09:44 | 000,042,809 | ---- | M] () -- C:\Windows\System32\KEY01.SYS
[2006/11/02 09:09:44 | 000,042,537 | ---- | M] () -- C:\Windows\System32\KEYBOARD.SYS
[2006/11/02 09:09:29 | 000,027,866 | ---- | M] () -- C:\Windows\System32\NTDOS.SYS
[2006/11/02 09:09:35 | 000,029,146 | ---- | M] () -- C:\Windows\System32\NTDOS404.SYS
[2006/11/02 09:09:38 | 000,029,370 | ---- | M] () -- C:\Windows\System32\NTDOS411.SYS
[2006/11/02 09:09:40 | 000,029,274 | ---- | M] () -- C:\Windows\System32\NTDOS412.SYS
[2006/11/02 09:09:31 | 000,029,146 | ---- | M] () -- C:\Windows\System32\NTDOS804.SYS
[2006/11/02 09:09:20 | 000,033,952 | ---- | M] () -- C:\Windows\System32\NTIO.SYS
[2006/11/02 09:09:23 | 000,034,672 | ---- | M] () -- C:\Windows\System32\NTIO404.SYS
[2006/11/02 09:09:24 | 000,035,776 | ---- | M] () -- C:\Windows\System32\NTIO411.SYS
[2006/11/02 09:09:26 | 000,035,536 | ---- | M] () -- C:\Windows\System32\NTIO412.SYS
[2006/11/02 09:09:22 | 000,034,672 | ---- | M] () -- C:\Windows\System32\NTIO804.SYS
[2009/08/15 23:08:32 | 002,032,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys

< %systemroot%\system32\drivers\*.dll >

< %systemroot%\system32\drivers\*.ini >

< %systemroot%\system32\drivers\*.exe >

< %SYSTEMDRIVE%\*.* >
[2006/09/18 23:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2008/01/19 00:45:46 | 000,333,203 | RHS- | M] () -- C:\bootmgr
[2008/04/30 18:41:37 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2006/09/18 23:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
[2010/06/12 17:53:51 | 000,141,937 | ---- | M] () -- C:\fb20100612.log
[2010/06/13 18:29:18 | 000,006,989 | ---- | M] () -- C:\fb20100613.log
[2010/06/15 21:21:50 | 000,072,813 | ---- | M] () -- C:\fb20100615.log
[2010/06/24 21:53:58 | 000,145,700 | ---- | M] () -- C:\fb20100624.log
[2010/06/29 20:54:34 | 000,082,644 | ---- | M] () -- C:\fb20100629.log
[2010/07/11 16:41:05 | 000,132,015 | ---- | M] () -- C:\fb20100711.log
[2010/09/02 10:23:57 | 000,161,404 | ---- | M] () -- C:\fb20100902.log
[2010/09/12 16:01:19 | 000,049,253 | ---- | M] () -- C:\fb20100912.log
[2010/09/17 14:25:05 | 000,004,634 | ---- | M] () -- C:\fb20100917.log
[2010/04/04 13:04:57 | 000,537,842 | ---- | M] () -- C:\HaxFix.exe
[2010/09/17 14:16:47 | 3219,562,496 | -HS- | M] () -- C:\hiberfil.sys
[2008/04/30 10:23:38 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2008/04/30 10:23:38 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010/09/17 14:16:44 | 3533,307,904 | -HS- | M] () -- C:\pagefile.sys
[2008/04/30 09:18:39 | 000,001,575 | ---- | M] () -- C:\Prodlog.txt

