PC slow as hell!!

coled · April 13, 2010

My girlfriend was browsing the web and pressed OK to some message which came up on my screen and ever since Sunday I've been having problems galore.

I had Norton Anti Virus installed and there were tons of Symantec pop ups coming on my screen, I deleted Norton but I was still having problems with internet explorer and firefox both timing out, I couldn't even get onto this site.

I managed to get a download of Trend Micro's Anti Virus 30 day free trial and scanned the pc, a few infections noted, winupd01.exe being 1 of them.

It cleaned it up enough for me to come on this site and download your MBAM, a few more infections were being listed so the Trend Micro obviously didnt get them all.

My Firefox is stil running extremely slow and times out every now and then, certainly not running as smootly as it was prior to Sunday.

Can you help me at all??

coled · April 14, 2010

MBAM Log from yesterday if that helps

Malwarebytes' Anti-Malware 1.44

Database version: 3510

Windows 5.1.2600 Service Pack 2

Internet Explorer 8.0.6001.18702

13/04/2010 22:02:13

mbam-log-2010-04-13 (22-02-13).txt

Scan type: Quick Scan

Objects scanned: 126238

Time elapsed: 25 minute(s), 46 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\disableconfig (Windows.Tool.Disabled) -> Delete on reboot.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

Maniac · April 14, 2010

Hello coled! Welcome to MalwareBytes' Anti-Malware Forums!

My name is Borislav and I will be glad to help you solve your problems with malware. Before we

begin, please note the following:

The process of cleaning your system may take some time, so please be patient.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
If you don't know or can't understand something please ask.
Do not install any software or hardware, while work on.

Your version of MalwareBytes' Anti-Malware is old and your database version is old too.

Step 1:

1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel.

2. Restart your computer (very important).

3. It will ask to restart your computer (please allow it to).

4. After the computer restarts, install the latest version from here. mbam-setup.exe

Note: You will need to reactivate the program using the license you were sent

Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.

Restart the computer again and verify that MBAM is in the task tray and that you can run a quick scan and all is working as expected.

Step 2:

Launch Malwarebytes' Anti-Malware
Go to "Update" tab and select "Check for Updates". If an update is found, it will download and install the latest version.
Go to "Scanner" tab and select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Step 3:

Download DDS and save it to your desktop from here or here or here.

Disable any script blocker, and then double click dds.scr to run the tool.

When done, DDS will open two (2) logs:
1. DDS.txt
2. Attach.txt
[*]Save both reports to your desktop. Post them back to your topic.

Step 4:

Please download GMER from one of the following locations and save it to your desktop:

Main Mirror
This version will download a randomly named file (Recommended)
Zipped Mirror
This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.

Disconnect from the Internet and close all running programs.
Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.
Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.
Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.
GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)
If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.
Now click the Scan button. If you see a rootkit warning window, click OK.
When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.
Click the Copy button and paste the results into your next reply.
Exit GMER and re-enable all active protection when done.

-- If you encounter any problems, try running GMER in Safe Mode.

In your next reply, please include these log(s):

* MalwareBytes' Anti-Malware log

* DDS log with Attach.txt

* GMER log

coled · April 17, 2010

1.

Malwarebytes' Anti-Malware 1.45

www.malwarebytes.org

Database version: 3999

Windows 5.1.2600 Service Pack 2

Internet Explorer 8.0.6001.18702

16/04/2010 23:10:05

mbam-log-2010-04-16 (23-10-05).txt

Scan type: Quick scan

Objects scanned: 116227

Time elapsed: 26 minute(s), 58 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 2

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Fci (Rootkit.Agent) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\atapidrv (Rootkit.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\disableconfig (Windows.Tool.Disabled) -> Delete on reboot.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\WINDOWS\system32\drivers\AtapiDrv.sys (Rootkit.Agent) -> Quarantined and deleted successfully.

2. I couldn't download DDS, I had to use my sister's computer at my mothers house (I live at another address) to download the programs and email them to myself as attachments, when I went to my inbox to download the DDS it wasn't attached, I dont know if src files don't send as email attachments or something?

If you can't work without the DDS log could you send me a download to this email address please:

kerrynb@hotmail.co.uk

3.

GMER 1.0.15.15281 - http://www.gmer.net

Rootkit scan 2010-04-17 11:23:35

Windows 5.1.2600 Service Pack 2

Running: ljfw50gq.exe; Driver: C:\DOCUME~1\RIMACA~1\LOCALS~1\Temp\fgldapog.sys

---- System - GMER 1.0.15 ----

SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwCreateKey [0x804D70B3]

SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D70B3] ZwCreateKey [0x804D70B3]

SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteKey [0x804D70BD]

SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D70BD] ZwDeleteKey [0x804D70BD]

SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwDeleteValueKey [0x804D70AE]

SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D70AE] ZwDeleteValueKey [0x804D70AE]

SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateKey [0x804D70C2]

SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D70C2] ZwEnumerateKey [0x804D70C2]

SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwEnumerateValueKey [0x804D70C7]

SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D70C7] ZwEnumerateValueKey [0x804D70C7]

SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwOpenKey [0x804D70D6]

SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D70D6] ZwOpenKey [0x804D70D6]

SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryKey [0x804D70D1]

SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D70D1] ZwQueryKey [0x804D70D1]

SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwQueryValueKey [0x804D70CC]

SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D70CC] ZwQueryValueKey [0x804D70CC]

SSDT \WINDOWS\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation) ZwSetValueKey [0x804D70B8]

SSDT \WINDOWS\system32\ntkrnlpa.exe[unknown section] [804D70B8] ZwSetValueKey [0x804D70B8]

INT 0x03 \WINDOWS\system32\ntkrnlpa.exe[unknown section] 804D70DB

---- Kernel code sections - GMER 1.0.15 ----

? ksvqygn.sys The system cannot find the file specified. !

.text C:\WINDOWS\system32\drivers\aksfridge.sys section is writeable [0x9DA9E000, 0x44527, 0xE0000020]

.init C:\WINDOWS\system32\drivers\aksfridge.sys entry point in ".init" section [0x9DAF0224]

.init C:\WINDOWS\system32\drivers\aksfridge.sys unknown last code section [0x9DAF0000, 0x7000, 0xE20000E0]

.text C:\WINDOWS\system32\drivers\hardlock.sys section is writeable [0x9D8C2400, 0x88182, 0xE8000020]

.protect

Maniac · April 17, 2010

Let us use an alternative to DDS.

Step 1:

Click here to download HJTInstall.exe

Save HJTInstall.exe to your desktop.
Doubleclick on the HJTInstall.exe icon on your desktop.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Step 2:

Also, I would like you to generate a "Add/Remove Software list" log using the HijackThis application. Here is how you can do this:

To get an Uninstall List from HijackThis:

Open HijackThis, click Config, click Misc Tools
Click "Open Uninstall Manager"
Click "Save List" (generates uninstall_list.txt)
Click Save, copy and paste the results in your next post.

Let me know how are things now.

In your next reply, please include these log(s):

* HijackThis Uninstall List

* HijackThis log (new)

coled · April 22, 2010

Finally got the DDS to work

DDS (Ver_10-03-17.01) - NTFSx86

Run by Rimac Anthonye at 0:16:06.44 on 23/04/2010

Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17

Microsoft Windows XP Professional 5.1.2600.2.1252.44.1033.18.1014.399 [GMT 1:00]

AV: Trend Micro Internet Security Pro *On-access scanning enabled* (Updated) {7D2296BC-32CC-4519-917E-52E652474AF5}

FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

C:\WINDOWS\system32\spoolsv.exe

svchost.exe

C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

svchost.exe

C:\WINDOWS\system32\hasplms.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe

svchost.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

C:\WINDOWS\system32\mqsvc.exe

C:\WINDOWS\system32\mqtgsvc.exe

C:\Program Files\Trend Micro\Internet Security\TmProxy.exe

C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe

C:\Program Files\Trend Micro\BM\TMBMSRV.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\ehome\ehtray.exe

C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\HP\QuickPlay\QPService.exe

C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe

C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe

C:\Program Files\Common Files\AOL\ACS\AOLDial.exe

C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE

C:\Program Files\Common Files\AOL\1165261327\ee\AOLSoftware.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0F2.EXE

C:\Program Files\BroadJump\Client Foundation\CFD.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE

C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

C:\DOCUME~1\RIMACA~1\LOCALS~1\Temp\oldbot.exe

C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe

C:\Program Files\Craft ROBO Controller\CRSSupervisor.exe

C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\TrendSecure\TSCFPlatformCOMSvr.exe

C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\PlatformDependent\ProToolbarComm.exe

C:\Documents and Settings\Rimac Anthonye\Desktop\dds.scr

============== Pseudo HJT Report ===============

uSearch Bar = hxxp://www.google.com/ie

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_GB&c=64&bd=presario&pf=laptop

uInternet Settings,ProxyOverride = <local>;*.local

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

mWinlogon: Taskman=c:\documents and settings\rimac anthonye\csrss.exe

uWinlogon: Shell=explorer.exe,c:\documents and settings\rimac anthonye\csrss.exe

BHO: TSToolbarBHO: {43c6d902-a1c5-45c9-91f6-fd9e90337e18} - c:\program files\trend micro\trendsecure\tisprotoolbar\TSToolbar.dll

BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File

BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll

BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll

TB: Trend Micro Toolbar: {ccac5586-44d7-4c43-b64a-f042461a97d2} - c:\program files\trend micro\trendsecure\tisprotoolbar\TSToolbar.dll

TB: {C4069E3A-68F1-403E-B40E-20066696354B} - No File

TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll

TB: {4982D40A-C53B-4615-B15B-B5B5E98D167C} - No File

TB: AOL Toolbar: {de9c389f-3316-41a7-809b-aa305ed9d922} - c:\program files\aol\aol toolbar 5.0\aoltb.dll

uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe

uRun: [DAEMON Tools] "c:\program files\daemon tools\daemon.exe" -lang 1033

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe"

uRun: [iSUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler

uRun: [oldbot] c:\docume~1\rimaca~1\locals~1\temp\oldbot.exe

uRun: [OE] "c:\program files\trend micro\internet security\tmas_oe\TMAS_OEMon.exe"

uRun: [Google Update] "c:\documents and settings\rimac anthonye\local settings\application data\google\update\GoogleUpdate.exe" /c

mRun: [ehTray] c:\windows\ehome\ehtray.exe

mRun: [hpWirelessAssistant] c:\program files\hpq\hp wireless assistant\HP Wireless Assistant.exe

mRun: [igfxtray] c:\windows\system32\igfxtray.exe

mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe

mRun: [igfxpers] c:\windows\system32\igfxpers.exe

mRun: [MsmqIntCert] regsvr32 /s mqrt.dll

mRun: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe

mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe

mRun: [QPService] "c:\program files\hp\quickplay\QPService.exe"

mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe

mRun: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

mRun: [Cpqset] c:\program files\hewlett-packard\default settings\cpqset.exe

mRun: [RecGuard] c:\windows\sminst\RecGuard.exe

mRun: [Reminder] c:\windows\creator\Remind_XP.exe

mRun: [speedTouch USB Diagnostics] "c:\program files\thomson\speedtouch usb\Dragdiag.exe" /icon

mRun: [AOLDialer] c:\program files\common files\aol\acs\AOLDial.exe

mRun: [AOL Spyware Protection] "c:\progra~1\common~1\aol\aolspy~1\AOLSP Scheduler.exe"

mRun: [EPSON Stylus C48 Series] c:\windows\system32\spool\drivers\w32x86\3\E_S4I091.EXE /P23 "EPSON Stylus C48 Series" /O6 "USB001" /M "Stylus C48"

mRun: [HostManager] c:\program files\common files\aol\1165261327\ee\AOLSoftware.exe

mRun: [iPHSend] c:\program files\common files\aol\iphsend\IPHSend.exe

mRun: [EPSON Stylus Photo R300 Series] c:\windows\system32\spool\drivers\w32x86\3\E_S4I0F2.EXE /P30 "EPSON Stylus Photo R300 Series" /O6 "USB002" /M "Stylus Photo R300"

mRun: [bJCFD] c:\program files\broadjump\client foundation\CFD.exe

mRun: [workflow] e:\installs\workflow.exe

mRun: [WinampAgent] "c:\program files\winamp\winampa.exe"

mRun: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe

mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime

mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"

mRun: [H2O] c:\program files\syncrosoft\pos\h2o\cledx.exe

mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot

mRun: [sunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"

mRun: [ctfmon.exe] ctfmon.exe

mRun: [ufSeAgnt.exe] "c:\program files\trend micro\internet security\UfSeAgnt.exe"

dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\aol90t~1.lnk - c:\program files\aol 9.0\aoltray.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\craftr~1.lnk - c:\program files\craft robo controller\CRSSupervisor.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpphot~1.lnk - c:\program files\hp\digital imaging\bin\hpqthb08.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~1.lnk - c:\program files\microsoft office\office10\OSA.EXE

