Logfile of random's system information tool 1.04 (written by random/random)
Run by viktor at 2008-10-25 23:58:16
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 2 GB (20%) free of 11 GB
Total RAM: 503 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:37, on 2008-10-23
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 SP2 (7.00.6000.16414)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\taskmgr.exe
C:\ht\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [avz.exe] C:\Program Files\avz4\avz.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3656114926-4121846544-1301081327-500\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (file missing)
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe (file missing)
O23 - Service:   (Eventlog) -   - C:\WINDOWS\system32\services.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service:  COM  - IMAPI (ImapiService) -   - C:\WINDOWS\system32\imapi.exe
O23 - Service: NetMeeting Remote Desktop Sharing (mnmsrvc) -   - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Unknown owner - (no file)
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: Plug and Play (PlugPlay) -   - C:\WINDOWS\system32\services.exe
O23 - Service:        (RDSessMgr) -   - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: ScriptBlocking Service (SBService) - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\Script Blocking\SBServ.exe (file missing)
O23 - Service: - (SCardSvr) -   - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service:     (SysmonLog) -   - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service:    (VSS) -   - C:\WINDOWS\System32\vssvc.exe
O23 - Service:   WMI (WmiApSrv) -   - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 4012 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Norton SystemWorks One Button Checkup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Cleanup"=C:\cleanup.exe [2008-10-25 19286]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avz.exe]
C:\Program Files\avz4\avz.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2004-08-18 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Download Master]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkinClock]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe /startoptions []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-06-16 794624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^ ^^^Exif Launcher.lnk]
C:\PROGRA~1\FinePixViewer\QuickDCF.exe  []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-10-19 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SYMTDI]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoDrives"=
"NoDriveAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\SMINST\Scheduler.exe"="C:\WINDOWS\SMINST\Scheduler.exe:*:Enabled:Scheduler "
"G:\activexdebugger32.exe"="G:\activexdebugger32.exe:*:Enabled:ipsec"
"C:\Program Files\Sony Ericsson\Mobile2\Connection Wizard\ConnectionWizard.exe"="C:\Program Files\Sony Ericsson\Mobile2\Connection Wizard\ConnectionWizard.exe:*:Enabled:ipsec"
"C:\Program Files\REGSHAVE\REGSHAVE.EXE"="C:\Program Files\REGSHAVE\REGSHAVE.EXE:*:Enabled:ipsec"
"C:\Program Files\FinePixViewer\QuickDCF.exe"="C:\Program Files\FinePixViewer\QuickDCF.exe:*:Enabled:ipsec"
"C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe:*:Enabled:ipsec"
"C:\Program Files\FinePixViewer\FinePixViewer.exe"="C:\Program Files\FinePixViewer\FinePixViewer.exe:*:Enabled:ipsec"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe:*:Enabled:ipsec"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{44597900-d6e9-11db-b22d-806d6172696f}]
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6f0eb4a2-e20c-11db-b391-0016d4a3a091}]
shell\Auto\command - G:\activexdebugger32.exe f
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL activexdebugger32.exe f
shell\explore\command - G:\activexdebugger32.exe f
shell\open\command - G:\activexdebugger32.exe f

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7697e27c-2745-11dd-b3b7-0016d4a3a091}]
shell\Auto\command - activexdebugger32.exe f
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL activexdebugger32.exe f
shell\explore\command - activexdebugger32.exe f
shell\open\command - activexdebugger32.exe f

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8712f221-d7b4-11db-b234-a125bca4d59a}]
shell\AutoRun\command - G:\autorun.exe


======List of files/folders created in the last 1 months======

2008-10-25 23:58:16 ----D---- C:\rsit
2008-10-25 23:56:16 ----D---- C:\  (2)
2008-10-25 23:43:01 ----D---- C:\Avenger
2008-10-25 23:42:19 ----A---- C:\zip.exe
2008-10-25 23:42:19 ----A---- C:\cleanup.exe
2008-10-25 23:42:19 ----A---- C:\cleanup.bat
2008-10-25 22:33:26 ----D---- C:\WINDOWS\temp
2008-10-25 22:30:48 ----A---- C:\WINDOWS\zip.exe
2008-10-25 22:30:48 ----A---- C:\WINDOWS\VFIND.exe
2008-10-25 22:30:48 ----A---- C:\WINDOWS\SWXCACLS.exe
2008-10-25 22:30:48 ----A---- C:\WINDOWS\SWSC.exe
2008-10-25 22:30:48 ----A---- C:\WINDOWS\SWREG.exe
2008-10-25 22:30:48 ----A---- C:\WINDOWS\sed.exe
2008-10-25 22:30:48 ----A---- C:\WINDOWS\NIRCMD.exe
2008-10-25 22:30:48 ----A---- C:\WINDOWS\grep.exe
2008-10-25 22:30:48 ----A---- C:\WINDOWS\fdsv.exe
2008-10-25 22:30:47 ----D---- C:\Qoobox
2008-10-25 22:30:43 ----A---- C:\WINDOWS\system32\CF27530.exe
2008-10-25 22:24:10 ----D---- C:\Documents and Settings\All Users\Application Data\Sony Ericsson
2008-10-25 01:39:19 ----D---- C:\ 
2008-10-25 01:23:59 ----A---- C:\WINDOWS\PSEXESVC.EXE
2008-10-25 00:44:59 ----D---- C:\Documents and Settings\viktor\Application Data\Malwarebytes
2008-10-25 00:44:52 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-10-25 00:44:49 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-10-24 00:12:47 ----D---- C:\HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotify
2008-10-24 00:10:39 ----D---- C:\HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionrun
2008-10-23 22:04:51 ----A---- C:\scdwriter.ini
2008-10-23 21:46:05 ----A---- C:\SCDWriter.exe
2008-10-23 21:46:05 ----A---- C:\ReadMe.txt
2008-10-23 21:36:36 ----D---- C:\ht
2008-10-23 04:48:55 ----A---- C:\WINDOWS\explorer.exe
2008-10-23 04:46:55 ----D---- C:\WINDOWS\ 
2008-10-23 03:44:59 ----D---- C:\Program Files\Unlocker
2008-10-23 03:25:01 ----D---- C:\Unlocker
2008-10-23 02:01:15 ----D---- C:\WINDOWS\ERUNT
2008-10-23 01:13:29 ----D---- C:\WINDOWS\ERDNT
2008-10-23 00:58:08 ----A---- C:\WINDOWS\Active Setup Log.txt
2008-10-22 23:27:11 ----D---- C:\Program Files\Kaspersky Lab Tool
2008-10-22 23:07:58 ----A---- C:\WINDOWS\system32\userinit.exe
2008-10-22 23:06:18 ----D---- C:\WINDOWS\system32\ 
2008-10-22 19:23:30 ----SHD---- C:\RECYCLER
2008-10-22 18:02:04 ----D---- C:\Program Files\A4Tech
2008-10-22 17:44:30 ----A---- C:\WINDOWS\ntbtlog.txt
2008-10-22 17:00:06 ----D---- C:\Program Files\Norton WinDoctor 2007
2008-10-22 11:48:56 ----A---- C:\WINDOWS\system32\S32STAT.DLL
2008-10-22 11:44:22 ----A---- C:\WINDOWS\system32\msjter35.dll
2008-10-22 11:44:21 ----A---- C:\WINDOWS\system32\Msjint35.dll
2008-10-22 11:44:20 ----A---- C:\WINDOWS\system32\msrd2x35.dll
2008-10-22 11:44:19 ----A---- C:\WINDOWS\system32\vbar332.dll
2008-10-22 11:44:19 ----A---- C:\WINDOWS\system32\msjet35.dll
2008-10-22 11:43:27 ----A---- C:\WINDOWS\system32\WNASPI32.DLL
2008-10-22 11:41:58 ----A---- C:\WINDOWS\system32\S32EVNT1.DLL
2008-10-22 11:40:25 ----D---- C:\Documents and Settings\viktor\Application Data\Symantec
2008-10-22 09:35:05 ----D---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-10-22 09:30:56 ----D---- C:\Program Files\Ontrack
2008-10-21 21:52:02 ----A---- C:\WINDOWS\UI.INI
2008-10-21 19:59:10 ----D---- C:\Downloads
2008-10-21 19:59:00 ----D---- C:\Documents and Settings\viktor\Application Data\Download Master
2008-10-21 19:20:51 ----D---- C:\Documents and Settings\viktor\Application Data\Mozilla
2008-10-21 19:20:41 ----D---- C:\Program Files\Mozilla Firefox
2008-09-28 14:18:54 ----D---- C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir
2008-09-28 13:51:06 ----N---- C:\WINDOWS\system32\ltkrn12n.dll
2008-09-28 13:51:06 ----N---- C:\WINDOWS\system32\ltimg12n.dll
2008-09-28 13:51:05 ----N---- C:\WINDOWS\system32\ltfil12n.DLL
2008-09-28 13:51:05 ----N---- C:\WINDOWS\system32\LTDIS12n.dll
2008-09-28 13:51:05 ----A---- C:\WINDOWS\system32\Lfwmf12n.dll
2008-09-28 13:51:05 ----A---- C:\WINDOWS\system32\lftif12n.dll
2008-09-28 13:51:05 ----A---- C:\WINDOWS\system32\lfpcx12n.dll
2008-09-28 13:51:05 ----A---- C:\WINDOWS\system32\lflmb12n.dll
2008-09-28 13:51:05 ----A---- C:\WINDOWS\system32\lfjbg12n.dll
2008-09-28 13:51:05 ----A---- C:\WINDOWS\system32\LFJ2K12n.dll
2008-09-28 13:51:05 ----A---- C:\WINDOWS\system32\lfimg12n.dll
2008-09-28 13:51:05 ----A---- C:\WINDOWS\system32\lffax12n.dll
2008-09-28 13:51:05 ----A---- C:\WINDOWS\system32\LFCMP12n.DLL
2008-09-28 13:51:04 ----A---- C:\WINDOWS\system32\lfbmp12n.dll
2008-09-28 13:51:03 ----A---- C:\WINDOWS\system32\MKCoInstaller.dll
2008-09-28 13:51:02 ----A---- C:\WINDOWS\system32\PS2U2usd.dll
2008-09-28 13:50:44 ----A---- C:\WINDOWS\system32\vb5ko.dll
2008-09-28 13:50:08 ----D---- C:\Program Files\Temp

======List of files/folders modified in the last 1 months======

2008-10-25 23:58:00 ----D---- C:\WINDOWS\system32
2008-10-25 23:58:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-10-25 23:53:31 ----D---- C:\WINDOWS\system32\drivers
2008-10-25 23:53:31 ----D---- C:\WINDOWS
2008-10-25 23:46:35 ----A---- C:\WINDOWS\SchedLgU.Txt
2008-10-25 23:36:12 ----D---- C:\WINDOWS\Prefetch
2008-10-25 23:11:21 ----RD---- C:\Program Files
2008-10-25 22:33:38 ----N---- C:\WINDOWS\system.ini
2008-10-25 22:32:53 ----D---- C:\WINDOWS\AppPatch
2008-10-25 22:32:53 ----D---- C:\Program Files\Common Files
2008-10-25 22:25:01 ----SHD---- C:\WINDOWS\Installer
2008-10-25 22:24:16 ----D---- C:\Program Files\Common Files\Teleca Shared
2008-10-25 22:24:16 ----D---- C:\Documents and Settings\All Users\Application Data\Teleca
2008-10-25 22:24:11 ----HD---- C:\WINDOWS\inf
2008-10-25 22:08:47 ----HD---- C:\Program Files\InstallShield Installation Information
2008-10-25 22:08:46 ----D---- C:\SwSetup
2008-10-25 22:04:21 ----D---- C:\Documents and Settings\viktor\Application Data\FUJIFILM
2008-10-25 01:39:53 ----HD---- C:\System.sav
2008-10-23 21:33:06 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2008-10-23 04:01:39 ----RASH---- C:\boot.ini
2008-10-23 04:01:39 ----A---- C:\WINDOWS\win.ini
2008-10-23 04:01:37 ----D---- C:\WINDOWS\pss
2008-10-23 03:30:39 ----D---- C:\Program Files\Common Files\Microsoft Shared
2008-10-23 02:02:21 ----RSHD---- C:\WINDOWS\system32\dllcache
2008-10-23 01:55:32 ----D---- C:\Documents and Settings
2008-10-23 01:18:24 ----SHD---- C:\System Volume Information
2008-10-23 01:18:24 ----D---- C:\WINDOWS\system32\Restore
2008-10-22 14:11:44 ----D---- C:\Program Files\WinRAR
2008-10-22 14:11:38 ----D---- C:\Program Files\Windows Media Player
2008-10-22 13:38:24 ----D---- C:\Program Files\DonREST 39
2008-10-22 11:56:57 ----RSHD---- C:\Program Files\RECYCLER
2008-10-22 11:50:49 ----D---- C:\WINDOWS\Help
2008-10-22 11:43:27 ----D---- C:\WINDOWS\system
2008-10-22 11:42:33 ----D---- C:\Documents and Settings\All Users\Application Data\Symantec
2008-10-21 23:20:30 ----D---- C:\Program Files\DonREST 40
2008-10-21 23:20:15 ----D---- C:\Program Files\DonREST 38
2008-10-21 23:17:48 ----D---- C:\Program Files\DonREST 37
2008-10-21 22:02:07 ----D---- C:\Program Files\DonREST 36
2008-10-21 21:50:30 ----D---- C:\I386
2008-10-21 19:38:30 ----D---- C:\Program Files\Internet Explorer
2008-10-21 19:38:29 ----D---- C:\Documents and Settings\viktor\Application Data\XnView
2008-10-21 19:32:43 ----D---- C:\Program Files\RegVac Registry Cleaner
2008-10-21 19:28:44 ----D---- C:\Program Files\Common Files\Adobe
2008-10-21 19:27:52 ----RSD---- C:\WINDOWS\assembly
2008-10-21 19:27:51 ----D---- C:\WINDOWS\system32\mui
2008-10-21 19:27:30 ----D---- C:\WINDOWS\ie7updates
2008-10-21 19:27:04 ----D---- C:\WINDOWS\system32\CatRoot2
2008-10-21 19:26:34 ----D---- C:\WINDOWS\WBEM
2008-10-21 19:26:34 ----D---- C:\WINDOWS\system32\ru-ru
2008-10-21 19:26:34 ----D---- C:\WINDOWS\Media
2008-10-21 18:26:55 ----D---- C:\WINDOWS\system32\ias
2008-10-21 15:08:34 ----SD---- C:\Documents and Settings\viktor\Application Data\Microsoft
2008-10-20 17:41:16 ----A---- C:\WINDOWS\NeroDigital.ini
2008-09-28 13:51:03 ----D---- C:\WINDOWS\twain_32

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 cdrbsdrv;cdrbsdrv; C:\WINDOWS\system32\drivers\cdrbsdrv.sys [2004-03-08 13567]
R1 eabfiltr;eabfiltr; C:\WINDOWS\system32\DRIVERS\eabfiltr.sys [2005-09-19 7808]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2008-03-13 54280]
R1 intelppm; Intel ; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-18 40448]
R1 is-8EJH0drv;is-8EJH0drv; C:\WINDOWS\system32\DRIVERS\58480314.sys [2008-07-08 148496]
R1 kbdhid;  HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-05-13 79488]
R1 WmiAcpi;   ACPI Microsoft Windows; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2004-08-03 8832]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [2002-08-14 17005]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2008-03-13 71176]
R2 SAVRTPEL;SAVRTPEL; \??\C:\WINDOWS\system32\Drivers\SAVRTPEL.SYS []
R2 SYMTDI;SYMTDI; \??\C:\WINDOWS\system32\Drivers\SYMTDI.SYS []
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camc6aud.sys [2006-08-22 38144]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camc6hal.sys [2006-08-22 530176]
R3 CmBatt; AC-   (); C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2004-08-03 14080]
R3 HBtnKey;HBtnKey; C:\WINDOWS\system32\DRIVERS\cpqbttn.sys [2005-09-19 9344]
R3 HidUsb;  HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-10-19 1302812]
R3 mouhid;  HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-19 12160]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-06-16 193120]
R3 usbehci;  Microsoft USB 2.0  -; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2006-04-19 30080]
R3 usbhub;USB2 ; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-18 57600]
R3 usbuhci;  Microsoft USB  -; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2006-04-19 20608]
R3 w29n51;   Intel(R) PRO/Wireless 2200BG  Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2006-07-17 2206720]
S1 GhPciScan;GhostPciScanner; C:\WINDOWS\system32\drivers\GhPciScan.sys []
S2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys []
S3 Arp1394;  1394 ARP; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-18 60800]
S3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2006-08-22 163328]
S3 eabusb;eabusb; C:\WINDOWS\system32\DRIVERS\eabusb.sys [2005-09-19 5760]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys []
S3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys []
S3 NAVENG;NAVENG; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VirusDefs\20020829.003\NAVENG.SYS []
S3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\VirusDefs\20020829.003\NAVEX15.SYS []
S3 NIC1394;  1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-18 61824]
S3 NPDriver;Norton Unerase Protection Driver; \??\C:\WINDOWS\system32\Drivers\NPDRIVER.SYS []
S3 Rasirda; WAN (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
S3 SAVRT;SAVRT; \??\C:\WINDOWS\system32\Drivers\SAVRT.SYS []
S3 SE27bus;Sony Ericsson Device 039 Driver driver (WDM); C:\WINDOWS\system32\DRIVERS\SE27bus.sys [2006-09-18 61600]
S3 SE27mdfl;Sony Ericsson Device 039 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\SE27mdfl.sys [2006-09-18 9360]
S3 SE27mdm;Sony Ericsson Device 039 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\SE27mdm.sys [2006-09-18 97184]
S3 SE27mgmt;Sony Ericsson Device 039 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\SE27mgmt.sys [2006-09-18 88688]
S3 se27nd5;Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (NDIS); C:\WINDOWS\system32\DRIVERS\se27nd5.sys [2006-09-18 18704]
S3 SE27obex;Sony Ericsson Device 039 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\SE27obex.sys [2006-09-18 86560]
S3 se27unic;Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (WDM); C:\WINDOWS\system32\DRIVERS\se27unic.sys [2006-09-18 90800]
S3 SMCIRDA;  SMC IrCC; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2001-10-19 35913]
S3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
S3 SYMREDRV;SYMREDRV; \??\C:\WINDOWS\system32\Drivers\SYMREDRV.SYS []
S3 usbccgp;    USB (Microsoft); C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;  Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan; USB-; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;    USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys []
S3 WMI_MFC_TPSHOKER_80;WMI_MFC_TPSHOKER_80; C:\WINDOWS\system32\drivers\WMI_MFC_TPSHOKER_80.sys []
S4 WS2IFSL; Windows Socket 2.0   -IFS ; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-18 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912]
S2 ccEvtMgr;Symantec Event Manager; C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe []
S2 PCA;PC Angel; C:\WINDOWS\SMINST\PCAngel.exe [2006-01-12 294912]
S2 SBService;ScriptBlocking Service; C:\PROGRA~1\COMMON~1\SYMANT~1\Script Blocking\SBServ.exe []
S3 AddFiltr;AddFiltr; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe [2006-06-12 126976]
S3 aspnet_state;  ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 ccPwdSvc;Symantec Password Validation Service; C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe []
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WmcCds;Windows Media Connect (WMC); c:\program files\windows media connect\mswmccds.exe [2004-08-10 483328]
S3 WmcCdsLs;  Windows Media Connect (WMC); C:\Program Files\Windows Media Connect\mswmcls.exe [2004-08-10 28160]

-----------------EOF-----------------
