Search Settings pops up

I have a problem with Search Settings v. 1.2.3 trying to install every time i open a folder.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:55:17 πμ, on 26/3/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\Explorer.EXE
C:\Program Files\Creative\SBAudigy4\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\windows\CTHELPER.EXE
C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\runservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\windows\system32\PnkBstrB.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\windows\system32\slserv.exe
C:\windows\system32\svchost.exe
C:\windows\system32\wuauclt.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\windows\system32\msiexec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre6\bin\java.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=13928&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Συνδέσεις
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: DigitalPowered Toolbar - {b317125e-2f10-4388-bf1f-2c31c6cd89ed} - C:\Program Files\DigitalPowered\tbDig1.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.0.2\dealioToolbarIE.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Βοηθός εισόδου του Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: DigitalPowered Toolbar - {b317125e-2f10-4388-bf1f-2c31c6cd89ed} - C:\Program Files\DigitalPowered\tbDig1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: DigitalPowered Toolbar - {b317125e-2f10-4388-bf1f-2c31c6cd89ed} - C:\Program Files\DigitalPowered\tbDig1.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.0.2\dealioToolbarIE.dll
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy4\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [RCSystem] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [HPHUPD08] C:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [4 Play] C:\DOCUME~1\Admin\APPLIC~1\LISTST~1\ABOUTPLUS.exe
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Γρήγορη εκκίνηση HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: Ε&ξαγωγή στο Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Προσθήκη στο ιστολόγιο - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Προσθήκη στο ιστολόγιο στο Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Έρευνα - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/DE-DE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\WINDOWS\runservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\windows\system32\PnkBstrB.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\windows\SYSTEM32\slserv.exe

--
End of file - 13594 bytes




7-Zip 4.65
Acrobat.com
Adobe AIR
Adobe AIR
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Help Center 1.0
Adobe Photoshop CS2
Adobe Reader 9.3.1
Adobe Shockwave Player 11.5
Adobe Stock Photos 1.0
AnyDVD
Apple Application Support
Apple Software Update
Ask Toolbar
ASUSUpdate
Athlon 64 Processor Driver
AutoHotkey 1.0.48.05
Avanquest update
BS.Player ControlBar
BS.Player FREE
Burnout(TM) Paradise The Ultimate Box
Call of Duty(R) 4 - Modern Warfare(TM)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
CCleaner (remove only)
Chessmaster 10th Edition
CloneDVD2
Command & Conquer 3
COMODO Firewall Pro
Company of Heroes
Creative MediaSource
Creative System Information
DAEMON Tools Toolbar
Dealio Toolbar v4.0.2
DigitalPowered Toolbar
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
DVD Shrink 3.2
EA Download Manager
Euro Truck Simulator
Fallout 3
Football Manager 2010
Garena
Heroes of Newerth
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
HP Extended Capabilities 5.3
HP Image Zone 5.3
HP Imaging Device Functions 5.3
HP Photosmart 330,380,420,470,7800,8000,8200 Series
HP Product Assistant
HP Solution Center & Imaging Support Tools 5.3
HP Update
Indeo® Software
J2SE Runtime Environment 5.0 Update 3
Java(TM) 6 Update 18
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java(TM) 6 Update 7
Java(TM) SE Runtime Environment 6 Update 1
JRAID
Junk Mail filter update
LimeWire 5.4.6
LiveReg (Symantec Corporation)
LiveUpdate 1.80 (Symantec Corporation)
Logitech Gaming Software
Malwarebytes' Anti-Malware
Media Go
Media Player Codec Pack 3.2.0
Medieval II Total War
MegaStat Installer
Messenger Plus! Live & Sponsor (CiD)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Greek Language Pack
Microsoft .NET Framework 1.1 Security Update (KB953297)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Choice Guard
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft LifeCam
Microsoft National Language Support Downlevel APIs
Microsoft Office Live Add-in 1.3
Microsoft Office Professional Edition 2003
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual J# .NET Redistributable Package 1.1
Mozilla Firefox (3.6.2pre)
MSVCRT
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB973686)
N-Bench_V3
NCH Toolbox Uninstall
Nero 6 Enterprise Edition
Nero Digital
Nitto 1320 Legends Public Beta 0.9.11.2
Norton Ghost
NVIDIA Drivers
NVIDIA nView Desktop Manager
NVIDIA PhysX
OpenAL
OpenOffice.org Installer 1.0
Orban/Coding Technologies AAC/aacPlus Player Plugin™ 1.0
PC Probe II
PeerGuardian 2.0
PhotoStage
PlayStation(R)Network Downloader
PlayStation(R)Store
PowerDVD
Prism
Pro Evolution Soccer 2009
Pro Evolution Soccer 2010
PunkBuster Services
QuickTime
Rapture3D 2.3.22 Game
Resize Pictures Plus 2.0
RivaTuner v2.0 RC 16
Search Settings v1.2.3
Segoe UI
Sony Ericsson PC Suite 6.009.00
Sound Blaster Audigy 4
SpeedFan (remove only)
Spybot - Search & Destroy
SweetIM for Messenger 2.6
SweetIM Toolbar for Internet Explorer 3.3
Switch
System Requirements Lab
System Requirements Lab
TeamSpeak 2 RC2
Total Video Converter 3.11 070908
TVUPlayer 2.4.5.1
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update Service
Veoh Web Player
Video Card Stability Test
VideoLAN VLC media player 0.8.6f
Viper 1.5.00
Virtual DJ - Atomix Productions
Warcraft III
WavePad Uninstall
Winamp
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Live Sync
Windows Live Toolbar
Windows Live Writer
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 10
Windows Presentation Foundation
WinRAR 3.70 – Εφαρμογή Διαχείρισης Συμπιεσμένων Αρχείων
Xfire (remove only)
Yahoo! Toolbar
Άμεση επιδιόρθωση για Windows XP - KB873339
Άμεση επιδιόρθωση για Windows XP - KB885835
Άμεση επιδιόρθωση για Windows XP - KB885836
Άμεση επιδιόρθωση για Windows XP - KB886185
Άμεση επιδιόρθωση για Windows XP - KB887472
Άμεση επιδιόρθωση για Windows XP - KB888302
Άμεση επιδιόρθωση για Windows XP - KB890859
Άμεση επιδιόρθωση για Windows XP - KB891781
Βοηθός εισόδου του Windows Live
Ενημερωμένη έκδοση ασφαλείας για Windows XP (KB923689)
Ενημερωμένη έκδοση ασφαλείας για Windows XP (KB941569)
Ενημερωμένη έκδοση ασφαλείας για το Windows Media Player (KB911564)
Ενημερωμένη έκδοση ασφαλείας για το Windows Media Player (KB952069)
Ενημερωμένη έκδοση ασφαλείας για το Windows Media Player (KB954155)
Ενημερωμένη έκδοση ασφαλείας για το Windows Media Player (KB968816)
Ενημερωμένη έκδοση ασφαλείας για το Windows Media Player (KB973540)
Ενημερωμένη έκδοση ασφαλείας για το Windows Media Player 10 (KB917734)
Ενημερωμένη έκδοση ασφαλείας για το Windows Media Player 10 (KB936782)
Ενημερωμένη έκδοση ασφαλείας για το Windows Media Player 6.4 (KB925398)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB938127)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB942615)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB944533)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB950759)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB953838)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB956390)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB958215)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB960714)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB961260)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB963027)
Ενημέρωση ασφαλείας για Windows Internet Explorer 7 (KB969897)
Ενημέρωση ασφαλείας για Windows Internet Explorer 8 (KB969897)
Ενημέρωση ασφαλείας για Windows Internet Explorer 8 (KB971961)
Ενημέρωση ασφαλείας για Windows Internet Explorer 8 (KB972260)
Ενημέρωση ασφαλείας για Windows Internet Explorer 8 (KB974455)
Ενημέρωση ασφαλείας για Windows Internet Explorer 8 (KB976325)
Ενημέρωση ασφαλείας για Windows Internet Explorer 8 (KB978207)
Ενημέρωση ασφαλείας για Windows XP (KB890046)
Ενημέρωση ασφαλείας για Windows XP (KB893756)
Ενημέρωση ασφαλείας για Windows XP (KB896358)
Ενημέρωση ασφαλείας για Windows XP (KB896423)
Ενημέρωση ασφαλείας για Windows XP (KB896424)
Ενημέρωση ασφαλείας για Windows XP (KB896428)
Ενημέρωση ασφαλείας για Windows XP (KB899587)
Ενημέρωση ασφαλείας για Windows XP (KB899589)
Ενημέρωση ασφαλείας για Windows XP (KB899591)
Ενημέρωση ασφαλείας για Windows XP (KB900725)
Ενημέρωση ασφαλείας για Windows XP (KB901017)
Ενημέρωση ασφαλείας για Windows XP (KB901214)
Ενημέρωση ασφαλείας για Windows XP (KB902400)
Ενημέρωση ασφαλείας για Windows XP (KB904706)
Ενημέρωση ασφαλείας για Windows XP (KB905414)
Ενημέρωση ασφαλείας για Windows XP (KB905749)
Ενημέρωση ασφαλείας για Windows XP (KB908519)
Ενημέρωση ασφαλείας για Windows XP (KB911562)
Ενημέρωση ασφαλείας για Windows XP (KB911567)
Ενημέρωση ασφαλείας για Windows XP (KB911927)
Ενημέρωση ασφαλείας για Windows XP (KB912919)
Ενημέρωση ασφαλείας για Windows XP (KB913433)
Ενημέρωση ασφαλείας για Windows XP (KB913580)
Ενημέρωση ασφαλείας για Windows XP (KB914388)
Ενημέρωση ασφαλείας για Windows XP (KB914389)
Ενημέρωση ασφαλείας για Windows XP (KB917159)
Ενημέρωση ασφαλείας για Windows XP (KB917344)
Ενημέρωση ασφαλείας για Windows XP (KB917422)
Ενημέρωση ασφαλείας για Windows XP (KB917953)
Ενημέρωση ασφαλείας για Windows XP (KB918118)
Ενημέρωση ασφαλείας για Windows XP (KB918439)
Ενημέρωση ασφαλείας για Windows XP (KB918899)
Ενημέρωση ασφαλείας για Windows XP (KB919007)
Ενημέρωση ασφαλείας για Windows XP (KB920213)
Ενημέρωση ασφαλείας για Windows XP (KB920214)
Ενημέρωση ασφαλείας για Windows XP (KB920670)
Ενημέρωση ασφαλείας για Windows XP (KB920683)
Ενημέρωση ασφαλείας για Windows XP (KB920685)
Ενημέρωση ασφαλείας για Windows XP (KB921398)
Ενημέρωση ασφαλείας για Windows XP (KB921503)
Ενημέρωση ασφαλείας για Windows XP (KB921883)
Ενημέρωση ασφαλείας για Windows XP (KB922616)
Ενημέρωση ασφαλείας για Windows XP (KB922760)
Ενημέρωση ασφαλείας για Windows XP (KB922819)
Ενημέρωση ασφαλείας για Windows XP (KB923191)
Ενημέρωση ασφαλείας για Windows XP (KB923414)
Ενημέρωση ασφαλείας για Windows XP (KB923561)
Ενημέρωση ασφαλείας για Windows XP (KB923694)
Ενημέρωση ασφαλείας για Windows XP (KB923980)
Ενημέρωση ασφαλείας για Windows XP (KB924191)
Ενημέρωση ασφαλείας για Windows XP (KB924270)
Ενημέρωση ασφαλείας για Windows XP (KB924496)
Ενημέρωση ασφαλείας για Windows XP (KB924667)
Ενημέρωση ασφαλείας για Windows XP (KB925454)
Ενημέρωση ασφαλείας για Windows XP (KB925486)
Ενημέρωση ασφαλείας για Windows XP (KB925902)
Ενημέρωση ασφαλείας για Windows XP (KB926255)
Ενημέρωση ασφαλείας για Windows XP (KB926436)
Ενημέρωση ασφαλείας για Windows XP (KB927779)
Ενημέρωση ασφαλείας για Windows XP (KB927802)
Ενημέρωση ασφαλείας για Windows XP (KB928090)
Ενημέρωση ασφαλείας για Windows XP (KB928255)
Ενημέρωση ασφαλείας για Windows XP (KB928843)
Ενημέρωση ασφαλείας για Windows XP (KB929123)
Ενημέρωση ασφαλείας για Windows XP (KB929969)
Ενημέρωση ασφαλείας για Windows XP (KB930178)
Ενημέρωση ασφαλείας για Windows XP (KB931261)
Ενημέρωση ασφαλείας για Windows XP (KB931768)
Ενημέρωση ασφαλείας για Windows XP (KB931784)
Ενημέρωση ασφαλείας για Windows XP (KB932168)
Ενημέρωση ασφαλείας για Windows XP (KB933566)
Ενημέρωση ασφαλείας για Windows XP (KB933729)
Ενημέρωση ασφαλείας για Windows XP (KB935839)
Ενημέρωση ασφαλείας για Windows XP (KB935840)
Ενημέρωση ασφαλείας για Windows XP (KB936021)
Ενημέρωση ασφαλείας για Windows XP (KB937143)
Ενημέρωση ασφαλείας για Windows XP (KB937894)
Ενημέρωση ασφαλείας για Windows XP (KB938127)
Ενημέρωση ασφαλείας για Windows XP (KB938464)
Ενημέρωση ασφαλείας για Windows XP (KB938829)
Ενημέρωση ασφαλείας για Windows XP (KB939653)
Ενημέρωση ασφαλείας για Windows XP (KB941202)
Ενημέρωση ασφαλείας για Windows XP (KB941568)
Ενημέρωση ασφαλείας για Windows XP (KB941644)
Ενημέρωση ασφαλείας για Windows XP (KB941693)
Ενημέρωση ασφαλείας για Windows XP (KB942615)
Ενημέρωση ασφαλείας για Windows XP (KB943055)
Ενημέρωση ασφαλείας για Windows XP (KB943460)
Ενημέρωση ασφαλείας για Windows XP (KB943485)
Ενημέρωση ασφαλείας για Windows XP (KB944653)
Ενημέρωση ασφαλείας για Windows XP (KB945553)
Ενημέρωση ασφαλείας για Windows XP (KB946026)
Ενημέρωση ασφαλείας για Windows XP (KB946648)
Ενημέρωση ασφαλείας για Windows XP (KB948590)
Ενημέρωση ασφαλείας για Windows XP (KB948881)
Ενημέρωση ασφαλείας για Windows XP (KB950749)
Ενημέρωση ασφαλείας για Windows XP (KB950760)
Ενημέρωση ασφαλείας για Windows XP (KB950762)
Ενημέρωση ασφαλείας για Windows XP (KB950974)
Ενημέρωση ασφαλείας για Windows XP (KB951066)
Ενημέρωση ασφαλείας για Windows XP (KB951376)
Ενημέρωση ασφαλείας για Windows XP (KB951376-v2)
Ενημέρωση ασφαλείας για Windows XP (KB951698)
Ενημέρωση ασφαλείας για Windows XP (KB951748)
Ενημέρωση ασφαλείας για Windows XP (KB952004)
Ενημέρωση ασφαλείας για Windows XP (KB952954)
Ενημέρωση ασφαλείας για Windows XP (KB953839)
Ενημέρωση ασφαλείας για Windows XP (KB954211)
Ενημέρωση ασφαλείας για Windows XP (KB954600)
Ενημέρωση ασφαλείας για Windows XP (KB955069)
Ενημέρωση ασφαλείας για Windows XP (KB956391)
Ενημέρωση ασφαλείας για Windows XP (KB956572)
Ενημέρωση ασφαλείας για Windows XP (KB956802)
Ενημέρωση ασφαλείας για Windows XP (KB956803)
Ενημέρωση ασφαλείας για Windows XP (KB956841)
Ενημέρωση ασφαλείας για Windows XP (KB956844)
Ενημέρωση ασφαλείας για Windows XP (KB957095)
Ενημέρωση ασφαλείας για Windows XP (KB957097)
Ενημέρωση ασφαλείας για Windows XP (KB958470)
Ενημέρωση ασφαλείας για Windows XP (KB958644)
Ενημέρωση ασφαλείας για Windows XP (KB958687)
Ενημέρωση ασφαλείας για Windows XP (KB958690)
Ενημέρωση ασφαλείας για Windows XP (KB958869)
Ενημέρωση ασφαλείας για Windows XP (KB959426)
Ενημέρωση ασφαλείας για Windows XP (KB960225)
Ενημέρωση ασφαλείας για Windows XP (KB960715)
Ενημέρωση ασφαλείας για Windows XP (KB960803)
Ενημέρωση ασφαλείας για Windows XP (KB960859)
Ενημέρωση ασφαλείας για Windows XP (KB961371)
Ενημέρωση ασφαλείας για Windows XP (KB961373)
Ενημέρωση ασφαλείας για Windows XP (KB961501)
Ενημέρωση ασφαλείας για Windows XP (KB968537)
Ενημέρωση ασφαλείας για Windows XP (KB969059)
Ενημέρωση ασφαλείας για Windows XP (KB969898)
Ενημέρωση ασφαλείας για Windows XP (KB969947)
Ενημέρωση ασφαλείας για Windows XP (KB970238)
Ενημέρωση ασφαλείας για Windows XP (KB970430)
Ενημέρωση ασφαλείας για Windows XP (KB971032)
Ενημέρωση ασφαλείας για Windows XP (KB971468)
Ενημέρωση ασφαλείας για Windows XP (KB971486)
Ενημέρωση ασφαλείας για Windows XP (KB971557)
Ενημέρωση ασφαλείας για Windows XP (KB971633)
Ενημέρωση ασφαλείας για Windows XP (KB971657)
Ενημέρωση ασφαλείας για Windows XP (KB972270)
Ενημέρωση ασφαλείας για Windows XP (KB973346)
Ενημέρωση ασφαλείας για Windows XP (KB973354)
Ενημέρωση ασφαλείας για Windows XP (KB973507)
Ενημέρωση ασφαλείας για Windows XP (KB973525)
Ενημέρωση ασφαλείας για Windows XP (KB973869)
Ενημέρωση ασφαλείας για Windows XP (KB973904)
Ενημέρωση ασφαλείας για Windows XP (KB974112)
Ενημέρωση ασφαλείας για Windows XP (KB974318)
Ενημέρωση ασφαλείας για Windows XP (KB974392)
Ενημέρωση ασφαλείας για Windows XP (KB974571)
Ενημέρωση ασφαλείας για Windows XP (KB975025)
Ενημέρωση ασφαλείας για Windows XP (KB975467)
Ενημέρωση ασφαλείας για Windows XP (KB975560)
Ενημέρωση ασφαλείας για Windows XP (KB975561)
Ενημέρωση ασφαλείας για Windows XP (KB975713)
Ενημέρωση ασφαλείας για Windows XP (KB977165)
Ενημέρωση ασφαλείας για Windows XP (KB977914)
Ενημέρωση ασφαλείας για Windows XP (KB978037)
Ενημέρωση ασφαλείας για Windows XP (KB978251)
Ενημέρωση ασφαλείας για Windows XP (KB978262)
Ενημέρωση ασφαλείας για Windows XP (KB978706)
Ενημέρωση για Windows Internet Explorer 8 (KB976662)
Ενημέρωση για Windows Internet Explorer 8 (KB976749)
Ενημέρωση για Windows XP (KB894391)
Ενημέρωση για Windows XP (KB898461)
Ενημέρωση για Windows XP (KB900485)
Ενημέρωση για Windows XP (KB908531)
Ενημέρωση για Windows XP (KB910437)
Ενημέρωση για Windows XP (KB911280)
Ενημέρωση για Windows XP (KB916595)
Ενημέρωση για Windows XP (KB920872)
Ενημέρωση για Windows XP (KB922582)
Ενημέρωση για Windows XP (KB925720)
Ενημέρωση για Windows XP (KB927891)
Ενημέρωση για Windows XP (KB929338)
Ενημέρωση για Windows XP (KB930916)
Ενημέρωση για Windows XP (KB931836)
Ενημέρωση για Windows XP (KB932823-v3)
Ενημέρωση για Windows XP (KB933360)
Ενημέρωση για Windows XP (KB938828)
Ενημέρωση για Windows XP (KB942763)
Ενημέρωση για Windows XP (KB942840)
Ενημέρωση για Windows XP (KB951072-v2)
Ενημέρωση για Windows XP (KB955759)
Ενημέρωση για Windows XP (KB955839)
Ενημέρωση για Windows XP (KB961503)
Ενημέρωση για Windows XP (KB967715)
Ενημέρωση για Windows XP (KB968389)
Ενημέρωση για Windows XP (KB971737)
Ενημέρωση για Windows XP (KB973687)
Ενημέρωση για Windows XP (KB973815)
Επείγουσα επιδιόρθωση για Windows Internet Explorer 7 (KB947864)
Επείγουσα επιδιόρθωση για Windows XP (KB942288-v3)
Επείγουσα επιδιόρθωση για Windows XP (KB952287)
Επείγουσα επιδιόρθωση για Windows XP (KB961118)
Επείγουσα επιδιόρθωση για Windows XP (KB970653-v3)
Επείγουσα επιδιόρθωση για Windows XP (KB976098-v2)
Επείγουσα επιδιόρθωση για Windows XP (KB979306)
Εργαλείο αποστολής του Windows Live
Συλλογή φωτογραφιών του Windows Live

Hi mlrs,

Welcome to the forum.

My nickname is deltalima and I will be helping you with your computer problems.

The logs can take some time to research, so please be patient with me.

Please note the following:

• I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
• The fixes are specific to your problem and should only be used for this issue on this machine.
• Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
• If after 3 days you have not responded to this topic, it will be closed, and you will need to start a new one.
• It's often worth reading through these instructions and printing them for ease of reference.
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
• Please reply to this thread. Do not start a new topic.

Remove P2P Programs

• I notice there are signs of one or more P2P (Person to Person) File Sharing Programs on your computer.
  
  LimeWire 5.4.6
  
  
• Please read the Guidelines for P2P Programs where we explain why it's not a good idea to have them.
  
• Note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.
  
  
• Click on start
• Then Run
• In the open text entry box please copy/paste appwiz.cpl Then click enter.
• Press the "Remove" or "Change/Remove"...button to uninstall the programs listed above (in red) and any other P2P you have installed NOW.
• Take care when answering any questions posed by an uninstaller. Some questions may be worded to deceive you into keeping the program.

CKScanner:

• Please download CKScanner from here to your Desktop.

Make sure that CKScanner.exe is on the your Desktop before running the application!

• Double-click on CKScanner.exe and click Search For Files.
• After a very short time, when the cursor hourglass disappears, click Save List To File.
• A message box will verify the file saved
• Double-click on the CKFiles.txt icon on your Desktop and copy/paste the contents in your next reply.

Thanks for the help deltalima.

Here's the text:

CKScanner - Additional Security Risks - These are not necessarily bad
c:\documents and settings\admin\Επιφάνεια εργασίας\programs\cryptload_1.1.6\plugins\crypt.dll
c:\program files\barsim\barsim 1.5.3\crack\barsim.exe
c:\program files\garena\plugins\ui\avoidcrackplugin.dll
scanner sequence 3.AB.11
----- EOF -----

Hi mlrs,

We will need to remove Spybot - Search & Destroy as it may interfere with some of the fixes, it can be reinstalled later if required.

• Click Start, point to Settings, and then click Control Panel.
• In Control Panel, double-click Add or Remove Programs.
• In Add or Remove Programs,
  highlight Spybot - Search & Destroy
  click Remove
  highlight Ask Toolbar
  click Remove
  highlight Search Settings v1.2.3
  click Remove
  highlight Dealio Toolbar v4.0.2
  click Remove
• Close the Add or Remove Programs and the Control Panel windows.

Upload a File to Virustotal

Please go to Virustotal

Copy/paste this file and path into the white box at the top:

C:\DOCUME~1\Admin\APPLIC~1\LISTST~1\ABOUTPLUS.exe

Press Submit - this will submit the file for testing.
Please wait for all the scanners to finish then copy and paste the results in your next response.

Download and run OTL
Download OTL by Old Timer and save it to your Desktop.

• Double click on OTL.exe to run it.
• Under Output, ensure that Minimal Output is selected.
• Under Extra Registry section, select Use SafeList.
• Click the Scan All Users checkbox.
• Click on Run Scan at the top left hand corner.
• When done, two Notepad files will open.
  
  • OTL.txt <-- Will be opened
  • Extras.txt <-- Will be minimized
• Please post the contents of these 2 Notepad files in your next reply.

Please download GMER Rootkit Scanner from here.

• Double click the .exe file. If asked to allow gmer.sys driver to load, please consent
• If it gives you a warning at program start about rootkit activity and asks if you want to run a scan...click NO.
• Run Gmer again and click on the Rootkit tab.
• Look at the right hand side (under Files) and uncheck all drives with the exception of your C drive.
• Make sure all other boxes on the right of the screen are checked, EXCEPT for "Show All".
• Click on the "Scan" and wait for the scan to finish.
  Note: Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan completes. Also do not use your computer during the scan.
• When completed, click on the Copy button and right-click on your Desktop, choose "New" > Text document. Once the file is created, open it and right-click again and choose Paste or Ctrl+V. Save the file as gmer.txt and copy the information in your next reply.
• Note: If you have any problems, try running GMER in SAFE MODE

Important! Please do not select the "Show all" checkbox during the scan..

Please post the GMER log and the results from Virustotal along with OTL.txt and Extras.txt from the OTL scan into your next reply.

C:\DOCUME~1\Admin\APPLIC~1\LISTST~1\ABOUTPLUS.exe
It says it doesn't exist.

Shall i continue with the rest?

Shall i continue with the rest?

Yes, please continue with the rest.

Search settings doesn't pop up any more.
Here are the texts:

OTL logfile created on: 30/3/2010 11:54:43 πμ - Run 1
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Documents and Settings\Admin\Επιφάνεια εργασίας
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000408 | Country: Ελλάδα | Language: ELL | Date Format: d/M/yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 65,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 117,40 Gb Total Space | 16,25 Gb Free Space | 13,84% Space Free | Partition Type: NTFS
Drive D: | 31,64 Gb Total Space | 17,02 Gb Free Space | 53,81% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 2,30 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
G: Drive not present or media not loaded
Drive H: | 298,02 Gb Total Space | 198,06 Gb Free Space | 66,46% Space Free | Partition Type: FAT32
I: Drive not present or media not loaded

Computer Name: PC
Current User Name: Admin
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Admin\Επιφάνεια εργασίας\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe (Sony Ericsson Mobile Communications AB)
PRC - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
PRC - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe ()
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
PRC - C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
PRC - C:\WINDOWS\system32\HPZipm12.exe (HP)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
PRC - C:\WINDOWS\vVX3000.exe (Microsoft Corporation)
PRC - C:\Program Files\Comodo\Firewall\cpf.exe (COMODO)
PRC - C:\Program Files\Comodo\Firewall\cmdagent.exe (COMODO)
PRC - C:\WINDOWS\Runservice.exe ()
PRC - C:\WINDOWS\CTHELPER.EXE (Creative Technology Ltd)
PRC - C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe (Creative Technology Ltd.)
PRC - C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe (Hewlett-Packard Co.)
PRC - C:\Program Files\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe (Creative Technology Ltd)
PRC - C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe (Creative Technology Ltd)
PRC - C:\WINDOWS\system32\slserv.exe (Smart Link)
PRC - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe (Symantec Corporation)
PRC - C:\Program Files\Creative\SBAudigy4\DVDAudio\CTDVDDET.exe (Creative Technology Ltd)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Admin\Επιφάνεια εργασίας\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\SweetIM\Messenger\mgAdaptersProxy.dll (SweetIM Technologies Ltd.)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\SweetIM\Messenger\msvcr71.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\CTAGENT.DLL (Creative Technology Ltd)


========== Win32 Services (SafeList) ==========

SRV - (SeaPort) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (OMSI download service) -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe ()
SRV - (EhttpSrv) -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET)
SRV - (ekrn) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP)
SRV - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
SRV - (CmdAgent) -- C:\Program Files\Comodo\Firewall\cmdagent.exe (COMODO)
SRV - (LicCtrlService) -- C:\WINDOWS\Runservice.exe ()
SRV - (SLService) -- C:\windows\System32\slserv.exe (Smart Link)
SRV - (GhostStartService) -- C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe (Symantec Corporation)


========== Driver Services (SafeList) ==========

DRV - (PnkBstrK) -- C:\WINDOWS\system32\drivers\PnkBstrK.sys ()
DRV - (sptd) -- C:\windows\System32\Drivers\sptd.sys ()
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (epfwtdir) -- C:\WINDOWS\system32\drivers\epfwtdir.sys (ESET)
DRV - (ehdrv) -- C:\WINDOWS\system32\drivers\ehdrv.sys (ESET)
DRV - (eamon) -- C:\WINDOWS\system32\drivers\eamon.sys (ESET)
DRV - (s1018mdm) -- C:\WINDOWS\system32\drivers\s1018mdm.sys (MCCI Corporation)
DRV - (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\s1018mgmt.sys (MCCI Corporation)
DRV - (s1018bus) Sony Ericsson Device 1018 driver (WDM) -- C:\WINDOWS\system32\drivers\s1018bus.sys (MCCI Corporation)
DRV - (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS) -- C:\WINDOWS\system32\drivers\s1018nd5.sys (MCCI Corporation)
DRV - (s1018mdfl) -- C:\WINDOWS\system32\drivers\s1018mdfl.sys (MCCI Corporation)
DRV - (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM) -- C:\WINDOWS\system32\drivers\s1018unic.sys (MCCI Corporation)
DRV - (s1018obex) -- C:\WINDOWS\system32\drivers\s1018obex.sys (MCCI Corporation)
DRV - (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM) -- C:\WINDOWS\system32\drivers\s0016unic.sys (MCCI Corporation)
DRV - (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS) -- C:\WINDOWS\system32\drivers\s0016nd5.sys (MCCI Corporation)
DRV - (s0016mdfl) -- C:\WINDOWS\system32\drivers\s0016mdfl.sys (MCCI Corporation)
DRV - (s0016mdm) -- C:\WINDOWS\system32\drivers\s0016mdm.sys (MCCI Corporation)
DRV - (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\s0016mgmt.sys (MCCI Corporation)
DRV - (s0016obex) -- C:\WINDOWS\system32\drivers\s0016obex.sys (MCCI Corporation)
DRV - (s0016bus) Sony Ericsson Device 0016 driver (WDM) -- C:\WINDOWS\system32\drivers\s0016bus.sys (MCCI Corporation)
DRV - (gmer) -- C:\WINDOWS\system32\drivers\gmer.sys (GMER)
DRV - (seehcri) -- C:\WINDOWS\system32\drivers\seehcri.sys (Sony Ericsson Mobile Communications)
DRV - (VX3000) -- C:\WINDOWS\system32\drivers\VX3000.sys (Microsoft Corporation)
DRV - (Inspect) -- C:\windows\System32\DRIVERS\inspect.sys (COMODO)
DRV - (CmdMon) -- C:\WINDOWS\system32\drivers\cmdmon.sys (Comodo Research Lab., Inc.)
DRV - (atksgt) -- C:\WINDOWS\system32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\WINDOWS\system32\drivers\lirsgt.sys ()
DRV - (RivaTuner32) -- C:\Program Files\RivaTuner v2.0 RC 16\RivaTuner32.sys ()
DRV - (JRAID) -- C:\windows\system32\DRIVERS\jraid.sys (JMicron Technology Corp.)
DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (AnyDVD) -- C:\WINDOWS\system32\drivers\AnyDVD.sys (SlySoft, Inc.)
DRV - (JGOGO) -- C:\windows\system32\DRIVERS\JGOGO.sys (JMicron )
DRV - (AsIO) -- C:\WINDOWS\system32\drivers\AsIO.sys ()
DRV - (PfModNT) -- C:\WINDOWS\system32\drivers\pfmodnt.sys (Creative Technology Ltd.)
DRV - (ctaud2k) Creative Audio Driver (WDM) -- C:\WINDOWS\system32\drivers\ctaud2k.sys (Creative Technology Ltd)
DRV - (ctprxy2k) -- C:\WINDOWS\system32\drivers\ctprxy2k.sys (Creative Technology Ltd)
DRV - (ha10kx2k) -- C:\WINDOWS\system32\drivers\ha10kx2k.sys (Creative Technology Ltd)
DRV - (hap17v2k) -- C:\WINDOWS\system32\drivers\haP17v2k.sys (Creative Technology Ltd)
DRV - (hap16v2k) -- C:\WINDOWS\system32\drivers\haP16v2k.sys (Creative Technology Ltd)
DRV - (ossrv) -- C:\WINDOWS\system32\drivers\ctoss2k.sys (Creative Technology Ltd.)
DRV - (ctsfm2k) -- C:\WINDOWS\system32\drivers\ctsfm2k.sys (Creative Technology Ltd)
DRV - (emupia) -- C:\WINDOWS\system32\drivers\emupia2k.sys (Creative Technology Ltd)
DRV - (ctac32k) -- C:\WINDOWS\system32\drivers\ctac32k.sys (Creative Technology Ltd)
DRV - (speedfan) -- C:\windows\system32\speedfan.sys (Windows (R) 2000 DDK provider)
DRV - (ctdvda2k) -- C:\WINDOWS\system32\drivers\ctdvda2k.sys (Creative Technology Ltd)
DRV - (ElbyCDIO) -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV - (WmFilter) -- C:\WINDOWS\system32\drivers\WmFilter.sys (Logitech Inc.)
DRV - (WmBEnum) -- C:\WINDOWS\system32\drivers\WmBEnum.sys (Logitech Inc.)
DRV - (WmVirHid) -- C:\WINDOWS\system32\drivers\WmVirHid.sys (Logitech Inc.)
DRV - (WmXlCore) -- C:\WINDOWS\system32\drivers\WmXlCore.sys (Logitech Inc.)
DRV - (ElbyDelay) -- C:\WINDOWS\system32\drivers\ElbyDelay.sys (Elaborate Bytes AG)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (MTsensor) -- C:\WINDOWS\system32\drivers\ASACPI.sys ()
DRV - (usbaudio) Πρόγραμμα οδήγησης ήχου USB (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (SlNtHal) -- C:\WINDOWS\system32\drivers\slnthal.sys (Smart Link)
DRV - (SlWdmSup) -- C:\WINDOWS\system32\drivers\slwdmsup.sys (Smart Link)
DRV - (Slntamr) -- C:\WINDOWS\system32\drivers\slntamr.sys (Smart Link)
DRV - (NtMtlFax) -- C:\WINDOWS\system32\drivers\ntmtlfax.sys (Smart Link)
DRV - (Mtlmnt5) -- C:\WINDOWS\system32\drivers\mtlmnt5.sys (Smart Link)
DRV - (RecAgent) -- C:\windows\system32\DRIVERS\RecAgent.sys (Smart Link)
DRV - (Mtlstrm) -- C:\WINDOWS\system32\drivers\mtlstrm.sys (Smart Link)
DRV - (GhPciScan) -- C:\Program Files\Symantec\Norton Ghost 2003\GhPciScan.sys (Symantec Corporation)
DRV - (Aspi32) -- C:\WINDOWS\system32\drivers\ASPI32.SYS (Adaptec)
DRV - (USB_RNDIS) -- C:\WINDOWS\system32\drivers\usb8023k.sys (Microsoft Corporation)
DRV - (MODEMCSA) -- C:\WINDOWS\system32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (giveio) -- C:\windows\system32\giveio.sys ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=13928&l=dis
IE - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\..\URLSearchHook: {b317125e-2f10-4388-bf1f-2c31c6cd89ed} - C:\Program Files\DigitalPowered\tbDig1.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.order.1: "Ask"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=616163"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.gr/"
FF - prefs.js..extensions.enabledItems: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}:2.5.6.0
FF - prefs.js..extensions.enabledItems: [removed]:1.1.1.0014
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100211.5
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: [removed]:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 9
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=616163&p="
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "chrome://browser-region/locale/region.properties"

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.2pre\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/03/30 02:03:44 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.2pre\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/03/24 13:41:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2009/04/09 23:24:58 | 000,000,000 | ---D | M]

[2009/04/04 18:24:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Application Data\Mozilla\Extensions
[2009/04/04 18:24:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Application Data\Mozilla\Extensions\[removed]
[2010/03/29 13:16:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\vyn2ln1o.default\extensions
[2009/08/10 11:40:14 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\vyn2ln1o.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/02/12 18:58:27 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\vyn2ln1o.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/01/26 20:15:13 | 000,000,000 | ---D | M] (BS Player Toolbar) -- C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\vyn2ln1o.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
[2009/12/04 01:00:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\vyn2ln1o.default\extensions\[removed]
[2009/11/10 22:04:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\vyn2ln1o.default\extensions\[removed]
[2009/07/21 14:05:05 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\vyn2ln1o.default\searchplugins\ask.xml
[2008/12/12 20:27:00 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\vyn2ln1o.default\searchplugins\sweetim.xml
[2010/03/30 02:07:03 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/03/12 20:53:06 | 000,001,525 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2010/03/12 20:53:06 | 000,000,760 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2010/03/12 20:53:06 | 000,001,219 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-el.xml

O1 HOSTS File: ([2010/03/08 17:24:33 | 000,379,546 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 http://www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 http://www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 http://www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 http://www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 http://www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 http://www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 http://www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 http://www.100888290cs.com
O1 - Hosts: 127.0.0.1 http://www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 13102 more lines...
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (DigitalPowered Toolbar) - {b317125e-2f10-4388-bf1f-2c31c6cd89ed} - C:\Program Files\DigitalPowered\tbDig1.dll (Conduit Ltd.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (BS.Player ControlBar) - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (DigitalPowered Toolbar) - {b317125e-2f10-4388-bf1f-2c31c6cd89ed} - C:\Program Files\DigitalPowered\tbDig1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\..\Toolbar\WebBrowser: (BS.Player ControlBar) - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll ()
O3 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\..\Toolbar\WebBrowser: (DigitalPowered Toolbar) - {B317125E-2F10-4388-BF1F-2C31C6CD89ED} - C:\Program Files\DigitalPowered\tbDig1.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [AudioDrvEmulator] C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [COMODO Firewall Pro] C:\Program Files\Comodo\Firewall\CPF.exe (COMODO)
O4 - HKLM..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy4\DVDAudio\CTDVDDET.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTHelper] C:\windows\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [GhostStartTrayApp] C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [HPHUPD08] C:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe (Hewlett-Packard)
O4 - HKLM..\Run: [JMB36X Configure] C:\windows\System32\JMRaidTool.exe (JMicron Technology Corp.)
O4 - HKLM..\Run: [LifeCam] C:\Program Files\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe File not found
O4 - HKLM..\Run: [RCSystem] C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VX3000] C:\WINDOWS\vVX3000.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003..\Run: [4 Play] C:\DOCUME~1\Admin\APPLIC~1\LISTST~1\ABOUTPLUS.exe File not found
O4 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe File not found
O4 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe (Sony Ericsson Mobile Communications AB)
O4 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003..\Run: [Start WingMan Profiler] File not found
O4 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003..\Run: [VeohPlugin] C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe (Veoh Networks)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Προγράμματα\Εκκίνηση\Γρήγορη εκκίνηση HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O7 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 1
O7 - HKU\S-1-5-21-1343024091-1604221776-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O9 - Extra Button: Προσθήκη στο ιστολόγιο - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Προσθήκη στο ιστολόγιο στο Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab (Solitaire Showdown Class)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/DE-DE/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab (Minesweeper Flags Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Τρέχουσα αρχική σελίδα) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Desktop Background.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Desktop Background.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/07/30 11:30:42 | 000,000,154 | R--- | M] () - F:\autorun.cfg -- [ UDF ]
O32 - AutoRun File - [2008/11/27 15:02:24 | 000,214,280 | R--- | M] (Sports Interactive) - F:\autorun.exe -- [ UDF ]
O32 - AutoRun File - [2006/09/11 16:26:42 | 000,000,027 | R--- | M] () - F:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2008/10/24 14:30:10 | 000,000,088 | R--- | M] () - H:\autorun.inf -- [ FAT32 ]
O33 - MountPoints2\{deaae7df-2312-11db-a1fb-001731bf46b1}\Shell - "" = AutoRun
O33 - MountPoints2\{deaae7df-2312-11db-a1fb-001731bf46b1}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -- File not found
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\TOSHIBA\more4you.exe -- [2009/04/20 20:24:50 | 011,548,576 | ---- | M] (TOSHIBA)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/03/30 11:53:07 | 000,555,520 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\OTL.exe
[2010/03/30 00:08:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Application Data\DivX
[2010/03/29 09:41:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Application Data\Adobe
[2010/03/29 09:37:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Application Data\Creative
[2010/03/29 09:37:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Application Data\Comodo
[2010/03/28 22:17:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Application Data\Macromedia
[2010/03/27 20:34:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2010/03/27 20:34:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Local Settings\Application Data\Temp
[2010/03/27 20:19:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Τα έγγραφά μου\Downloads
[2010/03/27 20:15:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2010/03/27 20:14:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2010/03/27 20:14:19 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2010/03/27 20:13:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\DivX
[2010/03/27 13:32:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Τα έγγραφά μου\Heroes of Newerth
[2010/03/26 12:54:34 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/03/26 12:14:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Τα έγγραφά μου\Sony Ericsson
[2010/03/22 18:05:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Τα έγγραφά μου\Euro Truck Simulator
[2010/03/22 18:00:45 | 000,000,000 | ---D | C] -- C:\Program Files\Euro Truck Simulator
[2010/03/22 17:59:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Τα έγγραφά μου\EuroTruckSimulator
[2010/03/16 19:28:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2010/03/16 18:14:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Local Settings\Application Data\Sony
[2010/03/16 18:14:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Τα έγγραφά μου\My Podcasts
[2010/03/16 18:14:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Τα έγγραφά μου\Media Go
[2010/03/16 18:13:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Sony Shared
[2010/03/16 18:12:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sony Corporation
[2010/03/16 18:12:47 | 000,000,000 | ---D | C] -- C:\Program Files\Sony
[2010/03/16 18:12:30 | 000,016,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spmsg.dll
[2010/03/16 18:04:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Application Data\Sony Setup
[2010/03/16 18:04:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Admin\Application Data\Sony
[2010/03/16 18:04:36 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Setup
[2010/03/12 00:58:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/03/12 00:57:53 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\windows\System32\javaws.exe
[2010/03/12 00:57:53 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\windows\System32\javaw.exe
[2010/03/12 00:57:52 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\windows\System32\java.exe
[2010/03/08 20:59:18 | 000,094,208 | ---- | C] (DivX, Inc.) -- C:\windows\System32\dpl100.dll
[2010/03/06 11:19:30 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\browserchoice.exe
[2010/03/02 21:16:04 | 000,353,592 | ---- | C] (DivX, Inc.) -- C:\windows\System32\DivXControlPanelApplet.cpl
[2009/11/29 19:02:40 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\Documents and Settings\All Users\Application Data\hpe437.dll
[2009/11/12 02:44:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2009/07/27 15:00:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\DigitalPowered
[2009/05/21 16:35:49 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\Documents and Settings\All Users\Application Data\hpe11C5.dll
[2008/04/15 12:48:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\ESET
[2007/10/22 09:27:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[2006/08/03 19:11:34 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2006/08/03 19:11:34 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2005/06/18 09:04:56 | 000,033,792 | R--- | C] ( ) -- C:\windows\System32\a3d.dll
[2005/05/11 23:36:48 | 000,012,288 | ---- | C] (Hewlett-Packard Co.) -- C:\WINDOWS\Fonts\RandFont.dll
[5 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]
[10 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/03/30 11:53:33 | 000,555,520 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\OTL.exe
[2010/03/30 11:44:43 | 004,958,588 | ---- | M] () -- C:\windows\{00000001-00000000-00000006-00001102-00000008-10211102}.CDF
[2010/03/30 11:44:36 | 000,000,809 | -HS- | M] () -- C:\windows\System32\mmf.sys
[2010/03/30 11:44:26 | 000,001,182 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/03/30 11:44:26 | 000,000,006 | -H-- | M] () -- C:\windows\tasks\SA.DAT
[2010/03/30 11:44:24 | 000,002,048 | --S- | M] () -- C:\windows\bootstat.dat
[2010/03/30 03:01:42 | 016,252,928 | -H-- | M] () -- C:\Documents and Settings\Admin\NTUSER.DAT
[2010/03/30 03:01:41 | 000,032,776 | ---- | M] () -- C:\windows\System32\BMXStateBkp-{00000001-00000000-00000006-00001102-00000008-10211102}.rfx
[2010/03/30 03:01:41 | 000,032,776 | ---- | M] () -- C:\windows\System32\BMXState-{00000001-00000000-00000006-00001102-00000008-10211102}.rfx
[2010/03/30 03:01:41 | 000,031,224 | ---- | M] () -- C:\windows\System32\BMXCtrlState-{00000001-00000000-00000006-00001102-00000008-10211102}.rfx
[2010/03/30 03:01:41 | 000,031,224 | ---- | M] () -- C:\windows\System32\BMXBkpCtrlState-{00000001-00000000-00000006-00001102-00000008-10211102}.rfx
[2010/03/30 03:01:41 | 000,011,564 | ---- | M] () -- C:\windows\System32\DVCState-{00000001-00000000-00000006-00001102-00000008-10211102}.rfx
[2010/03/30 03:01:41 | 000,001,080 | ---- | M] () -- C:\windows\System32\settingsbkup.sfm
[2010/03/30 03:01:41 | 000,001,080 | ---- | M] () -- C:\windows\System32\settings.sfm
[2010/03/30 03:01:36 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\Admin\ntuser.ini
[2010/03/30 03:00:50 | 004,958,588 | ---- | M] () -- C:\windows\{00000001-00000000-00000006-00001102-00000008-10211102}.BAK
[2010/03/30 03:00:00 | 000,000,258 | -H-- | M] () -- C:\windows\tasks\A96586FB906A0267.job
[2010/03/30 02:39:00 | 000,001,186 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/03/30 00:14:56 | 000,002,062 | ---- | M] () -- C:\windows\Lexicon.ini
[2010/03/30 00:00:00 | 000,000,366 | ---- | M] () -- C:\windows\tasks\HPpromotions journeysoftware.job
[2010/03/29 23:48:23 | 000,451,584 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\CKScanner.exe
[2010/03/29 22:50:48 | 000,233,472 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\βδ1.mdb
[2010/03/29 15:00:01 | 000,000,284 | ---- | M] () -- C:\windows\tasks\AppleSoftwareUpdate.job
[2010/03/28 13:05:15 | 021,008,741 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\EuroTruckSimulator_setup_gb_1_3.exe
[2010/03/28 12:01:48 | 000,554,768 | ---- | M] () -- C:\windows\System32\perfh008.dat
[2010/03/28 12:01:48 | 000,444,930 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2010/03/28 12:01:48 | 000,096,974 | ---- | M] () -- C:\windows\System32\perfc008.dat
[2010/03/28 12:01:48 | 000,072,518 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2010/03/28 12:01:47 | 001,184,578 | ---- | M] () -- C:\windows\System32\PerfStringBackup.INI
[2010/03/27 13:32:46 | 000,001,588 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\Heroes of Newerth.lnk
[2010/03/27 13:28:39 | 355,046,139 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\HoNClient-0.3.0.exe
[2010/03/26 12:54:35 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\HijackThis.lnk
[2010/03/24 14:17:34 | 000,090,624 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\HondaCivicTypeR97777.thm
[2010/03/24 13:46:24 | 004,677,293 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\A2_Uploader_V3.zip
[2010/03/22 18:04:38 | 000,001,658 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\Euro Truck Simulator.lnk
[2010/03/22 17:55:44 | 087,286,535 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\trilor.part4.rar
[2010/03/22 17:42:59 | 104,800,000 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\trilor.part3.rar
[2010/03/22 17:12:58 | 104,800,000 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\trilor.part2.rar
[2010/03/22 16:42:35 | 104,800,000 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\trilor.part1.rar
[2010/03/20 05:15:24 | 000,084,480 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\Νέο - Έγγραφο του Microsoft Word (2).doc
[2010/03/18 11:19:32 | 000,002,206 | ---- | M] () -- C:\windows\System32\wpa.dbl
[2010/03/18 02:35:45 | 000,001,374 | ---- | M] () -- C:\windows\imsins.BAK
[2010/03/17 19:20:37 | 000,101,376 | ---- | M] () -- C:\Documents and Settings\Admin\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/17 12:19:48 | 000,121,344 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\Βεβαίωση gia city.doc
[2010/03/16 19:28:41 | 000,000,000 | -H-- | M] () -- C:\windows\System32\drivers\umdf\Msft_User_WpdMtpDr_01_00_00.Wdf
[2010/03/16 18:10:22 | 000,000,000 | -H-- | M] () -- C:\windows\System32\drivers\umdf\MsftWdf_user_01_00_00.Wdf
[2010/03/13 19:50:33 | 000,082,246 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\mobil1.jpg
[2010/03/13 19:46:30 | 000,134,164 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\wwf.jpg
[2010/03/13 19:41:52 | 000,300,352 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\1988_martha_stewart_ad_kmart retail.jpg
[2010/03/13 19:31:45 | 000,168,063 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\b2b.jpg
[2010/03/13 19:28:52 | 000,196,286 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\crx_commercial.jpg
[2010/03/13 19:10:37 | 000,146,548 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\yamaha prosfores.jpg
[2010/03/13 19:06:46 | 000,017,939 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\clever-advertisement post it.jpg
[2010/03/13 19:03:10 | 000,144,580 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\perrier.jpg
[2010/03/13 19:00:02 | 000,035,923 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\nike t90.jpg
[2010/03/13 18:55:26 | 000,041,264 | ---- | M] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\greece-the-true-experience-450x325.jpg
[2010/03/08 20:59:18 | 000,094,208 | ---- | M] (DivX, Inc.) -- C:\windows\System32\dpl100.dll
[2010/03/08 17:24:33 | 000,379,546 | R--- | M] () -- C:\windows\System32\drivers\etc\hosts
[2010/03/06 21:46:48 | 000,199,168 | ---- | M] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\dt_diavouleysh.doc
[2010/03/02 21:16:04 | 000,353,592 | ---- | M] (DivX, Inc.) -- C:\windows\System32\DivXControlPanelApplet.cpl
[5 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]
[10 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/03/29 23:48:23 | 000,451,584 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\CKScanner.exe
[2010/03/28 13:04:19 | 021,008,741 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\EuroTruckSimulator_setup_gb_1_3.exe
[2010/03/27 20:29:23 | 000,001,186 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/03/27 20:29:23 | 000,001,182 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/03/27 13:32:46 | 000,001,588 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\Heroes of Newerth.lnk
[2010/03/27 13:20:24 | 355,046,139 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\HoNClient-0.3.0.exe
[2010/03/26 12:54:35 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\HijackThis.lnk
[2010/03/24 14:17:33 | 000,090,624 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\HondaCivicTypeR97777.thm
[2010/03/24 13:45:23 | 004,677,293 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\A2_Uploader_V3.zip
[2010/03/22 18:04:38 | 000,001,658 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\Euro Truck Simulator.lnk
[2010/03/22 17:44:21 | 087,286,535 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\trilor.part4.rar
[2010/03/22 17:29:23 | 104,800,000 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\trilor.part3.rar
[2010/03/22 16:59:10 | 104,800,000 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\trilor.part2.rar
[2010/03/22 16:28:45 | 104,800,000 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\trilor.part1.rar
[2010/03/20 05:15:10 | 000,084,480 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\Νέο - Έγγραφο του Microsoft Word (2).doc
[2010/03/18 11:50:23 | 002,254,655 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\DSC00008.JPG
[2010/03/18 11:50:21 | 002,339,473 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\DSC00007.JPG
[2010/03/17 12:19:47 | 000,121,344 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\Βεβαίωση gia city.doc
[2010/03/13 19:50:32 | 000,082,246 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\mobil1.jpg
[2010/03/13 19:46:29 | 000,134,164 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\wwf.jpg
[2010/03/13 19:41:50 | 000,300,352 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\1988_martha_stewart_ad_kmart retail.jpg
[2010/03/13 19:31:45 | 000,168,063 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\b2b.jpg
[2010/03/13 19:28:50 | 000,196,286 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\crx_commercial.jpg
[2010/03/13 19:10:37 | 000,146,548 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\yamaha prosfores.jpg
[2010/03/13 19:06:46 | 000,017,939 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\clever-advertisement post it.jpg
[2010/03/13 19:03:10 | 000,144,580 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\perrier.jpg
[2010/03/13 19:00:02 | 000,035,923 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\nike t90.jpg
[2010/03/13 18:55:25 | 000,041,264 | ---- | C] () -- C:\Documents and Settings\Admin\Τα έγγραφά μου\greece-the-true-experience-450x325.jpg
[2010/03/06 21:46:48 | 000,199,168 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\dt_diavouleysh.doc
[2010/03/02 12:39:47 | 000,233,472 | ---- | C] () -- C:\Documents and Settings\Admin\Επιφάνεια εργασίας\βδ1.mdb
[2009/11/25 23:39:49 | 000,691,696 | ---- | C] () -- C:\windows\System32\drivers\sptd.sys
[2009/11/06 11:58:04 | 000,178,975 | ---- | C] () -- C:\windows\System32\xlive.dll.cat
[2009/08/16 16:27:32 | 000,056,320 | ---- | C] () -- C:\windows\System32\iyvu9_32.dll
[2009/08/16 16:22:19 | 000,000,232 | ---- | C] () -- C:\windows\XIIIHooligans.ini
[2009/08/03 01:21:54 | 000,058,648 | ---- | C] () -- C:\windows\System32\AgCPanelTraditionalChinese.dll
[2009/08/03 01:21:54 | 000,058,648 | ---- | C] () -- C:\windows\System32\AgCPanelSwedish.dll
[2009/08/03 01:21:54 | 000,058,648 | ---- | C] () -- C:\windows\System32\AgCPanelSpanish.dll
[2009/08/03 01:21:54 | 000,058,648 | ---- | C] () -- C:\windows\System32\AgCPanelSimplifiedChinese.dll
[2009/08/03 01:21:54 | 000,058,648 | ---- | C] () -- C:\windows\System32\AgCPanelPortugese.dll
[2009/08/03 01:21:54 | 000,058,648 | ---- | C] () -- C:\windows\System32\AgCPanelKorean.dll
[2009/08/03 01:21:54 | 000,058,648 | ---- | C] () -- C:\windows\System32\AgCPanelJapanese.dll
[2009/08/03 01:21:52 | 000,058,648 | ---- | C] () -- C:\windows\System32\AgCPanelGerman.dll
[2009/08/03 01:21:52 | 000,058,648 | ---- | C] () -- C:\windows\System32\AgCPanelFrench.dll
[2008/08/08 17:51:39 | 000,000,031 | ---- | C] () -- C:\windows\System32\AsDays.ini
[2008/07/26 07:48:00 | 000,286,720 | ---- | C] () -- C:\windows\System32\nvnt4cpl.dll
[2008/07/11 15:27:50 | 000,034,296 | ---- | C] () -- C:\windows\System32\drivers\mbamcatchme.sys
[2008/06/06 23:11:56 | 000,138,576 | ---- | C] () -- C:\windows\System32\drivers\PnkBstrK.sys
[2008/06/06 23:11:56 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\Admin\Application Data\PnkBstrK.sys
[2008/06/06 23:11:31 | 000,000,319 | ---- | C] () -- C:\windows\game.ini
[2008/06/06 12:59:22 | 000,015,498 | ---- | C] () -- C:\windows\VX3000.ini
[2008/06/05 09:58:26 | 000,197,912 | ---- | C] () -- C:\windows\System32\physxcudart_20.dll
[2008/05/24 12:55:00 | 003,614,208 | ---- | C] () -- C:\windows\System32\libavcodec.dll
[2008/05/24 12:55:00 | 000,741,376 | ---- | C] () -- C:\windows\System32\audxlib.dll
[2008/05/24 12:55:00 | 000,711,168 | ---- | C] () -- C:\windows\System32\xvidcore.dll
[2008/05/24 12:55:00 | 000,692,224 | ---- | C] () -- C:\windows\System32\ff_x264.dll
[2008/05/24 12:55:00 | 000,455,680 | ---- | C] () -- C:\windows\System32\libmplayer.dll
[2008/05/24 12:55:00 | 000,211,968 | ---- | C] () -- C:\windows\System32\ff_libfaad2.dll
[2008/05/24 12:55:00 | 000,204,800 | ---- | C] () -- C:\windows\System32\TomsMoComp_ff.dll
[2008/05/24 12:55:00 | 000,204,800 | ---- | C] () -- C:\windows\System32\ff_kernelDeint.dll
[2008/05/24 12:55:00 | 000,147,456 | ---- | C] () -- C:\windows\System32\ff_libdts.dll
[2008/05/24 12:55:00 | 000,143,360 | ---- | C] () -- C:\windows\System32\ff_theora.dll
[2008/05/24 12:55:00 | 000,115,200 | ---- | C] () -- C:\windows\System32\ff_tremor.dll
[2008/05/24 12:55:00 | 000,114,688 | ---- | C] () -- C:\windows\System32\libmpeg2_ff.dll
[2008/05/24 12:55:00 | 000,114,688 | ---- | C] () -- C:\windows\System32\ff_realaac.dll
[2008/05/24 12:55:00 | 000,113,152 | ---- | C] () -- C:\windows\System32\ff_samplerate.dll
[2008/05/24 12:55:00 | 000,099,840 | ---- | C] () -- C:\windows\System32\ff_libmad.dll
[2008/05/24 12:55:00 | 000,040,448 | ---- | C] () -- C:\windows\System32\ff_liba52.dll
[2008/05/24 12:55:00 | 000,038,400 | ---- | C] () -- C:\windows\System32\ff_unrar.dll
[2008/05/24 12:55:00 | 000,023,552 | ---- | C] () -- C:\windows\System32\ff_wmv9.dll
[2008/05/24 12:55:00 | 000,007,680 | ---- | C] () -- C:\windows\System32\ff_vfw.dll
[2008/04/30 10:49:12 | 000,000,250 | ---- | C] () -- C:\windows\gmer.ini
[2008/04/30 10:49:11 | 000,819,200 | ---- | C] () -- C:\windows\gmer.dll
[2008/04/20 12:57:20 | 000,000,557 | ---- | C] () -- C:\windows\wininit.ini
[2008/03/29 18:42:22 | 000,245,248 | ---- | C] () -- C:\windows\System32\dxr.dll
[2008/03/29 18:42:20 | 000,159,744 | ---- | C] () -- C:\windows\System32\mmfinfo.dll
[2008/03/29 18:42:14 | 000,102,400 | ---- | C] () -- C:\windows\System32\avss.dll
[2008/03/29 18:42:08 | 000,148,992 | ---- | C] () -- C:\windows\System32\mkx.dll
[2008/03/29 18:42:04 | 000,141,312 | ---- | C] () -- C:\windows\System32\mp4.dll
[2008/03/29 18:42:04 | 000,108,032 | ---- | C] () -- C:\windows\System32\avi.dll
[2008/03/29 18:42:02 | 000,120,832 | ---- | C] () -- C:\windows\System32\ogm.dll
[2008/03/29 18:42:00 | 000,163,840 | ---- | C] () -- C:\windows\System32\ts.dll
[2008/03/29 18:41:54 | 000,097,280 | ---- | C] () -- C:\windows\System32\avs.dll
[2008/03/29 18:41:52 | 000,079,360 | ---- | C] () -- C:\windows\System32\mkzlib.dll
[2008/03/29 18:41:52 | 000,023,552 | ---- | C] () -- C:\windows\System32\mkunicode.dll
[2008/03/21 23:30:08 | 003,596,288 | ---- | C] () -- C:\windows\System32\qt-dx331.dll
[2008/03/21 23:28:54 | 000,000,416 | ---- | C] () -- C:\windows\System32\dtu100.dll.manifest
[2007/10/13 12:30:20 | 000,000,137 | ---- | C] () -- C:\windows\System32\Registration.ini
[2007/06/28 21:54:10 | 000,180,224 | ---- | C] () -- C:\windows\System32\xvidvfw.dll
[2007/05/01 17:07:13 | 000,001,765 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2007/04/02 20:34:25 | 000,376,591 | ---- | C] () -- C:\Documents and Settings\Admin\Application Data\PatchUpdate_HP_CounterReport_Update_HPSU.log
[2007/04/02 20:34:25 | 000,000,227 | ---- | C] () -- C:\windows\HP_CounterReport_Update_HPSU.ini
[2007/04/02 20:33:21 | 000,000,234 | ---- | C] () -- C:\windows\PrnHlpLogConfig.ini
[2007/04/02 20:32:46 | 000,002,812 | ---- | C] () -- C:\Documents and Settings\Admin\Application Data\PatchUpdate_InstantShareJPG.log
[2007/04/02 20:32:46 | 000,000,214 | ---- | C] () -- C:\windows\HP_InstantSHareJPG.ini
[2007/04/02 20:32:29 | 000,003,600 | ---- | C] () -- C:\Documents and Settings\Admin\Application Data\PatchUpdate_IZClosingDiscError.log
[2007/04/02 20:32:29 | 000,000,217 | ---- | C] () -- C:\windows\HP_IZClosingDiscErrorPatch.ini
[2007/03/03 20:16:18 | 000,151,201 | ---- | C] () -- C:\Documents and Settings\Admin\Application Data\Update_HP_RedboxHprblog_HPSU.log
[2007/03/03 20:16:18 | 000,000,221 | ---- | C] () -- C:\windows\HP_RedboxHprblog_HPSU.ini
[2007/03/01 23:40:35 | 000,000,046 | ---- | C] () -- C:\windows\adiras.ini
[2007/02/11 15:32:58 | 000,000,023 | ---- | C] () -- C:\windows\BlendSettings.ini
[2006/11/24 19:00:38 | 000,000,809 | -HS- | C] () -- C:\windows\System32\mmf.sys
[2006/11/24 19:00:37 | 000,048,640 | ---- | C] () -- C:\windows\mmfs.dll
[2006/09/01 13:17:42 | 000,010,240 | ---- | C] () -- C:\windows\System32\vidx16.dll
[2006/09/01 13:17:17 | 000,000,009 | ---- | C] () -- C:\windows\Sierra.ini
[2006/08/29 20:37:10 | 000,165,376 | ---- | C] () -- C:\windows\System32\drivers\atksgt.sys
[2006/08/29 20:37:09 | 000,018,048 | ---- | C] () -- C:\windows\System32\drivers\lirsgt.sys
[2006/08/25 18:13:41 | 000,003,972 | ---- | C] () -- C:\windows\System32\drivers\PciBus.sys
[2006/08/13 17:56:58 | 000,000,151 | ---- | C] () -- C:\windows\PhotoSnapViewer.INI
[2006/08/10 11:49:04 | 000,000,072 | ---- | C] () -- C:\windows\sbwin.ini
[2006/08/10 11:47:43 | 000,000,202 | ---- | C] () -- C:\windows\NeroDigital.ini
[2006/08/05 14:15:14 | 000,024,576 | R--- | C] () -- C:\windows\System32\AsIO.dll
[2006/08/05 14:15:14 | 000,005,685 | R--- | C] () -- C:\windows\System32\drivers\AsIO.sys
[2006/08/04 22:27:55 | 000,101,376 | ---- | C] () -- C:\Documents and Settings\Admin\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/08/04 11:54:04 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Admin\Local Settings\Application Data\fusioncache.dat
[2006/08/04 11:41:44 | 000,077,824 | R--- | C] () -- C:\windows\System32\hpzids01.dll
[2006/08/04 11:36:10 | 000,000,749 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2006/08/03 20:42:28 | 000,002,062 | ---- | C] () -- C:\windows\Lexicon.ini
[2006/08/03 20:38:08 | 000,034,308 | ---- | C] () -- C:\windows\System32\BASSMOD.dll
[2006/08/03 20:22:02 | 000,000,482 | ---- | C] () -- C:\windows\ODBC.INI
[2006/08/03 20:11:32 | 000,046,593 | R--- | C] () -- C:\windows\System32\e10kxwdm.ini
[2006/08/03 20:11:32 | 000,000,193 | R--- | C] () -- C:\windows\System32\ctzapxx.ini
[2006/08/03 20:02:25 | 000,000,804 | R--- | C] () -- C:\windows\System32\AsusSetup.ini
[2006/08/03 20:02:25 | 000,000,402 | R--- | C] () -- C:\windows\System32\raidmgmt.ini
[2006/08/03 20:01:42 | 000,005,810 | R--- | C] () -- C:\windows\System32\drivers\ASACPI.sys
[2006/08/03 20:01:33 | 000,024,118 | ---- | C] () -- C:\windows\Ascd_tmp.ini
[2006/08/03 20:01:26 | 000,005,824 | ---- | C] () -- C:\windows\System32\drivers\ASUSHWIO.SYS
[2006/08/03 19:17:34 | 000,003,341 | ---- | C] () -- C:\windows\System32\fxsperf.ini
[2005/07/11 07:44:12 | 000,038,400 | ---- | C] () -- C:\windows\System32\CTBURST.DLL
[2005/06/07 16:10:50 | 000,070,656 | ---- | C] () -- C:\windows\System32\CTMMACTL.DLL
[2003/04/24 15:47:04 | 000,005,697 | ---- | C] () -- C:\windows\System32\OUTLPERF.INI
[2003/03/21 12:56:12 | 000,000,194 | ---- | C] () -- C:\windows\System32\KILL.INI
[1996/04/03 22:33:26 | 000,005,248 | ---- | C] () -- C:\windows\System32\giveio.sys
< End of report >






OTL Extras logfile created on: 30/3/2010 11:54:43 πμ - Run 1
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Documents and Settings\Admin\Επιφάνεια εργασίας
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000408 | Country: Ελλάδα | Language: ELL | Date Format: d/M/yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 65,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 117,40 Gb Total Space | 16,25 Gb Free Space | 13,84% Space Free | Partition Type: NTFS
Drive D: | 31,64 Gb Total Space | 17,02 Gb Free Space | 53,81% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 2,30 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
G: Drive not present or media not loaded
Drive H: | 298,02 Gb Total Space | 198,06 Gb Free Space | 66,46% Space Free | Partition Type: FAT32
I: Drive not present or media not loaded

Computer Name: PC
Current User Name: Admin
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" %*
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\MSN Messenger\msncall.exe" = C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) -- File not found
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" = C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\EA GAMES\Battlefield Vietnam\bfvietnam.exe" = C:\Program Files\EA GAMES\Battlefield Vietnam\bfvietnam.exe:*:Disabled:bfvietnam -- File not found
"C:\Program Files\KONAMI\Pro Evolution Soccer 6\PES6.exe" = C:\Program Files\KONAMI\Pro Evolution Soccer 6\PES6.exe:*:Enabled:pes6.exe -- File not found
"C:\Program Files\LimeWire\LimeWire.exe" = C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire -- File not found
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
"C:\Program Files\AeriaGames\ProjectTorque\ProjectTorque.bin" = C:\Program Files\AeriaGames\ProjectTorque\ProjectTorque.bin:*:Enabled:Project Torque -- File not found
"C:\Program Files\Codemasters\GRID Demo\GRID.exe" = C:\Program Files\Codemasters\GRID Demo\GRID.exe:*:Enabled:GRID Demo -- File not found
"C:\Program Files\Microsoft LifeCam\LifeCam.exe" = C:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe -- (Microsoft Corporation)
"C:\Program Files\Microsoft LifeCam\LifeExp.exe" = C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe -- (Microsoft Corporation)
"C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe" = C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) -- ()
"C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" = C:\Program Files\Veoh Networks\Veoh\VeohClient.exe:*:Disabled:Veoh Client -- File not found
"C:\Program Files\KONAMI\Pro Evolution Soccer 2009\pes2009.exe" = C:\Program Files\KONAMI\Pro Evolution Soccer 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009 -- (Konami Digital Entertainment Co., Ltd.)
"C:\Program Files\TVUPlayer\TVUPlayer.exe" = C:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component -- (TVU networks)
"C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" = C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:*:Enabled:Veoh Web Player -- (Veoh Networks)
"C:\Program Files\VideoLAN\VLC\vlc.exe" = C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player -- ()
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe" = C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box -- (Electronic Arts)
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe" = C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box -- (Electronic Arts)
"C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe" = C:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box -- (Electronic Arts)
"C:\Program Files\Electronic Arts\EADM\Core.exe" = C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager -- File not found
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\Counter-Strike 1.6 V40\hl.exe" = C:\Program Files\Counter-Strike 1.6 V40\hl.exe:*:Enabled:Half-Life Launcher -- File not found
"C:\Documents and Settings\Admin\Local Settings\Temp\Rar$EX01.406\Cs1.6\hltv.exe" = C:\Documents and Settings\Admin\Local Settings\Temp\Rar$EX01.406\Cs1.6\hltv.exe:*:Disabled:HLTV Launcher -- File not found
"C:\Documents and Settings\Admin\Local Settings\Temp\Rar$EX34.766\Cs1.6\hl.exe" = C:\Documents and Settings\Admin\Local Settings\Temp\Rar$EX34.766\Cs1.6\hl.exe:*:Disabled:Half-Life Launcher -- File not found
"C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe" = C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:*:Disabled:Football Manager 2008 -- File not found
"C:\Program Files\Garena\Garena.exe" = C:\Program Files\Garena\Garena.exe:*:Enabled:Garena -- (Garena Online PTE LTD)
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Disabled:Firefox -- (Mozilla Corporation)
"C:\Documents and Settings\Admin\Επιφάνεια εργασίας\U96.exe" = C:\Documents and Settings\Admin\Επιφάνεια εργασίας\U96.exe:*:Disabled:U96 -- File not found
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe" = C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)
"C:\Program Files\Sports Interactive\Football Manager 2010\fm.exe" = C:\Program Files\Sports Interactive\Football Manager 2010\fm.exe:*:Enabled:Football Manager 2010 -- (Sports Interactive)
"C:\Program Files\Sports Interactive\Football Manager 2010 Demo\fm.exe" = C:\Program Files\Sports Interactive\Football Manager 2010 Demo\fm.exe:*:Disabled:Football Manager 2010 Demo -- File not found
"C:\Program Files\Sports Interactive\Football Manager 2009\fm.exe" = C:\Program Files\Sports Interactive\Football Manager 2009\fm.exe:*:Disabled:Football Manager 2009 -- File not found
"C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe" = C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010 -- (Konami Digital Entertainment Co., Ltd.)
"C:\Program Files\Heroes of Newerth\hon.exe" = C:\Program Files\Heroes of Newerth\hon.exe:*:Enabled:Heroes of Newerth -- (S2 Games)
"C:\Program Files\Sony Ericsson\Update Service\Update Service.exe" = C:\Program Files\Sony Ericsson\Update Service\Update Service.exe:*:Enabled:Update Service -- ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{006A0A2F-B99E-424E-85B1-165FFE70D183}" = Windows Live Writer
"{00BE2030-4991-43DF-80ED-358431E39B7C}" = Windows Live Essentials
"{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable
"{03B1B42B-F6DE-41d9-8CFF-DC44E895C7A7}" = PhotoGallery
"{0611BD4E-4FE4-4a62-B0C0-18A4CC463428}" = CP_Package_Variety1
"{09984AEC-6B9F-4ca7-B78D-CB44D4771DA3}" = Destinations
"{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store
"{14001B93-0C6F-4353-8A10-BE96EE174E17}" = Windows Live Toolbar
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1A08F24B-CA66-4BA9-9933-A9D20A66E8D8}" = Βοηθός εισόδου του Windows Live
"{1A655D51-1423-48A3-B748-8F5A0BE294C8}" = Microsoft Visual J# .NET Redistributable Package 1.1
"{1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A}" = CP_Package_Variety3
"{1E99F5D7-4262-4C7C-9135-F066E7485811}" = System Requirements Lab
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F31F120-DA96-4DCF-A823-5820718A2AA6}" = N-Bench_V3
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Εργαλείο αποστολής του Windows Live
"{21DB3D90-D816-4092-A260-CA3F6B55A6DD}" = Sonic_PrimoSDK
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{23A7B376-BBEC-4e76-BBD7-0F155E70D74B}" = CP_Panorama1Config
"{25B4B52B-3998-4a62-AD83-E990B1338F79}" = PS8000
"{266C7330-C0F4-49E5-8F20-A56F9F822875}" = SweetIM Toolbar for Internet Explorer 3.3
"{26A24AE4-039D-4CA4-87B4-2F83216010FF}" = Java(TM) 6 Update 18
"{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}" = Microsoft Games for Windows - LIVE
"{2CADCEAB-D5DA-44D6-B5FC-7DEE87AB3C0C}" = Unload
"{2E0C1913-886B-4C5C-8DAF-D1E649CE5FCC}" = Creative MediaSource
"{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 6.009.00
"{30C19FF2-7FBA-4d09-B9DE-1659977F64F6}" = TrayApp
"{3248F0A8-6813-11D6-A77B-00B0D0150030}" = J2SE Runtime Environment 5.0 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{32BDCCB8-9DC8-496d-9DB1-F77510775BDB}" = InstantShareDevices
"{33D6CC28-9F75-4d1b-A11D-98895B3A3729}" = HP Photosmart 330,380,420,470,7800,8000,8200 Series
"{350C9408-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36E47DA1-10E1-45d9-8B19-14D19607CDCF}" = CP_CalendarTemplates1
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JRAID
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3D9E9EB7-B14F-4AE4-8C1F-1AD4CF3093BE}" = Microsoft .NET Framework 1.1 Greek Language Pack
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = OTEnet-SAGEM Fast 800
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{51962132-EF73-4015-A69E-1538CDDFB835}" = Windows Live Mail
"{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder
"{56EE8B17-8274-418d-89AC-C057C5DB251E}" = RandMap
"{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE}" = WebReg
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{587178E7-B1DF-494E-9838-FA4DD36E873C}" = ASUSUpdate
"{5A01C58E-B0EC-49b9-AD71-7C0468688087}" = CP_Package_Basic1
"{5B622B7A-60FB-4630-B11D-F121D20BCCD6}" = MarketResearch
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5F26311C-B135-4F7F-B11E-8E650F83651E}" = DeviceFunctionQFolder
"{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}" = GameSpy Comrade
"{6132D3E6-F90B-493F-A490-D667B58F833C}" = Microsoft LifeCam
"{66BA8C26-AFE4-4408-807B-43E76B57EF53}" = SkinsHP1
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{755EC5E3-FD51-46bd-A57F-7A2D56FBF061}" = PSTAPlugin
"{769A295C-DCF4-41d6-AFBA-7D9394B23AFE}" = PSPrinters08
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{7B63B2922B174135AFC0E1377DD81EC2}" =
"{7E27304E-BAA2-4d90-A34E-76641FAFABB4}" = CP_AtenaShokunin1Config
"{8234A27D-C5A4-4F84-8718-3BF34BCFC89F}" = JourneySoftwarePromo
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{90110408-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{94F70511-C8A8-413C-AC8D-65313D8D3082}" = Windows Live Messenger
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{974C4B12-4D02-4879-85E0-61C95CC63E9E}" = Fallout 3
"{9A996B6A-846E-4A89-B9C4-17546B7BE49F}" = Burnout(TM) Paradise The Ultimate Box
"{9FEECBDA-8378-4874-AD65-D9E232BE2D11}" = Windows Live Sync
"{A1E4213E-06AD-4C58-8315-92F11531D960}" = SweetIM for Messenger 2.6
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3455242-DAE0-4523-8242-FD82706ABF4B}" = CameraDrivers
"{A5BB5365-EFB4-44c3-A7E2-EB59B7EFD23D}" = CueTour
"{A8AD6CB8-DE96-43FA-9B73-5FB873DD1CAE}" = Sound Blaster Audigy 4
"{A8DB611A-D80E-450D-85F6-3ACDD164BE31}" = Pro Evolution Soccer 2009
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.1
"{B0C30E93-D3D9-4F04-A2AC-54749B573275}" = Command & Conquer 3
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B4D279F1-4309-49cc-A4B5-3A0D2E59C7B5}" = PanoStandAlone
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA}" = CP_Package_Variety2
"{B9242864-2841-4ADE-86E0-8F90F91B04DD}" = Logitech Gaming Software
"{B996AE66-10DB-4ac5-B151-E8B4BFBC42FC}" = BufferChm
"{BA801B94-C28D-46EE-B806-E1E021A3D519}" = Company of Heroes
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BBAAACFA-B012-4367-ADDA-4DDCDFD48F96}" = Norton Ghost
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C0698BDA-0D29-40EE-8570-A31106DF9AB1}" = Medieval II Total War
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = Athlon 64 Processor Driver
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.3.22 Game
"{D87B8C91-4659-4C3B-A894-A4D670AE95E2}" = Συλλογή φωτογραφιών του Windows Live
"{DB0A8A2A-4EA7-4FE3-802E-8A6DEE32696C}_is1" = Orban/Coding Technologies AAC/aacPlus Player Plugin™ 1.0
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E3F90083-80D4-4b5a-87C7-E97E12F5516D}" = HPProductAssistant
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{E9AE9A91-AB45-4321-87BD-AD34855D944F}" = Chessmaster 10th Edition
"{EA103B64-C0E4-4C0E-A506-751590E1653D}" = SolutionCenter
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4}" = Status
"{F7338FA3-DAB5-49B2-900D-0AFB5760C166}" = PC Probe II
"{FBE5AA96-22F0-4C4A-8E92-4BE3498D4CCB}" = Media Go
"{FE57DE70-95DE-4B64-9266-84DA811053DB}" = HP Update
"{FE9C13F6-6BBD-47D3-B939-F7E061BC4930}" = ESET NOD32 Antivirus
"7-Zip" = 7-Zip 4.65
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AnyDVD" = AnyDVD
"AutoHotkey" = AutoHotkey 1.0.48.05
"BS.Player ControlBar" = BS.Player ControlBar
"BSPlayerf" = BS.Player FREE
"CCleaner" = CCleaner (remove only)
"CloneDVD2" = CloneDVD2
"COMODO Firewall Pro" = COMODO Firewall Pro
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"DigitalPowered Toolbar" = DigitalPowered Toolbar
"DivX Content Uploader" = DivX Content Uploader
"DivX Setup.divx.com" = DivX Setup
"DVD Shrink_is1" = DVD Shrink 3.2
"EA Download Manager" = EA Download Manager
"Euro Truck Simulator" = Euro Truck Simulator
"Football Manager 2010" = Football Manager 2010
"Garena" = Garena
"Google Chrome" = Google Chrome
"HijackThis" = HijackThis 2.0.2
"hon" = Heroes of Newerth
"HP Imaging Device Functions" = HP Imaging Device Functions 5.3
"HP Photo & Imaging" = HP Image Zone 5.3
"HP Solution Center & Imaging Support Tools" = HP Solution Center & Imaging Support Tools 5.3
"HPExtendedCapabilities" = HP Extended Capabilities 5.3
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"Indeo® Software" = Indeo® Software
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"InstallShield_{E9AE9A91-AB45-4321-87BD-AD34855D944F}" = Chessmaster 10th Edition
"LiveReg" = LiveReg (Symantec Corporation)
"LiveUpdate" = LiveUpdate 1.80 (Symantec Corporation)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Media Player - Codec Pack" = Media Player Codec Pack 3.2.0
"MegaStat Installer" = MegaStat Installer
"Messenger Plus! Live" = Messenger Plus! Live & Sponsor (CiD)
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.2pre)" = Mozilla Firefox (3.6.2pre)
"Nero - Burning Rom!UninstallKey" = Nero 6 Enterprise Edition
"NeroVision!UninstallKey" = Nero Digital
"Nitto 1320 Legends_is1" = Nitto 1320 Legends Public Beta 0.9.11.2
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"OpenAL" = OpenAL
"PeerGuardian_is1" = PeerGuardian 2.0
"PhotoStage" = PhotoStage
"Prism" = Prism
"PunkBusterSvc" = PunkBuster Services
"Resize Pictures Plus_is1" = Resize Pictures Plus 2.0
"RivaTuner" = RivaTuner v2.0 RC 16
"SpeedFan" = SpeedFan (remove only)
"Switch" = Switch
"SysInfo" = Creative System Information
"SystemRequirementsLab" = System Requirements Lab
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"ToolBox" = NCH Toolbox Uninstall
"Total Video Converter 3.11_is1" = Total Video Converter 3.11 070908
"TVUPlayer" = TVUPlayer 2.4.5.1
"Update Service" = Update Service
"Veoh Web Player Beta" = Veoh Web Player
"Video Card Stability Test" = Video Card Stability Test
"Viper" = Viper 1.5.00
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"VLC media player" = VideoLAN VLC media player 0.8.6f
"Warcraft III" = Warcraft III
"WavePad" = WavePad Uninstall
"WIC" = Windows Imaging Component
"Winamp" = Winamp
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 10
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR 3.70 – Εφαρμογή Διαχείρισης Συμπιεσμένων Αρχείων
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Xfire" = Xfire (remove only)
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Toolbar" = Yahoo! Toolbar

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1343024091-1604221776-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent
"VideoEgg" = VideoEgg Publisher

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 13/3/2010 7:06:30 πμ | Computer Name = PC | Source = Application Hang | ID = 1002
Description = Κρεμασμένη εφαρμογή msnmsgr.exe, έκδοση 14.0.8089.726, στοιχείο ελέγχου
κρεμάσματος hungapp, έκδοση 0.0.0.0, διεύθυνση κρεμάσματος 0x00000000.

Error - 25/3/2010 5:25:19 πμ | Computer Name = PC | Source = MsiInstaller | ID = 11706
Description = Product: Search Settings v1.2.3 -- Error 1706.No valid source could
be found for product Search Settings v1.2.3. The Windows Installer cannot continue.

Error - 25/3/2010 5:25:30 πμ | Computer Name = PC | Source = MsiInstaller | ID = 11706
Description = Product: Search Settings v1.2.3 -- Error 1706.No valid source could
be found for product Search Settings v1.2.3. The Windows Installer cannot continue.

Error - 25/3/2010 2:46:40 μμ | Computer Name = PC | Source = MsiInstaller | ID = 11706
Description = Product: Search Settings v1.2.3 -- Error 1706.No valid source could
be found for product Search Settings v1.2.3. The Windows Installer cannot continue.

Error - 26/3/2010 5:18:05 πμ | Computer Name = PC | Source = MsiInstaller | ID = 11706
Description = Product: Search Settings v1.2.3 -- Error 1706.No valid source could
be found for product Search Settings v1.2.3. The Windows Installer cannot continue.

Error - 27/3/2010 4:22:48 πμ | Computer Name = PC | Source = Application Error | ID = 1000
Description = Ελαττωματική εφαρμογή egui.exe, έκδοση 4.0.417.0, ελαττωματική λειτουργική
μονάδα eguiupdate.dll, έκδοση 4.0.417.0, ελαττωματική διεύθυνση 0x000085da.

Error - 27/3/2010 6:39:31 μμ | Computer Name = PC | Source = Google Update | ID = 20
Description =

Error - 28/3/2010 6:28:27 πμ | Computer Name = PC | Source = Application Error | ID = 1000
Description = Ελαττωματική εφαρμογή javaw.exe, έκδοση 6.0.180.7, ελαττωματική λειτουργική
μονάδα java.dll, έκδοση 6.0.180.7, ελαττωματική διεύθυνση 0x00005875.

Error - 29/3/2010 2:39:05 πμ | Computer Name = PC | Source = Google Update | ID = 20
Description =

Error - 29/3/2010 7:05:01 μμ | Computer Name = PC | Source = MsiInstaller | ID = 10005
Description = Product: Dealio Toolbar v4.0.2 -- Error 2318.File does not exist:
C:\Program Files\Dealio Toolbar\WidgiHelper.exe.

[ System Events ]
Error - 28/3/2010 4:59:55 πμ | Computer Name = PC | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.1.6 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 001731BF55D6 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.1.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 28/3/2010 5:00:25 πμ | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Δεν ήταν δυνατή η εκκίνηση της υπηρεσίας General Purpose USB Driver
(e4ldr.sys) εξαιτίας του ακόλουθου σφάλματος: %%2

Error - 28/3/2010 3:13:16 μμ | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Δεν ήταν δυνατή η εκκίνηση της υπηρεσίας General Purpose USB Driver
(e4ldr.sys) εξαιτίας του ακόλουθου σφάλματος: %%2

Error - 28/3/2010 3:16:11 μμ | Computer Name = PC | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.1.6 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 001731BF55D6 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.1.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 29/3/2010 2:37:05 πμ | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Δεν ήταν δυνατή η εκκίνηση της υπηρεσίας General Purpose USB Driver
(e4ldr.sys) εξαιτίας του ακόλουθου σφάλματος: %%2

Error - 29/3/2010 2:40:17 πμ | Computer Name = PC | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.1.6 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 001731BF55D6 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.1.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 29/3/2010 7:11:50 μμ | Computer Name = PC | Source = DCOM | ID = 10010
Description = Ο διακομιστής {F81CD990-910B-4BBF-9CB3-6A77F3D697B3} δεν καταχωρήθηκε
με το διακομιστή DCOM μέσα το απαιτούμενο χρονικό όριο.

Error - 29/3/2010 7:13:16 μμ | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Δεν ήταν δυνατή η εκκίνηση της υπηρεσίας General Purpose USB Driver
(e4ldr.sys) εξαιτίας του ακόλουθου σφάλματος: %%2

Error - 29/3/2010 7:14:33 μμ | Computer Name = PC | Source = Dhcp | ID = 1002
Description = Η εκμίσθωση της διεύθυνσης IP 192.168.1.6 για την κάρτα δικτύου της
οποίας η διεύθυνση στο δίκτυο είναι 001731BF55D6 δεν έγινε αποδεκτή από το διακομιστή
DHCP 192.168.1.1 (Ο διακομιστής DHCP απέστειλε ένα μήνυμα DHCPNACK).

Error - 30/3/2010 4:44:42 πμ | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Δεν ήταν δυνατή η εκκίνηση της υπηρεσίας General Purpose USB Driver
(e4ldr.sys) εξαιτίας του ακόλουθου σφάλματος: %%2


< End of report >

Here is the Gmer. I couldn't post it above because of too many characters.

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-03-30 12:15:04
Windows 5.1.2600 Service Pack 2
Running: 8ue12jdi.exe; Driver: C:\DOCUME~1\Admin\LOCALS~1\Temp\pxtdapob.sys


---- System - GMER 1.0.15 ----

SSDT 87D988A0 ZwAssignProcessToJobObject
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwConnectPort [0xB31220D2]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwCreateFile [0xB3124302]
SSDT spzo.sys ZwCreateKey [0xB7EB50E0]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwCreatePort [0xB312202C]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwCreateSection [0xB3122AAE]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwCreateThread [0xB3121D12]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwDeleteFile [0xB3123CB0]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwDeleteKey [0xB3122EC0]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwDeleteValueKey [0xB3122DDA]
SSDT spzo.sys ZwEnumerateKey [0xB7ECDDA4]
SSDT spzo.sys ZwEnumerateValueKey [0xB7ECE132]
SSDT spzo.sys ZwOpenKey [0xB7EB50C0]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwOpenProcess [0xB3122B94]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwOpenSection [0xB31229E0]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwOpenThread [0xB3122CB0]
SSDT spzo.sys ZwQueryKey [0xB7ECE20A]
SSDT spzo.sys ZwQueryValueKey [0xB7ECE08A]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwSetContextThread [0xB3121BB4]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwSetInformationFile [0xB3123DE0]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwSetValueKey [0xB312226A]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwShutdownSystem [0xB3122FA0]
SSDT 87D986D0 ZwSuspendProcess
SSDT 87D984F0 ZwSuspendThread
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwTerminateProcess [0xB3121F66]
SSDT 87D98310 ZwTerminateThread
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwWriteFile [0xB312414A]
SSDT \SystemRoot\System32\DRIVERS\cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.) ZwWriteFileGather [0xB3123FB4]

INT 0x62 ? 8A790BF8
INT 0x63 ? 8A790BF8
INT 0x63 ? 8A790BF8
INT 0x63 ? 8A266BF8
INT 0x63 ? 8A790BF8
INT 0x73 ? 8A790BF8
INT 0x73 ? 8A790BF8
INT 0x73 ? 8A266BF8
INT 0x73 ? 8A790BF8
INT 0xA4 ? 8A793BF8
INT 0xA4 ? 8A793BF8
INT 0xB4 ? 8A790BF8

---- Kernel code sections - GMER 1.0.15 ----

? spzo.sys Äåí åßíáé äõíáôÞ ç åýñåóç ôïõ êáèïñéóìÝíïõ áñ÷åßïõ áðü ôï óýóôçìá. !
.text USBPORT.SYS!DllUnload B712262C 5 Bytes JMP 8A2661D8
.text C:\windows\system32\DRIVERS\nv4_mini.sys section is writeable [0xB66FD360, 0x3E57A5, 0xE8000020]
.text a9iimty6.SYS B66B0386 35 Bytes [00, 00, 00, 00, 00, 00, 20, ...]
.text a9iimty6.SYS B66B03AA 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text a9iimty6.SYS B66B03C4 3 Bytes [00, 80, 02]
.text a9iimty6.SYS B66B03C9 1 Byte [30]
.text a9iimty6.SYS B66B03C9 11 Bytes [30, 00, 00, 00, 5E, 02, 00, ...] {XOR [EAX], AL; ADD [EAX], AL; POP ESI; ADD AL, [EAX]; ADD [EAX], AL; ADD [EAX], AL}
.text ...
.text C:\windows\system32\DRIVERS\atksgt.sys section is writeable [0xB2816300, 0x22020, 0xE8000020]
.text C:\windows\system32\DRIVERS\lirsgt.sys section is writeable [0xB31E7300, 0x1B7E, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe[1976] kernel32.dll!SetUnhandledExceptionFilter 7C8447ED 4 Bytes [C2, 04, 00, 00]
.text C:\Program Files\Comodo\Firewall\CPF.exe[2764] ntdll.dll!LdrLoadDll 7C925CBB 3 Bytes [FF, 25, 1E]
.text C:\Program Files\Comodo\Firewall\CPF.exe[2764] ntdll.dll!LdrLoadDll + 4 7C925CBF 2 Bytes [05, 5F]
.text C:\Program Files\Comodo\Firewall\CPF.exe[2764] kernel32.dll!LoadLibraryExW 7C801AF1 6 Bytes JMP 5F070F5A
.text C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe[3072] kernel32.dll!SetUnhandledExceptionFilter 7C8447ED 5 Bytes [33, C0, C2, 04, 00] {XOR EAX, EAX; RET 0x4}
.text C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe[3088] USER32.dll!DefWindowProcA + 11A 7E39D608 7 Bytes JMP 10031D10 C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\NewUI.dll (New UI/Avanquest Software)
.text C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe[3088] USER32.dll!SetWindowRgn + 2BB 7E3A026D 7 Bytes JMP 10031C80 C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\NewUI.dll (New UI/Avanquest Software)
.text C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe[3088] USER32.dll!SetClipboardData + 19D 7E3B10FB 7 Bytes JMP 10031CF0 C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\NewUI.dll (New UI/Avanquest Software)

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [B7EB6042] spzo.sys
IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [B7EB613E] spzo.sys
IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [B7EB60C0] spzo.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [B7EB6800] spzo.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [B7EB66D6] spzo.sys
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!KfAcquireSpinLock] 0C8D1C46
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!READ_PORT_UCHAR] B48B8932
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!KeGetCurrentIrql] 89000001
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!KfRaiseIrql] 0001C083
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!KfLowerIrql] 24468B00
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!HalGetInterruptVector] 89820C8D
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!HalTranslateBusAddress] D18BF84D
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!KeStallExecutionProcessor] 860F1639
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!KfReleaseSpinLock] 000000BD
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!READ_PORT_BUFFER_USHORT] 020CB389
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!READ_PORT_USHORT] 83660000
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!WRITE_PORT_BUFFER_USHORT] 7400067E
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[HAL.dll!WRITE_PORT_UCHAR] 89D60320
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[WMILIB.SYS!WmiSystemControl] 8D168B00
IAT \SystemRoot\System32\Drivers\a9iimty6.SYS[WMILIB.SYS!WmiCompleteRequest] F0003284
IAT \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisCloseAdapter] [B813B6D0] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisOpenAdapter] [B813B730] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisDeregisterProtocol] [B813B950] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisRegisterProtocol] [B813B910] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisRegisterProtocol] [B813B910] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisOpenAdapter] [B813B730] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisCloseAdapter] [B813B6D0] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisDeregisterProtocol] [B813B950] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisDeregisterProtocol] [B813B950] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisRegisterProtocol] [B813B910] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisOpenAdapter] [B813B730] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisCloseAdapter] [B813B6D0] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisRegisterProtocol] [B813B910] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisCloseAdapter] [B813B6D0] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisOpenAdapter] [B813B730] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisDeregisterProtocol] [B813B950] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisCloseAdapter] [B813B6D0] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisOpenAdapter] [B813B730] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisRegisterProtocol] [B813B910] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisDeregisterProtocol] [B813B950] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisRegisterProtocol] [B813B910] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisOpenAdapter] [B813B730] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisCloseAdapter] [B813B6D0] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\arp1394.sys[NDIS.SYS!NdisCloseAdapter] [B813B6D0] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\arp1394.sys[NDIS.SYS!NdisOpenAdapter] [B813B730] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\arp1394.sys[NDIS.SYS!NdisDeregisterProtocol] [B813B950] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\arp1394.sys[NDIS.SYS!NdisRegisterProtocol] [B813B910] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisRegisterProtocol] [B813B910] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisDeregisterProtocol] [B813B950] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisCloseAdapter] [B813B6D0] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)
IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisOpenAdapter] [B813B730] inspect.sys (Comodo Personal Firewall Stateful Inspection Engine/COMODO)

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 8A71F1F8

AttachedDevice \FileSystem\Ntfs \Ntfs eamon.sys (Amon monitor/ESET)

Device \FileSystem\Fastfat \FatCdrom 8A140500
Device \FileSystem\Udfs \UdfsCdRom 8A0D41F8
Device \FileSystem\Udfs \UdfsDisk 8A0D41F8

AttachedDevice \Driver\Tcpip \Device\Ip cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.)

Device \Driver\usbohci \Device\USBPDO-0 8A3341F8
Device \Driver\dmio \Device\DmControl\DmIoDaemon 8A7211F8
Device \Driver\dmio \Device\DmControl\DmConfig 8A7211F8
Device \Driver\dmio \Device\DmControl\DmPnP 8A7211F8
Device \Driver\dmio \Device\DmControl\DmInfo 8A7211F8
Device \Driver\usbehci \Device\USBPDO-1 8A3301F8

AttachedDevice \Driver\Tcpip \Device\Tcp cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.)

Device \Driver\USBSTOR \Device\000000a1 878C81F8
Device \Driver\Ftdisk \Device\HarddiskVolume1 8A7911F8
Device \Driver\Ftdisk \Device\HarddiskVolume2 8A7911F8
Device \Driver\Cdrom \Device\CdRom0 8A25A1F8
Device \Driver\Ftdisk \Device\HarddiskVolume3 8A7911F8
Device \Driver\Cdrom \Device\CdRom1 8A25A1F8
Device \Driver\atapi \Device\Ide\IdePort0 8A7901F8
Device \Driver\atapi \Device\Ide\IdeDeviceP7T0L0-21 8A7901F8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 8A7901F8
Device \Driver\atapi \Device\Ide\IdePort1 8A7901F8
Device \Driver\atapi \Device\Ide\IdePort2 8A7901F8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c 8A7901F8
Device \Driver\atapi \Device\Ide\IdePort3 8A7901F8
Device \Driver\atapi \Device\Ide\IdePort4 8A7901F8
Device \Driver\atapi \Device\Ide\IdePort5 8A7901F8
Device \Driver\atapi \Device\Ide\IdePort6 8A7901F8
Device \Driver\atapi \Device\Ide\IdePort7 8A7901F8
Device \Driver\Cdrom \Device\CdRom2 8A25A1F8
Device \Driver\PCI_PNP5998 \Device\00000067 spzo.sys
Device \Driver\NetBT \Device\NetBT_Tcpip_{706BB74B-9E0B-4E01-B6E9-9948ACCE15AE} 87B841F8
Device \Driver\USBSTOR \Device\000000a7 878C81F8
Device \Driver\NetBT \Device\NetBt_Wins_Export 87B841F8
Device \Driver\NetBT \Device\NetBT_Tcpip_{8BB10C5F-8CBE-4879-B2E2-563132EA883D} 87B841F8
Device \Driver\NetBT \Device\NetbiosSmb 87B841F8

AttachedDevice \Driver\Tcpip \Device\Udp cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.)

Device \Driver\sptd \Device\2703563498 spzo.sys

AttachedDevice \Driver\Tcpip \Device\RawIp cmdmon.sys (Comodo Application Engine driver/Comodo Research Lab., Inc.)

Device \Driver\usbohci \Device\USBFDO-0 8A3341F8
Device \Driver\USBSTOR \Device\000000ac 878C81F8
Device \Driver\usbehci \Device\USBFDO-1 8A3301F8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 878971F8
Device \FileSystem\MRxSmb \Device\LanmanRedirector 878971F8
Device \Driver\USBSTOR \Device\000000af 878C81F8
Device \Driver\Ftdisk \Device\FtControl 8A7911F8
Device \Driver\a9iimty6 \Device\Scsi\a9iimty61Port9Path0Target0Lun0 8A1D8500
Device \Driver\a9iimty6 \Device\Scsi\a9iimty61 8A1D8500
Device \Driver\JRAID \Device\Scsi\JRAID1 8A7201F8
Device \FileSystem\Fastfat \Fat 8A140500

AttachedDevice \FileSystem\Fastfat \Fat eamon.sys (Amon monitor/ESET)

Device \FileSystem\Cdfs \Cdfs 8A3081F8

---- Threads - GMER 1.0.15 ----

Thread System [4:428] 87D96930

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\xa0\3Á\3¿\3Ã\3\xb1\3Á\3¼\3¿\3\xb3\3\xad\3\xb1\3Â\3 \0\x384\3¹\3º\3Ä\3Í\3¿\3Å\3 \0001\0003\09\0004 1?
Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\x2018\3Ã\3Í\3\xb3\3Ç\3Á\3¿\3\xbd\3¿\3Â\3 \0À\3Á\3¿\3Ã\3\xb1\3Á\3¼\3¿\3\xb3\3\xad\3\xb1\3Â\3 \0R\0A\0S 1?
Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\x2018\3À\3µ\3Å\3¸\3µ\3\x2015\3\xb1\3Â\3 \0À\3\xb1\3Á\3\xac\3\xbb\3\xbb\3\xb7\3\xbb\3\xb7\3 1?
Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\xa0\3\xb1\3º\3\xad\3Ä\3¿\3 \0Ç\3Á\3¿\3\xbd\3¿\3\x384\3¹\3\xb1\3\xb3\3Á\3\xac\3¼\3¼\3\xb1\3Ä\3¿\3Â\3 \0M\0i\0n\0i\0p\0o\0r\0t 1?2?3?4?5?
Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\xa3\3Í\3\xbd\3\x384\3µ\3Ã\3\xb7\3 \0Ä\3\xb7\3\xbb\3µ\3Ì\3Á\3\xb1\3Ã\3\xb7\3Â\3/\0\xb2\3\x2015\3\xbd\3Ä\3µ\3¿\3 \0Ä\3\xb7\3Â\3 \0M\0i\0c\0r\0o\0s\0o\0f\0t 1?
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x40 0xCB 0x1B 0xC7 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x61 0xDD 0x84 0xB9 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x26 0x0B 0xA6 0x46 ...
Reg HKLM\SYSTEM\ControlSet002\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\xa0\3Á\3¿\3Ã\3\xb1\3Á\3¼\3¿\3\xb3\3\xad\3\xb1\3Â\3 \0\x384\3¹\3º\3Ä\3Í\3¿\3Å\3 \0001\0003\09\0004 1?
Reg HKLM\SYSTEM\ControlSet002\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\x2018\3Ã\3Í\3\xb3\3Ç\3Á\3¿\3\xbd\3¿\3Â\3 \0À\3Á\3¿\3Ã\3\xb1\3Á\3¼\3¿\3\xb3\3\xad\3\xb1\3Â\3 \0R\0A\0S 1?
Reg HKLM\SYSTEM\ControlSet002\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\x2018\3À\3µ\3Å\3¸\3µ\3\x2015\3\xb1\3Â\3 \0À\3\xb1\3Á\3\xac\3\xbb\3\xbb\3\xb7\3\xbb\3\xb7\3 1?
Reg HKLM\SYSTEM\ControlSet002\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\xa0\3\xb1\3º\3\xad\3Ä\3¿\3 \0Ç\3Á\3¿\3\xbd\3¿\3\x384\3¹\3\xb1\3\xb3\3Á\3\xac\3¼\3¼\3\xb1\3Ä\3¿\3Â\3 \0M\0i\0n\0i\0p\0o\0r\0t 1?2?3?4?5?
Reg HKLM\SYSTEM\ControlSet002\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\Descriptions@\xa3\3Í\3\xbd\3\x384\3µ\3Ã\3\xb7\3 \0Ä\3\xb7\3\xbb\3µ\3Ì\3Á\3\xb1\3Ã\3\xb7\3Â\3/\0\xb2\3\x2015\3\xbd\3Ä\3µ\3¿\3 \0Ä\3\xb7\3Â\3 \0M\0i\0c\0r\0o\0s\0o\0f\0t 1?
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x16 0xED 0xB8 0x86 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x61 0xDD 0x84 0xB9 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x26 0x0B 0xA6 0x46 ...
Reg HKCU\Software\Microsoft\Windows Live\Communications Clients\Shared\3026413900\Groups@\x2022\3º\3Ä\3Ì\3Â\3 \0Ã\3Í\3\xbd\3\x384\3µ\3Ã\3\xb7\3Â\3 0
Reg HKCU\Software\Microsoft\Windows Live\Communications Clients\Shared\3026413900\Groups@\x2018\3\xb3\3\xb1\3À\3\xb7\3¼\3\xad\3\xbd\3\xb1\3 0
Reg HKCU\Software\Microsoft\Windows Live\Communications Clients\Shared\3026413900\Groups@\x201d\3¹\3\xb1\3¸\3\xad\3Ã\3¹\3¼\3¿\3Â\3 0
Reg HKCU\Software\Microsoft\Windows Live\Communications Clients\Shared\3026413900\Groups@\x9f\3¼\3\xac\3\x384\3µ\3Â\3 1

---- EOF - GMER 1.0.15 ----

Hi mlrs,

• Click Start, point to Settings, and then click Control Panel.
• In Control Panel, double-click Add or Remove Programs.
• In Add or Remove Programs,
  highlight DAEMON Tools Toolbar
  click Remove
  highlight DigitalPowered Toolbar
  click Remove
• Close the Add or Remove Programs and the Control Panel windows.

Please re-open HijackThis and select Scan. Check the boxes next to all the entries listed below (if present):

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=13928&l=dis

Now close all other open windows and then click on Fix Checked. Close HijackThis.

Please reboot the computer.

Please run Malwarebytes Antimalware, update and then run a quick scan and post the log back here along with a new HijackThis log and let me know how the computer is running now.

The computer is running ok. But i have a problem when i try to run Malwarebytes Antimalware.
I get the following message:
An error has occured. Please report this error code to our support team.
MBAM_ERROR_EXPANDING_VARIABLES (0,9)

An error has occured. Please report this error code to our support team.
MBAM_ERROR_MISSING_FILE (3, 9, mbamswissarmy.sys)

Here is the HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:52:38 μμ, on 30/3/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
C:\windows\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\runservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\windows\system32\PnkBstrB.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\windows\system32\slserv.exe
C:\windows\system32\svchost.exe
C:\Program Files\Creative\SBAudigy4\DVDAudio\CTDVDDET.EXE
C:\Program Files\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe
C:\windows\CTHELPER.EXE
C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Συνδέσεις
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Βοηθός εισόδου του Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy4\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [RCSystem] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [HPHUPD08] C:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [4 Play] C:\DOCUME~1\Admin\APPLIC~1\LISTST~1\ABOUTPLUS.exe
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Γρήγορη εκκίνηση HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: Ε&ξαγωγή στο Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Προσθήκη στο ιστολόγιο - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Προσθήκη στο ιστολόγιο στο Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Έρευνα - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/DE-DE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: Υπηρεσία Google Update (gupdate1cacdd0f29d83c2) (gupdate1cacdd0f29d83c2) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\WINDOWS\runservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\windows\system32\PnkBstrB.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\windows\SYSTEM32\slserv.exe

--
End of file - 11876 bytes

Hi mlrs,

But i have a problem when i try to run Malwarebytes Antimalware

It seems to be a problem with the most recent update of Malwarebytes. no matter.

Please re-open HijackThis and select Scan. Check the boxes next to all the entries listed below (if present):

O4 - HKCU\..\Run: [4 Play] C:\DOCUME~1\Admin\APPLIC~1\LISTST~1\ABOUTPLUS.exe

Now close all other open windows and then click on Fix Checked. Close HijackThis.

Update Java Runtime
You are using an old version of Java. Sun's Java is sometimes updated in order to eliminate the exploitation of vulnerabilities in an existing version. For this reason, it's extremely important that you keep the program up to date, & also remove the older more vulnerable versions from your system. The most current version of Sun Java is: Java Runtime Environment Version 6 Update 18.

• Download the latest version of Java Runtime Environment (JRE) 6 Here
• Scroll down to where it says "JDK 6 Update 18 (JDK or JRE)"
• Click the orange Download JRE button to the right
• Select the Windows platform from the dropdown menu
• Read the License Agreement and then check the box that says: "I agree to the Java SE Runtime Environment 6 with JavaFX License Agreement". Click on Continue.The page will refresh
• Click on the link to download Windows Offline Installation & save the file to your desktop
• Close any programs you may have running - especially your web browser
• Go to Start > Settings > Control Panel, double-click on Add/Remove Programs & remove all older versions of Java
• Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java(TM) 6) in the name
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions
• Reboot your computer once all Java components are removed
• Then from your desktop double-click on jre-6u18-windows-i586-p.exe to install the newest version

Please go to Kaspersky website and perform an online antivirus scan.

1. Read through the requirements and privacy statement and click on Accept button.
2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
3. When the downloads have finished, click on Settings.
4. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
   Spyware, Adware, Dialers, and other potentially dangerous programs
   Archives
   
5. Click on My Computer under Scan.
6. Once the scan is complete, it will display the results. Click on View Scan Report.
7. You will see a list of infected items there. Click on Save Report As....
8. Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
9. Please post this log in your next reply and also let me know how your computer is running now.

Everything seems to be running smoothly.
Here's the Kaspersky log:

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Tuesday, March 30, 2010
Operating system: Microsoft Windows XP Professional Service Pack 2 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Tuesday, March 30, 2010 08:51:59
Records in database: 3899682
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\

Scan statistics:
Objects scanned: 260719
Threats found: 3
Infected objects found: 3
Suspicious objects found: 0
Scan duration: 04:53:53


File name / Threat / Threats count
C:\Documents and Settings\Admin\Επιφάνεια εργασίας\PROGRAMS\CryptLoad_1.1.6\router\FRITZ!Box\nc.exe Infected: not-a-virus:RemoteAdmin.Win32.NetCat.a 1
C:\Documents and Settings\Admin\Τα έγγραφά μου\A2_Uploader_V3.zip Infected: Virus.Win32.Induc.b 1
C:\Program Files\Circle Developement\Uninstall.exe Infected: Trojan.Win32.Swizzor.b 1

Selected area has been scanned.

Hi mlrs,

Using Windows Explorer (to get there right-click your Start button and go to Explore), please delete these files (if present):
C:\Documents and Settings\Admin\Τα έγγραφά μου\A2_Uploader_V3.zip
C:\Program Files\Circle Developement\Uninstall.exe

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure

Remove GMER

Delete the GMER icon from your desktop, it will be named 8ue12jdi.exe.exe

Clean up with OTL

• Double-click OTL.exe to start the program. This will remove all the tools we used to clean your pc.
• Close all other programs apart from OTL as this step will require a reboot
• On the OTL main screen, press the CleanUp! button
• Say Yes to the prompt and then allow the program to reboot your computer.

Create a new, clean System Restore point which you can use in case of future system problems:

• Press Start >> All Programs >> Accessories >>System Tools >> System Restore
• Select Create a restore point, then Next, type a name like All Clean then press the Create button and once it's done press Close
• Now remove old, infected System Restore points:
• Next click Start >> Run and type cleanmgr in the box and press OK
• Ensure the boxes for Recycle Bin, Temporary Files and Temporary Internet Files are checked, you can choose to check other boxes if you wish but they are not required.
• Select the More Options tab, under System Restore press Clean up... and say Yes to the prompt
• Press OK and Yes to confirm

Update your AntiVirus Software and keep your other programs up-to-date
Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check

Security Updates for Windows, Internet Explorer & Microsoft Office
Whenever a security problem in its software is found, Microsoft will usually create a patch so that after the patch is installed, attackers can't use the vulnerability to install malicious software on your PC. Keeping up with these patches will help to prevent malicious software being installed on your PC. Ensure you are registered for Windows updates via Start > right-click on My Computer > Properties > Automatic Updates tab or visit the Microsoft Update site on a regular basis.


Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

A tutorial on installing & using this product can be found here:

Using SpywareBlaster to protect your computer from Spyware and Malware


Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.[/list]Follow this list and your potential for being infected again will reduce dramatically.

Here are some additional utilities that will enhance your safety

• MVPS Hosts file <= The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer
• Winpatrol <= Download and install the free version of Winpatrol. a tutorial for this product is located here:
  Using Winpatrol to protect your computer from malicious software

Also, please read this great article by Tony Klein So How Did I Get Infected In First Place

Happy surfing and stay clean!

Thank you very much for your help. Fantastic job!

As this issue appears to be resolved,