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\servic~1.lnk - c:\program files\microsoft sql server\80\tools\binn\sqlmangr.exe

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll

IE: {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - {17A84966-F1E9-4645-AA9E-5E771EE1C859} - c:\progra~1\nuclea~1\videoget\plugins\VIDEOG~1.DLL

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL

DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/templates/ieawsdc.cab

DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab

DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab

DPF: {138E6DC9-722B-4F4B-B09D-95D191869696} - hxxp://www.bebo.com/files/BeboUploader.5.1.4.cab

DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204

DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab

DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader.cab

DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader3.cab

DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1194423345296

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab

DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

DPF: {D6E7CFB5-C074-4D1C-B647-663D1A8D96BF} - hxxp://upload.facebook.com/controls/FacebookPhotoUploader4_5.cab

DPF: {F09BFD07-20B5-46D8-A6D5-BE4EF22F1F4D} - hxxp://members.driverguide.com/director/dispatch_getfile.php?mode=toolkit_lite

Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - c:\program files\trend micro\trendsecure\tisprotoolbar\TSToolbar.dll

Notify: acpiz - acpiz.dll

Notify: igfxcui - igfxdev.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

Hosts: 121.254.96.92 msnfix.changelog.fr

Hosts: 121.254.96.92 www.incodesolutions.com

Hosts: 121.254.96.92 virusinfo.prevx.com

Hosts: 121.254.96.92 download.bleepingcomputer.com

Hosts: 121.254.96.92 www.dazhizhu.cn

Note: multiple HOSTS entries found. Please refer to Attach.txt

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\rimaca~1\applic~1\mozilla\firefox\profiles\7hx5bm3h.default\

FF - component: c:\program files\trend micro\trendsecure\tisprotoolbar\firefoxextension\components\FFTMUFEHelper.dll

FF - component: c:\program files\trend micro\trendsecure\tisprotoolbar\firefoxextension\components\FFToolbarComm.dll

FF - plugin: c:\documents and settings\rimac anthonye\local settings\application data\google\update\1.2.183.23\npGoogleOneClick8.dll

FF - plugin: c:\program files\microsoft\office live\npOLW.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll

FF - plugin: c:\program files\viewpoint\viewpoint experience technology\npViewpoint.dll

FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll

FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----

FF - user.js: yahoo.homepage.dontask - truec:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);

c:\program files\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);

c:\program files\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);

c:\program files\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);

c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);

c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);

c:\program files\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);

c:\program files\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);

c:\program files\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);

c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug", false);

c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);

c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);

c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);

c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);

c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);

c:\program files\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);

c:\program files\mozilla firefox\greprefs\all.js - pref("html5.enable", false);

c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pr

ef", true);

c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");

c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);

c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);

c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);

c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");

c:\program files\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);

c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

============= SERVICES / DRIVERS ===============

R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-5-26 54752]

R2 hasplms;HASP License Manager;c:\windows\system32\hasplms.exe -run --> c:\windows\system32\hasplms.exe -run [?]

R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-6 99328]

R2 Symantec Core LC;Symantec Core LC;c:\program files\common files\symantec shared\ccpd-lc\symlcsvc.exe [2006-9-12 1247600]

R2 tmpreflt;tmpreflt;c:\windows\system32\drivers\tmpreflt.sys [2010-4-11 36368]

R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\drivers\cledx.sys [2009-7-27 33792]

R3 tmcfw;Trend Micro Common Firewall Service;c:\windows\system32\drivers\TM_CFW.sys [2010-4-11 339984]

R3 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [2010-4-11 50704]

R3 TmProxy;Trend Micro Proxy Service;c:\program files\trend micro\internet security\TmProxy.exe [2010-4-11 689416]

S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]

=============== Created Last 30 ================

2010-04-22 17:43:22 110592 --sh--r- c:\documents and settings\rimac anthonye\csrss.exe

2010-04-16 21:34:45 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-04-16 21:34:41 20824 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-04-16 21:34:41 0 d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-04-12 15:35:15 0 d-----w- c:\docume~1\rimaca~1\applic~1\Malwarebytes

2010-04-12 15:34:07 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes

2010-04-11 15:01:55 0 d-sh--w- c:\documents and settings\rimac anthonye\PrivacIE

2010-04-11 14:40:25 10752 ----a-w- c:\windows\DCEBoot.exe

2010-04-11 01:07:08 0 d-sh--w- c:\documents and settings\rimac anthonye\IETldCache

2010-04-11 01:05:18 59920 ----a-w- c:\windows\system32\drivers\tmactmon.sys

2010-04-11 01:05:18 50704 ----a-w- c:\windows\system32\drivers\tmevtmgr.sys

2010-04-11 01:03:56 0 d-----w- c:\windows\system32\Service

2010-04-11 01:01:30 0 d-----w- c:\docume~1\alluse~1\applic~1\Trend Micro

2010-04-11 01:00:43 0 d-----w- c:\program files\Trend Micro

2010-04-11 00:59:43 661808 ----a-w- c:\windows\system32\UfWSC.cpl

2010-04-11 00:59:27 89872 ----a-w- c:\windows\system32\drivers\tmtdi.sys

2010-04-11 00:59:27 36368 ----a-w- c:\windows\system32\drivers\tmpreflt.sys

2010-04-11 00:59:27 339984 ----a-w- c:\windows\system32\drivers\TM_CFW.sys

2010-04-11 00:59:27 230928 ----a-w- c:\windows\system32\drivers\tmxpflt.sys

2010-04-11 00:59:27 1322680 ----a-w- c:\windows\system32\drivers\vsapint.sys

2010-04-11 00:51:37 12800 ------w- c:\windows\system32\dllcache\xpshims.dll

2010-04-11 00:51:36 247808 ------w- c:\windows\system32\dllcache\ieproxy.dll

2010-04-11 00:51:28 0 d-----w- c:\windows\ie8updates

2010-04-11 00:50:53 64000 ------w- c:\windows\system32\dllcache\iecompat.dll

2010-04-11 00:49:58 0 dc-h--w- c:\windows\ie8

2010-04-11 00:38:41 109248 ----a-w- c:\windows\system32\MSWINSCK.OCX

2010-04-11 00:38:38 212992 ----a-w- c:\windows\system32\DartSock.dll

2010-04-11 00:38:36 147456 ----a-w- c:\windows\system32\DartSecure2.dll

2010-04-11 00:38:34 139264 ----a-w- c:\windows\system32\DartCertificate.dll

2010-04-11 00:03:52 0 d-----w- c:\program files\common files\ODBC

2010-04-10 23:55:28 0 d-----w- c:\program files\common files\Aladdin Shared

2010-04-10 20:12:39 123 ----a-w- c:\documents and settings\rimac anthonye\file.bat

2010-04-10 20:12:38 102450 ----a-w- c:\windows\system32\msvcrt2.dll

2010-04-10 20:11:31 293376 ------w- c:\windows\system32\browserchoice.exe

2010-04-09 07:36:27 0 ----a-w- c:\documents and settings\rimac anthonye\Desktop.ini

==================== Find3M ====================

2010-04-11 00:59:27 158224 ----a-w- c:\windows\system32\drivers\tmcomm.sys

2010-04-10 20:12:37 14336 ----a-w- c:\windows\system32\svchost.exe

2010-04-10 20:12:37 14336 ----a-w- c:\windows\system32\dllcache\svchost.exe

2010-03-11 12:38:51 133120 ------w- c:\windows\system32\dllcache\extmgr.dll

2010-03-10 13:18:21 13824 ------w- c:\windows\system32\dllcache\ieudinit.exe

2010-03-10 06:15:52 420352 ----a-w- c:\windows\system32\vbscript.dll

2010-03-10 06:15:52 420352 ----a-w- c:\windows\system32\dllcache\vbscript.dll

2010-02-25 10:54:36 11070976 ------w- c:\windows\system32\dllcache\ieframe.dll

2010-02-25 06:24:37 916480 ----a-w- c:\windows\system32\wininet.dll

2010-02-25 06:24:37 916480 ------w- c:\windows\system32\dllcache\wininet.dll

2010-02-25 06:24:37 611840 ------w- c:\windows\system32\dllcache\mstime.dll

2010-02-25 06:24:37 206848 ------w- c:\windows\system32\dllcache\occache.dll

2010-02-25 06:24:37 1209344 ------w- c:\windows\system32\dllcache\urlmon.dll

2010-02-25 06:24:36 5944832 ------w- c:\windows\system32\dllcache\mshtml.dll

2010-02-25 06:24:35 594432 ------w- c:\windows\system32\dllcache\msfeeds.dll

2010-02-25 06:24:35 55296 ------w- c:\windows\system32\dllcache\msfeedsbs.dll

2010-02-25 06:24:35 25600 ------w- c:\windows\system32\dllcache\jsproxy.dll

2010-02-25 06:24:35 1985536 ------w- c:\windows\system32\dllcache\iertutil.dll

2010-02-25 06:24:35 184320 ------w- c:\windows\system32\dllcache\iepeers.dll

2010-02-25 06:24:34 387584 ------w- c:\windows\system32\dllcache\iedkcs32.dll

2010-02-24 12:31:30 454016 ----a-w- c:\windows\system32\drivers\mrxsmb.sys

2010-02-24 12:31:30 454016 ------w- c:\windows\system32\dllcache\mrxsmb.sys

2010-02-24 09:54:25 173056 ------w- c:\windows\system32\dllcache\ie4uinit.exe

2010-02-19 11:55:15 197256 -c--a-w- c:\docume~1\rimaca~1\applic~1\GDIPFONTCACHEV1.DAT

2010-02-17 10:57:54 2063744 ----a-w- c:\windows\system32\ntkrnlpa.exe

2010-02-17 10:57:54 2063744 ------w- c:\windows\system32\dllcache\ntkrnlpa.exe

2010-02-16 17:37:57 2186880 ----a-w- c:\windows\system32\ntoskrnl.exe

2010-02-16 17:37:57 2186880 ------w- c:\windows\system32\dllcache\ntoskrnl.exe

2010-02-16 17:35:40 2143744 ------w- c:\windows\system32\dllcache\ntkrnlmp.exe

2010-02-16 16:57:54 2021888 ------w- c:\windows\system32\dllcache\ntkrpamp.exe

2010-02-12 04:47:05 100864 ----a-w- c:\windows\system32\6to4svc.dll

2010-02-12 04:47:05 100864 ------w- c:\windows\system32\dllcache\6to4svc.dll

2010-02-11 12:01:43 226880 ----a-w- c:\windows\system32\dllcache\tcpip6.sys

============= FINISH: 0:18:01.99 ===============

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-03-17.01)

Microsoft Windows XP Professional

Boot Device: \Device\HarddiskVolume1

Install Date: 02/12/2006 17:51:21

System Uptime: 22/04/2010 23:38:45 (1 hours ago)

Motherboard: Hewlett-Packard | | 30C6

Processor: Intel® Celeron® M CPU 420 @ 1.60GHz | U1 | 1595/mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 67 GiB total, 21.566 GiB free.

D: is FIXED (FAT32) - 8 GiB total, 1.031 GiB free.

E: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1196: 24/01/2010 03:00:19 - Software Distribution Service 3.0

RP1197: 25/01/2010 15:38:04 - System Checkpoint

RP1198: 26/01/2010 18:52:39 - System Checkpoint

RP1199: 27/01/2010 19:16:16 - System Checkpoint

RP1200: 28/01/2010 20:23:17 - System Checkpoint

RP1201: 30/01/2010 13:08:31 - System Checkpoint

RP1202: 31/01/2010 13:31:51 - Installed Microsoft Office Project Standard 2007

RP1203: 01/02/2010 18:03:57 - System Checkpoint

RP1204: 01/02/2010 18:10:26 - Installed DirectX

RP1205: 01/02/2010 19:10:22 - Software Distribution Service 3.0

RP1206: 02/02/2010 02:59:52 - Software Distribution Service 3.0

RP1207: 04/02/2010 07:12:47 - System Checkpoint

RP1208: 05/02/2010 11:14:32 - System Checkpoint

RP1209: 06/02/2010 11:46:12 - System Checkpoint

RP1210: 07/02/2010 14:34:36 - System Checkpoint

RP1211: 08/02/2010 19:05:18 - System Checkpoint

RP1212: 09/02/2010 19:21:58 - System Checkpoint

RP1213: 10/02/2010 19:52:00 - System Checkpoint

RP1214: 11/02/2010 00:56:01 - Software Distribution Service 3.0

RP1215: 12/02/2010 11:48:24 - System Checkpoint

RP1216: 13/02/2010 12:33:09 - System Checkpoint

RP1217: 13/02/2010 19:54:22 - Removed BlackBerry Desktop Software 5.0.

RP1218: 13/02/2010 20:03:53 - Removed Roxio Media Manager

RP1219: 14/02/2010 20:39:11 - System Checkpoint

RP1220: 15/02/2010 21:09:27 - System Checkpoint

RP1221: 16/02/2010 21:58:00 - System Checkpoint

RP1222: 18/02/2010 09:13:01 - System Checkpoint

RP1223: 19/02/2010 14:26:03 - System Checkpoint

RP1224: 20/02/2010 15:08:15 - System Checkpoint

RP1225: 21/02/2010 16:11:43 - System Checkpoint

RP1226: 22/02/2010 17:56:02 - System Checkpoint

RP1227: 23/02/2010 17:57:27 - System Checkpoint

RP1228: 24/02/2010 19:06:34 - System Checkpoint

RP1229: 24/02/2010 21:51:26 - Software Distribution Service 3.0

RP1230: 25/02/2010 21:56:34 - System Checkpoint

RP1231: 26/02/2010 22:52:39 - System Checkpoint

RP1232: 27/02/2010 23:12:35 - System Checkpoint

RP1233: 01/03/2010 13:27:18 - System Checkpoint

RP1234: 02/03/2010 14:17:01 - System Checkpoint

RP1235: 03/03/2010 14:19:32 - System Checkpoint

RP1236: 04/03/2010 14:30:07 - System Checkpoint

RP1237: 05/03/2010 15:28:00 - System Checkpoint

RP1238: 06/03/2010 16:48:13 - System Checkpoint

RP1239: 07/03/2010 17:25:47 - System Checkpoint

RP1240: 08/03/2010 19:45:54 - System Checkpoint

RP1241: 09/03/2010 20:45:12 - System Checkpoint

RP1242: 10/03/2010 20:53:36 - System Checkpoint

RP1243: 10/03/2010 23:41:20 - Software Distribution Service 3.0

RP1244: 11/03/2010 12:49:43 - Installed BlackBerry Device Software v4.5.0 for the BlackBerry 8310 smartphone.

RP1245: 12/03/2010 12:53:26 - System Checkpoint

RP1246: 13/03/2010 13:26:17 - System Checkpoint

RP1247: 14/03/2010 14:19:35 - System Checkpoint

RP1248: 15/03/2010 14:29:34 - System Checkpoint

RP1249: 16/03/2010 14:55:54 - System Checkpoint

RP1250: 17/03/2010 15:01:10 - System Checkpoint

RP1251: 18/03/2010 17:46:35 - System Checkpoint

RP1252: 19/03/2010 17:16:02 - Removed Tweet Adder

RP1253: 19/03/2010 17:16:13 - Installed Tweet Adder

RP1254: 20/03/2010 18:45:43 - System Checkpoint

RP1255: 21/03/2010 18:56:19 - System Checkpoint

RP1256: 22/03/2010 19:08:09 - System Checkpoint

RP1257: 23/03/2010 19:22:56 - System Checkpoint

RP1258: 24/03/2010 20:32:34 - System Checkpoint

RP1259: 26/03/2010 14:20:16 - System Checkpoint

RP1260: 27/03/2010 15:46:37 - System Checkpoint

RP1261: 28/03/2010 17:09:56 - System Checkpoint

RP1262: 29/03/2010 19:07:15 - System Checkpoint

RP1263: 30/03/2010 19:23:31 - System Checkpoint

RP1264: 31/03/2010 19:59:09 - System Checkpoint

RP1265: 31/03/2010 23:32:55 - Software Distribution Service 3.0

RP1266: 02/04/2010 00:08:19 - System Checkpoint

RP1267: 03/04/2010 10:29:11 - System Checkpoint

RP1268: 04/04/2010 10:49:53 - System Checkpoint

RP1269: 05/04/2010 13:41:16 - System Checkpoint

RP1270: 08/04/2010 09:51:40 - System Checkpoint

RP1271: 10/04/2010 07:25:12 - System Checkpoint

==== Hosts File Hijack ======================

Hosts: 121.254.96.92 msnfix.changelog.fr

Hosts: 121.254.96.92 www.incodesolutions.com

Hosts: 121.254.96.92 virusinfo.prevx.com

Hosts: 121.254.96.92 download.bleepingcomputer.com

Hosts: 121.254.96.92 www.dazhizhu.cn

Hosts: 121.254.96.92 foro.noticias3d.com

Hosts: 121.254.96.92 www.spybotupdates.com

Hosts: 121.254.96.92 club.myce.com

Hosts: 121.254.96.92 www.k7computing.com

Hosts: 121.254.96.92 softwaresecuritysolutions.com

Hosts: 121.254.96.92 www.nabble.com

Hosts: 121.254.96.92 lurker.clamav.net

Hosts: 121.254.96.92 lexikon.ikarus.at

Hosts: 121.254.96.92 research.sunbelt-software.com

Hosts: 121.254.96.92 www.virusdoctor.jp

Hosts: 121.254.96.92 www.elitepvpers.de

Hosts: 121.254.96.92 guru.avg.com

Hosts: 121.254.96.92 downloads.sophos.com

Hosts: 121.254.96.92 share.skype.com

Hosts: 121.254.96.92 myantispyware.com

Hosts: 121.254.96.92 www.computerhilfen.de

Hosts: 121.254.96.92 www.superuser.co.kr

Hosts: 121.254.96.92 ntfaq.co.kr

Hosts: 121.254.96.92 v.dreamwiz.com

Hosts: 121.254.96.92 cit.kookmin.ac.kr

Hosts: 121.254.96.92 forums.whatthetech.com

Hosts: 121.254.96.92 forum.hijackthis.de

Hosts: 121.254.96.92 avg.vo.llnwd.net

Hosts: 121.254.96.92 ftp.drweb.com

Hosts: 121.254.96.92 www.zonealarm.com

Hosts: 121.254.96.92 smadaver.com

Hosts: 121.254.96.92 support.emsisoft.com

Hosts: 121.254.96.92 psychoski.blogspot.com

Hosts: 121.254.96.92 www.huaifai.go.th

Hosts: 121.254.96.92 www.mostz.com

Hosts: 121.254.96.92 www.krupunmai.com

Hosts: 121.254.96.92 www.cddchiangmai.net

Hosts: 121.254.96.92 forum.malekal.com

Hosts: 121.254.96.92 tech.pantip.com

Hosts: 121.254.96.92 sapcupgrades.com

Hosts: 121.254.96.92 www.elguruinformatico.com

Hosts: 121.254.96.92 forums.avg.com

Hosts: 121.254.96.92 zastita.com

Hosts: 121.254.96.92 support.kaspersky.com

Hosts: 121.254.96.92 foro.msgpluslive.es

Hosts: 121.254.96.92 www.247fixes.com

Hosts: 121.254.96.92 forum.sysinternals.com

Hosts: 121.254.96.92 forum.telecharger.01net.com

Hosts: 121.254.96.92 sophos.com

Hosts: 121.254.96.92 foros.softonic.com

Hosts: 121.254.96.92 avast-home.uptodown.com

Hosts: 121.254.96.92 dr-web-cureit.softonic.com

Hosts: 121.254.96.92 heavenward.ru

Hosts: 121.254.96.92 forum.smadav.net

Hosts: 121.254.96.92 www.forum.kaspersky.com

Hosts: 121.254.96.92 www.dl4all.com

Hosts: 121.254.96.92 www.f-secure.com

Hosts: 121.254.96.92 www.chkrootkit.org

Hosts: 121.254.96.92 diamondcs.com.au

Hosts: 121.254.96.92 www.rootkit.nl

Hosts: 121.254.96.92 www.sysinternals.com

Hosts: 121.254.96.92 z-oleg.com

Hosts: 121.254.96.92 espanol.dir.groups.yahoo.com

Hosts: 121.254.96.92 ftp01net.telechargement.fr

Hosts: 121.254.96.92 modelayu.com

Hosts: 121.254.96.92 vaksin.com

Hosts: 121.254.96.92 bbs.kaspersky.com.cn

Hosts: 121.254.96.92 sf.tapuz.co.il

Hosts: 121.254.96.92 www.castlecrops.com

Hosts: 121.254.96.92 www.misec.net

Hosts: 121.254.96.92 safecomputing.umn.edu

Hosts: 121.254.96.92 www.antirootkit.com

Hosts: 121.254.96.92 www.greatis.com

Hosts: 121.254.96.92 ar.answers.yahoo.com

Hosts: 121.254.96.92 www.elhacker.org

Hosts: 121.254.96.92 research.pandasecurity.com

Hosts: 121.254.96.92 www.tpu.ro

Hosts: 121.254.96.92 www.pinoyden.com

Hosts: 121.254.96.92 forum.avira.de

Hosts: 121.254.96.92 www.tanya-it.com

Hosts: 121.254.96.92 www.rootkit.com

Hosts: 121.254.96.92 www.pctools.com

Hosts: 121.254.96.92 www.pcsupportadvisor.com

Hosts: 121.254.96.92 www.resplendence.com

Hosts: 121.254.96.92 www.personal.psu.edu

Hosts: 121.254.96.92 foro.ethek.com

Hosts: 121.254.96.92 foro.elhacker.net

Hosts: 121.254.96.92 download.zonealarm.com

Hosts: 121.254.96.92 spywarehammer.com

Hosts: 121.254.96.92 www.codelain.com

Hosts: 121.254.96.92 www.thaicert.org

Hosts: 121.254.96.92 vil.nail.com

Hosts: 121.254.96.92 search.mcafee.com

Hosts: 121.254.96.92 wwww.mcafee.com

Hosts: 121.254.96.92 download.nai.com

Hosts: 121.254.96.92 wwww.experts-exchange.com

Hosts: 121.254.96.92 www.bakunos.com

Hosts: 121.254.96.92 www.darkclockers.com

Hosts: 121.254.96.92 www2.gmer.net

Hosts: 121.254.96.92 ariefew.com

Hosts: 121.254.96.92 www.emsisoft.com

Hosts: 121.254.96.92 forum.romeonet.ro

Hosts: 121.254.96.92 www.arenajunkies.com

Hosts: 121.254.96.92 www.Merijn.org

Hosts: 121.254.96.92 www.spywareinfo.com

Hosts: 121.254.96.92 www.spybot.info

Hosts: 121.254.96.92 www.viruslist.com

Hosts: 121.254.96.92 www.hijackthis.de

Hosts: 121.254.96.92 ftp.f-secure.com

Hosts: 121.254.96.92 forum.kaspersky.com

Hosts: 121.254.96.92 es.trendmicro-europe.com

Hosts: 121.254.96.92 www.hvaonline.net

Hosts: 121.254.96.92 forum.lowyat.net

Hosts: 121.254.96.92 kb.eset.com

Hosts: 121.254.96.92 www.pcwelt.de

Hosts: 121.254.96.92 majorgeeks.com

Hosts: 121.254.96.92 www.avp.com

Hosts: 121.254.96.92 www.virustotal.com

Hosts: 121.254.96.92 www.sophos.com

Hosts: 121.254.96.92 linhadefensiva.uol.com.br

Hosts: 121.254.96.92 cmmings.cn

Hosts: 121.254.96.92 www.sergiwa.com

Hosts: 121.254.96.92 www.el-hacker.com

Hosts: 121.254.96.92 dl2.agnitum.com

Hosts: 121.254.96.92 forum.smadav.net

Hosts: 121.254.96.92 images.malwareremoval.com

Hosts: 121.254.96.92 front.prevx.com

Hosts: 121.254.96.92 www.avg-antivirus.net

Hosts: 121.254.96.92 www.kaspersky-labs.com

Hosts: 121.254.96.92 www.kaspersky.com

Hosts: 121.254.96.92 www.bleepingcomputer.com

Hosts: 121.254.96.92 www.free.grisoft.com

Hosts: 121.254.96.92 alerta-antivirus.inteco.es

Hosts: 121.254.96.92 greatis.com

Hosts: 121.254.96.92 www.oprekpc.com

Hosts: 121.254.96.92 www.gmer.net

Hosts: 121.254.96.92 forum.kasperskyclub.com

Hosts: 121.254.96.92 computadoras.migold.com

Hosts: 121.254.96.92 securityresponse.symantec.com

Hosts: 121.254.96.92 www.analysis.seclab.tuwien.ac.at

Hosts: 121.254.96.92 www.symantec.com

Hosts: 121.254.96.92 www.kztechs.com

Hosts: 121.254.96.92 ad-aware-se.uptodown.com

Hosts: 121.254.96.92 stdio-labs.blogspot.com

Hosts: 121.254.96.92 forum.lrytas.lt

Hosts: 121.254.96.92 www.decido.de

Hosts: 121.254.96.92 wap.elakiri.com

Hosts: 121.254.96.92 ot-indo.blogspot.com

Hosts: 121.254.96.92 liveupdate.symantecliveupdate.com

Hosts: 121.254.96.92 liveupdate.symantec.com

Hosts: 121.254.96.92 customer.symantec.com

Hosts: 121.254.96.92 update.symantec.com

Hosts: 121.254.96.92 www.box.net

Hosts: 121.254.96.92 foro.el-hacker.com

Hosts: 121.254.96.92 acs.pandasoftware.com

Hosts: 121.254.96.92 egavisa.blogspot.com

Hosts: 121.254.96.92 angui123.cn

Hosts: 121.254.96.92 beta.eset.com

Hosts: 121.254.96.92 www.ixtorrent.com

Hosts: 121.254.96.92 www.mcafee.com

Hosts: 121.254.96.92 download.mcafee.com

Hosts: 121.254.96.92 mast.mcafee.com

Hosts: 121.254.96.92 www.tecno-soft.com

Hosts: 121.254.96.92 ladooscuro.es

Hosts: 121.254.96.92 ftp.drweb.com

Hosts: 121.254.96.92 download.microsoft.com

Hosts: 121.254.96.92 www.mypcsafe.com

Hosts: 121.254.96.92 www.blindedbytech.com

Hosts: 121.254.96.92 kaspersky.com

Hosts: 121.254.96.92 sis-admin.blogspot.com

Hosts: 121.254.96.92 www.protecus.de

Hosts: 121.254.96.92 guru0.grisoft.cz

Hosts: 121.254.96.92 guru1.grisoft.cz

Hosts: 121.254.96.92 guru2.grisoft.cz

Hosts: 121.254.96.92 guru3.grisoft.cz

Hosts: 121.254.96.92 download.bleepingcomputer.com

Hosts: 121.254.96.92 it.answers.yahoo.com

Hosts: 121.254.96.92 www.softonic.com

Hosts: 121.254.96.92 www.mycity.rs

Hosts: 121.254.96.92 cairopt.net

Hosts: 121.254.96.92 rootrepeal.googlepages.com

Hosts: 121.254.96.92 www.windowexe.com

Hosts: 121.254.96.92 guru4.grisoft.cz

Hosts: 121.254.96.92 guru5.grisoft.cz

Hosts: 121.254.96.92 www.virusspy.com

Hosts: 121.254.96.92 download.f-secure.com

Hosts: 121.254.96.92 www.malwareremoval.com

Hosts: 121.254.96.92 forums.cnet.com

Hosts: 121.254.96.92 foros.softonic.com

Hosts: 121.254.96.92 www.freedrweb.com

Hosts: 121.254.96.92 www.kaskus.us

Hosts: 121.254.96.92 rootrepeal.psikotick.com

Hosts: 121.254.96.92 thaicert.nectec.or.th

Hosts: 121.254.96.92 hjt-data.trend-braintree.com

Hosts: 121.254.96.92 www.pantip.com

Hosts: 121.254.96.92 secubox.aldria.com

Hosts: 121.254.96.92 www.forospyware.com

Hosts: 121.254.96.92 www.manuelruvalcaba.com

Hosts: 121.254.96.92 www.zonavirus.com

Hosts: 121.254.96.92 www.leforo.com

Hosts: 121.254.96.92 www.gsmph.com

Hosts: 121.254.96.92 blokvesti.net

Hosts: 121.254.96.92 www.viprasys.org

Hosts: 121.254.96.92 forum.antivir-pe.de

Hosts: 121.254.96.92 www.siteadvisor.com

Hosts: 121.254.96.92 blog.threatfire.com

Hosts: 121.254.96.92 www.threatexpert.com

Hosts: 121.254.96.92 blog.hispasec.com

Hosts: 121.254.96.92 www.configurarequipos.com

Hosts: 121.254.96.92 sosvirus.changelog.fr

Hosts: 121.254.96.92 www.psicofxp.com

Hosts: 121.254.96.92 www.gsmph.net

Hosts: 121.254.96.92 www.gyakorikerdesek.hu

Hosts: 121.254.96.92 us.mcafee.com

Hosts: 121.254.96.92 www.malekal.com

Hosts: 121.254.96.92 mailcenter.rising.com.cn

Hosts: 121.254.96.92 mailcenter.rising.com

Hosts: 121.254.96.92 www.rising.com.cn

Hosts: 121.254.96.92 www.rising.com

Hosts: 121.254.96.92 www.babooforum.com.br

Hosts: 121.254.96.92 www.runscanner.net

Hosts: 121.254.96.92 www.blogschapines.com

Hosts: 121.254.96.92 www.zyzoom.org

Hosts: 121.254.96.92 www.avsoft.ru

Hosts: 121.254.96.92 www.elakiri.com

Hosts: 121.254.96.92 forum.telecharger.01net.com

Hosts: 121.254.96.92 sosvirus.changelog.fr

Hosts: 121.254.96.92 upload.changelog.fr

Hosts: 121.254.96.92 www.raymond.cc

Hosts: 121.254.96.92 changelog.fr

Hosts: 121.254.96.92 www.pcentraide.com

Hosts: 121.254.96.92 atazita.blogspot.com

Hosts: 121.254.96.92 www.thinkpad.cn

Hosts: 121.254.96.92 www.sunbeltsoftware.com

Hosts: 121.254.96.92 cert.inteco.es

Hosts: 121.254.96.92 www.gamexeon.com

Hosts: 121.254.96.92 nod32-antivirus.en.softonic.co

Hosts: 121.254.96.92 www.final4ever.com

Hosts: 121.254.96.92 files.filefont.com

Hosts: 121.254.96.92 www.infos-du-net.com

Hosts: 121.254.96.92 www.trendsecure.com

Hosts: 121.254.96.92 forum.hardware.fr

Hosts: 121.254.96.92 www.utilidades-utiles.com

Hosts: 121.254.96.92 blogs.icerocket.com

Hosts: 121.254.96.92 www.spywarefri.dk

Hosts: 121.254.96.92 alfrasha.maktoob.com

Hosts: 121.254.96.92 www.eset.eu

Hosts: 121.254.96.92 quickscan.bitdefender.com

Hosts: 121.254.96.92 www.spychecker.com

Hosts: 121.254.96.92 www.geekstogo.com

Hosts: 121.254.96.92 forums.maddoktor2.com

Hosts: 121.254.96.92 www.smokey-services.eu

Hosts: 121.254.96.92 www.clubic.com

Hosts: 121.254.96.92 www.linhadefensiva.org

Hosts: 121.254.96.92 www.rolandovera.com

Hosts: 121.254.96.92 forum.burek.com

Hosts: 121.254.96.92 secure.sophos.com

Hosts: 121.254.96.92 usa.kaspersky.com

Hosts: 121.254.96.92 board.softpedia.com

Hosts: 121.254.96.92 download.sysinternals.com

Hosts: 121.254.96.92 www.pcguide.com

Hosts: 121.254.96.92 www.thetechguide.com

Hosts: 121.254.96.92 www.ozzu.com

Hosts: 121.254.96.92 www.changedetection.com

Hosts: 121.254.96.92 espanol.groups.yahoo.com

Hosts: 121.254.96.92 www.sunbeltsecurity.com

Hosts: 121.254.96.92 www.quickheal.co.in

Hosts: 121.254.96.92 www.vivalared.com

Hosts: 121.254.96.92 thailand.itmylike.com

Hosts: 121.254.96.92 community.thaiware.com

Hosts: 121.254.96.92 www.avpclub.ddns.info

Hosts: 121.254.96.92 www.offensivecomputing.net

Hosts: 121.254.96.92 www.grisoft.com

Hosts: 121.254.96.92 boardreader.com

Hosts: 121.254.96.92 www.guiadohardware.net

Hosts: 121.254.96.92 www.webroot.com

Hosts: 121.254.96.92 www.thehelper.net

Hosts: 121.254.96.92 www.kaldata.com

Hosts: 121.254.96.92 vil.nai.com

Hosts: 121.254.96.92 www.malwarecrypt.com

Hosts: 121.254.96.92 www.msnvirusremoval.com

Hosts: 121.254.96.92 www.cisrt.org

Hosts: 121.254.96.92 fixmyim.com

Hosts: 121.254.96.92 samroeng.hi5.com

Hosts: 121.254.96.92 foro.elhacker.net

Hosts: 121.254.96.92 www.daboweb.com

Hosts: 121.254.96.92 service1.symantec.com

Hosts: 121.254.96.92 us3.download.comodo.com

Hosts: 121.254.96.92 forum.gsmhosting.com

Hosts: 121.254.96.92 www.computerforum.com

Hosts: 121.254.96.92 forum.avast.com

Hosts: 121.254.96.92 forums.techguy.org

Hosts: 121.254.96.92 www.incodesolutions.com

Hosts: 121.254.96.92 hijackthis.download3000.com

Hosts: 121.254.96.92 www.cybertechhelp.com

Hosts: 121.254.96.92 www.superdicas.com.br

Hosts: 121.254.96.92 www.51nb.com

Hosts: 121.254.96.92 us4.download.comodo.com

Hosts: 121.254.96.92 www.jbtalks.cc

Hosts: 121.254.96.92 ad13.geekstogo.com

Hosts: 121.254.96.92 forums.eternion-wow.com

Hosts: 121.254.96.92 downloads.andymanchesta.com

Hosts: 121.254.96.92 andymanchesta.com

Hosts: 121.254.96.92 info.prevx.com

Hosts: 121.254.96.92 aknow.prevx.com

Hosts: 121.254.96.92 www.zonavirus.com

Hosts: 121.254.96.92 securitywonks.net

Hosts: 121.254.96.92 www.yoreparo.com

Hosts: 121.254.96.92 www.spywarecease.com

Hosts: 121.254.96.92 forum.dobreprogramy.pl

Hosts: 121.254.96.92 community.mcafee.com

Hosts: 121.254.96.92 board.protecus.de

Hosts: 121.254.96.92 www.lavasoft.com

Hosts: 121.254.96.92 www.virscan.org

Hosts: 121.254.96.92 www.eeload.com

Hosts: 121.254.96.92 down.www.kingsoft.com

Hosts: 121.254.96.92 www.file.net

Hosts: 121.254.96.92 onecare.live.com

Hosts: 121.254.96.92 mvps.org

Hosts: 121.254.96.92 www.laneros.com

Hosts: 121.254.96.92 www.pc1news.com

Hosts: 121.254.96.92 forum.avira.com

Hosts: 121.254.96.92 downloads.novirusthanks.org

Hosts: 121.254.96.92 www.pinoyhackers.com

Hosts: 121.254.96.92 www.housecall.trendmicro.com

Hosts: 121.254.96.92 www.avast.com

Hosts: 121.254.96.92 www.free.avg.com

Hosts: 121.254.96.92 www.onlinescan.avast.com

Hosts: 121.254.96.92 www.ewido.net

Hosts: 121.254.96.92 www.trucoswindows.net

Hosts: 121.254.96.92 www.mozilla-hispano.org

Hosts: 121.254.96.92 www.jackbloodforum.com

Hosts: 121.254.96.92 www.kosandpol.elakiri.com

Hosts: 121.254.96.92 www.thaivisa.com

Hosts: 121.254.96.92 www.futurenow.bitdefender.com

Hosts: 121.254.96.92 www.bitdefender.com

Hosts: 121.254.96.92 www.f-prot.com

Hosts: 121.254.96.92 www.trendsecure.com

Hosts: 121.254.96.92 security.symantec.com

Hosts: 121.254.96.92 oldtimer.geekstogo.com

Hosts: 121.254.96.92 sopiansantosa.blogspot.com

Hosts: 121.254.96.92 www.fileresearchcenter.com

Hosts: 121.254.96.92 www.looktr.com

Hosts: 121.254.96.92 www.zone-it.com

Hosts: 121.254.96.92 www.avira.com

Hosts: 121.254.96.92 www.eset.com

Hosts: 121.254.96.92 free.avg.com

Hosts: 121.254.96.92 www.free-av.com

Hosts: 121.254.96.92 kr.ahnlab.com

Hosts: 121.254.96.92 www.eset.com

Hosts: 121.254.96.92 forospyware.com

Hosts: 121.254.96.92 thejokerx.blogspot.com

Hosts: 121.254.96.92 cairopt.net

Hosts: 121.254.96.92 oolbar.cyberdefender.com

Hosts: 121.254.96.92 golpe.dyndns.org

Hosts: 121.254.96.92 forum.aiutamici.com

Hosts: 121.254.96.92 solit.us

Hosts: 121.254.96.92 www.2-spyware.com

Hosts: 121.254.96.92 www.antivir.es

Hosts: 121.254.96.92 www.prevx.com

Hosts: 121.254.96.92 www.ikarus.net

Hosts: 121.254.96.92 bbs.s-sos.net

Hosts: 121.254.96.92 www.housecall.trendmicro.com

Hosts: 121.254.96.92 www.superdicas.com.br

Hosts: 121.254.96.92 www.superantispyware.com

Hosts: 121.254.96.92 www.unhackme.com

Hosts: 121.254.96.92 www.askmehelpdesk.com

Hosts: 121.254.96.92 forum.zebulon.fr

Hosts: 121.254.96.92 www.forums.majorgeeks.com

Hosts: 121.254.96.92 www.castlecops.com

Hosts: 121.254.96.92 www.virusspy.com

Hosts: 121.254.96.92 andymanchesta.com

Hosts: 121.254.96.92 www.kaspersky.es

Hosts: 121.254.96.92 subs.geekstogo.com

Hosts: 121.254.96.92 www.forospanish.com

Hosts: 121.254.96.92 blog.rnsafe.com

Hosts: 121.254.96.92 www.regrun.com

Hosts: 121.254.96.92 irc.snahosting.net

Hosts: 121.254.96.92 danielorza.net

Hosts: 121.254.96.92 www.pchelpforum.com

Hosts: 121.254.96.92 www.trendmicro.com

Hosts: 121.254.96.92 www.fortinet.com

Hosts: 121.254.96.92 www.safer-networking.org

Hosts: 121.254.96.92 www.fortiguardcenter.com

Hosts: 121.254.96.92 www.dougknox.com

Hosts: 121.254.96.92 www.vsantivirus.com

Hosts: 121.254.96.92 static.commentcamarche.net

Hosts: 121.254.96.92 www.gyakorikerdesek.hu

Hosts: 121.254.96.92 www.fixya.com

Hosts: 121.254.96.92 www.alabamawomen.org

Hosts: 121.254.96.92 www.firewallguide.com

Hosts: 121.254.96.92 www.auditmypc.com

Hosts: 121.254.96.92 www.spywaredb.com

Hosts: 121.254.96.92 www.mxttchina.com

Hosts: 121.254.96.92 www.ziggamza.net

Hosts: 121.254.96.92 www.forospyware.es

Hosts: 121.254.96.92 pogonyuto.forospanish.com

Hosts: 121.254.96.92 spywarefiles.prevx.com

Hosts: 121.254.96.92 k2r.th3kings.net

Hosts: 121.254.96.92 www.betterantivirus.com

Hosts: 121.254.96.92 www.365groups.com

Hosts: 121.254.96.92 www.antivirus.comodo.com

Hosts: 121.254.96.92 www.spywareterminator.com

Hosts: 121.254.96.92 www.eradicatespyware.net

Hosts: 121.254.96.92 www.freespywareremoval.info

Hosts: 121.254.96.92 www.personalfirewall.comodo.com

Hosts: 121.254.96.92 wakoopa.com

Hosts: 121.254.96.92 forum.drweb.com

Hosts: 121.254.96.92 bb1.th3kings.net

Hosts: 121.254.96.92 www.commentcamarche.net

Hosts: 121.254.96.92 www.clamav.net

Hosts: 121.254.96.92 www.antivirus.about.com

Hosts: 121.254.96.92 www.pandasecurity.com

Hosts: 121.254.96.92 www.webphand.com

Hosts: 121.254.96.92 mx.answers.yahoo.com

Hosts: 121.254.96.92 www.securitywonks.net

Hosts: 121.254.96.92 www.messengeradictos.com

Hosts: 121.254.96.92 www.geekpolice.net

Hosts: 121.254.96.92 bub.th3kings.net

Hosts: 121.254.96.92 shield.prevx.com

Hosts: 121.254.96.92 www.eudict.com

Hosts: 121.254.96.92 www.sandboxie.com

Hosts: 121.254.96.92 www.clamwin.com

Hosts: 121.254.96.92 www.cwsandbox.org

Hosts: 121.254.96.92 www.ca.com

Hosts: 121.254.96.92 www.arswp.com

Hosts: 121.254.96.92 es.answers.yahoo.com

Hosts: 121.254.96.92 www.trucoswindows.es

Hosts: 121.254.96.92 www.ipaddresser.com

Hosts: 121.254.96.92 www.abgenis.net

Hosts: 121.254.96.92 www.freefixer.com

Hosts: 121.254.96.92 forums.afterdawn.com

Hosts: 121.254.96.92 forum.torrents.ro

Hosts: 121.254.96.92 www.networkworld.com

Hosts: 121.254.96.92 www.cddchiangmai.net

Hosts: 121.254.96.92 www.threatexpert.com

Hosts: 121.254.96.92 www.norman.com

Hosts: 121.254.96.92 espanol.answers.yahoo.com

Hosts: 121.254.96.92 www.tallemu.com

Hosts: 121.254.96.92 foro.portalhacker.net

Hosts: 121.254.96.92 www.groupwhere.org

Hosts: 121.254.96.92 sniff.runescapetube.com

Hosts: 121.254.96.92 forum.p30world.com

Hosts: 121.254.96.92 virscan.org

Hosts: 121.254.96.92 www.viruschief.com

Hosts: 121.254.96.92 scanner.virus.org

Hosts: 121.254.96.92 www.hijackthis.de

Hosts: 121.254.96.92 housecall65.trendmicro.com

Hosts: 121.254.96.92 www.guiadohardware.net

Hosts: 121.254.96.92 forums.whatthetech.com

Hosts: 121.254.96.92 mustlovewine.com

Hosts: 121.254.96.92 www3.malekal.com

Hosts: 121.254.96.92 esetnod32antivirus.blogspot.com

Hosts: 121.254.96.92 hjt.networktechs.com

Hosts: 121.254.96.92 www.techsupportforum.com

Hosts: 121.254.96.92 www.whatthetech.com

Hosts: 121.254.96.92 www.soccersuck.com

Hosts: 121.254.96.92 www.pcentraide.com

Hosts: 121.254.96.92 comunidad.wilkinsonpc.com.co

Hosts: 121.254.96.92 forum.hocit.com

Hosts: 121.254.96.92 forum.smadav.net

Hosts: 121.254.96.92 fgp.e2doo.com

Hosts: 121.254.96.92 community.thaiware.com

Hosts: 121.254.96.92 irc.evoporn.com

Hosts: 121.254.96.92 forum.piriform.com

Hosts: 121.254.96.92 www.tweaksforgeeks.com

Hosts: 121.254.96.92 www.daniweb.com

Hosts: 121.254.96.92 www.geekstogo.com

Hosts: 121.254.96.92 es.answers.yahoo.com

Hosts: 121.254.96.92 www.techsupportforum.com

Hosts: 121.254.96.92 dnl-eu8.kaspersky-labs.com

Hosts: 121.254.96.92 www.oprekpc.com

Hosts: 121.254.96.92 shv4.ath.cx

Hosts: 121.254.96.92 www.pcworld.com

Hosts: 121.254.96.92 in.answers.yahoo.com

Hosts: 121.254.96.92 www.pchell.com

Hosts: 121.254.96.92 www.spyany.com

Hosts: 121.254.96.92 forums.techguy.org

Hosts: 121.254.96.92 www.experts-exchange.com

Hosts: 121.254.96.92 www.wikio.es

Hosts: 121.254.96.92 www.pandasecurity.com

Hosts: 121.254.96.92 forums.devshed.com

Hosts: 121.254.96.92 devbuilds.kaspersky-labs.com

Hosts: 121.254.96.92 hana-ahmad.blogspot.com

Hosts: 121.254.96.92 www.linkmania.ro

Hosts: 121.254.96.92 www.trojaner-board.de

Hosts: 121.254.96.92 forum.tweaks.com

Hosts: 121.254.96.92 www.wilderssecurity.com

Hosts: 121.254.96.92 www.techspot.com

Hosts: 121.254.96.92 www.thecomputerpitstop.com

Hosts: 121.254.96.92 es.wasalive.com

Hosts: 121.254.96.92 secunia.com

Hosts: 121.254.96.92 www.killtrojan.net

Hosts: 121.254.96.92 www.ulop.net

Hosts: 121.254.96.92 www.eliters.com

Hosts: 121.254.96.92 sip4.voipkosovasite.com

Hosts: 121.254.96.92 www.ftw.ro

Hosts: 121.254.96.92 anggiawan.web.id

Hosts: 121.254.96.92 es.kioskea.net

Hosts: 121.254.96.92 www.taringa.net

Hosts: 121.254.96.92 www.cyberdefender.com

Hosts: 121.254.96.92 www.feedage.com

Hosts: 121.254.96.92 new.taringa.net

Hosts: 121.254.96.92 forum.zazana.com

Hosts: 121.254.96.92 forum.clubedohardware.com.br

Hosts: 121.254.96.92 mks.com.pl

Hosts: 121.254.96.92 www.vietcaravan.us

Hosts: 121.254.96.92 trbotnet.sytes.net

Hosts: 121.254.96.92 community.norton.com

Hosts: 121.254.96.92 www.computing.net

Hosts: 121.254.96.92 discussions.virtualdr.com

Hosts: 121.254.96.92 forum.securitycadets.com

Hosts: 121.254.96.92 www.techimo.com

Hosts: 121.254.96.92 13iii.com

Hosts: 121.254.96.92 www.dicasweb.com.br

Hosts: 121.254.96.92 www.javacoolsoftware.net

Hosts: 121.254.96.92 cofradia.org

Hosts: 121.254.96.92 wasteland-bg.com

Hosts: 121.254.96.92 www.windowexe.com

Hosts: 121.254.96.92 malekal.com

Hosts: 121.254.96.92 www.carigold.com

Hosts: 121.254.96.92 www.infosecpodcast.com

Hosts: 121.254.96.92 www.usbcleaner.cn

Hosts: 121.254.96.92 www.net-security.org

Hosts: 121.254.96.92 www.bleedingthreats.net

Hosts: 121.254.96.92 acs.pandasoftware.com

Hosts: 121.254.96.92 www.funkytoad.com

Hosts: 121.254.96.92 malwarebytes.org

Hosts: 121.254.96.92 sabithpocker.blogspot.com

Hosts: 121.254.96.92 comprolive.vox.com

Hosts: 121.254.96.92 www.worton.com

Hosts: 121.254.96.92 www.360safe.cn

Hosts: 121.254.96.92 www.360safe.com

Hosts: 121.254.96.92 bbs.360safe.cn

Hosts: 121.254.96.92 bbs.360safe.com

Hosts: 121.254.96.92 codehard.wordpress.com

Hosts: 121.254.96.92 forum.clubedohardware.com.br

Hosts: 121.254.96.92 antitrick.com

Hosts: 121.254.96.92 www.configurarequipos.com

Hosts: 121.254.96.92 www.jiwang.org

Hosts: 121.254.96.92 anti-virus-software-review.toptenreviews.com

Hosts: 121.254.96.92 www.360.cn

Hosts: 121.254.96.92 www.360.com

Hosts: 121.254.96.92 bbs.360safe.cn

Hosts: 121.254.96.92 bbs.360safe.com

Hosts: 121.254.96.92 www.forospyware.es

Hosts: 121.254.96.92 p3dev.taringa.net

Hosts: 121.254.96.92 www.precisesecurity.com

Hosts: 121.254.96.92 dlpe.antivir.com

Hosts: 121.254.96.92 www.jvme.com

Hosts: 121.254.96.92 share.skype.com

Hosts: 121.254.96.92 comprolive.com

Hosts: 121.254.96.92 gotoknow.org

Hosts: 121.254.96.92 www.forofantasiasmiguel.com

Hosts: 121.254.96.92 baike.360.cn

Hosts: 121.254.96.92 baike.360.com

Hosts: 121.254.96.92 kaba.360.cn

Hosts: 121.254.96.92 kaba.360.com

Hosts: 121.254.96.92 deckard.geekstogo.com

Hosts: 121.254.96.92 www.taringa.net

Hosts: 121.254.96.92 forums.comodo.com

Hosts: 121.254.96.92 www.mvps.org

Hosts: 121.254.96.92 melcy.wordpress.com

Hosts: 121.254.96.92 forum.softpedia.com

Hosts: 121.254.96.92 pcvids.wordpress.com

Hosts: 121.254.96.92 shop.symantecstore.com

Hosts: 121.254.96.92 down.360safe.cn

Hosts: 121.254.96.92 down.360safe.com

Hosts: 121.254.96.92 x.360safe.com

Hosts: 121.254.96.92 dl.360safe.com

Hosts: 121.254.96.92 ftp.drweb.com

Hosts: 121.254.96.92 www.hotshare.net

Hosts: 121.254.96.92 es.wasalive.com

Hosts: 121.254.96.92 free.antivirus.com

Hosts: 121.254.96.92 forum.hocit.com

Hosts: 121.254.96.92 destavision-forum.com

Hosts: 121.254.96.92 inspiresoft.blogspot.com

Hosts: 121.254.96.92 universomanualidades.foroactivo.com

Hosts: 121.254.96.92 updatem.360safe.com

Hosts: 121.254.96.92 updatem.360safe.cn

Hosts: 121.254.96.92 update.360safe.cn

Hosts: 121.254.96.92 update.360safe.com

Hosts: 121.254.96.92 www.utilidades-utiles.com

Hosts: 121.254.96.92 forum.kaspersky.com

Hosts: 121.254.96.92 www.indowebster.web.id

Hosts: 121.254.96.92 zastita.com

Hosts: 121.254.96.92 www.sz-pet.com

Hosts: 121.254.96.92 foros.abcdatos.com

Hosts: 121.254.96.92 www.elektroda.pl

Hosts: 121.254.96.92 bbs.duba.net

Hosts: 121.254.96.92 www.duba.net

Hosts: 121.254.96.92 zhidao.baidu.com

Hosts: 121.254.96.92 hi.baidu.com

Hosts: 121.254.96.92 www.drweb.com.es

Hosts: 121.254.96.92 msncleaner.softonic.com

Hosts: 121.254.96.92 www.javacoolsoftware.com

Hosts: 121.254.96.92 beniono.wordpress.com

Hosts: 121.254.96.92 www.4-gsmteam.com

Hosts: 121.254.96.92 msntubers.freehostia.com

Hosts: 121.254.96.92 store.norton.com

Hosts: 121.254.96.92 file.ikaka.com

Hosts: 121.254.96.92 file.ikaka.cn

Hosts: 121.254.96.92 bbs.ikaka.com

Hosts: 121.254.96.92 zhidao.ikaka.com

Hosts: 121.254.96.92 www.eset-la.com

Hosts: 121.254.96.92 download.eset.com

Hosts: 121.254.96.92 software-files.download.com

Hosts: 121.254.96.92 www.faravirusi.com

Hosts: 121.254.96.92 www.winbots.es

Hosts: 121.254.96.92 forum.chip.de

Hosts: 121.254.96.92 www.thailandsusu.com

Hosts: 121.254.96.92 debates.motos.net

Hosts: 121.254.96.92 www.ikaka.com

Hosts: 121.254.96.92 www.ikaka.cn

Hosts: 121.254.96.92 bbs.cfan.com.cn

Hosts: 121.254.96.92 www.cfan.com.cn

Hosts: 121.254.96.92 www.pandasecurity.com

Hosts: 121.254.96.92 es.mcafee.com

Hosts: 121.254.96.92 downloads.malwarebytes.org

Hosts: 121.254.96.92 www.devirusare.com

Hosts: 121.254.96.92 forum.skype.com

Hosts: 121.254.96.92 shitit.net

Hosts: 121.254.96.92 www.webimmune.net

Hosts: 121.254.96.92 forum.swzone.it

Hosts: 121.254.96.92 bbs.kafan.cn

Hosts: 121.254.96.92 bbs.kafan.com

Hosts: 121.254.96.92 bbs.kpfans.com

Hosts: 121.254.96.92 bbs.taisha.org

Hosts: 121.254.96.92 www.manuelruvalcaba.com

Hosts: 121.254.96.92 support.f-secure.com

Hosts: 121.254.96.92 bbs.winzheng.com

Hosts: 121.254.96.92 devirusare.com

Hosts: 121.254.96.92 social.microsoft.com

Hosts: 121.254.96.92 www.shitit.net

Hosts: 121.254.96.92 mx.answers.yahoo.com

Hosts: 121.254.96.92 darkzone.in.th

Hosts: 121.254.96.92 alerta-antivirus.inteco.es

Hosts: 121.254.96.92 foros.zonavirus.com

Hosts: 121.254.96.92 alerta-antivirus.red.es

Hosts: 121.254.96.92 www.zonavirus.com

Hosts: 121.254.96.92 www.malwarebytes.org

Hosts: 121.254.96.92 www.commentcamarche.net

Hosts: 121.254.96.92 news.support.veritas.com

Hosts: 121.254.96.92 www.zonealarm.com

Hosts: 121.254.96.92 malwarebytes-anti-malware.softonic.com

Hosts: 121.254.96.92 www.ewido.net

Hosts: 121.254.96.92 www.infospyware.com

Hosts: 121.254.96.92 www.bitdefender.es

Hosts: 121.254.96.92 housecall.trendmicro.com

Hosts: 121.254.96.92 foros.toxico-pc.com

Hosts: 121.254.96.92 www.identi.es

Hosts: 121.254.96.92 es.kioskea.net

Hosts: 121.254.96.92 virusinfo.info

Hosts: 121.254.96.92 forums.zonealarm.com

Hosts: 121.254.96.92 foro.infiernohacker.com

Hosts: 121.254.96.92 nitroamd.spaces.live.com

Hosts: 121.254.96.92 www.emsisoft.de

Hosts: 121.254.96.92 www.securitynewsportal.com

Hosts: 121.254.96.92 irc.ekizmedia.com

Hosts: 121.254.96.92 zone.arminboutique.com

Hosts: 121.254.96.92 story.dnsentrymx.com

==== Installed Programs ======================

AC3Filter (remove only)

Acoustica CD/DVD Label Maker

Adobe Anchor Service CS3

Adobe Asset Services CS3

Adobe Bridge CS3

Adobe Bridge Start Meeting

Adobe Camera Raw 4.0

Adobe CMaps

Adobe Default Language CS3

Adobe Device Central CS3

Adobe Dreamweaver CS3

Adobe ExtendScript Toolkit 2

Adobe Extension Manager CS3

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Help Viewer CS3

Adobe PDF Library Files

Adobe Photoshop 7.0

Adobe Reader 7.0.5

Adobe Setup

Adobe Type Support

Adobe Update Manager CS3

Adobe Version Cue CS3 Client

AOL Coach Version 1.0(Build:20040229.1 uk)

AOL Connectivity Services

AOL Spyware Protection

AOL Toolbar 5.0

AOL Uninstaller (Choose which Products to Remove)

AOL You've Got Pictures Screensaver

Apple Mobile Device Support

Apple Software Update

Arturia CS-80V v1.1

Arturia Moog Modular V v1.1

ASIO4ALL

Backburner

BlueSender

Bonjour

BroadJump Client Foundation

Broomstick Bass 1.0.0

BufferChm

Celtx (2.7)

Collab

Compatibility Pack for the 2007 Office system

Conexant HD Audio

CoreFLAC Audio Decoder+Source Filter (remove only)

Coupon Printer

CP_AtenaShokunin1Config

CP_CalendarTemplates1

cp_LightScribeConfig

cp_OnlineProjectsConfig

CP_Package_Basic1

CP_Package_Variety1

CP_Package_Variety2

CP_Package_Variety3

CP_Panorama1Config

cp_PosterPrintConfig

cp_UpdateProjectsConfig

Craft ROBO Controller

Critical Update for Windows Media Player 11 (KB959772)

CueTour

Customer Experience Enhancement

Destinations

DeviceManagementQFolder

DG_screensaver

DivX Content Uploader

DivX Web Player

Easy Internet Sign-up

Edirol HQ Orchestral v1.01

Edirol SuperQuartet v1.5

EPSON Printer Software

EPSON Scan

ESPNMotion

FBP - Facebook Blaster Pro

FileZilla Client 3.1.5.1

FL Studio 8

Football Manager 2010 Demo

FriendBlasterPro

FullDPAppQFolder

GemMaster Mystic

Google Chrome

Google Toolbar for Internet Explorer

Graphtec DesignMaster Web (C:\Graphtec DesignMaster Web)

HDAUDIO Soft Data Fax Modem with SmartCP

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows Internet Explorer 7 (KB947864)

Hotfix for Windows Media Format 11 SDK (KB929399)

Hotfix for Windows Media Player 10 (KB903157)

Hotfix for Windows Media Player 11 (KB939683)

Hotfix for Windows XP (KB888795)

Hotfix for Windows XP (KB891593)

Hotfix for Windows XP (KB895961)

Hotfix for Windows XP (KB896256)

Hotfix for Windows XP (KB899337)

Hotfix for Windows XP (KB899510)

Hotfix for Windows XP (KB902841)

Hotfix for Windows XP (KB909095)

Hotfix for Windows XP (KB910728)

Hotfix for Windows XP (KB912436)

Hotfix for Windows XP (KB914440)

Hotfix for Windows XP (KB915865)

Hotfix for Windows XP (KB926239)

Hotfix for Windows XP (KB952287)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB954708)

Hotfix for Windows XP (KB961118)

Hotfix for Windows XP (KB970653-v3)

Hotfix for Windows XP (KB976002-v5)

Hotfix for Windows XP (KB976098-v2)

Hotfix for Windows XP (KB979306)

HouseCall 6.6

HP DVD Play 2.3

HP Help and Support

HP Imaging Device Functions 6.0

HP Photosmart Premier Software 6.0

HP Quick Launch Buttons 6.10 A1

HP Software Update

HP User Guides--System Recovery

HP User Guides 0037

HP Wireless Assistant 2.00 G2

HpSdpAppCoreApp

HyperPrism v1.52

IL Download Manager

InFlac 1.1.1

InstantShareDevices

Intel® Graphics Media Accelerator Driver

iTunes

J2SE Runtime Environment 5.0 Update 6

Java 6 Update 17

Java 6 Update 3

Java 6 Update 5

Java 6 Update 7

Junk Mail filter update

Korg Legacy Collection VSTi v1.0.02

Learn2 Player (Uninstall Only)

LiveUpdate 3.0 (Symantec Corporation)

LUXONIX ravity®

LUXONIX ravity(S)

Macromedia Dreamweaver 8

Macromedia Extension Manager

Macromedia Fireworks 8

Macromedia Flash 8

Macromedia Flash 8 Video Encoder

Macromedia Flash Player 8

Macromedia Shockwave Player

Malwarebytes' Anti-Malware

Microsoft .NET Framework 1.0 Hotfix (KB887998)

Microsoft .NET Framework 1.0 Hotfix (KB930494)

Microsoft .NET Framework 1.0 Hotfix (KB953295)

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Security Update (KB953297)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft Application Error Reporting

Microsoft Choice Guard

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Internationalized Domain Names Mitigation APIs

Microsoft National Language Support Downlevel APIs

Microsoft Office 2003 Web Components

Microsoft Office 2007 Service Pack 2 (SP2)

Microsoft Office Live Add-in 1.3

Microsoft Office Project 2007 Service Pack 2 (SP2)

Microsoft Office Project MUI (English) 2007

Microsoft Office Project Standard 2007

Microsoft Office Project Standard 2007 Trial

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (English) 2007

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

Microsoft Office Shared MUI (English) 2007

Microsoft Office Shared Setup Metadata MUI (English) 2007

Microsoft Office XP Professional with FrontPage

Microsoft Search Enhancement Pack

Microsoft Silverlight

Microsoft Software Update for Web Folders (English) 12

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)

Microsoft Sync Framework Runtime Native v1.0 (x86)

Microsoft Sync Framework Services Native v1.0 (x86)

Microsoft User-Mode Driver Framework Feature Pack 1.0

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Works

Move Networks Player for Internet Explorer

Mozilla Firefox (3.6.3)

MSN

MSVCRT

MSXML 4.0 SP2 (KB927978)

MSXML 4.0 SP2 (KB936181)

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MSXML 6 Service Pack 2 (KB973686)

Nero 7 Ultra Edition

NetWaiting

NewsLeecher

Novation Bass-Station VSTi v1.10

Novation V-Station v1.20-H2O

Nuclear Coffee - VideoGet

OptionalContentQFolder

Otto

PhotoGallery

PoiZone

QuickTime

RandMap

RealPlayer

Rob Papen Albino 2

ROBO Master

SAMSUNG Mobile Modem Driver Set

Samsung Mobile phone USB driver Software

SAMSUNG Mobile USB Modem 1.0 Software

SAMSUNG Mobile USB Modem Software

Samsung PC Studio 3 USB Driver Installer

Security Update for 2007 Microsoft Office System (KB969559)

Security Update for CAPICOM (KB931906)

Security Update for Microsoft Office system 2007 (972581)

Security Update for Microsoft Office system 2007 (KB974234)

Security Update for Step By Step Interactive Training (KB898458)

Security Update for Step By Step Interactive Training (KB923723)

Security Update for Windows Internet Explorer 7 (KB938127)

Security Update for Windows Internet Explorer 7 (KB939653)

Security Update for Windows Internet Explorer 7 (KB942615)

Security Update for Windows Internet Explorer 7 (KB944533)

Security Update for Windows Internet Explorer 7 (KB950759)

Security Update for Windows Internet Explorer 7 (KB953838)

Security Update for Windows Internet Explorer 7 (KB956390)

Security Update for Windows Internet Explorer 7 (KB958215)

Security Update for Windows Internet Explorer 7 (KB960714)

Security Update for Windows Internet Explorer 7 (KB961260)

Security Update for Windows Internet Explorer 7 (KB963027)

Security Update for Windows Internet Explorer 7 (KB969897)

Security Update for Windows Internet Explorer 7 (KB972260)

Security Update for Windows Internet Explorer 7 (KB974455)

Security Update for Windows Internet Explorer 7 (KB976325)

Security Update for Windows Internet Explorer 7 (KB978207)

Security Update for Windows Internet Explorer 8 (KB971961)

Security Update for Windows Internet Explorer 8 (KB981332)

Security Update for Windows Media Player (KB911564)

Security Update for Windows Media Player (KB952069)

Security Update for Windows Media Player (KB954155)

Security Update for Windows Media Player (KB968816)

Security Update for Windows Media Player (KB973540)

Security Update for Windows Media Player 10 (KB911565)

Security Update for Windows Media Player 10 (KB917734)

Security Update for Windows Media Player 10 (KB936782)

Security Update for Windows Media Player 11 (KB936782)

Security Update for Windows Media Player 11 (KB954154)

Security Update for Windows Media Player 6.4 (KB925398)

Security Update for Windows XP (KB893066)

Security Update for Windows XP (KB893756)

Security Update for Windows XP (KB896358)

Security Update for Windows XP (KB896422)

Security Update for Windows XP (KB896423)

Security Update for Windows XP (KB896424)

Security Update for Windows XP (KB896428)

Security Update for Windows XP (KB899587)

Security Update for Windows XP (KB899591)

Security Update for Windows XP (KB900725)

Security Update for Windows XP (KB901017)

Security Update for Windows XP (KB901190)

Security Update for Windows XP (KB901214)

Security Update for Windows XP (KB902400)

Security Update for Windows XP (KB903235)

Security Update for Windows XP (KB904706)

Security Update for Windows XP (KB905414)

Security Update for Windows XP (KB905749)

Security Update for Windows XP (KB908519)

Security Update for Windows XP (KB911562)

Security Update for Windows XP (KB911567)

Security Update for Windows XP (KB911927)

Security Update for Windows XP (KB912919)

Security Update for Windows XP (KB913446)

Security Update for Windows XP (KB913580)

Security Update for Windows XP (KB914388)

Security Update for Windows XP (KB914389)

Security Update for Windows XP (KB917344)

Security Update for Windows XP (KB917422)

Security Update for Windows XP (KB917953)

Security Update for Windows XP (KB918118)

Security Update for Windows XP (KB918439)

Security Update for Windows XP (KB919007)

Security Update for Windows XP (KB920213)

Security Update for Windows XP (KB920214)

Security Update for Windows XP (KB920670)

Security Update for Windows XP (KB920683)

Security Update for Windows XP (KB920685)

Security Update for Windows XP (KB921398)

Security Update for Windows XP (KB921503)

Security Update for Windows XP (KB922616)

Security Update for Windows XP (KB922760)

Security Update for Windows XP (KB922819)

Security Update for Windows XP (KB923191)

Security Update for Windows XP (KB923414)

Security Update for Windows XP (KB923561)

Security Update for Windows XP (KB923689)

Security Update for Windows XP (KB923694)

Security Update for Windows XP (KB923980)

Security Update for Windows XP (KB924191)

Security Update for Windows XP (KB924270)

Security Update for Windows XP (KB924496)

Security Update for Windows XP (KB924667)

Security Update for Windows XP (KB925454)

Security Update for Windows XP (KB925486)

Security Update for Windows XP (KB925902)

Security Update for Windows XP (KB926255)

Security Update for Windows XP (KB926436)

Security Update for Windows XP (KB927779)

Security Update for Windows XP (KB927802)

Security Update for Windows XP (KB928090)

Security Update for Windows XP (KB928255)

Security Update for Windows XP (KB928843)

Security Update for Windows XP (KB929123)

Security Update for Windows XP (KB929969)

Security Update for Windows XP (KB930178)

Security Update for Windows XP (KB931261)

Security Update for Windows XP (KB931768)

Security Update for Windows XP (KB931784)

Security Update for Windows XP (KB932168)

Security Update for Windows XP (KB933566)

Security Update for Windows XP (KB933729)

Security Update for Windows XP (KB935839)

Security Update for Windows XP (KB935840)

Security Update for Windows XP (KB936021)

Security Update for Windows XP (KB937143)

Security Update for Windows XP (KB937894)

Security Update for Windows XP (KB938127)

Security Update for Windows XP (KB938464)

Security Update for Windows XP (KB938829)

Security Update for Windows XP (KB939653)

Security Update for Windows XP (KB941202)

Security Update for Windows XP (KB941568)

Security Update for Windows XP (KB941569)

Security Update for Windows XP (KB941644)

Security Update for Windows XP (KB941693)

Security Update for Windows XP (KB943055)

Security Update for Windows XP (KB943460)

Security Update for Windows XP (KB943485)

Security Update for Windows XP (KB944653)

Security Update for Windows XP (KB945553)

Security Update for Windows XP (KB946026)

Security Update for Windows XP (KB946648)

Security Update for Windows XP (KB948590)

Security Update for Windows XP (KB948881)

Security Update for Windows XP (KB950749)

Security Update for Windows XP (KB950760)

Security Update for Windows XP (KB950762)

Security Update for Windows XP (KB950974)

Security Update for Windows XP (KB951066)

Security Update for Windows XP (KB951376-v2)

Security Update for Windows XP (KB951376)

Security Update for Windows XP (KB951698)

Security Update for Windows XP (KB951748)

Security Update for Windows XP (KB952004)

Security Update for Windows XP (KB952954)

Security Update for Windows XP (KB953839)

Security Update for Windows XP (KB954211)

Security Update for Windows XP (KB954600)

Security Update for Windows XP (KB955069)

Security Update for Windows XP (KB956391)

Security Update for Windows XP (KB956572)

Security Update for Windows XP (KB956802)

Security Update for Windows XP (KB956803)

Security Update for Windows XP (KB956841)

Security Update for Windows XP (KB956844)

Security Update for Windows XP (KB957095)

Security Update for Windows XP (KB957097)

Security Update for Windows XP (KB958470)

Security Update for Windows XP (KB958644)

Security Update for Windows XP (KB958687)

Security Update for Windows XP (KB958690)

Security Update for Windows XP (KB958869)

Security Update for Windows XP (KB959426)

Security Update for Windows XP (KB960225)

Security Update for Windows XP (KB960715)

Security Update for Windows XP (KB960803)

Security Update for Windows XP (KB960859)

Security Update for Windows XP (KB961371)

Security Update for Windows XP (KB961373)

Security Update for Windows XP (KB961501)

Security Update for Windows XP (KB968537)

Security Update for Windows XP (KB969059)

Security Update for Windows XP (KB969898)

Security Update for Windows XP (KB969947)

Security Update for Windows XP (KB970238)

Security Update for Windows XP (KB970430)

Security Update for Windows XP (KB971032)

Security Update for Windows XP (KB971468)

Security Update for Windows XP (KB971486)

Security Update for Windows XP (KB971557)

Security Update for Windows XP (KB971633)

Security Update for Windows XP (KB971657)

Security Update for Windows XP (KB971961)

Security Update for Windows XP (KB972270)

Security Update for Windows XP (KB973346)

Security Update for Windows XP (KB973354)

Security Update for Windows XP (KB973507)

Security Update for Windows XP (KB973525)

Security Update for Windows XP (KB973869)

Security Update for Windows XP (KB973904)

Security Update for Windows XP (KB974112)

Security Update for Windows XP (KB974318)

Security Update for Windows XP (KB974392)

Security Update for Windows XP (KB974571)

Security Update for Windows XP (KB975025)

Security Update for Windows XP (KB975467)

Security Update for Windows XP (KB975560)

Security Update for Windows XP (KB975561)

Security Update for Windows XP (KB975713)

Security Update for Windows XP (KB977165)

Security Update for Windows XP (KB977816)

Security Update for Windows XP (KB977914)

Security Update for Windows XP (KB978037)

Security Update for Windows XP (KB978251)

Security Update for Windows XP (KB978262)

Security Update for Windows XP (KB978338)

Security Update for Windows XP (KB978601)

Security Update for Windows XP (KB978706)

Security Update for Windows XP (KB979309)

Security Update for Windows XP (KB979683)

Security Update for Windows XP (KB980232)

Segoe UI

SkinsHP1

SmartAudio

SolveigMM AVI Trimmer

Sonic Audio Module

Sonic Copy Module

Sonic Data Module

Sonic Express Labeler

Sonic Foundry ACID 4.0e

Sonic Foundry Sound Forge 6.0e

Sonic MyDVD Plus

Sonic Update Manager

Sonic_PrimoSDK

SonicAC3Encoder

SonicMPEGEncoder

Sony Media Manager 2.2

Sony Vegas 7.0a

SopCore 1.1.1

SopFilter 3.0.5

SpeedTouch USB Software

SSC Service Utility v4.30

Steinberg Virtual Bassist v1.0.0.504

Symantec KB-DocID:2003093015493306

Synaptics Pointing Device Driver

Syncrosoft's License Control

SyncroSoft Emu (Remove only)

TellyAdder

Toxic Biohazard

Trend Micro Internet Security Pro

Tweet Adder

Ulead GIF Animator 5

Unload

Update for 2007 Microsoft Office System (KB967642)

Update for 2007 Microsoft Office System (KB981715)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Windows Internet Explorer 7 (KB976749)

Update for Windows Internet Explorer 7 (KB980182)

Update for Windows Internet Explorer 8 (KB976662)

Update for Windows Internet Explorer 8 (KB980182)

Update for Windows Internet Explorer 8 (KB980302)

Update for Windows Media Player 10 (KB910393)

Update for Windows Media Player 10 (KB913800)

Update for Windows Media Player 10 (KB926251)

Update for Windows XP (KB894391)

Update for Windows XP (KB896727)

Update for Windows XP (KB898461)

Update for Windows XP (KB900485)

Update for Windows XP (KB904942)

Update for Windows XP (KB908531)

Update for Windows XP (KB910437)

Update for Windows XP (KB911164)

Update for Windows XP (KB911280)

Update for Windows XP (KB912945)

Update for Windows XP (KB916595)

Update for Windows XP (KB920872)

Update for Windows XP (KB922582)

Update for Windows XP (KB925720)

Update for Windows XP (KB927891)

Update for Windows XP (KB929338)

Update for Windows XP (KB930916)

Update for Windows XP (KB931836)

Update for Windows XP (KB932823-v3)

Update for Windows XP (KB933360)

Update for Windows XP (KB936357)

Update for Windows XP (KB938828)

Update for Windows XP (KB942763)

Update for Windows XP (KB951072-v2)

Update for Windows XP (KB955759)

Update for Windows XP (KB955839)

Update for Windows XP (KB961503)

Update for Windows XP (KB967715)

Update for Windows XP (KB968389)

Update for Windows XP (KB971737)

Update for Windows XP (KB973687)

Update for Windows XP (KB973815)

Update Rollup 2 for Windows XP Media Center Edition 2005

VideoLAN VLC media player 0.8.6d

Viewpoint Media Player

VobSub v2.23 (Remove Only)

Vodei Multimedia Processor 2.10

WebFldrs XP

Windows Genuine Advantage Validation Tool (KB892130)

Windows Imaging Component

Windows Installer 3.1 (KB893803)

Windows Internet Explorer 7

Windows Internet Explorer 8

Windows Live Call

Windows Live Communications Platform

Windows Live Essentials

Windows Live Family Safety

Windows Live Mail

Windows Live Messenger

Windows Live Photo Gallery

Windows Live Sign-in Assistant

Windows Live Sync

Windows Live Toolbar

Windows Live Upload Tool

Windows Live Writer

Windows Media Format 11 runtime

Windows Media Player 11

Windows Media Player Firefox Plugin

Windows XP Hotfix - KB873333

Windows XP Hotfix - KB873339

Windows XP Hotfix - KB883667

Windows XP Hotfix - KB885250

Windows XP Hotfix - KB885295

Windows XP Hotfix - KB885835

Windows XP Hotfix - KB885836

Windows XP Hotfix - KB885855

Windows XP Hotfix - KB885884

Windows XP Hotfix - KB886185

Windows XP Hotfix - KB887472

Windows XP Hotfix - KB888113

Windows XP Hotfix - KB888239

Windows XP Hotfix - KB888302

Windows XP Hotfix - KB890546

Windows XP Hotfix - KB890859

Windows XP Hotfix - KB891220

Windows XP Hotfix - KB891781

Windows XP Hotfix - KB892559

Windows XP Media Center Edition 2005 KB925766

Windows XP Media Center Edition 2005 KB973768

WinRAR archiver

WinTopo Raster to Vector

Wisdom-soft AutoScreenRecorder 3.0 Free

Wisdom-soft ScreenHunter 5.0 Free

Xvid 1.1.2 final uninstall

==== Event Viewer Messages From Past Week ========

20/04/2010 20:19:35, error: Dhcp [1002] - The IP address lease 82.28.81.254 for the Network Card with network address 0016D44B22B1 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).

17/04/2010 00:04:42, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AliIde PCIIde Pcmcia sptd ViaIde

16/04/2010 09:26:11, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: sptd

16/04/2010 09:26:11, error: Service Control Manager [7000] - The Nsynas32 service failed to start due to the following error: The system cannot find the device specified.

==== End Of File ===========================

Maniac · April 23, 2010

Step 1:

Please uninstall the following applications:

Adobe Reader 7.0.5

Symantec KB-DocID:2003093015493306

After finish our work, please download and install the latest version of Adobe Reader from:

http://www.adobe.com

Step 2:

Please go into the Control Panel, Add/Remove and for now remove ALL versions of JAVA

Then run this tool to help cleanup any left over Java

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.

Please download JavaRa and unzip it to your desktop.

***Please close any instances of Internet Explorer (or other web browser) before continuing!***

Double-click on JavaRa.exe to start the program.
From the drop-down menu, choose English and click on Select.
JavaRa will open; click on Remove Older Versions to remove the older versions of Java installed on your computer.
Click Yes when prompted. When JavaRa is done, a notice will appear that a logfile has been produced. Click OK.
A logfile will pop up. Please save it to a convenient location and post it back when you reply
Then look for the following Java folders and if found delete them.
C:\Program Files\Java
C:\Program Files\Common Files\Java
C:\Windows\Sun
C:\Documents and Settings\All Users\Application Data\Java
C:\Documents and Settings\All Users\Application Data\Sun\Java
C:\Documents and Settings\username\Application Data\Java
C:\Documents and Settings\username\Application Data\Sun\Java

Step 3:

I also see you have Viewpoint installed...

Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad". This will change from what we know in 2006 read this article: http://www.clickz.com/news/article.php/3561546

I suggest you remove the program now. Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following programs if present.

Viewpoint
Viewpoint Manager
Viewpoint Media Player

Step 4:

Launch Malwarebytes' Anti-Malware
Go to "Update" tab and select "Check for Updates". If an update is found, it will download and install the latest version.
Go to "Scanner" tab and select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

In your next reply, please include these log(s):

* JavaRa log

* MalwareBytes' Anti-Malware log

* a new fresh DDS log only

coled · April 24, 2010

Couldn't find Symantec KB-DocID:2003093015493306

JavaRa 1.15 Removal Log.Report follows after line.------------------------------------The JavaRa removal process was started on Sat Apr 24 23:19:24 2010

Found and removed: C:\Documents and Settings\Rimac Anthonye\Application Data\Sun\Java\jre1.6.0_12Found and removed: C:\Documents and Settings\Rimac Anthonye\Application Data\Sun\Java\jre1.6.0_13Found and removed: C:\Documents and Settings\Rimac Anthonye\Application Data\Sun\Java\jre1.6.0_14Found and removed: C:\Documents and Settings\Rimac Anthonye\Application Data\Sun\Java\jre1.6.0_15Found and removed: Software\JavaSoft\Java2D\1.5.0_03Found and removed: Software\JavaSoft\Java2D\1.5.0_06Found and removed: SOFTWARE\Classes\JavaPlugin.150_06Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510006Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Common Files\Java\Update\Base Images\jre1.5.0.b64\JavaRa 1.15 Removal Log.Report follows after line.------------------------------------The JavaRa removal process was started on Sat Apr 24 23:20:06 2010

------------------------------------Finished reporting.

Malwarebytes' Anti-Malware 1.45

www.malwarebytes.org

Database version: 4032

Windows 5.1.2600 Service Pack 2

Internet Explorer 8.0.6001.18702

24/04/2010 23:46:35

mbam-log-2010-04-24 (23-46-35).txt

Scan type: Quick scan

Objects scanned: 117554

Time elapsed: 14 minute(s), 26 second(s)

Memory Processes Infected: 1

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 3

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

C:\Documents and Settings\Rimac Anthonye\csrss.exe (Trojan.Agent) -> Unloaded process successfully.

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\disableconfig (Windows.Tool.Disabled) -> Delete on reboot.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Documents and Settings\Rimac Anthonye\csrss.exe (Trojan.Agent) -> Delete on reboot.

DDS (Ver_10-03-17.01) - NTFSx86

Run by Rimac Anthonye at 23:59:03.87 on 24/04/2010

Internet Explorer: 8.0.6001.18702

Microsoft Windows XP Professional 5.1.2600.2.1252.44.1033.18.1014.487 [GMT 1:00]

AV: Trend Micro Internet Security Pro *On-access scanning enabled* (Updated) {7D2296BC-32CC-4519-917E-52E652474AF5}

FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

C:\WINDOWS\system32\spoolsv.exe

svchost.exe

C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

svchost.exe

C:\WINDOWS\system32\hasplms.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe

svchost.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

C:\WINDOWS\system32\mqsvc.exe

C:\WINDOWS\system32\mqtgsvc.exe

C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe

C:\Program Files\Trend Micro\Internet Security\TmProxy.exe

C:\Program Files\Trend Micro\BM\TMBMSRV.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\ehome\ehtray.exe

C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\HP\QuickPlay\QPService.exe

C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe

C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe

C:\Program Files\Common Files\AOL\ACS\AOLDial.exe

C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I091.EXE

C:\Program Files\Common Files\AOL\1165261327\ee\AOLSoftware.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0F2.EXE

C:\Program Files\BroadJump\Client Foundation\CFD.exe

C:\WINDOWS\system32\rundll32.exe

C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe

C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

C:\DOCUME~1\RIMACA~1\LOCALS~1\Temp\oldbot.exe

C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe

C:\Program Files\Craft ROBO Controller\CRSSupervisor.exe

C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe

C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe

C:\Documents and Settings\Rimac Anthonye\Desktop\dds.scr

============== Pseudo HJT Report ===============

uSearch Bar = hxxp://www.google.com/ie

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_GB&c=64&bd=presario&pf=laptop

uInternet Settings,ProxyOverride = <local>;*.local

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll