SDFix: Version 1.104 Run by Administrator on 16.09.2007 at 18:55 Microsoft Windows XP [Version 5.1.2600] Running From: D:\SDFix Safe Mode: Checking Services: Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting... Normal Mode: Checking Files: Trojan Files Found: D:\WINDOWS\csrss.exe - Deleted D:\WINDOWS\system32\~.exe - Deleted D:\WINDOWS\system32\ntos.exe - Deleted D:\WINDOWS\system32\wsnpoem\audio.dll - Deleted D:\WINDOWS\system32\wsnpoem\video.dll - Deleted Removing Temp Files... ADS Check: D:\WINDOWS No streams found. D:\WINDOWS\system32 No streams found. D:\WINDOWS\system32\svchost.exe No streams found. D:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "D:\\WINDOWS\\csrss.exe"="D:\\WINDOWS\\csrss.exe:*:Enabled:1E1323313237D79B" "D:\\WINDOWS\\p1nch.exe"="D:\\WINDOWS\\p1nch.exe:*:Enabled:1E1323313237D79B" "D:\\Program Files\\ICQLite\\ICQLite.exe"="D:\\Program Files\\ICQLite\\ICQLite.exe:*:Enabled:ICQ Lite" "D:\\Program Files\\Skype\\Phone\\Skype.exe"="D:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" Remaining Files: --------------- File Backups: - D:\SDFix\backups\backups.zip Files with Hidden Attributes: D:\Program Files\Autodesk\Autodesk DWF Viewer\_Setupx.dll D:\Program Files\Canon\MP Navigator 3.0\uinstrsc.dll D:\Program Files\Autodesk\Autodesk DWF Viewer\Setup.exe D:\Program Files\Canon\MP Navigator 3.0\Maint.exe D:\Program Files\Messenger\msmsgs.exe D:\Program Files\Windows Media Player\mplayer2.exe D:\Program Files\Windows Media Player\wmplayer.exe Finished!