< %PROGRAMFILES%\*. >
[2008/10/08 09:01:07 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2008/11/24 10:32:38 | 000,000,000 | ---D | M] -- C:\Program Files\BitDownload
[2008/04/30 18:30:03 | 000,000,000 | ---D | M] -- C:\Program Files\C&E
[2010/02/22 21:25:44 | 000,000,000 | ---D | M] -- C:\Program Files\CM 01-02
[2010/02/13 21:48:12 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2008/04/30 18:43:57 | 000,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2010/02/22 21:25:47 | 000,000,000 | ---D | M] -- C:\Program Files\Data
[2009/12/14 21:12:35 | 000,000,000 | ---D | M] -- C:\Program Files\DIFX
[2010/02/22 21:25:47 | 000,000,000 | ---D | M] -- C:\Program Files\Editor
[2010/01/31 12:30:50 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2008/09/28 14:50:42 | 000,000,000 | ---D | M] -- C:\Program Files\History
[2009/12/14 21:10:03 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2008/04/30 18:29:48 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2009/10/15 08:46:58 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2008/12/11 08:03:59 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2010/02/22 21:25:48 | 000,000,000 | ---D | M] -- C:\Program Files\LimeWire
[2009/12/14 21:09:25 | 000,000,000 | ---D | M] -- C:\Program Files\MarkAny
[2009/02/18 10:07:50 | 000,000,000 | ---D | M] -- C:\Program Files\Microgaming
[2009/09/17 10:56:57 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2006/11/02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2009/09/18 07:58:48 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2009/09/17 10:58:37 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2009/09/17 10:59:52 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Sync Framework
[2008/04/30 18:28:30 | 000,000,000 | ---D | M] -- C:\Program Files\Motorola
[2006/11/02 14:42:32 | 000,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2006/11/02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2006/11/02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\MSN
[2008/04/30 18:30:24 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
[2008/09/28 14:07:35 | 000,000,000 | ---D | M] -- C:\Program Files\Nero
[2010/09/12 15:19:42 | 000,000,000 | ---D | M] -- C:\Program Files\Norton AntiVirus
[2010/09/12 15:19:30 | 000,000,000 | ---D | M] -- C:\Program Files\NortonInstaller
[2009/12/14 21:12:23 | 000,000,000 | ---D | M] -- C:\Program Files\PC Connectivity Solution
[2010/02/22 21:25:49 | 000,000,000 | ---D | M] -- C:\Program Files\Pictures
[2008/09/28 14:57:35 | 000,000,000 | ---D | M] -- C:\Program Files\print
[2008/09/28 14:50:53 | 000,000,000 | ---D | M] -- C:\Program Files\qstart
[2006/11/02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2008/12/03 10:27:10 | 000,000,000 | ---D | M] -- C:\Program Files\RegCure
[2009/12/14 21:12:37 | 000,000,000 | ---D | M] -- C:\Program Files\Samsung
[2008/09/28 14:57:35 | 000,000,000 | ---D | M] -- C:\Program Files\search
[2009/02/05 17:45:31 | 000,000,000 | ---D | M] -- C:\Program Files\Shop-n-Spree
[2008/09/28 14:50:33 | 000,000,000 | ---D | M] -- C:\Program Files\Sounds
[2010/09/12 15:20:09 | 000,000,000 | ---D | M] -- C:\Program Files\Symantec
[2010/06/12 13:46:54 | 000,000,000 | ---D | M] -- C:\Program Files\tactics
[2010/06/12 13:46:54 | 000,000,000 | ---D | M] -- C:\Program Files\training
[2006/11/02 15:01:55 | 000,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2010/09/12 15:22:18 | 000,000,000 | ---D | M] -- C:\Program Files\webserver
[2008/09/28 16:05:17 | 000,000,000 | ---D | M] -- C:\Program Files\Winamp
[2006/11/02 14:42:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Calendar
[2006/11/02 14:42:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Collaboration
[2006/11/02 14:42:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2006/11/02 14:42:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Journal
[2009/09/17 11:00:27 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2009/09/17 10:56:41 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Live SkyDrive
[2009/11/12 22:54:13 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2009/10/30 10:17:28 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2006/11/02 14:37:34 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2006/11/02 14:42:32 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Gallery
[2008/04/30 18:23:54 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar

< %appdata%\*.* >
[2010/09/17 14:18:09 | 000,027,335 | ---- | M] () -- C:\Users\Steve\AppData\Roaming\nvModes.001
[2010/07/11 16:41:01 | 000,027,335 | ---- | M] () -- C:\Users\Steve\AppData\Roaming\nvModes.dat


< MD5 for: AGP440.SYS >
[2007/11/03 11:44:02 | 000,056,504 | ---- | M] (Microsoft Corporation) MD5=198636E76971EBC96404547EC0FD5E75 -- C:\Windows\System32\drivers\AGP440.sys
[2007/11/03 11:44:02 | 000,056,504 | ---- | M] (Microsoft Corporation) MD5=198636E76971EBC96404547EC0FD5E75 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_cb7c81c7\AGP440.sys
[2007/11/03 11:44:02 | 000,056,504 | ---- | M] (Microsoft Corporation) MD5=198636E76971EBC96404547EC0FD5E75 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6000.20598_none_b85cfa98dae9b436\AGP440.sys
[2006/11/02 11:49:52 | 000,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys

< MD5 for: ATAPI.SYS >
[2007/11/03 12:14:34 | 000,021,688 | ---- | M] (Microsoft Corporation) MD5=0B77F93AB73798F97E8E0A0AA4CCBEEF -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_44b6b0d0\atapi.sys
[2007/11/03 12:14:34 | 000,021,688 | ---- | M] (Microsoft Corporation) MD5=0B77F93AB73798F97E8E0A0AA4CCBEEF -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20694_none_db7e36353dc64123\atapi.sys
[2006/11/02 11:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2008/04/30 18:18:47 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
[2008/04/30 18:18:47 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
[2008/04/30 18:18:47 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\System32\drivers\atapi.sys
[2008/04/30 18:18:47 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_64dfd8ea\atapi.sys
[2008/04/30 18:18:47 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2006/11/02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006/11/02 11:46:03 | 000,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll

< MD5 for: DISK.SYS >
[2006/11/02 11:49:51 | 000,052,840 | ---- | M] (Microsoft Corporation) MD5=841AF4C4D41D3E3B2F244E976B0F7963 -- C:\Windows\System32\drivers\disk.sys
[2006/11/02 11:49:51 | 000,052,840 | ---- | M] (Microsoft Corporation) MD5=841AF4C4D41D3E3B2F244E976B0F7963 -- C:\Windows\System32\DriverStore\FileRepository\disk.inf_e0b0b355\disk.sys

< MD5 for: IASTOR.SYS >
[2007/07/12 16:35:02 | 000,305,176 | ---- | M] (Intel Corporation) MD5=2358C53F30CB9DCD1D3843C4E2F299B2 -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_ec8a8d1b\iaStor.sys
[2007/04/25 12:17:36 | 000,277,784 | ---- | M] (Intel Corporation) MD5=5DF93509037399B53D3ECAA8A67B6C58 -- C:\DRIVER\CHIPSET\ROBSON1\setup\Winall\Driver\iaStor.sys
[2007/04/25 12:17:36 | 000,277,784 | ---- | M] (Intel Corporation) MD5=5DF93509037399B53D3ECAA8A67B6C58 -- C:\DRIVER\SATA\INTEL1\iaStor.sys
[2007/04/25 12:17:36 | 000,277,784 | ---- | M] (Intel Corporation) MD5=5DF93509037399B53D3ECAA8A67B6C58 -- C:\Program Files\Intel\Intel Matrix Storage Manager\driver\iaStor.sys
[2007/04/25 12:17:36 | 000,277,784 | ---- | M] (Intel Corporation) MD5=5DF93509037399B53D3ECAA8A67B6C58 -- C:\Windows\System32\drivers\iaStor.sys
[2007/04/25 12:17:36 | 000,277,784 | ---- | M] (Intel Corporation) MD5=5DF93509037399B53D3ECAA8A67B6C58 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_b92fa6ec\iaStor.sys
[2007/04/25 12:18:12 | 000,537,368 | ---- | M] (Intel Corporation) MD5=6E9BEDAEFA5A3F86CECF40F4963F3021 -- C:\DRIVER\CHIPSET\ROBSON1\setup\Winall\Driver64\IaStor.sys
[2007/04/25 12:18:12 | 000,537,368 | ---- | M] (Intel Corporation) MD5=6E9BEDAEFA5A3F86CECF40F4963F3021 -- C:\Program Files\Intel\Intel Matrix Storage Manager\driver64\IaStor.sys

< MD5 for: IASTORV.SYS >
[2006/11/02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys
[2006/11/02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2006/11/02 11:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\System32\netlogon.dll
[2006/11/02 11:46:11 | 000,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll

< MD5 for: NVRD32.SYS >
[2007/07/02 17:37:10 | 000,131,616 | ---- | M] (NVIDIA Corporation) MD5=ED399014A8029DE02BA5AE01DA8CC9EE -- C:\Windows\System32\drivers\nvrd32.sys
[2007/07/02 17:37:10 | 000,131,616 | ---- | M] (NVIDIA Corporation) MD5=ED399014A8029DE02BA5AE01DA8CC9EE -- C:\Windows\System32\DriverStore\FileRepository\nvrd32.inf_bbf77119\nvrd32.sys

< MD5 for: NVSTOR.SYS >
[2006/11/02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys
[2006/11/02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys

< MD5 for: NVSTOR32.SYS >
[2007/07/02 17:37:08 | 000,110,112 | ---- | M] (NVIDIA Corporation) MD5=703E3A7093B0FAC0EEBADBB8E931ECAF -- C:\Windows\System32\drivers\nvstor32.sys
[2007/07/02 17:37:08 | 000,110,112 | ---- | M] (NVIDIA Corporation) MD5=703E3A7093B0FAC0EEBADBB8E931ECAF -- C:\Windows\System32\DriverStore\FileRepository\nvrd32.inf_bbf77119\nvstor32.sys

< MD5 for: SCECLI.DLL >
[2006/11/02 11:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\System32\scecli.dll
[2006/11/02 11:46:12 | 000,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll

< MD5 for: USBSTOR.SYS >
[2007/11/03 11:40:14 | 000,055,296 | ---- | M] (Microsoft Corporation) MD5=7887CE56934E7F104E98C975F47353C5 -- C:\Windows\System32\drivers\USBSTOR.SYS
[2007/11/03 11:40:14 | 000,055,296 | ---- | M] (Microsoft Corporation) MD5=7887CE56934E7F104E98C975F47353C5 -- C:\Windows\System32\DriverStore\FileRepository\usbstor.inf_8416e98e\USBSTOR.SYS
[2007/11/03 11:40:14 | 000,055,296 | ---- | M] (Microsoft Corporation) MD5=7887CE56934E7F104E98C975F47353C5 -- C:\Windows\winsxs\x86_usbstor.inf_31bf3856ad364e35_6.0.6000.16478_none_465c5f209ade1e53\USBSTOR.SYS
[2007/11/03 11:40:14 | 000,055,296 | ---- | M] (Microsoft Corporation) MD5=7DA1833F2B2500C755AB6C81C5ABFC88 -- C:\Windows\winsxs\x86_usbstor.inf_31bf3856ad364e35_6.0.6000.20588_none_46db2bffb403da0e\USBSTOR.SYS
[2006/11/02 10:55:05 | 000,054,784 | ---- | M] (Microsoft Corporation) MD5=FDBAABF07244C60B0F4E0A6E71A107C6 -- C:\Windows\System32\DriverStore\FileRepository\usbstor.inf_bb2778a0\USBSTOR.SYS

< MD5 for: VIAMRAID.SYS >
[2006/11/08 15:23:52 | 000,102,912 | ---- | M] (VIA Technologies inc,.ltd) MD5=7DC3E1DC6E4F8BE381C31BFEA578412A -- C:\Windows\System32\drivers\viamraid.sys
[2006/11/08 15:23:52 | 000,102,912 | ---- | M] (VIA Technologies inc,.ltd) MD5=7DC3E1DC6E4F8BE381C31BFEA578412A -- C:\Windows\System32\DriverStore\FileRepository\viamraid.inf_74a36694\viamraid.sys

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2009-11-16 07:22:41

========== Alternate Data Streams ==========

@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:DF0BC727
< End of report >






descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
so this was everything in the OTL file :)hope this is enough info to help me ? Smile...
many thanks in advance!

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
Hello.
What a nasty infection you got here.

  • Download combofix from here
    Link 1
    Link 2

    1. If you are using Firefox, make sure that your download settings are as follows:

    * Tools->Options->Main tab
    * Set to "Always ask me where to Save the files".

    2. During the download, rename Combofix to Combo-Fix as follows:

    I think my computer is infected with suspicious.mh690.a virus , can anyone help? CF_download_FF

    I think my computer is infected with suspicious.mh690.a virus , can anyone help? CF_download_rename

    3. It is important you rename Combofix during the download, but not after.
    4. Please do not rename Combofix to other names, but only to the one indicated.
    5. Close any open browsers.
    6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

  • We need to disable your local AV (Anti-virus) before running Combofix.
  • See HERE for how to disable your AV.
  • Double click on ComboFix.exe.
  • Follow the prompts. NOTE:
  • ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
    ***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***

    **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.


  • The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.

    I think my computer is infected with suspicious.mh690.a virus , can anyone help? Cf410

  • Allow ComboFix to download the Recovery Console.
  • Accept the End-User License Agreement.
  • The Recovery Console will be installed.
  • You will then get this next prompt that asks if you want to continue the malware scan, select yes

    I think my computer is infected with suspicious.mh690.a virus , can anyone help? Cf510

  • Allow combofix to run
  • Post C:\combofix.txt back here.

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
thanks for your response , I downloaded combofix and did everything like you said , but when combofix reaches part 50 , I get a blue screen and the laptop shuts down ( I think I saw something on that bluescreen about "poolheader" or something like that , could it be ? )
so did I do anything wrong ?
if so , sorry !

I tried it three times. is there anything to provide the laptop from shutting down ?

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
oh and I also didn't see anything about downloading the microsoft recovery console ?

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
Okay then, guess we need to chop it down little by little.

Please download and run this tool.

Download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.


Post the contents of the MBAM Log.

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
ok so did that scan , he found 64.

this is the mbam log

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4052

Windows 6.0.6000
Internet Explorer 7.0.6000.16916

17/09/2010 16:49:49
mbam-log-2010-09-17 (16-49-49).txt

Scan type: Quick scan
Objects scanned: 113287
Time elapsed: 3 minute(s), 59 second(s)

Memory Processes Infected: 2
Memory Modules Infected: 0
Registry Keys Infected: 5
Registry Values Infected: 5
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 51

Memory Processes Infected:
C:\Windows\ld16.exe (Trojan.Dropper) -> Unloaded process successfully.
C:\Windows\pp14.exe (Trojan.Dropper) -> Unloaded process successfully.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fio32 (Worm.KoobFace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fioo32 (Worm.KoobFace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_FIO32 (Worm.KoobFace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Enum\Root\LEGACY_NFR.sys (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SfX (Rootkit.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysldtray (Trojan.Dropper) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pp (Trojan.Dropper) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\captcha7 (Worm.KoobFace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\fioo32 (Worm.KoobFace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Program Files\BitDownload (Trojan.Swizzor) -> Quarantined and deleted successfully.

Files Infected:
C:\Windows\ld16.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\pp14.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Program Files\captcha.dll (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Windows\System32\fio32.dll (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Windows\System32\drivers\fio32.sys (Worm.Koobface) -> Quarantined and deleted successfully.
C:\Windows\freddy101.exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Windows\rdr_1265971357.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266022579.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266040131.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266040187.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266053118.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266056840.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266063672.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266090083.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266090743.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266091825.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266093426.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266257410.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266257909.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266771227.exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Program Files\BitDownload\BitDownload Setup Components (Trojan.Swizzor) -> Quarantined and deleted successfully.
C:\Windows\lgo (Koobface.Trace) -> Quarantined and deleted successfully.
C:\Windows\010112010146111103.xxe (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\Windows\010112010146114101.xxe (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\Windows\01011201014650115.xxe (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\Windows\bk20856.dat (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\Windows\bk23567.dat (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\Windows\fdgg34353edfgdfdf (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\Windows\System32\drivers\nfr.dll.assembly (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Windows\fs1235.dat (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266433039.exe (Worm.Koobface) -> Quarantined and deleted successfully.
C:\Windows\rdr_1266433041.exe (Worm.Koobface) -> Quarantined and deleted successfully.
C:\Windows\bill112.exe (Worm.Koobface) -> Quarantined and deleted successfully.
C:\Windows\bill113.exe (Worm.Koobface) -> Quarantined and deleted successfully.
C:\Windows\bill114.exe (Worm.Koobface) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\010110154524997.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\010155555710297.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\010157100535051.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\04855511005551.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\0505256529857.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\05154484910053.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\0535049569854.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\0554999559954.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\05651535410097.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\097101524998102.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\0995154505553.xxe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\rdr_1276803988.exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\rdr_1277404945.exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\rdr_1277836026.exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\rdr_1278858222.exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Users\Steve\Local Settings\Application Data\rdr_1283415062.exe (Worm.KoobFace) -> Quarantined and deleted successfully.

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
Hello.

Please re-open Malwarebytes, click the Update tab, and click Check for Updates. Then, click the Scanner tab, select Perform Quick Scan, and press Scan.

Post the new log when done.

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
ok did the update now and found a lot more ( didn't do the update before cause I was scared to connect that laptop with my connection )


log :

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4639

Windows 6.0.6000
Internet Explorer 7.0.6000.16916

17/09/2010 17:13:43
mbam-log-2010-09-17 (17-13-43).txt

Scan type: Quick scan
Objects scanned: 130701
Time elapsed: 5 minute(s), 25 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 13
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 294

Memory Processes Infected:
C:\Windows\andy128.exe (Trojan.Ransom) -> Unloaded process successfully.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xuri49tkd (Trojan.Ransom) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\dixdxdx (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mmhxxs (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vvqvqk (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vqf5a (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rbrrmw (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vvqq6a (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\aavvq1f (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\qqllf (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\qlffa0 (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lvllfv (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\faavqq (BackDoor.Refroso) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\qqkffa0 (BackDoor.Refroso) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Windows\andy128.exe (Trojan.Ransom) -> Quarantined and deleted successfully.
C:\Windows\System32\ndi1dxsnd.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\mhh6ssm2.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\5faavqq.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\qf9a0vq0k0f.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\rrmmgwwr1.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\qqkf9a0vq.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\vfv9qqlf9a.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\aavlaqq1a.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\aavqq7lf.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\faa7vqkk.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0i0c0xs.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0llfv9q.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0niid1y.exe (Backdoor.Agent) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0oojz98.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0qql1fa.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0qql1ga.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0vfaavl.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0vqql1f.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0vvqf9a.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1aqql1f.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1fv9qql.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1gaavl9.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1mmhxxr.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1q0llgv.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1qf9a0v.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1qg0a0v.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1vqggaa.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\1vvqqla.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\21m0hhc.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\21q0llg.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\21rmccw.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\21vqgga.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2hhcrrm.exe (Worm.Palevo) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2llgvvq.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2mh5c2s.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2ql5fvv.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2qlaa1l.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2ssnddy.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2vvqffa.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gv9q0lg0a.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gvvqqlaavl9.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gww1g0bb.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h1cwwrh98.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h1rrmmhwwr.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\h5c1rmcc.exe (Worm.Palevo) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hbww7rmhhb5.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hcrrmmhw.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hhb5rmmhbb6.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hwmm1w0r.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hxmcc1m0hhc.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\i1dyooiid.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ic4xnnixxs.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rh5brrmbbww.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rh98cwr9m0h.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rllg2wrgg.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rmb9w0rm0.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rmb9w0rmm.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\s80c0xssn1i.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\snniy0s0nii.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tiidttod9.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\tnniyyt1nii.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ttjjet9o0.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ue80o0jeez.exe (Trojan.Lethic) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uj9e0zu0o0j.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uoo1zzuu.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a1llggaqql.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a7vqlaqq1.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a7vqllf5vq.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a8ql1faavla.exe (Trojan.Lethic) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aa1llffaqql.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aa1vqggaav.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aavll1vv.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aavqq7lf.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aavvqffaav.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\alaqggaav.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqffaavllf.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqq1a0vv.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqq1a0vvqf9.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqql1faavl.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\aqqlaavl.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\av9q0lg0a.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avllfv9q.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avllfv9qql.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avqq7lfaa7.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llffaqql1.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llfv9qql.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llfv9qqlf9.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llgv9q0l.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lvl9g0bw0q.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\m7hcxxr5hc.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mcc1m0hhcr9.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mgww1ggbbwm.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mh98cwr9m0.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mm7hcwwrrm7.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3hbbw2m.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a1llggaq.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avv6ffa2.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f2vvqffaavl.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gql987lg.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\laa1llffa.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llff6qqla.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q0lg0a0v.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qvqqlff6av.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\uoojz98uoj.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vvllfv9qq.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avvqf9a0vqq.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bbwqqllg7.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bqqlbbwl9.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bqqllgw0q0.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bv9q0lggb.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bww6qlgg.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bwwrggbr.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\c0xssn1h.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\css1ccxx.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ddyn9i0d.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\eezo4jzzu.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ezoojz98uo.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vvqf9a0v.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\w0q0lggb1.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\w7rmhhb5rm.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wq4lbbwllg.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wqqlb98wql.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wqqllg7bw.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wr5lbbwll.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wrggbr98.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wrrmbbwwr.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ww1ggbbwm0.exe (Backdoor.Agent) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ww7rmggb.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ww7rmhhb.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wwql9g0bw.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\wwrrm7hc1cw.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g1gaavl98g.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g3ggbr98mgb.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g6qqla4vll.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g79q0lggb1v.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gaqql1gaa.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gb5vllgvv.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gb5w2mgww1g.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gb9w0rm0g0b.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gbbv5lggb.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gbqqlb98wq.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gg6qqla4.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gg7bwrrl.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gq8gb1vqqlb.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q28ql1gaavl.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\q6llfv5q1.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qa8ql1faavl.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qffaavllfv9.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qffaqql1.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qfvvqqlaav.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qggb1wqqlb.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ql1gaavl.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ql1gaavl98g.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ql5fvvqffa.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\laavll1vvqq.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\laavllfv9.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\laqq1a0vvqf.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lf5vqqlff6.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lf9a0vqql.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lf9a0vqql1f.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lffa2qlaa.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lfv9qqlf.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lfvvqf9a0v.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\431bwmm.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\431faqq.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\431vqgg.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4b2wqgg.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4lbbwll.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4snd5y1.exe (Trojan.VirTool) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5dyytoo.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5f6avqq.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5faavll.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5g1vqgg.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5ggbqql.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5iidt5n.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5k1zukk.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5lfv5q1.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5m1bwmm.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5q1faqq.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5qqla4v.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5rlb5w1.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5t6d5y2.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5v6ffa2.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5xrh5c1.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6avqq7l.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6gga2ql.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6q7lfaa.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6qqlb5w.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7bwr9mm.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7lg1gaa.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7vqllf5.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7zuoojj.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8cx1rmm.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\9q0lg0a.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\a0vqql1faa.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xr9m0hccx1r.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xs1smmhx98.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xs2idss1.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xx1rmcc1m0.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xx6h5c2smc.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xx6hhc2snc.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\xxrh9ccx.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\y80i0dyyt1o.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\yttod9y0to.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\z1oojz98u.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zuupffzp9.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\v2qlaa1l.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\v2qlaa1llf.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\v9q0lg0a.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\v9qqlf9a.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vl9ggbv9q0l.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vlaqq1a0v.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vlbbvvqggb.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vllfv9qq.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vqffaavllf.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vqql1faavla.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vqqlbbvl9.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\vqqlf9a0vq.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\id98ysn9.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ii7dyssn.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iicssn1ic.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iids4nddy.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iidttnd9y.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\iidyy6sn.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\j1eyytj98.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l1aavl98g.exe (Trojan.Lethic) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l1faavla.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l1faavlaqq.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l1vvqqla.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l2gaqq1a.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l3llfv9qqlf.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l5fvvqff.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l5ggbq4l.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\l9g0bw0q.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qlaavl98.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qlaavlaqq1.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qlf9a0vqql1.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qlgg7bvqq7.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qll1vvqq.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qllfv9qqlf.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qllgw0q0.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq1a0vvqf9.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq1bbvvqggb.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lfaa7vql.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lgaav.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lgaavvq7.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qq7lgbbv.exe (Trojan.Lethic) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qqlaavll1.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\qqlf9a0v.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f5vqqlff.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f5vqqlff6a.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\f6qqlaavll.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fa0vqql1fa.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\faavll1v.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\faavll1vvq.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fav9qqlf9a0.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ff6qqlaavll.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fpfukk1u0.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fq79a0vqql.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fvvqf9a0.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\g0bbwl9g0.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lgaavvgav9q.exe (Trojan.Renos) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lgbqgg1q0ll.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lgga2qlaa1l.exe (Trojan.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lggbrr1b.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lggbww6ql.exe (Backdoor.Agent) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ll1faqq1a0.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ll1vvqqlaav.exe (Trojan.Lethic) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llf5vqql.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llf5vqqlff6.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\llfaa7vql.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mm7hcxxr5hc.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmgb9w0rm.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmgg1rrmm.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ncss1c0x.exe (Trojan.Refroso.Gen) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nid98ysn9i0.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\oi2ytii1.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\oii1ttooiyy.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\oii1ttoojyy.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\oiiddy7to.exe (Trojan.Ddox) -> Quarantined and deleted successfully.
C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ojyy1jjeezo.exe (Worm.Autorun) -> Quarantined and deleted successfully.
C:\Windows\System32\df1a245s4_1604.exe (Trojan.Ransom) -> Quarantined and deleted successfully.
C:\Windows\System32\f2avkk1vvq.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Windows\System32\fv5q1faqqkk.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Windows\System32\snnh5xssn.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Windows\System32\vvqq6aavl5.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\1aavkkf.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\1gv9q0l.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Windows\System32\3lffa2q.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\3vvqf9a.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\System32\4kfv5q1.exe (Trojan.DDox) -> Quarantined and deleted successfully.
C:\Windows\System32\avll1vvqqla.exe (BackDoor.Refroso) -> Quarantined and deleted successfully.
C:\Windows\andy127.exe (Trojan.Dropper.Gen) -> Quarantined and deleted successfully.

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
Hello.

Your computer has multiple infections, including a backdoor. A backdoor gives intruders complete control of your computer, logs your keystrokes, steal personal information, etc.

You are strongly advised to do the following:

  • Disconnect the computer from the Internet and from any networked computers until it is cleaned.
  • Back up all your important data except programs. The programs can be reinstalled back from the original disc or from the Net.
  • Call all your banks, financial institutions, credit card companies and inform them that you may be a victim of identity theft and put a watch on your accounts. If you don't mind the hassle, change all your account numbers.
  • From a clean computer, change all your passwords (ISP login password, your email address(es) passwords, financial accounts, PayPal, eBay, Amazon, online groups and forums and any other online activities you carry out which require a username and password).
Do NOT change your passwords from this computer as the attacker will be able to get all the new passwords and transaction records.

Due to its backdoor functionality, your computer is very likely to have been compromised and there is no way that it can be trusted again. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be to do a reformat and reinstallation of the operating system (OS). However, if you do not have the resources to reinstall your OS and would like me to attempt to clean your machine, I will be happy to do so.

To help you understand more, please take some time to read the following articles:

What are Remote Access Trojans and why are they dangerous
How do I respond to a possible identity theft and how do I prevent it
When should I do a reformat and reinstallation of my OS
Where to backup your files
How to backup your files in Windows XP
Restoring your backups

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
awch , was kind of affraid that this would come next.

affraid that I don't have any resources to reinstall the operating system.
is there any other thing ? like the thing you mentioned about you fixiing him without reformatting ?

thanks in advance!

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
We can try.

Okay, now MBAM has got rid of a lot of that rubbish, try Combofix again.

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
still shuts down the laptop , each time after part 50. tried it another 3 times.

it's said something about BAD_POOL_HEADER in the blue screen , don't know if this is of any use ?

descriptionI think my computer is infected with suspicious.mh690.a virus , can anyone help? EmptyRe: I think my computer is infected with suspicious.mh690.a virus , can anyone help?

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum