Help - Search - Members - Calendar
Full Version: Win32.Trojandownloader.Zlob won't remove
Lavasoft Support Forums > Archived Topics > Archives: Resolved/Inactive Topics > Resolved/Inactive HijackThis Logs
TropicalPerfection
Sep 30 2008, 08:55 PM
Hi, it seems I have gotten a virus(s) on my computer yesterday. I started getting weird, random pop-ups, saying I may have a virus/spyware on my computer and urging me to download a program to remove it ... after appearing several times, I finally clicked it but when I go to download it, my Avast antivirus comes on saying it's a "malware" and denies the download. Also, my toolbar pops up little yellow Security Alerts, saying "warning" and "Spyware found", telling me to click it to remove, then takes me to a "download.sp-preventer.com" but doesn't let me download/install it (maybe that's a virus, itself?).

I ran my Avast Antivirus scan, which found some bad things and removed them, but I keep getting strange pop-ups and security alerts. I ran Ad-aware Full System scan (I have the latest version and latest definitions). First time I ran the scan, it found 8 things ... 2 in the Privacy folder, 6 in the Critical folder ... 5 that were quarantined, but the main 1 Win32.trojandownloader.Zlob couldn't be removed. I closed it all out and re-scanned, this time it found 22 things ... 16 in Privacy folder which were removed, and 6 in Critical folder (only 5 were quarantined, again), with the same Win32.trojandownloader.Zlob unable to be removed.

I've read another posting of someone who seemed to have the same type problem, so I have my Ad-aware Log and HiJack This Log below. Thanks so much for your help, I really appreciate it!!



Scan Results
Ad-Aware 2008 Free Edition
Log File Created on:2008-09-3015:52:55
Using Definitions File:F:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\core.aawdef
Computer name:
Name of user performing scan:SYSTEM
Name of user ordering scan:Owner
Scan completed successfully

System Information
File Version Information
Ad-Aware 2008 Settings
Extended Ad-Aware 2008 Settings
Database Information
Scan Statistics
Scan Detailed Statistics
Infections Found
Listing of running processes
System Information
Number of processors:1
Processor type:Intel® Pentium® 4 CPU 2.80GHz
Memory Available:31%
Total Physical Memory:534757376 Bytes
Available Physical Memory:161828864 Bytes
Total Page File Size:1307070464 Bytes
Available On Page File:677953536 Bytes
Total Virtual Memory:2147352576 Bytes
Available Virtual Memory:1733029888 Bytes
OS:Microsoft Windows XP 5.1 (Build 2600)
[to top]
File Verion Information
File Version
CEAPI.dll 7,1,0,12
aawservice.exe 7,1,0,12
Ad-Aware.exe 7.1.0.11
[to top]
Ad-Aware 2008 Settings
Skipping files larger than:1048576 Bytes
Ignoring infections with lower TAI than:3
Safe Mode:False
[to top]
Extended Ad-Aware 2008 Settings
Unload malicious processes and modules
Unload Modules
Let Windows remove files at Start-Up
Deactivate Ad-Watch
Re-analyze Scan Result
Delete Restored Items
Write Protect System Files
Create Log file
Include basic settings
Include advanced settings
Include user and computer name
Environment information
Running processes
Running processes and modules
Include info about ignored objects in log file
[to top]
Database Info
Version number:126
Build Number:0
Build Date and Time:2008/09/3003:36:52
[to top]
Scan Statistics
Method:Full

Items Scanned:258410
Infections Detected:22
Infections Removed:0
Infections Quarantined:0
Infections Ignored:0
[to top]
Scan Detailed Statistics
Type Critical Total
Process Scan 0 0
Registry Scan 5 5
Registry PE Scan 0 0
Hosts Scan 0 0
File Scan 0 0
Folder Scan 1 1
LSP Scan 0 0
ADS Scan 0 0
Cookie Scan 14 14
File Hash Scan 0 0
[to top]
Infections Found
Family Id Name Category TAI
1040 Win32.Trojandownloader.Zlob Malware 10
[300049964] Root: HKU Path: S-1-5-21-1409082233-1085031214-725345543-1003\software\microsoft\internet explorer\searchscopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302}
[300049967] Root: HKLM Path: software\microsoft\internet explorer\extensions\{9034a523-d068-4be8-a284-9df278be776e}
[300050288] Root: HKU Path: S-1-5-21-1409082233-1085031214-725345543-1003\software\microsoft\windows\currentversion\ext\stats\{9034a523-d068-4be8-a284-9df278be776e}
[300033966] Root: HKLM Path: software\microsoft\windows\currentversion\policies\explorer\run Value: start
[300053124] Root: HKU Path: S-1-5-21-1409082233-1085031214-725345543-1003\software\applications
[400005476] Folder: F:\Program Files\Applications

725 Tracking Cookie DataMiner 3
[600000212] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat msnportal.112.2o7.net s_vi /
[600000073] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat specificclick.net dmc /
[600000073] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat specificclick.net dmk /
[600000073] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat specificclick.net smc /
[600000073] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat specificclick.net smk /
[600000073] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat specificclick.net dmp /
[600000073] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat specificclick.net smdmp /
[600000050] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat tribalfusion.com ANON_ID /
[600000050] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat tribalfusion.com TfCtxtAdServer /
[600000050] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat tribalfusion.com TfAdCountMap /
[600000050] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat tribalfusion.com TfAdCountDate /
[600000212] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat 2o7.net s_vi_ygx7Brrx7Dwqxxx7Dbqsxxx7Bvuxxbx26 /
[600000460] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat ad.yieldmanager.com bh /
[600000460] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat ad.yieldmanager.com uid /

9999 MRU Object MRU Object 0
[1] MRU Path: F:\Documents and Settings\Owner\Recent Count: 4
[2] MRU Registry Key: S-1-5-21-1409082233-1085031214-725345543-1003\Software\Microsoft\Search Assistant\ACMru\5603 Count: 4


Quarantined Objects
Family Id Name Category TAI
1040 Win32.Trojandownloader.Zlob Malware 10
[300049964] Root: HKU Path: S-1-5-21-1409082233-1085031214-725345543-1003\software\microsoft\internet explorer\searchscopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302}
[300049967] Root: HKLM Path: software\microsoft\internet explorer\extensions\{9034a523-d068-4be8-a284-9df278be776e}
[300050288] Root: HKU Path: S-1-5-21-1409082233-1085031214-725345543-1003\software\microsoft\windows\currentversion\ext\stats\{9034a523-d068-4be8-a284-9df278be776e}
[300033966] Root: HKLM Path: software\microsoft\windows\currentversion\policies\explorer\run Value: start
[300053124] Root: HKU Path: S-1-5-21-1409082233-1085031214-725345543-1003\software\applications
[400005476] Folder: F:\Program Files\Applications


Removed Objects
Family Id Name Category TAI
725 Tracking Cookie DataMiner 3
[600000212] Browser: Internet Explorer Cookie: F:\Documents and Settings\Owner\Cookies\index.dat msnportal.112.2o7.net s_vi /

9999 MRU Object MRU Object 0
[1] MRU Path: F:\Documents and Settings\Owner\Recent Count: 4
[2] MRU Registry Key: S-1-5-21-1409082233-1085031214-725345543-1003\Software\Microsoft\Search Assistant\ACMru\5603 Count: 4

1040 Win32.Trojandownloader.Zlob Malware 10
[300049964] Root: HKU Path: S-1-5-21-1409082233-1085031214-725345543-1003\software\microsoft\internet explorer\searchscopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302}
[300049967] Root: HKLM Path: software\microsoft\internet explorer\extensions\{9034a523-d068-4be8-a284-9df278be776e}
[300050288] Root: HKU Path: S-1-5-21-1409082233-1085031214-725345543-1003\software\microsoft\windows\currentversion\ext\stats\{9034a523-d068-4be8-a284-9df278be776e}
[300033966] Root: HKLM Path: software\microsoft\windows\currentversion\policies\explorer\run Value: start
[300053124] Root: HKU Path: S-1-5-21-1409082233-1085031214-725345543-1003\software\applications

[to top]
Listing of Running Processes
F:\WINDOWS\SYSTEM32\SMSS.EXE
f:\windows\system32\smss.exe
f:\windows\system32\ntdll.dll
F:\WINDOWS\SYSTEM32\CSRSS.EXE
f:\windows\system32\csrss.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\csrsrv.dll
f:\windows\system32\basesrv.dll
f:\windows\system32\winsrv.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\user32.dll
f:\windows\system32\sxs.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\version.dll
F:\WINDOWS\SYSTEM32\WINLOGON.EXE
f:\windows\system32\winlogon.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\authz.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\nddeapi.dll
f:\windows\system32\profmap.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\userenv.dll
f:\windows\system32\psapi.dll
f:\windows\system32\regapi.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\version.dll
f:\windows\system32\winsta.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\imm32.dll
f:\windows\system32\msgina.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\odbc32.dll
f:\windows\system32\comdlg32.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\odbcint.dll
f:\windows\system32\shsvcs.dll
f:\windows\system32\sfc.dll
f:\windows\system32\sfc_os.dll
f:\windows\system32\ole32.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\winscard.dll
f:\windows\system32\wtsapi32.dll
f:\windows\system32\sxs.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\winmm.dll
f:\windows\system32\cscdll.dll
f:\windows\system32\dimsntfy.dll
f:\windows\system32\wlnotify.dll
f:\windows\system32\mpr.dll
f:\windows\system32\winspool.drv
f:\windows\system32\rsaenh.dll
f:\windows\system32\wgalogon.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\ntmarta.dll
f:\windows\system32\samlib.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\cscui.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\wdmaud.drv
f:\windows\system32\msacm32.drv
f:\windows\system32\msacm32.dll
f:\windows\system32\midimap.dll
F:\WINDOWS\SYSTEM32\SERVICES.EXE
f:\windows\system32\services.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ncobjapi.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\scesrv.dll
f:\windows\system32\authz.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\userenv.dll
f:\windows\system32\umpnpmgr.dll
f:\windows\system32\winsta.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acadproc.dll
f:\windows\system32\imm32.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\version.dll
f:\windows\system32\eventlog.dll
f:\windows\system32\psapi.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\wtsapi32.dll
F:\WINDOWS\SYSTEM32\LSASS.EXE
f:\windows\system32\lsass.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\lsasrv.dll
f:\windows\system32\mpr.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\ntdsapi.dll
f:\windows\system32\dnsapi.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\samlib.dll
f:\windows\system32\samsrv.dll
f:\windows\system32\cryptdll.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\msprivs.dll
f:\windows\system32\kerberos.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\netlogon.dll
f:\windows\system32\w32time.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\schannel.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\wdigest.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\scecli.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\ipsecsvc.dll
f:\windows\system32\authz.dll
f:\windows\system32\oakley.dll
f:\windows\system32\winipsec.dll
f:\windows\system32\pstorsvc.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\psbase.dll
f:\windows\system32\dssenh.dll
f:\windows\system32\xpsp2res.dll
F:\WINDOWS\SYSTEM32\SVCHOST.EXE
f:\windows\system32\svchost.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\ntmarta.dll
f:\windows\system32\samlib.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\rpcss.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\msi.dll
f:\windows\system32\termsrv.dll
f:\windows\system32\icaapi.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\authz.dll
f:\windows\system32\mstlsapi.dll
f:\windows\system32\activeds.dll
f:\windows\system32\adsldpc.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\atl.dll
f:\windows\system32\regapi.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\svchost.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\rpcss.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\dnsapi.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\winrnr.dll
f:\windows\system32\wldap32.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\rasadhlp.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\msi.dll
f:\windows\system32\svchost.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\ntmarta.dll
f:\windows\system32\samlib.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\shsvcs.dll
f:\windows\system32\winsta.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\dhcpcsvc.dll
f:\windows\system32\dnsapi.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\wzcsvc.dll
f:\windows\system32\rtutils.dll
f:\windows\system32\wmi.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\eapolqec.dll
f:\windows\system32\atl.dll
f:\windows\system32\qutil.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\dot3api.dll
f:\windows\system32\wtsapi32.dll
f:\windows\system32\esent.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\rastls.dll
f:\windows\system32\cryptui.dll
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\mprapi.dll
f:\windows\system32\activeds.dll
f:\windows\system32\adsldpc.dll
f:\windows\system32\rasapi32.dll
f:\windows\system32\rasman.dll
f:\windows\system32\tapi32.dll
f:\windows\system32\schannel.dll
f:\windows\system32\winscard.dll
f:\windows\system32\psapi.dll
f:\windows\system32\raschap.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\schedsvc.dll
f:\windows\system32\ntdsapi.dll
f:\windows\system32\msidle.dll
f:\windows\system32\audiosrv.dll
f:\windows\system32\wkssvc.dll
f:\windows\system32\cryptsvc.dll
f:\windows\system32\certcli.dll
f:\windows\system32\ersvc.dll
f:\windows\system32\srvsvc.dll
f:\windows\pchealth\helpctr\binaries\pchsvc.dll
f:\windows\system32\es.dll
f:\windows\system32\netman.dll
f:\windows\system32\netshell.dll
f:\windows\system32\credui.dll
f:\windows\system32\dot3dlg.dll
f:\windows\system32\onex.dll
f:\windows\system32\eappcfg.dll
f:\windows\system32\eappprxy.dll
f:\windows\system32\wzcsapi.dll
f:\windows\system32\upnp.dll
f:\windows\system32\winhttp.dll
f:\windows\system32\ssdpapi.dll
f:\windows\system32\wbem\wbemcomn.dll
f:\windows\system32\seclogon.dll
f:\windows\system32\sens.dll
f:\windows\system32\srsvc.dll
f:\windows\system32\powrprof.dll
f:\windows\system32\trkwks.dll
f:\windows\system32\w32time.dll
f:\windows\system32\browser.dll
f:\windows\system32\wuauserv.dll
f:\windows\system32\wbem\wmisvc.dll
f:\windows\system32\vssapi.dll
f:\windows\system32\wuaueng.dll
f:\windows\system32\winspool.drv
f:\windows\system32\cabinet.dll
f:\windows\system32\mspatcha.dll
f:\windows\system32\ipnathlp.dll
f:\windows\system32\authz.dll
f:\windows\system32\wscsvc.dll
f:\windows\system32\msi.dll
f:\windows\system32\wbem\wbemcore.dll
f:\windows\system32\wbem\esscli.dll
f:\windows\system32\wbem\fastprox.dll
f:\windows\system32\sxs.dll
f:\windows\system32\sfc.dll
f:\windows\system32\sfc_os.dll
f:\windows\system32\comsvcs.dll
f:\windows\system32\colbact.dll
f:\windows\system32\mtxclu.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\clusapi.dll
f:\windows\system32\resutils.dll
f:\windows\system32\wbem\wmiutils.dll
f:\windows\system32\wbem\repdrvfs.dll
f:\windows\system32\wbem\wmiprvsd.dll
f:\windows\system32\ncobjapi.dll
f:\windows\system32\wbem\wbemess.dll
f:\windows\system32\netcfgx.dll
f:\windows\system32\tapisrv.dll
f:\windows\system32\rasmans.dll
f:\windows\system32\winipsec.dll
f:\windows\system32\rastapi.dll
f:\windows\system32\wbem\ncprov.dll
f:\windows\system32\rasadhlp.dll
f:\windows\system32\unimdm.tsp
f:\windows\system32\uniplat.dll
f:\windows\system32\unimdmat.dll
f:\windows\system32\modemui.dll
f:\windows\system32\kmddsp.tsp
f:\windows\system32\ndptsp.tsp
f:\windows\system32\ipconf.tsp
f:\windows\system32\h323.tsp
f:\windows\system32\hidphone.tsp
f:\windows\system32\hid.dll
f:\windows\system32\rasppp.dll
f:\windows\system32\ntlsapi.dll
f:\windows\system32\kerberos.dll
f:\windows\system32\cryptdll.dll
f:\windows\system32\rasqec.dll
f:\windows\system32\rasdlg.dll
f:\windows\system32\msxml3.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\winrnr.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\advpack.dll
f:\windows\system32\dssenh.dll
f:\windows\system32\urlmon.dll
f:\windows\system32\qmgr.dll
f:\windows\system32\mpr.dll
f:\windows\system32\shfolder.dll
f:\windows\system32\catsrvut.dll
f:\windows\system32\catsrv.dll
f:\windows\system32\mfcsubs.dll
f:\windows\system32\wbem\wbemsvc.dll
f:\windows\system32\svchost.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\dnsrslvr.dll
f:\windows\system32\dnsapi.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\svchost.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\ntmarta.dll
f:\windows\system32\samlib.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\lmhsvc.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\webclnt.dll
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\ssdpsrv.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\rsaenh.dll
F:\PROGRAM FILES\LAVASOFT\AD-AWARE\AAWSERVICE.EXE
f:\program files\lavasoft\ad-aware\aawservice.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\program files\lavasoft\ad-aware\ceapi.dll
f:\windows\system32\wininet.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\program files\lavasoft\ad-aware\pkarchive85u.dll
f:\windows\system32\shell32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\psapi.dll
f:\windows\system32\version.dll
f:\windows\system32\userenv.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\dnsapi.dll
f:\windows\system32\winrnr.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\rasadhlp.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\netapi32.dll
F:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASWUPDSV.EXE
f:\program files\alwil software\avast4\aswupdsv.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\program files\alwil software\avast4\aswcmns.dll
f:\program files\alwil software\avast4\aswcmnos.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\msvcp71.dll
f:\windows\system32\msvcr71.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ws2help.dll
f:\program files\alwil software\avast4\aswcmnb.dll
f:\windows\system32\imm32.dll
F:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
f:\program files\alwil software\avast4\ashserv.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\secur32.dll
f:\program files\alwil software\avast4\aswaux.dll
f:\windows\system32\msvcp71.dll
f:\windows\system32\msvcr71.dll
f:\program files\alwil software\avast4\aswcmnb.dll
f:\program files\alwil software\avast4\aswcmnos.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ws2help.dll
f:\program files\alwil software\avast4\aswengin.dll
f:\program files\alwil software\avast4\aswscan.dll
f:\program files\alwil software\avast4\aswcmns.dll
f:\program files\alwil software\avast4\ashbase.dll
f:\windows\system32\version.dll
f:\program files\alwil software\avast4\ashtask.dll
f:\program files\alwil software\avast4\aswinteg.dll
f:\program files\alwil software\avast4\aswidle.dll
f:\program files\alwil software\avast4\aavm4h.dll
f:\program files\alwil software\avast4\aavmrpch.dll
f:\windows\system32\imm32.dll
f:\windows\system32\dbghelp.dll
f:\program files\alwil software\avast4\english\base.dll
f:\windows\system32\wtsapi32.dll
f:\windows\system32\winsta.dll
f:\windows\system32\netapi32.dll
f:\program files\alwil software\avast4\ahresmai.dll
f:\program files\alwil software\avast4\ahresmes.dll
f:\program files\alwil software\avast4\ahresns.dll
f:\program files\alwil software\avast4\ahresout.dll
f:\program files\alwil software\avast4\ahresp2p.dll
f:\program files\alwil software\avast4\ahresstd.dll
f:\program files\alwil software\avast4\ahresws.dll
f:\program files\alwil software\avast4\ashssqlt.dll
f:\windows\system32\ole32.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\dnsapi.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\winrnr.dll
f:\windows\system32\wldap32.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\rasadhlp.dll
f:\windows\system32\perfos.dll
f:\program files\alwil software\avast4\aswres.dll
f:\windows\system32\psapi.dll
F:\WINDOWS\EXPLORER.EXE
f:\windows\explorer.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\browseui.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ole32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\shdocvw.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\cryptui.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\version.dll
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\shell32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\winmm.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\userenv.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\apphelp.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\cscui.dll
f:\windows\system32\cscdll.dll
f:\windows\system32\themeui.dll
f:\windows\system32\msimg32.dll
f:\windows\system32\xpsp2res.dll
f:\progra~1\window~2\wmpband.dll
f:\windows\system32\mpr.dll
f:\windows\system32\samlib.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\linkinfo.dll
f:\windows\system32\ntshrui.dll
f:\windows\system32\atl.dll
f:\windows\system32\ieframe.dll
f:\windows\system32\psapi.dll
f:\windows\system32\msi.dll
f:\windows\system32\netshell.dll
f:\windows\system32\credui.dll
f:\windows\system32\dot3api.dll
f:\windows\system32\rtutils.dll
f:\windows\system32\dot3dlg.dll
f:\windows\system32\onex.dll
f:\windows\system32\wtsapi32.dll
f:\windows\system32\winsta.dll
f:\windows\system32\eappcfg.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\eappprxy.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\urlmon.dll
f:\windows\system32\mlang.dll
f:\windows\system32\webcheck.dll
f:\windows\system32\stobject.dll
f:\windows\system32\batmeter.dll
f:\windows\system32\powrprof.dll
f:\windows\system32\wpdshserviceobj.dll
f:\windows\system32\winhttp.dll
f:\windows\system32\portabledevicetypes.dll
f:\windows\system32\portabledeviceapi.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\msctf.dll
f:\windows\system32\wdmaud.drv
f:\windows\system32\msacm32.drv
f:\windows\system32\midimap.dll
f:\windows\system32\drprov.dll
f:\windows\system32\ntlanman.dll
f:\windows\system32\netui0.dll
f:\windows\system32\netui1.dll
f:\windows\system32\netrap.dll
f:\windows\system32\davclnt.dll
f:\windows\system32\sxs.dll
f:\windows\system32\browselc.dll
f:\windows\system32\rasapi32.dll
f:\windows\system32\rasman.dll
f:\windows\system32\tapi32.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\sensapi.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\jscript.dll
f:\windows\system32\duser.dll
f:\windows\system32\rasadhlp.dll
f:\windows\system32\dnsapi.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\msadp32.acm
f:\windows\system32\comdlg32.dll
f:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
f:\windows\system32\dfshim.dll
f:\windows\system32\mscoree.dll
f:\windows\system32\msgina.dll
f:\windows\system32\odbc32.dll
f:\windows\system32\odbcint.dll
f:\windows\microsoft.net\framework\v2.0.50727\mscorwks.dll
f:\windows\system32\cfgmgr32.dll
f:\program files\common files\adobe\acrobat\activex\pdfshell.dll
f:\windows\microsoft.net\framework\v2.0.50727\shfusion.dll
f:\windows\microsoft.net\framework\v2.0.50727\fusion.dll
f:\windows\microsoft.net\framework\v2.0.50727\culture.dll
f:\windows\microsoft.net\framework\v2.0.50727\shfusres.dll
f:\windows\system32\winspool.drv
f:\windows\system32\printui.dll
f:\windows\system32\activeds.dll
f:\windows\system32\adsldpc.dll
f:\windows\system32\shdoclc.dll
f:\windows\system32\mscms.dll
f:\windows\system32\ntmarta.dll
f:\windows\system32\actxprxy.dll
f:\windows\system32\mydocs.dll
f:\windows\system32\wmvcore.dll
f:\windows\system32\wmasf.dll
f:\windows\srchasst\srchui.dll
f:\windows\system32\oleacc.dll
f:\windows\srchasst\srchctls.dll
f:\windows\msagent\agentdp2.dll
f:\windows\system32\msxml3.dll
f:\program files\microsoft office\office10\msohev.dll
f:\windows\system32\occache.dll
f:\windows\system32\sti.dll
f:\windows\system32\mstask.dll
f:\windows\system32\ntdsapi.dll
F:\WINDOWS\SYSTEM32\SPOOLSV.EXE
f:\windows\system32\spoolsv.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\spoolss.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\dnsapi.dll
f:\windows\system32\rasadhlp.dll
f:\windows\system32\localspl.dll
f:\windows\system32\sfc_os.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\winspool.drv
f:\windows\system32\netapi32.dll
f:\windows\system32\cnbjmon.dll
f:\windows\system32\dlbulmpm.dll
f:\windows\system32\hptcpmon.dll
f:\windows\system32\hpzjrd01.dll
f:\windows\system32\clusapi.dll
f:\windows\system32\hptcpmui.dll
f:\windows\system32\hptcpmib.dll
f:\windows\system32\mgmtapi.dll
f:\windows\system32\snmpapi.dll
f:\windows\system32\wsnmp32.dll
f:\windows\system32\hpzsnt12.dll
f:\windows\system32\pjlmon.dll
f:\windows\system32\tcpmon.dll
f:\windows\system32\usbmon.dll
f:\windows\system32\spool\prtprocs\w32x86\dlbupp5c.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\winrnr.dll
f:\windows\system32\wldap32.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\win32spl.dll
f:\windows\system32\netrap.dll
f:\windows\system32\ntdsapi.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\inetpp.dll
f:\windows\system32\xpsp2res.dll
F:\PROGRAM FILES\APPLICATIONS\WCS.EXE
f:\program files\applications\wcs.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\apphelp.dll
f:\windows\system32\msctf.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\rasapi32.dll
f:\windows\system32\rasman.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\tapi32.dll
f:\windows\system32\rtutils.dll
f:\windows\system32\winmm.dll
f:\windows\system32\userenv.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\sensapi.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\version.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\msi.dll
f:\windows\system32\sxs.dll
F:\PROGRAM FILES\APPLICATIONS\IEBTM.EXE
f:\program files\applications\iebtm.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\oleaut32.dll
f:\windows\system32\apphelp.dll
F:\PROGRAM FILES\ANALOG DEVICES\CORE\SMAX4PNP.EXE
f:\program files\analog devices\core\smax4pnp.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\winmm.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\version.dll
f:\program files\analog devices\core\smwdmif.dll
f:\windows\system32\edcrypt.dll
f:\windows\system32\comdlg32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\shell32.dll
f:\windows\system32\winspool.drv
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\mfc42.dll
f:\windows\system32\imm32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\dsound.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\wdmaud.drv
f:\windows\system32\msacm32.drv
f:\windows\system32\msacm32.dll
f:\windows\system32\midimap.dll
f:\windows\system32\ksuser.dll
f:\windows\system32\msctf.dll
f:\windows\system32\msctfime.ime
F:\PROGRAM FILES\CYBERLINK\POWERDVD\DVDLAUNCHER.EXE
f:\program files\cyberlink\powerdvd\dvdlauncher.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\mfc42.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\ole32.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\xpsp2res.dll
f:\windows\system32\msctf.dll
F:\WINDOWS\SYSTEM32\HKCMD.EXE
f:\windows\system32\hkcmd.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\hccutils.dll
f:\windows\system32\imm32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\version.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\igfxsrvc.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\igfxres.dll
f:\windows\system32\msctf.dll
F:\WINDOWS\SYSTEM32\IGFXPERS.EXE
f:\windows\system32\igfxpers.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\imm32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\version.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\igfxsrvc.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\wtsapi32.dll
f:\windows\system32\winsta.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\msctf.dll
F:\PROGRAM FILES\JAVA\JRE1.6.0_07\BIN\JUSCHED.EXE
f:\program files\java\jre1.6.0_07\bin\jusched.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\wininet.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\ole32.dll
f:\windows\system32\shell32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\uxtheme.dll
F:\PROGRA~1\ALWILS~1\AVAST4\ASHDISP.EXE
f:\progra~1\alwils~1\avast4\ashdisp.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\secur32.dll
f:\progra~1\alwils~1\avast4\aswcmnos.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\msvcp71.dll
f:\windows\system32\msvcr71.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ws2help.dll
f:\progra~1\alwils~1\avast4\ashbase.dll
f:\windows\system32\version.dll
f:\progra~1\alwils~1\avast4\aswcmnb.dll
f:\progra~1\alwils~1\avast4\aswcmns.dll
f:\progra~1\alwils~1\avast4\ashtask.dll
f:\progra~1\alwils~1\avast4\aswaux.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\ole32.dll
f:\progra~1\alwils~1\avast4\aavm4h.dll
f:\progra~1\alwils~1\avast4\aavmrpch.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\dbghelp.dll
f:\program files\alwil software\avast4\english\base.dll
f:\program files\alwil software\avast4\english\lang.dll
f:\windows\system32\mfc71.dll
f:\windows\system32\mfc71enu.dll
f:\program files\alwil software\avast4\ahruimai.dll
f:\progra~1\alwils~1\avast4\ashuint.dll
f:\progra~1\alwils~1\avast4\xt1922.dll
f:\windows\system32\oleaut32.dll
f:\program files\alwil software\avast4\ahruimes.dll
f:\program files\alwil software\avast4\ahruins.dll
f:\program files\alwil software\avast4\ahruiout.dll
f:\windows\system32\mapi32.dll
f:\program files\alwil software\avast4\ahruip2p.dll
f:\program files\alwil software\avast4\ahruistd.dll
f:\program files\alwil software\avast4\ahruiws.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctf.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\riched20.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\winmm.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\wdmaud.drv
f:\windows\system32\msacm32.drv
f:\windows\system32\msacm32.dll
f:\windows\system32\midimap.dll
f:\windows\system32\asycfilt.dll
f:\program files\alwil software\avast4\aavmguih.dll
F:\PROGRAM FILES\APPLICATIONS\WCM.EXE
f:\program files\applications\wcm.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\imm32.dll
F:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE
f:\program files\hp\hp software update\hpwuschd2.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shell32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\ole32.dll
f:\windows\system32\msctf.dll
F:\WINDOWS\SYSTEM32\CTFMON.EXE
f:\windows\system32\ctfmon.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\msctf.dll
f:\windows\system32\msutb.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\msctfime.ime
F:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
f:\program files\spybot - search & destroy\teatimer.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ole32.dll
f:\windows\system32\version.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\shell32.dll
f:\windows\system32\comdlg32.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\winspool.drv
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imm32.dll
f:\windows\system32\msimg32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctf.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\hhctrl.ocx
f:\windows\system32\setupapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\jsproxy.dll
f:\windows\system32\psapi.dll
f:\program files\spybot - search & destroy\advcheck.dll
f:\windows\system32\imagehlp.dll
F:\PROGRAM FILES\APPLICATIONS\IEBTMM.EXE
f:\program files\applications\iebtmm.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\imm32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\ole32.dll
F:\PROGRAM FILES\HP\DIGITAL IMAGING\BIN\HPQTRA08.EXE
f:\program files\hp\digital imaging\bin\hpqtra08.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\version.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\imm32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\xpsp2res.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\msi.dll
f:\program files\hp\digital imaging\bin\hpqcxm08.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\shfolder.dll
f:\windows\system32\msctf.dll
f:\windows\system32\wtsapi32.dll
f:\windows\system32\winsta.dll
f:\windows\system32\netapi32.dll
f:\program files\hp\digital imaging\bin\hpquio08.dll
f:\windows\system32\shell32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\program files\hp\digital imaging\bin\hpqtra08.rsc
f:\program files\hp\digital imaging\bin\hpqtao08.dll
f:\windows\system32\sxs.dll
f:\program files\hp\digital imaging\bin\hpotra08.dll
f:\windows\system32\winspool.drv
f:\windows\system32\setupapi.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\cfgmgr32.dll
f:\program files\hp\digital imaging\bin\hpotra08.rsc
f:\program files\hp\digital imaging\bin\hpodio08.dll
f:\program files\hp\digital imaging\bin\hpqcob08.dll
f:\program files\hp\digital imaging\bin\hpotradd.dll
f:\program files\hp\digital imaging\bin\hpqrif08.dll
f:\program files\hp\digital imaging\bin\hpodvd09.dll
f:\program files\hp\digital imaging\bin\hpoddcomm09.dll
f:\windows\system32\hpzidr12.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\hpzipr12.dll
F:\PROGRAM FILES\COMMON FILES\APPLE\MOBILE DEVICE SUPPORT\BIN\APPLEMOBILEDEVICESERVICE.EXE
f:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\imm32.dll
f:\windows\system32\ntmarta.dll
f:\windows\system32\ole32.dll
f:\windows\system32\samlib.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
F:\PROGRAM FILES\BONJOUR\MDNSRESPONDER.EXE
f:\program files\bonjour\mdnsresponder.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\imm32.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\mprapi.dll
f:\windows\system32\activeds.dll
f:\windows\system32\adsldpc.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\atl.dll
f:\windows\system32\rtutils.dll
f:\windows\system32\samlib.dll
f:\windows\system32\setupapi.dll
F:\WINDOWS\SYSTEM32\DLBUCOMS.EXE
f:\windows\system32\dlbucoms.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\winspool.drv
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ole32.dll
f:\windows\system32\imm32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
F:\PROGRAM FILES\MICROSOFT SQL SERVER\MSSQL.1\MSSQL\BINN\SQLSERVR.EXE
f:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
f:\windows\system32\msvcrt.dll
f:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\userenv.dll
f:\program files\microsoft sql server\mssql.1\mssql\binn\opends60.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\psapi.dll
f:\program files\microsoft sql server\90\shared\instapi.dll
f:\program files\microsoft sql server\mssql.1\mssql\binn\resources\1033\sqlevn70.rll
f:\program files\microsoft sql server\mssql.1\mssql\binn\sqlos.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\authz.dll
f:\windows\system32\mscoree.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\kerberos.dll
f:\windows\system32\cryptdll.dll
f:\windows\system32\schannel.dll
f:\windows\system32\security.dll
f:\windows\system32\version.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\dssenh.dll
f:\windows\system32\ntmarta.dll
f:\windows\system32\samlib.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\ntdsapi.dll
f:\windows\system32\dnsapi.dll
F:\PROGRAM FILES\HP\DIGITAL IMAGING\BIN\HPQSTE08.EXE
f:\program files\hp\digital imaging\bin\hpqste08.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\program files\hp\digital imaging\bin\hpqmfc09.dll
f:\windows\system32\msvfw32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\winmm.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shell32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\comctl32.dll
f:\program files\hp\digital imaging\bin\hpqtap08.dll
f:\windows\system32\mfc42.dll
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctf.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\version.dll
f:\windows\system32\msi.dll
f:\program files\hp\digital imaging\bin\hpqcxm08.dll
f:\windows\system32\shfolder.dll
f:\windows\system32\msctfime.ime
f:\program files\hp\digital imaging\bin\hpqste08.rsc
f:\windows\system32\ieframe.dll
f:\windows\system32\psapi.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\sxs.dll
f:\windows\system32\urlmon.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\mshtml.dll
f:\windows\system32\msls31.dll
f:\windows\system32\mlang.dll
f:\program files\hp\digital imaging\bin\hpqsti08.dll
f:\program files\hp\digital imaging\bin\hpqcob08.dll
f:\program files\hp\digital imaging\bin\hpqstp08.dll
f:\program files\hp\digital imaging\bin\hpodio08.dll
f:\windows\system32\winspool.drv
f:\windows\system32\wsock32.dll
f:\windows\system32\wtsapi32.dll
f:\windows\system32\winsta.dll
f:\windows\system32\netapi32.dll
f:\program files\hp\digital imaging\bin\hpocxi08.dll
f:\windows\system32\hpzipr12.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\hpzidr12.dll
f:\program files\hp\digital imaging\bin\hpqsem08.rsc
f:\windows\system32\msimtf.dll
F:\PROGRAM FILES\COMMON FILES\INTUIT\QUICKBOOKS\QBCFMONITORSERVICE.EXE
f:\program files\common files\intuit\quickbooks\qbcfmonitorservice.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\mscoree.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\imm32.dll
f:\windows\microsoft.net\framework\v1.1.4322\mscorwks.dll
f:\windows\microsoft.net\framework\v1.1.4322\msvcr71.dll
f:\windows\microsoft.net\framework\v1.1.4322\fusion.dll
f:\windows\system32\ole32.dll
f:\windows\system32\shell32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll
f:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_14e1619e\mscorlib.dll
f:\windows\microsoft.net\framework\v1.1.4322\mscorsn.dll
f:\windows\system32\rsaenh.dll
f:\windows\assembly\gac\system.serviceprocess\1.0.5000.0__b03f5f7f11d50a3a\system.serviceprocess.dll
f:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll
f:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_60eab996\system.dll
f:\windows\microsoft.net\framework\v1.1.4322\mscorjit.dll
f:\program files\common files\intuit\quickbooks\cfscan.dll
f:\windows\system32\shfolder.dll
F:\PROGRAM FILES\HP\DIGITAL IMAGING\PRODUCT ASSISTANT\BIN\HPRBLOG.EXE
f:\program files\hp\digital imaging\product assistant\bin\hprblog.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\program files\hp\digital imaging\product assistant\bin\hprbutil.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\imm32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctf.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\version.dll
f:\windows\system32\msi.dll
F:\PROGRAM FILES\MICROSOFT SQL SERVER\90\SHARED\SQLBROWSER.EXE
f:\program files\microsoft sql server\90\shared\sqlbrowser.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\program files\microsoft sql server\90\shared\instapi.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\imm32.dll
f:\windows\system32\wshtcpip.dll
F:\PROGRAM FILES\MICROSOFT SQL SERVER\90\SHARED\SQLWRITER.EXE
f:\program files\microsoft sql server\90\shared\sqlwriter.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\imm32.dll
f:\program files\microsoft sql server\90\shared\sqlwvss_xp.dll
f:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\vssapi.dll
f:\windows\system32\atl.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\version.dll
f:\windows\system32\es.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\wtsapi32.dll
f:\windows\system32\winsta.dll
F:\WINDOWS\SYSTEM32\SVCHOST.EXE
f:\windows\system32\svchost.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\wiaservc.dll
f:\windows\system32\cfgmgr32.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\mscms.dll
f:\windows\system32\winspool.drv
f:\windows\system32\winsta.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\actxprxy.dll
f:\windows\system32\sti.dll
F:\PROGRAM FILES\VIEWPOINT\COMMON\VIEWPOINTSERVICE.EXE
f:\program files\viewpoint\common\viewpointservice.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\shell32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\atl.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\xpsp2res.dll
F:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
f:\program files\alwil software\avast4\ashmaisv.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ws2help.dll
f:\program files\alwil software\avast4\ashbase.dll
f:\windows\system32\version.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\msvcp71.dll
f:\windows\system32\msvcr71.dll
f:\program files\alwil software\avast4\aswcmnos.dll
f:\program files\alwil software\avast4\aswcmnb.dll
f:\program files\alwil software\avast4\aswcmns.dll
f:\program files\alwil software\avast4\ashtask.dll
f:\program files\alwil software\avast4\aswaux.dll
f:\program files\alwil software\avast4\aavm4h.dll
f:\program files\alwil software\avast4\aavmrpch.dll
f:\program files\alwil software\avast4\ahresmai.dll
f:\windows\system32\imm32.dll
f:\windows\system32\dbghelp.dll
f:\program files\alwil software\avast4\english\base.dll
f:\program files\alwil software\avast4\aswengin.dll
f:\program files\alwil software\avast4\aswscan.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\dnsapi.dll
f:\windows\system32\winrnr.dll
f:\windows\system32\wldap32.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\rasadhlp.dll
f:\program files\alwil software\avast4\english\lang.dll
f:\windows\system32\mfc71.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\mfc71enu.dll
f:\program files\alwil software\avast4\english\langmai.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\ole32.dll
f:\windows\system32\psapi.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
F:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
f:\program files\alwil software\avast4\ashwebsv.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ws2help.dll
f:\program files\alwil software\avast4\ashbase.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\version.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\msvcp71.dll
f:\windows\system32\msvcr71.dll
f:\program files\alwil software\avast4\aswcmnos.dll
f:\program files\alwil software\avast4\aswcmnb.dll
f:\program files\alwil software\avast4\aswcmns.dll
f:\program files\alwil software\avast4\aavm4h.dll
f:\program files\alwil software\avast4\aavmrpch.dll
f:\program files\alwil software\avast4\ashtask.dll
f:\program files\alwil software\avast4\aswaux.dll
f:\windows\system32\imm32.dll
f:\windows\system32\dbghelp.dll
f:\program files\alwil software\avast4\english\base.dll
f:\program files\alwil software\avast4\aswengin.dll
f:\program files\alwil software\avast4\aswscan.dll
f:\windows\system32\psapi.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\security.dll
f:\program files\alwil software\avast4\ashwsftr.dll
f:\progra~1\alwils~1\avast4\ahresws.dll
F:\WINDOWS\SYSTEM32\ALG.EXE
f:\windows\system32\alg.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\atl.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\winmm.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
F:\PROGRAM FILES\VIEWPOINT\VIEWPOINT MANAGER\VIEWMGR.EXE
f:\program files\viewpoint\viewpoint manager\viewmgr.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\wininet.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\version.dll
f:\windows\system32\urlmon.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctfime.ime
f:\program files\viewpoint\viewpoint manager\viewmgrcore.dll
f:\windows\system32\shell32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\oleacc.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\mprapi.dll
f:\windows\system32\activeds.dll
f:\windows\system32\adsldpc.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\atl.dll
f:\windows\system32\rtutils.dll
f:\windows\system32\samlib.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\msi.dll
f:\windows\system32\sxs.dll
f:\windows\system32\rasapi32.dll
f:\windows\system32\rasman.dll
f:\windows\system32\tapi32.dll
f:\windows\system32\winmm.dll
f:\windows\system32\userenv.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\sensapi.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\schannel.dll
f:\windows\system32\rasadhlp.dll
f:\windows\system32\dnsapi.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\dssenh.dll
f:\windows\system32\cryptnet.dll
f:\windows\system32\psapi.dll
f:\windows\system32\winhttp.dll
f:\program files\viewpoint\viewpoint manager\vetscriptinterpreter.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\shdocvw.dll
f:\windows\system32\cryptui.dll
f:\windows\system32\mydocs.dll
f:\windows\system32\ntshrui.dll
F:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\USNSVC.EXE
f:\program files\windows live\messenger\usnsvc.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\imm32.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\version.dll
f:\program files\windows live\messenger\usnsvcps.dll
f:\windows\system32\rsaenh.dll
F:\PROGRAM FILES\LAVASOFT\AD-AWARE\AD-AWARE.EXE
f:\program files\lavasoft\ad-aware\ad-aware.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\ole32.dll
f:\windows\system32\version.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\imm32.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\comdlg32.dll
f:\program files\lavasoft\ad-aware\lavalicense.dll
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\winmm.dll
f:\windows\system32\oleacc.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\shfolder.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctf.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\setupapi.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\olepro32.dll
f:\windows\system32\rsaenh.dll
f:\program files\lavasoft\ad-aware\lavamessage.dll
f:\windows\system32\ntmarta.dll
f:\windows\system32\samlib.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\rasapi32.dll
f:\windows\system32\rasman.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\tapi32.dll
f:\windows\system32\rtutils.dll
f:\windows\system32\userenv.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\sensapi.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\rasadhlp.dll
f:\windows\system32\dnsapi.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
F:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
f:\program files\internet explorer\iexplore.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\shell32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\urlmon.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\version.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\ieframe.dll
f:\windows\system32\psapi.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctf.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\ieui.dll
f:\windows\system32\msimg32.dll
f:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll
f:\windows\system32\xmllite.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\msimtf.dll
f:\windows\system32\cscui.dll
f:\windows\system32\cscdll.dll
f:\windows\system32\setupapi.dll
f:\program files\microsoft office\office10\msohev.dll
f:\program files\internet explorer\ieproxy.dll
f:\windows\system32\msi.dll
f:\windows\system32\sxs.dll
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\mlang.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\rasapi32.dll
f:\windows\system32\rasman.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\tapi32.dll
f:\windows\system32\rtutils.dll
f:\windows\system32\winmm.dll
f:\windows\system32\userenv.dll
f:\windows\system32\actxprxy.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\sensapi.dll
f:\windows\system32\rasadhlp.dll
f:\windows\system32\dnsapi.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\mshtml.dll
f:\windows\system32\msls31.dll
f:\windows\system32\ieapfltr.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\ntmarta.dll
f:\windows\system32\samlib.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\jscript.dll
f:\windows\system32\iepeers.dll
f:\windows\system32\winspool.drv
f:\windows\system32\mshtmled.dll
f:\windows\system32\dxtrans.dll
f:\windows\system32\atl.dll
f:\windows\system32\ddrawex.dll
f:\windows\system32\ddraw.dll
f:\windows\system32\dciman32.dll
f:\windows\system32\vbscript.dll
f:\windows\system32\macromed\flash\flash9f.ocx
f:\windows\system32\comdlg32.dll
f:\windows\system32\wdmaud.drv
f:\windows\system32\msacm32.drv
f:\windows\system32\msacm32.dll
f:\windows\system32\midimap.dll
f:\windows\system32\schannel.dll
f:\windows\system32\oleacc.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\msxml3.dll
f:\windows\system32\imgutil.dll
f:\windows\system32\pngfilt.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\dxtmsft.dll
f:\windows\system32\usp10.dll
f:\windows\system32\dssenh.dll
f:\windows\system32\cryptnet.dll
f:\windows\system32\winhttp.dll
f:\windows\system32\mscms.dll
f:\windows\system32\mscoree.dll
f:\windows\microsoft.net\framework\v2.0.50727\mscorie.dll
f:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
f:\windows\system32\corpol.dll
F:\PROGRAM FILES\TREND MICRO\HIJACKTHIS\HIJACKTHIS.EXE
f:\program files\trend micro\hijackthis\hijackthis.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\msvbvm60.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\ole32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\imm32.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\msctf.dll
f:\windows\system32\sxs.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\version.dll
f:\windows\system32\asycfilt.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\comdlg32.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\browseui.dll
f:\windows\system32\ntshrui.dll
f:\windows\system32\atl.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\userenv.dll
f:\windows\system32\shdocvw.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\cryptui.dll
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\ieframe.dll
f:\windows\system32\psapi.dll
f:\windows\system32\urlmon.dll
f:\windows\system32\linkinfo.dll
f:\windows\system32\mpr.dll
f:\windows\system32\drprov.dll
f:\windows\system32\ntlanman.dll
f:\windows\system32\netui0.dll
f:\windows\system32\netui1.dll
f:\windows\system32\netrap.dll
f:\windows\system32\samlib.dll
f:\windows\system32\davclnt.dll
f:\windows\system32\msgina.dll
f:\windows\system32\odbc32.dll
f:\windows\system32\winsta.dll
f:\windows\system32\odbcint.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\rasapi32.dll
f:\windows\system32\rasman.dll
f:\windows\system32\tapi32.dll
f:\windows\system32\rtutils.dll
f:\windows\system32\winmm.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\sensapi.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\dnsapi.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\rasadhlp.dll
F:\WINDOWS\NOTEPAD.EXE
f:\windows\notepad.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\comdlg32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\shell32.dll
f:\windows\system32\winspool.drv
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\system32\msctf.dll
f:\windows\system32\msctfime.ime
F:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSNMSGR.EXE
f:\program files\windows live\messenger\msnmsgr.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\user32.dll
f:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\wsock32.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msimg32.dll
f:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll
f:\program files\windows live\messenger\msncore.dll
f:\windows\system32\urlmon.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\oleacc.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\version.dll
f:\windows\system32\winmm.dll
f:\windows\system32\iphlpapi.dll
f:\windows\system32\msacm32.dll
f:\program files\windows live\messenger\msidcrl40.dll
f:\windows\system32\sensapi.dll
f:\windows\system32\psapi.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\imagehlp.dll
f:\program files\windows live\messenger\contactsux.dll
f:\windows\system32\setupapi.dll
f:\windows\system32\cryptnet.dll
f:\windows\system32\userenv.dll
f:\windows\system32\winhttp.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\msctf.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\rsaenh.dll
f:\windows\system32\inetcomm.dll
f:\windows\system32\msoert2.dll
f:\windows\system32\inetres.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\mlang.dll
f:\program files\windows live\messenger\msgslang.8.5.1302.1018.dll
f:\program files\windows live\messenger\msgsres.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\wtsapi32.dll
f:\windows\system32\winsta.dll
f:\windows\system32\netapi32.dll
f:\windows\system32\es.dll
f:\program files\windows live\messenger\lcapi.dll
f:\windows\system32\dnsapi.dll
f:\windows\system32\dsound.dll
f:\windows\system32\rasapi32.dll
f:\windows\system32\rasman.dll
f:\windows\system32\tapi32.dll
f:\windows\system32\rtutils.dll
f:\windows\system32\msdmo.dll
f:\program files\windows live\messenger\lcres.dll
f:\program files\windows live\messenger\rtmpltfm.dll
f:\windows\system32\wdmaud.drv
f:\windows\system32\msacm32.drv
f:\windows\system32\midimap.dll
f:\windows\system32\quartz.dll
f:\windows\system32\ddraw.dll
f:\windows\system32\dciman32.dll
f:\windows\system32\d3dim700.dll
f:\windows\system32\dpnhupnp.dll
f:\windows\system32\mswsock.dll
f:\windows\system32\hnetcfg.dll
f:\windows\system32\wshtcpip.dll
f:\windows\system32\schannel.dll
f:\windows\system32\msxml3.dll
f:\windows\system32\sxs.dll
f:\program files\windows live\messenger\msgswcam.dll
f:\windows\system32\sirenacm.dll
f:\windows\system32\riched20.dll
f:\windows\system32\msimtf.dll
f:\program files\windows live\messenger\lmcdata.dll
f:\program files\windows live\messenger\contact.dll
f:\program files\bonjour\mdnsnsp.dll
f:\windows\system32\msv1_0.dll
f:\windows\system32\rasadhlp.dll
f:\windows\system32\dssenh.dll
f:\windows\system32\winrnr.dll
f:\windows\system32\mprapi.dll
f:\windows\system32\activeds.dll
f:\windows\system32\adsldpc.dll
f:\windows\system32\atl.dll
f:\windows\system32\samlib.dll
f:\windows\system32\ieframe.dll
f:\program files\windows live\messenger\dfsr.dll
f:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcp80.dll
f:\windows\system32\esent.dll
f:\program files\windows live\messenger\abssm.dll
f:\program files\windows live\messenger\usnsvcps.dll
f:\windows\system32\wmvcore.dll
f:\windows\system32\wmasf.dll
f:\program files\windows live\messenger\custsat.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\ksuser.dll
f:\windows\system32\wmadmod.dll
f:\windows\system32\mfplat.dll
f:\windows\system32\mshtml.dll
f:\windows\system32\msls31.dll
f:\windows\system32\jscript.dll
f:\windows\system32\linkinfo.dll
f:\windows\system32\ntshrui.dll
f:\windows\system32\msi.dll
F:\WINDOWS\HH.EXE
f:\windows\hh.exe
f:\windows\system32\ntdll.dll
f:\windows\system32\kernel32.dll
f:\windows\system32\msvcrt.dll
f:\windows\system32\advapi32.dll
f:\windows\system32\rpcrt4.dll
f:\windows\system32\secur32.dll
f:\windows\system32\user32.dll
f:\windows\system32\gdi32.dll
f:\windows\system32\shimeng.dll
f:\windows\apppatch\acgenral.dll
f:\windows\system32\winmm.dll
f:\windows\system32\ole32.dll
f:\windows\system32\oleaut32.dll
f:\windows\system32\msacm32.dll
f:\windows\system32\version.dll
f:\windows\system32\shell32.dll
f:\windows\system32\shlwapi.dll
f:\windows\system32\userenv.dll
f:\windows\system32\uxtheme.dll
f:\windows\system32\imm32.dll
f:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
f:\windows\system32\comctl32.dll
f:\windows\system32\hhctrl.ocx
f:\windows\system32\msctf.dll
f:\windows\system32\ntmarta.dll
f:\windows\system32\samlib.dll
f:\windows\system32\wldap32.dll
f:\windows\system32\clbcatq.dll
f:\windows\system32\comres.dll
f:\windows\system32\itss.dll
f:\windows\system32\urlmon.dll
f:\windows\system32\iertutil.dll
f:\windows\system32\wininet.dll
f:\windows\system32\normaliz.dll
f:\windows\system32\msctfime.ime
f:\windows\system32\ieframe.dll
f:\windows\system32\psapi.dll
f:\windows\system32\ws2_32.dll
f:\windows\system32\ws2help.dll
f:\windows\system32\sxs.dll
f:\windows\system32\apphelp.dll
f:\windows\system32\mshtml.dll
f:\windows\system32\msls31.dll
f:\windows\system32\mlang.dll
f:\windows\system32\mscoree.dll
f:\windows\microsoft.net\framework\v2.0.50727\mscorie.dll
f:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll
f:\windows\system32\msimtf.dll
f:\windows\system32\jscript.dll
f:\windows\system32\xpsp2res.dll
f:\windows\system32\imgutil.dll
f:\windows\system32\pngfilt.dll
f:\windows\system32\msimg32.dll
f:\windows\system32\itircl.dll
f:\windows\system32\wintrust.dll
f:\windows\system32\crypt32.dll
f:\windows\system32\msasn1.dll
f:\windows\system32\imagehlp.dll
f:\windows\system32\wdmaud.drv
f:\windows\system32\msacm32.drv
f:\windows\system32\midimap.dll
f:\windows\system32\mshtmled.dll
f:\windows\system32\oleacc.dll
f:\windows\system32\msvcp60.dll
f:\windows\system32\msi.dll






--------------------------------------------------------------------------------------------


HiJackThis Log


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:51:27 PM, on 9/30/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
F:\Program Files\Alwil Software\Avast4\ashServ.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Applications\wcs.exe
F:\Program Files\Applications\iebtm.exe
F:\Program Files\Analog Devices\Core\smax4pnp.exe
F:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
F:\WINDOWS\system32\hkcmd.exe
F:\WINDOWS\system32\igfxpers.exe
F:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
F:\Program Files\Applications\wcm.exe
F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
F:\Program Files\Applications\iebtmm.exe
F:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
F:\Program Files\Bonjour\mDNSResponder.exe
F:\WINDOWS\system32\dlbucoms.exe
F:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
F:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
F:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
f:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\Viewpoint\Common\ViewpointService.exe
F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
F:\Program Files\Alwil Software\Avast4\ashWebSv.exe
F:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
F:\Program Files\Windows Live\Messenger\usnsvc.exe
F:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
F:\Program Files\Internet Explorer\iexplore.exe
F:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - F:\Program Files\Viewpoint\Viewpoint Toolbar\3.8.0\ViewBarBHO.dll
O2 - BHO: (no name) - {CFEE97A3-4911-444D-8BE8-E243A23D3DE2} - F:\Program Files\Applications\iebt.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - F:\Program Files\Common Files\Viewpoint\Toolbar Runtime\3.8.0\IEViewBar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] F:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [DVDLauncher] "F:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "F:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [igfxtray] F:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] F:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] F:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "F:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "F:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] F:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] F:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKLM\..\Policies\Explorer\Run: [smile] F:\Program Files\Applications\wcs.exe
O4 - HKLM\..\Policies\Explorer\Run: [start] F:\Program Files\Applications\iebtm.exe
O4 - HKUS\S-1-5-18\..\Run: [MySpaceIM] F:\Program Files\MySpace\IM\MySpaceIM.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [MySpaceIM] F:\Program Files\MySpace\IM\MySpaceIM.exe (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = F:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = F:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: QuickBooks Update Agent.lnk = F:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.ietoolthru.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.ietoolthru.com/redirect.php (file missing)
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - F:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/...lscbase9602.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1177377267484
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - F:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - F:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlbu_device - - F:\WINDOWS\system32\dlbucoms.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - F:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - F:\WINDOWS\system32\HPZipm12.exe
O23 - Service: QuickBooks Database Manager Service (QBCFMonitorService) - Intuit - F:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - F:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - F:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 9278 bytes
TropicalPerfection
Oct 1 2008, 05:52 PM
Does anybody know how to fix this? I've been working on it for 3 days now. Please Help!!! smile.gif
Blade81
Oct 4 2008, 01:32 PM
Hi


Disable Spybot's TeaTimer
  • Run Spybot-S&D in Advanced Mode
  • If it is not already set to do this, go to the Mode menu
    select
    Advanced Mode
  • On the left hand side, click on Tools
  • Then click on the Resident icon in the list
  • Uncheck
    Resident TeaTimer
     and OK any prompts.
  • Restart your computer


Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:
  1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
    Remember to re-enable them afterwards.

  2. Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.
Blade81
Oct 22 2008, 03:17 PM
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter.

Everyone else please begin a New Topic.

Thank You !
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.