unable to access regedit or task manager

Question

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 9:14:48 PM, on 5/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\dllhost.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Chris\Desktop\setup programs\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: 0 - {C9878D92-0CB7-453E-9382-7FB425158067} - C:\Program Files\Common Files\labu.dll (file missing)
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\RunServices: [p2p networking] p2pnetworking.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-1343024091-1770027372-725345543-1005\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" (User 'Michelle')
O4 - HKUS\S-1-5-21-1343024091-1770027372-725345543-1005\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Michelle')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: dllhost.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-3-48.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by109fd.bay109.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 7509 bytes
I am unable to open regedit or task manager also was using limewire to download music, when computer was restarted files would be unplayable

bamajim · Answer

dunny1079 Go HERE and Download System Repair Engine by smallfrogs Select Local Download 1 or 2 Save it to your Desktop Rt Click sreng2.zip->>Extract all->>Extract it to your desktop Open the sreng folder Double click SREng->>Click Run At the main Window, in the left Pane,Select Smart Scan At the next window make sure all of the boxes are checked and Select Scan When the scan is complete Select Save reports Save it to your desktop and Close the tool Double Click SREngLog.txt copy and paste that log as a reply to this thread Do not run any other options with this tool unless instructed to do so.   You may have to post the results in more than one reply   bamajim   Graduate of MRU CastleCops  Instructor

dunny1079 · Answer

2007-05-07,09:12:40

System Repair Engineer 2.4.12.806
Smallfrogs ( http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed

Follow item(s) have been choosed:
    All Boot Items (Including Registry, Startup Folders, Services and so on)
    Browser Add-ons
    Runing Processes (Including process model information)
    File Associations
    Winsock Provider
    Autorun.Inf
    HOSTS File

Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation]
    [(Verified)Microsoft Windows Publisher]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <"C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"> [Intel Corporation]
    <"C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless> [Intel Corporation]
    <"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"> [(Verified)Symantec Corporation]
    <"C:\Program Files\Norton AntiVirus\osCheck.exe"> [(Verified)Symantec Corporation]
    <"C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
    []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    [(Verified)Microsoft Windows Publisher]
    [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{93994DE8-8239-4655-B1D1-5F4E91300429}> [Fengtao Software Inc.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
    [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
    [(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <; "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"> [Nero AG]
    <; "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized> []
    <; C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <; C:\Program Files\HP\HP Software Update\HPWuSchd2.exe> [Hewlett-Packard Co.]
    <; C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe> [Nero AG]
    <; > [N/A]
    <; p2pnetworking.exe> []
    <; "C:\Program Files\QuickTime\qttask.exe" -atboottime> [Apple Computer, Inc.]
    <; stsystra.exe> [SigmaTel, Inc.]
    <; "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"> [(Verified)"Sun Microsystems, Inc."]
    <; C:\WINDOWS\sys0158108827-.exe> [N/A]
    <; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [(Verified)"RealNetworks, Inc."]
    <; "c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun> [N/A]

==================================
Startup Folders
[dllhost]
[N/A]>

==================================
Services
[Application Management / AppMgmt][Stopped/Manual Start]
%SystemRoot%\System32\appmgmts.dll>
[ASP.NET State Service / aspnet_state][Stopped/Manual Start]

[Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]

[Automatic LiveUpdate Scheduler / Automatic LiveUpdate Scheduler][Running/Auto Start]
<"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe">
[B's Recorder GOLD Library General Service / bgsvcgen][Running/Auto Start]

[Symantec Event Manager / ccEvtMgr][Running/Auto Start]
<"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon>
[Symantec Settings Manager / ccSetMgr][Running/Auto Start]
<"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon>
[Symantec Lic NetConnect service / CLTNetCnService][Running/Auto Start]
<"C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon>
[Intel(R) PROSet/Wireless Event Log / EvtEng][Running/Auto Start]

[Human Interface Device Access / HidServ][Stopped/Disabled]
%SystemRoot%\System32\hidserv.dll>
[Symantec IS Password Validation / ISPwdSvc][Stopped/Manual Start]
<"C:\Program Files\Norton AntiVirus\isPwdSvc.exe">
[LiveUpdate / LiveUpdate][Running/Manual Start]
<"C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE">
[NBService / NBService][Stopped/Manual Start]

[Pml Driver HPZ12 / Pml Driver HPZ12][Running/Auto Start]

[Intel(R) PROSet/Wireless Registry Service / RegSrvc][Running/Auto Start]

[Intel(R) PROSet/Wireless Service / S24EventMonitor][Running/Auto Start]

[Symantec Core LC / Symantec Core LC][Running/Auto Start]
<"C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe">
[Symantec AppCore Service / SymAppCore][Running/Auto Start]
<"C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe">
[Intel(R) PROSet/Wireless SSO Service / WLANKEEPER][Running/Auto Start]

==================================
Drivers
[AEGIS Protocol (IEEE 802.1x) v3.4.9.0 / AegisP][Running/Auto Start]

[ati2mtag / ati2mtag][Running/Manual Start]

[Symantec Eraser Control driver / eeCtrl][Running/System Start]
<\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys>
[EraserUtilRebootDrv / EraserUtilRebootDrv][Running/Manual Start]
<\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys>
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]

[IEEE-1284.4 Driver HPZid412 / HPZid412][Stopped/Manual Start]

[Print Class Driver for IEEE-1284.4 HPZipr12 / HPZipr12][Stopped/Manual Start]

[USB to IEEE-1284.4 Translation Driver HPZius12 / HPZius12][Stopped/Manual Start]

[HSF_DPV / HSF_DPV][Running/Manual Start]

[HSXHWAZL / HSXHWAZL][Running/Manual Start]

[mdmxsdk / mdmxsdk][Running/Auto Start]

[NAVENG / NAVENG][Running/Manual Start]
<\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070506.018\NAVENG.SYS>
[NAVEX15 / NAVEX15][Running/Manual Start]
<\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070506.018\NAVEX15.SYS>
[OMCI / OMCI][Running/System Start]
<\SystemRoot\SYSTEM32\DRIVERS\OMCI.SYS>
[Creative WebCam Notebook #2 / P1171VID][Stopped/Manual Start]

[Low level access layer for CD devices / Pcouffin][Running/Manual Start]

[Direct Parallel Link Driver / Ptilink][Running/Manual Start]

[PxHelp20 / PxHelp20][Running/Boot Start]
<\SystemRoot\System32\Drivers\PxHelp20.sys>
[rimmptsk / rimmptsk][Running/Manual Start]

[rimsptsk / rimsptsk][Running/Manual Start]

[Ricoh xD-Picture Card Driver / rismxdp][Running/Manual Start]

[WLAN Transport / s24trans][Running/Auto Start]

[Secdrv / Secdrv][Stopped/Manual Start]

[SPBBCDrv / SPBBCDrv][Running/System Start]
<\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys>
[SRTSP / SRTSP][Running/System Start]

[SRTSPL / SRTSPL][Stopped/Manual Start]

[SRTSPX / SRTSPX][Running/System Start]

[SigmaTel High Definition Audio CODEC / STHDA][Running/Manual Start]

[SYMDNS / SYMDNS][Running/Manual Start]
<\SystemRoot\System32\Drivers\SYMDNS.SYS>
[SymEvent / SymEvent][Running/Manual Start]
<\??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS>
[SYMFW / SYMFW][Running/Manual Start]
<\SystemRoot\System32\Drivers\SYMFW.SYS>
[SYMIDS / SYMIDS][Running/Manual Start]
<\SystemRoot\System32\Drivers\SYMIDS.SYS>
[SYMIDSCO / SYMIDSCO][Running/Manual Start]
<\??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\IDS-DI~1\20070426.002\SymIDSCo.sys>
[symlcbrd / symlcbrd][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\symlcbrd.sys>
[SYMNDIS / SYMNDIS][Running/Manual Start]
<\SystemRoot\System32\Drivers\SYMNDIS.SYS>
[SYMREDRV / SYMREDRV][Running/Manual Start]
<\SystemRoot\System32\Drivers\SYMREDRV.SYS>
[SYMTDI / SYMTDI][Running/System Start]
<\SystemRoot\System32\Drivers\SYMTDI.SYS>
[Intel(R) PRO/Wireless 3945ABG Adapter Driver / w39n51][Running/Manual Start]

[winachsf / winachsf][Running/Manual Start]

[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]

dunny1079 · Answer

[PID: 3464][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe]  [ATI Technologies Inc., 1.11.0.0]     [C:\WINDOWS\system32\mscoree.dll]  [Microsoft Corporation, 1.1.4322.2032]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll]  [Microsoft Corporation, 1.1.4322.2032]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly
ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_7daa2e8b\mscorlib.dll]  [N/A, ]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll]  [Microsoft Corporation, 1.1.4322.573]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly
ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_f8011866\system.windows.forms.dll]  [N/A, ]     [c:\program files\ati technologies\ati.ace\cli.implementation.dll]  [ATI Technologies Inc., 1.2.2230.24409]     [c:\program files\ati technologies\ati.ace\log.foundation.dll]  [ATI Technologies Inc., 1.2.2117.25442]     [c:\program files\ati technologies\ati.ace\cli.foundation.dll]  [ATI Technologies Inc., 1.2.2117.25443]     [c:\program files\ati technologies\ati.ace\log.foundation.service.dll]  [ATI Technologies Inc., 1.2.2230.24532]     [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll]  [ATI Technologies Inc., 1.2.2117.25464]     [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly
ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_d96a49a3\system.dll]  [N/A, ]     [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll]  [ATI Technologies Inc., 1.2.2230.24532]     [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly
ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_7ab9413d\system.xml.dll]  [N/A, ]     [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24533]     [c:\program files\ati technologies\ati.ace\aem.foundation.dll]  [ATI Technologies Inc., 1.2.2117.25442]     [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly
ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_4d14ee68\system.drawing.dll]  [N/A, ]     [c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24527]     [c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll]  [ATI Technologies Inc., 1.2.2117.25444]     [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25443]     [c:\program files\ati technologies\ati.ace\dem.foundation.dll]  [ATI Technologies Inc., 1.2.2117.25442]     [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll]  [ATI Technologies Inc., 1.2.2117.25443]     [c:\program files\ati technologies\ati.ace\dem.graphics.demosinfo.dll]  [ATI Technologies Inc., 1.2.2117.25446]     [c:\program files\ati technologies\ati.ace\dem.graphics.demosadapterinfo.dll]  [ATI Technologies Inc., 1.2.2160.26282]     [c:\program files\ati technologies\ati.ace\dem.graphics.dematiadapterinfo.dll]  [ATI Technologies Inc., 1.2.2117.25456]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdriversettings.dll]  [ATI Technologies Inc., 1.2.2144.26908]     [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll]  [Microsoft Corporation, 1.1.4322.2037]     [c:\program files\ati technologies\ati.ace\atidemgr.dll]  [ATI Technologies Inc., 1.2.2230.24379]     [c:\windows\assembly\gac\system.management\1.0.5000.0__b03f5f7f11d50a3a\system.management.dll]  [Microsoft Corporation, 1.1.4322.2032]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\program files\ati technologies\ati.ace\dem.graphics.demosmodeinfo.dll]  [ATI Technologies Inc., 1.2.2117.25448]     [c:\program files\ati technologies\ati.ace\dem.graphics.dematidisplaysmanagersettings.dll]  [ATI Technologies Inc., 1.2.2117.25450]     [c:\program files\ati technologies\ati.ace\dem.graphics.demverylargedesktopsettings.dll]  [ATI Technologies Inc., 1.2.2117.25447]     [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24532]     [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25458]     [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24445]     [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25464]     [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24420]     [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25447]     [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24460]     [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24457]     [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25466]     [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24429]     [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25458]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplayscoloursettings.dll]  [ATI Technologies Inc., 1.2.2117.25446]     [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24487]     [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25445]     [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24473]     [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25466]     [c:\program files\ati technologies\ati.ace\dem.graphics.mmdeintlacingsettings.dll]  [ATI Technologies Inc., 1.2.2117.25467]     [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24452]     [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.shared.dll]  [ATI Technologies Inc., 1.2.2117.25455]     [c:\program files\ati technologies\ati.ace\dem.graphics.videooverlay.shared.dll]  [ATI Technologies Inc., 1.2.2117.25444]     [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24455]     [c:\program files\ati technologies\ati.ace\dem.graphics.demsmartgartsettings.dll]  [ATI Technologies Inc., 1.2.2117.25448]     [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24450]     [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25447]     [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24447]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24506]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24434]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24498]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25468]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24429]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25448]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24503]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25468]     [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25444]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24437]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25449]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24494]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24490]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24500]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25469]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24432]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25465]     [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24466]     [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25467]     [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24470]     [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrivesettings.dll]  [ATI Technologies Inc., 1.2.2117.25466]     [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24463]     [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25450]     [c:\program files\ati technologies\ati.ace\dem.graphics.dempowerplaysettings.dll]  [ATI Technologies Inc., 1.2.2159.17889]     [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24482]     [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24476]     [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24479]     [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25456]     [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24440]     [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25456]     [c:\program files\ati technologies\ati.ace\dem.graphics.demmultivpusettings.dll]  [ATI Technologies Inc., 1.2.2117.25464]     [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25457]     [c:\program files\ati technologies\ati.ace\dem.graphics.mmoverlaysettings.dll]  [ATI Technologies Inc., 1.2.2117.25467]     [c:\program files\ati technologies\ati.ace\dem.graphics.demvideotheatermodesettings.dll]  [ATI Technologies Inc., 1.2.2117.25466]     [c:\program files\ati technologies\ati.ace\dem.graphics.demvideooverlaysettings.dll]  [ATI Technologies Inc., 1.2.2117.25448]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\diasymreader.dll]  [Microsoft Corporation, 7.10.3052.4]     [c:\program files\ati technologies\ati.ace\dem.graphics.demvpurecoverinfo.dll]  [ATI Technologies Inc., 1.2.2117.25467]     [c:\program files\ati technologies\ati.ace\dem.graphics.workstationsettings.dll]  [ATI Technologies Inc., 1.2.2117.25458]     [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25444]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecrtsettings.dll]  [ATI Technologies Inc., 1.2.2117.25465]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommonsettings.dll]  [ATI Technologies Inc., 1.2.2117.25467]     [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25444]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommon2settings.dll]  [ATI Technologies Inc., 1.2.2117.25445]     [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24387]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25450]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicelcdsettings.dll]  [ATI Technologies Inc., 1.2.2166.27665]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecomponentvideosettings.dll]  [ATI Technologies Inc., 1.2.2117.25444]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25465]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetv2settings.dll]  [ATI Technologies Inc., 1.2.2117.25465]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25468]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetvsettings.dll]  [ATI Technologies Inc., 1.2.2117.25464]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfpsettings.dll]  [ATI Technologies Inc., 1.2.2117.25465]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfp2settings.dll]  [ATI Technologies Inc., 1.2.2117.25447]     [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrive3settings.dll]  [ATI Technologies Inc., 1.2.2117.25468]     [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplaysmanageroptionssettings.dll]  [ATI Technologies Inc., 1.2.2117.25455]     [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25463]     [c:\program files\ati technologies\ati.ace\dem.graphics.demumaframebuffersettings.dll]  [ATI Technologies Inc., 1.2.2117.25449]     [c:\program files\ati technologies\ati.ace\apm.foundation.dll]  [ATI Technologies Inc., 1.2.2117.25457]     [C:\Program Files\DVD Region+CSS Free\DVDShell.dll]  [Fengtao Software Inc., 5, 5, 0, 8]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCEXT.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.2.0.21]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll]  [Microsoft Corporation, 1.1.4322.2032]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll]  [Microsoft Corporation, 1.1.4322.2032

dunny1079 · Answer

Running Processes [PID: 628][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 676][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1648][C:\WINDOWS\system32\HPZipm12.exe]  [HP, 9, 0, 0, 0] [PID: 3172][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCEXT.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.2.0.21]     [C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll]  [Nero AG, 2, 6, 3, 0]     [C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MFC71ENU.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\PROGRA~1\NORTON~1\NavShExt.dll]  [Symantec Corporation, 14.0.0.89]     [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.2.0.21]     [C:\PROGRA~1\NORTON~1\NavShExt.loc]  [N/A, ]     [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 6.0.1.2003110300]     [C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll]  [Nero AG, 2, 0, 0, 8]     [C:\Program Files\Common Files\Ahead\Lib\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\Program Files\DVD Region+CSS Free\DVDShell.dll]  [Fengtao Software Inc., 5, 5, 0, 8] [PID: 3428][C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe]  [Intel Corporation, 10, 1, 0, 42]     [C:\Program Files\Intel\Wireless\bin\PfMgrApi.dll]  [Intel Corporation, 10, 1, 0, 46]     [C:\Program Files\Intel\Wireless\bin\TraceAPI.DLL]  [Intel Corporation, 10, 1, 0, 5]     [C:\Program Files\Intel\Wireless\bin\PsRegApi.dll]  [Intel Corporation, 10, 1, 0, 2]     [C:\Program Files\Intel\Wireless\bin\DbEngine.dll]  [Intel Corporation, 10, 1, 0, 13]     [C:\Program Files\Intel\Wireless\bin\LIBEAY32.dll]  [N/A, ]     [C:\Program Files\Intel\Wireless\bin\IntStngs.dll]  [, 10, 1, 0, 3]     [C:\Program Files\Intel\Wireless\bin\MurocApi.dll]  [Intel Corporation, 10, 1, 0, 37]     [C:\Program Files\Intel\Wireless\bin\S24MUDLL.dll]  [Intel Corporation, 10, 1, 0, 1]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCEXT.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.2.0.21] [PID: 3440][C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe]  [Intel Corporation, 10, 1, 0, 17]     [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 10, 1, 0, 2]     [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll]  [N/A, ]     [C:\Program Files\Intel\Wireless\Bin\IntStngs.dll]  [, 10, 1, 0, 3]     [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 10, 1, 0, 5]     [C:\Program Files\Intel\Wireless\Bin\FrameworkPlugins\ConnMgr.dll]  [Intel Corporation, 10, 1, 1, 162]     [C:\Program Files\Intel\Wireless\Bin\MurocApi.dll]  [Intel Corporation, 10, 1, 0, 37]     [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll]  [Intel Corporation, 10, 1, 0, 1]     [C:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll]  [Intel Corporation, 10, 1, 0, 46]     [C:\Program Files\Intel\Wireless\Bin\DbEngine.dll]  [Intel Corporation, 10, 1, 0, 13]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCEXT.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.2.0.21] [PID: 3448][C:\Program Files\Common Files\Symantec Shared\ccApp.exe]  [Symantec Corporation, 106.2.0.21]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.2.0.21]     [C:\WINDOWS\system32\SymNeti.dll]  [Symantec Corporation, 7.0.0.170]     [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 106.2.0.21]     [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 106.2.0.21]     [C:\Program Files\Common Files\Symantec Shared\AppCore\AppPlg32.dll]  [Symantec Corporation, 1.0.00.101]     [C:\Program Files\Common Files\Symantec Shared\AppCore\AppMgr32.dll]  [Symantec Corporation, 1.0.00.101]     [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL]  [Symantec Corporation, 106.2.0.21]     [C:\Program Files\Common Files\Symantec Shared\AppCore\AppSet32.dll]  [Symantec Corporation, 1.0.00.101]     [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL]  [Symantec Corporation, 106.2.0.21]     [C:\Program Files\Norton AntiVirus\fwAlert.dll]  [Symantec Corporation, 10.0.0.247]     [C:\Program Files\Norton AntiVirus\fwAlRes.dll]  [Symantec Corporation, 10.0.0.247]     [C:\PROGRA~1\NORTON~1\DEFALERT.DLL]  [Symantec Corporation, 14.0.0.89]     [C:\PROGRA~1\NORTON~1\AVPAPP32.DLL]  [Symantec Corporation, 14.0.0.89]     [C:\Program Files\Common Files\Symantec Shared\NPC
pcTRAY.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\Program Files\Common Files\Symantec Shared\CF\PEP2.dll]  [Symantec Corporation, 2006.1.00.58]     [C:\Program Files\Common Files\Symantec Shared\COH\sesHlp.dll]  [Symantec Corporation, 6,0,0,98]     [C:\Program Files\Common Files\Symantec Shared\ccSvc.dll]  [Symantec Corporation, 106.2.0.21]     [C:\PROGRA~1\NORTON~1\AVPAPP32.loc]  [Symantec Corporation, 14.0.0.89]     [C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVIfc.dll]  [Symantec Corporation, 1.0.00.194]     [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 106.2.0.21]     [C:\Program Files\Common Files\Symantec Shared\NPC\DataPvdr.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 106.2.0.21]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCHlpr2.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\Program Files\Norton AntiVirus\isDataCl.dll]  [Symantec Corporation, 10.0.0.247]     [C:\Program Files\Norton AntiVirus\fwEvent.dll]  [Symantec Corporation, 10.0.0.247]     [C:\Program Files\Norton AntiVirus\SetEvtHp.dll]  [Symantec Corporation, 10.0.0.247]     [C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtCli.dll]  [Symantec Corporation, 106.2.0.21]     [C:\Program Files\Common Files\Symantec Shared\NPC\pcStatus.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\PROGRA~1\COMMON~1\SYMANT~1cEmlPxy.dll]  [Symantec Corporation, 106.0.1.10]     [C:\WINDOWS\system32\SymRedir.dll]  [Symantec Corporation, 7.0.0.170]     [C:\Program Files\Common Files\Symantec Shared\NPC\uiLicPlg.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCWSCR2.DLL]  [Symantec Corporation, 2007.3.00.5]     [C:\Program Files\Common Files\Symantec Shared\NPC
pcWmiCl.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\Program Files\Common Files\Symantec Shared\NPC
pcWmiDt.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVMail.dll]  [Symantec Corporation, 1.0.00.194]     [C:\Program Files\Common Files\Symantec Shared\AntiVirus\AVExclu.dll]  [Symantec Corporation, 1.0.00.194]     [C:\Program Files\Norton AntiVirus\IMCfg.dll]  [Symantec Corporation, 10.0.0.247]     [C:\Program Files\Common Files\Symantec Shared\NPC\PEPEvnt.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCEXT.dll]  [Symantec Corporation, 2007.3.00.5]

dunny1079 · Answer

[PID: 3472][C:\Program Files\MSN Messenger\MsnMsgr.Exe]  [Microsoft Corporation, 8.1.0178.00]     [C:\WINDOWS\system32\msdmo.dll]  [, ]     [C:\WINDOWS\system32\devenum.dll]  [, ]     [C:\WINDOWS\system32\quartz.dll]  [, ]     [C:\WINDOWS\system32\qcap.dll]  [, ]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCEXT.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.2.0.21] [PID: 3528][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3544][C:\Documents and Settings\All Users\Start Menu\Programs\Startup\dllhost.exe]  [N/A, ]     [C:\WINDOWS\system32\MSVBVM60.DLL]  [Microsoft Corporation, 6.00.8964]     [C:\WINDOWS\system32\vbzip10.dll]  [Info-ZIP, 2.3] [PID: 2844][C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe]  [Intel Corporation, 10, 1, 0, 79]     [C:\PROGRA~1\Intel\Wireless\Bin\acAuth.dll]  [, 4.0.15.0 2005-11-16 13:05:02]     [C:\PROGRA~1\Intel\Wireless\Bin\C1XStngs.dll]  [Intel Corporation, 10, 1, 0, 31]     [C:\PROGRA~1\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 10, 1, 0, 2]     [C:\PROGRA~1\Intel\Wireless\Bin\IntStngs.dll]  [, 10, 1, 0, 3]     [C:\PROGRA~1\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 10, 1, 0, 5]     [C:\PROGRA~1\Intel\Wireless\Bin\IWMSPROV.DLL]  [N/A, ]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCEXT.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.2.0.21]     [C:\PROGRA~1\Intel\Wireless\Bin\LSAWRAPI.dll]  [Intel Corporation, 10, 1, 0, 1]     [C:\PROGRA~1\Intel\Wireless\Bin\PfMgrApi.dll]  [Intel Corporation, 10, 1, 0, 46]     [C:\PROGRA~1\Intel\Wireless\Bin\DbEngine.dll]  [Intel Corporation, 10, 1, 0, 13]     [C:\PROGRA~1\Intel\Wireless\Bin\LIBEAY32.dll]  [N/A, ] [PID: 3780][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe]  [ATI Technologies Inc., 1.11.0.0]     [C:\WINDOWS\system32\mscoree.dll]  [Microsoft Corporation, 1.1.4322.2032]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll]  [Microsoft Corporation, 1.1.4322.2032]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly
ativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_7daa2e8b\mscorlib.dll]  [N/A, ]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll]  [Microsoft Corporation, 1.1.4322.573]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCEXT.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.2.0.21]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly
ativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_f8011866\system.windows.forms.dll]  [N/A, ]     [c:\program files\ati technologies\ati.ace\cli.implementation.dll]  [ATI Technologies Inc., 1.2.2230.24409]     [c:\program files\ati technologies\ati.ace\log.foundation.dll]  [ATI Technologies Inc., 1.2.2117.25442]     [c:\program files\ati technologies\ati.ace\cli.foundation.dll]  [ATI Technologies Inc., 1.2.2117.25443]     [c:\program files\ati technologies\ati.ace\log.foundation.service.dll]  [ATI Technologies Inc., 1.2.2230.24532]     [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll]  [ATI Technologies Inc., 1.2.2117.25464]     [c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly
ativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_d96a49a3\system.dll]  [N/A, ]     [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll]  [ATI Technologies Inc., 1.2.2230.24532]     [c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly
ativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_7ab9413d\system.xml.dll]  [N/A, ]     [c:\windows\assembly\gac\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\program files\ati technologies\ati.ace\cli.component.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24413]     [c:\program files\ati technologies\ati.ace\cli.foundation.clients.dll]  [ATI Technologies Inc., 1.2.2117.25443]     [c:\program files\ati technologies\ati.ace\cli.component.wizard.shared.dll]  [ATI Technologies Inc., 1.2.2117.25445]     [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll]  [ATI Technologies Inc., 1.2.2230.24533]     [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25443]     [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll]  [ATI Technologies Inc., 1.2.2117.25443]     [c:\program files\ati technologies\ati.ace\aem.foundation.dll]  [ATI Technologies Inc., 1.2.2117.25442]     [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24415]     [c:\program files\ati technologies\ati.ace\cli.caste.graphics.wizard.shared.dll]  [ATI Technologies Inc., 1.2.2117.25448]     [c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll]  [Microsoft Corporation, 1.1.4322.2032]     [c:\windows\assembly
ativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_4d14ee68\system.drawing.dll]  [N/A, ]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24406]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24424]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24401]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24403]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24396]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24399]     [c:\program files\ati technologies\ati.ace\cli.aspect.displaysmanager.graphics.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24410]     [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.wizard.dll]  [ , 1.2.2230.24389]     [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24392]     [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.wizard.dll]  [ATI Technologies Inc., 1.2.2230.24394]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25468]     [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25444]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25449]     [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25444]     [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25444]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25468]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25448]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25468]     [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25465]     [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25457]     [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25466]     [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll]  [ATI Technologies Inc., 1.2.2117.25456]     [c:\windows\assembly\gac\system.web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll]  [Microsoft Corporation, 1.1.4322.2037]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\perfcounter.dll]  [Microsoft Corporation, 1.1.4322.2032]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll]  [Microsoft Corporation, 1.1.4322.2032] [PID: 160][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCEXT.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.2.0.21]     [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 6.0.1.2003110300]     [C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll]  [Sun Microsystems, Inc., 5.0.110.3]     [C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx]  [Adobe Systems, Inc., 9,0,45,0]     [C:\WINDOWS\system32\mscoree.dll]  [Microsoft Corporation, 1.1.4322.2032]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll]  [Microsoft Corporation, 1.1.4322.573]     [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll]  [Microsoft Corporation, 1.1.4322.2032] [PID: 1760][C:\Documents and Settings\Chris\Desktop\sreng2\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]     [C:\Program Files\Common Files\Symantec Shared\NPC\NSCEXT.dll]  [Symantec Corporation, 2007.3.00.5]     [C:\WINDOWS\system32\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]     [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]     [C:\Program Files\Common Files\Symantec Shared\ccL60U.dll]  [Symantec Corporation, 106.2.0.21] ================================== File Associations .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE  OK. ['%1' %*] .COM  OK. ['%1' %*] .PIF  OK. ['%1' %*] .REG  OK. [regedit.exe '%1'] .BAT  OK. ['%1' %*] .SCR  OK. ['%1' /S] .CHM  OK. ['C:\WINDOWS\hh.exe' %1] .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS  OK. [%SystemRoot%\System32\WScript.exe '%1' %*] .JS   OK. [%SystemRoot%\System32\WScript.exe '%1' %*] .LNK  OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock Provider N/A ================================== Autorun.Inf [D:\] [autorun] OPEN=setupSNK.exe ICON=\SMRTNTKY\fcw.ico ACTION=Wireless Network Setup Wizard ================================== HOSTS File 127.0.0.1       localhost ================================== API HOOK N/A ================================== Hidden Process N/A ================================== [/CODE]

dunny1079 · Answer

Browser Add-ons
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
[SSVHelper Class]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
[Windows Live Sign-in Helper]
{9030D464-4C02-4ABF-8ECC-5164760863C6}
[]
{C9878D92-0CB7-453E-9382-7FB425158067}
[Java Plug-in 1.5.0_11]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}
[]
{e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683}
[Microsoft Office Template and Media Control]
{02BCC737-B171-4746-94C9-0D8A0B2C0089}
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700}
[EPUImageControl Class]
{4C39376E-FA9D-4349-BACC-D305C1750EF3}
[MSN Photo Upload Tool]
{4F1E5B1A-2A80-42CA-8532-2D05CB959537}
[Java Plug-in 1.5.0_11]
{8AD9C840-044E-11D1-B3E9-00805F499D93}
[Java Plug-in 1.5.0_03]
{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}
[Java Plug-in 1.5.0_11]
{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}
[Java Plug-in 1.5.0_11]
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000}
[Microsoft Office Template and Media Control]
{02BCC737-B171-4746-94C9-0D8A0B2C0089}
[QuickTime Object]
{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700}
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95}
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13}
[XML DOM Document]
{2933BF90-7B36-11D2-B20E-00C04F983E60}
[XSL Template]
{2933BF94-7B36-11D2-B20E-00C04F983E60}
[XML Document]
{48123BC4-99D9-11D1-A6B3-00C04FD91555}
[EPUImageControl Class]
{4C39376E-FA9D-4349-BACC-D305C1750EF3}
[Shell Name Space]
{55136805-B2DE-11D1-B9F2-00A0C98BC547}
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C}
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6}
[SSVHelper Class]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
[Microsoft Web Browser]
{8856F961-340A-11D0-A96B-00C04FD705A2}
[XML DOM Document 4.0]
{88D969C0-F192-11D4-A65F-0040963251E5}
[Windows Live Sign-in Helper]
{9030D464-4C02-4ABF-8ECC-5164760863C6}
[RMGetLicense Class]
{A9FC132B-096D-460B-B7D5-1DB0FAE0C062}
[]
{C9878D92-0CB7-453E-9382-7FB425158067}
[Adobe Acrobat Control for ActiveX]
{CA8A9780-280D-11CF-A24D-444553540000}
[AUDIO__WAV Moniker Class]
{CD3AFA7B-B84F-48F0-9393-7EDC34128127}
[VIDEO__X_MS_ASF Moniker Class]
{CD3AFA8F-B84F-48F0-9393-7EDC34128127}
[RealPlayer G2 Control]
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000}
[QuickTimeCheck Class]
{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}
[XML HTTP Request]
{ED8C108E-4349-11D2-91A4-00C04F7969E8}
[XML HTTP 3.0]
{F5078F35-C551-11D3-89B9-0000F81FE221}
[XML DOM Document]
{F6D90F11-9C73-11D3-B32E-00C04F990BB4}
[Free Threaded XML DOM Document]
{F6D90F12-9C73-11D3-B32E-00C04F990BB4}
[XML HTTP]
{F6D90F16-9C73-11D3-B32E-00C04F990BB4}

bamajim · Answer

dunny1079 Rerun SRE2 In the Left Pane Select ' Boot items' In the Right Pane under the ' Registry' Tab Locate sys0158108827 Higlite that entry ->>Select the Delete Button In the Left Pane Select ' System Repair' In the Right Pane under the ' Windows Shell/IE' Tab Check the ' Select all' box ->>Then ' Repair' Close SRE2->>reboot your PC Let me know if you can access the 2 functions now.   bamajim   Graduate of MRU CastleCops  Instructor

bamajim · Answer

dunny1079   Odd.   Reboot into Safe Mode, then run Combofix. And post the results   bamajim   Graduate of MRU CastleCops  Instructor

dunny1079 · Answer

i have downloaded the combofix file but i cant run it, when i double click to start it i get the message 'another program is currently using this file'

dunny1079 · Answer

hi have followed the instructions, i can now access the regedit however i still cant access task manager either by ctrl+alt+delete or by right clicking on  the bar at the bottom of the screen.

bamajim · Answer

dunny1079

Some progress, good.

1. Download this file - combofix.exe
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log in your next reply

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

bamajim Graduate of MRU

CastleCops Instructor

dunny1079 · Answer

'Chris' - 07-05-07 15:40:56    Service Pack 2  [SAFE MODE] ComboFix 07-04-25.4V - Running from: 'C:\Documents and Settings\Chris\Desktop\' ((((((((((((((((((((((((((((((((((((((((((((   Other Deletions   ))))))))))))))))))))))))))))))))))))))))))))))))) C:\WINDOWS\system32\p2pnetworking.exe C:\WINDOWS\system32\bund1	emp.txt C:\WINDOWS\system32\bund1\Yzz.exe C:\DOCUME~1\Chris\Desktop.\internet explorer.lnk C:\WINDOWS\system32\bund1 (((((((((((((((((((((((((((((((   Files Created from 2007-04-07 to 2007-05-07  )))))))))))))))))))))))))))))))))) 2007-04-18 20:00 167 --a------ C:\DOCUME~1\Chris\3481.bat 2007-04-18 11:03 167 --a------ C:\DOCUME~1\Chris\8619.bat 2007-04-18 11:02 41,472 --a------ C:\DOCUME~1\Chris\install.exe 2007-04-15 20:55 207 --a------ C:\DOCUME~1\Chris\2867.bat 2007-04-15 20:54 41,792 --a------ C:\DOCUME~1\Chris\app.exe 2007-04-15 20:54 32,768 --a------ C:\DOCUME~1\Chris\setup9x.exe 2007-04-14 15:19   d-------- C:\Program Files\Disc2Phone 2007-04-07 19:59 57,344 --a------ C:\WINDOWS\system32\Mfc70enu.dll 2007-04-07 19:58   d-------- C:\Program Files\Legal Easy ((((((((((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-05-07 15:16 417792 --a------ C:\Program Files\video.exe 2007-05-07 15:16 417792 --a------ C:\Program Files	rack_03.exe 2007-05-07 15:16 25214 --a------ C:\Program Files\b.ico 2007-05-07 15:16 25214 --a------ C:\Program Files\a.ico 2007-05-07 15:16 218599 --a------ C:\Program Files\c.zip 2007-05-07 15:16 217699 --a------ C:\Program Files\b.zip 2007-05-07 15:16 201620 --a------ C:\Program Files\a.zip 2007-05-04 17:29 -------- d-------- C:\Program Files\Common Files\symantec shared 2007-04-17 19:31 -------- d-------- C:\Program Files\driving test success 2006-2007 2007-04-14 14:39 78360 --a------ C:\Program Files\uy.exe 2007-04-04 15:21 120 --a------ C:\DOCUME~1\Chris\APPLIC~1\fixvts.ini 2007-04-01 20:04 145408 --a------ C:\WINDOWS\customess_uninstall.exe 2007-04-01 20:04 -------- d-------- C:\Program Files\customess 2007-03-28 19:20 -------- d-------- C:\Program Files\flash cd & dvd burner 2007-03-25 10:16 -------- d-------- C:\Program Files\sopcast 2007-03-22 22:42 -------- d-------- C:\DOCUME~1\Chris\APPLIC~1\bittorrent 2007-03-18 22:59 -------- d-------- C:\DOCUME~1\Chris\APPLIC~1\desperate housewives 2007-03-18 09:19 98304 --a------ C:\WINDOWS\system32\cmdlineext.dll 2007-03-18 09:00 -------- d--h----- C:\Program Files\installshield installation information 2007-03-17 14:43 292864 --a------ C:\WINDOWS\system32\winsrv.dll 2007-03-16 21:44 -------- d-------- C:\Program Files	vuplayer 2007-03-16 21:32 -------- d-------- C:\DOCUME~1\Chris\APPLIC~1\sopcast 2007-03-15 20:02 -------- d-------- C:\Program Files\oxygen interactive 2007-03-15 09:58 -------- d-------- C:\DOCUME~1\Chris\APPLIC~1eal 2007-03-15 09:55 -------- d-------- C:\Program Fileseal 2007-03-15 09:55 -------- d-------- C:\Program Files\Common Files\xing shared 2007-03-15 09:55 -------- d-------- C:\Program Files\Common Fileseal 2007-03-15 09:43 -------- d-------- C:\Program Files\microsoft xbox 360 accessories 2007-03-14 19:14 -------- d-------- C:\Program Files\elaborate bytes 2007-03-14 19:03 8464 --a------ C:\WINDOWS\system32\sporder.dll 2007-03-14 19:03 41792 --a------ C:\WINDOWS\system32
ek.exe 2007-03-14 19:03 114 --a------ C:\WINDOWS\system32\hhjj.bat 2007-03-10 23:31 147456 --a------ C:\WINDOWS\system32\vbzip10.dll 2007-03-10 23:31 0 --a------ C:\WINDOWS\system32	askkill.exe 2007-03-08 16:36 577536 --a------ C:\WINDOWS\system32\user32.dll 2007-03-08 16:36 40960 --a------ C:\WINDOWS\system32\mf3216.dll 2007-03-08 16:36 281600 --a------ C:\WINDOWS\system32\gdi32.dll 2007-03-08 14:47 1843584 --a------ C:\WINDOWS\system32\win32k.sys 2007-03-07 15:24 112331 --a------ C:\WINDOWS\hpoins07.dat 2007-03-07 15:23 -------- d-------- C:\Program Files\hp 2007-03-07 15:21 -------- d-------- C:\Program Files\Common Files\sonic shared 2007-03-07 15:18 -------- d-------- C:\Program Files\hewlett-packard 2007-02-20 16:47 48776 --a------ C:\WINDOWS\system32\s32evnt1.dll 2007-02-19 13:03 552 --a------ C:\WINDOWS\system32\d3d8caps.dat 2007-02-18 21:57 0 -rahs---- C:\MSDOS.SYS 2007-02-18 21:57 0 -rahs---- C:\IO.SYS 2007-02-18 21:57 0 --a------ C:\CONFIG.SYS 2007-02-18 21:57 0 --a------ C:\AUTOEXEC.BAT 2007-02-18 21:54 21640 --a------ C:\WINDOWS\system32\emptyregdb.dat 2007-02-18 21:46 62 --ahs---- C:\DOCUME~1\Chris\APPLIC~1\desktop.ini 2007-02-14 22:22 184320 --a------ C:\WINDOWS\sys0158108827-.exe 2007-02-07 08:42 1421176 --a------ C:\WINDOWS\system32\wdfcoinstaller01001.dll 2007-02-05 22:11 393216 --a------ C:\Program Files\setup.exe ((((((((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))     *Note* empty entries & legit default entries are not shown   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll {9030D464-4C02-4ABF-8ECC-5164760863C6} C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll {C9878D92-0CB7-453E-9382-7FB425158067} C:\Program Files\Common Files\labu.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun] 'IntelZeroConfig'='\'C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe\'' 'IntelWireless'='\'C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe\' /tf Intel PROSet/Wireless' 'ccApp'='\'C:\Program Files\Common Files\Symantec Shared\ccApp.exe\'' 'osCheck'='\'C:\Program Files\Norton AntiVirus\osCheck.exe\'' 'ATICCC'='\'C:\Program Files\ATI Technologies\ATI.ACE\cli.exe\' runtime -Delay' 'HP Software Update'='; C:\Program Files\HP\HP Software Update\HPWuSchd2.exe' 'NeroFilterCheck'='; C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe' 'NWEReboot'='; ' 'p2p networking'='; p2pnetworking.exe' 'QuickTime Task'='; \'C:\Program Files\QuickTime\qttask.exe\' -atboottime' 'SigmatelSysTrayApp'='; stsystra.exe' 'SunJavaUpdateSched'='; \'C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe\'' 'TkBellExe'='; \'C:\Program Files\Common Files\Real\Update_OB\realsched.exe\'  -osboot' 'XboxStat'='; \'c:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe\' silentrun' [HKEY_CURRENT_USER\software\microsoft\windows\currentversionun] 'MsnMsgr'='\'C:\Program Files\MSN Messenger\MsnMsgr.Exe\' /background' 'ctfmon.exe'='C:\WINDOWS\system32\ctfmon.exe' 'BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}'='; \'C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe\'' 'BitTorrent'='; \'C:\Program Files\BitTorrent\bittorrent.exe\' --force_start_minimized' [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] '{93994DE8-8239-4655-B1D1-5F4E91300429}'='' HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa    Authentication Packages REG_MULTI_SZ    msv1_0\0\0    Security Packages REG_MULTI_SZ    kerberos\0msv1_0\0schannel\0wdigest\0\0    Notification Packages REG_MULTI_SZ    scecli\0\0 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^dllhost.exe] 'path'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\dllhost.exe' 'backup'='C:\WINDOWS\pss\dllhost.exeCommon Startup' 'location'='Common Startup' 'command'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\dllhost.exe' 'item'='dllhost' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk] 'path'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk' 'backup'='C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup' 'location'='Common Startup' 'command'='C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe ' 'item'='HP Digital Imaging Monitor' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Image Zone Fast Start.lnk] 'path'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk' 'backup'='C:\WINDOWS\pss\HP Image Zone Fast Start.lnkCommon Startup' 'location'='Common Startup' 'command'='C:\PROGRA~1\HP\DIGITA~1\bin\hpqthb08.exe -s' 'item'='HP Image Zone Fast Start' [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk] 'path'='C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk' 'backup'='C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup' 'location'='Common Startup' 'command'='C:\PROGRA~1\MICROS~2\Office\OSA9.EXE -b -l' 'item'='Microsoft Office'   [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ    HTTPFilter\0\0 LocalService REG_MULTI_SZ    Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ    DnsCache\0\0 DcomLaunch REG_MULTI_SZ    DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ    RpcSs\0\0 imgsvc REG_MULTI_SZ    StiSvc\0\0 termsvcs REG_MULTI_SZ    TermService\0\0 WudfServiceGroup REG_MULTI_SZ    WUDFSvc\0\0 *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enumoot\LEGACY_MDMXSDK *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enumoot\LEGACY_PARPORT Contents of the 'Scheduled Tasks' folder C:\WINDOWS	asks\Norton AntiVirus - Run Full System Scan - Chris.job ******************************************************************** catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-05-07 15:45:38 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden services ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 ******************************************************************** Completion time: 07-05-07 15:45:41 C:\ComboFix-quarantined-files.txt ... 07-05-07 15:45

dunny1079 · Answer


04-08-04 11:00      78360    --a------    C:\Qoobox\Quarantine\C\WINDOWS\system32\p2pnetworking.exe.vir
07-02-12 22:23      193141    --a------    C:\Qoobox\Quarantine\C\WINDOWS\system32\bund1\Yzz.exe.vir
07-02-18 22:31      767    --a------    C:\Qoobox\Quarantine\C\DOCUME~1\Chris\Desktop\Internet Explorer.lnk.vir
07-03-08 08:22      1    --a------    C:\Qoobox\Quarantine\C\WINDOWS\system32\bund1\temp.txt.vir

This was the second file log saved after the scan in safe mode

dunny1079 · Answer

i cant access the regedit file again either now, keep getting message that another problem is currently using this file

bamajim · Answer

dunny1079 1. Please download the Killbox. 1)Save it to the desktop 2) Rt Click->>Extract all->.Extract it to your Desktop 3) Double Click Killbox.exe to run it 4)Select ' Delete on Reboot', and then select 'All files'. 5) Copy the file names below to the clipboard by highlighting them and pressing Control-C: C:\Program Files\video.exeC:\Program Files	rack_03.exeC:\Program Files\b.icoC:\Program Files\a.icoC:\Program Files\c.zipC:\Program Files\b.zipC:\Program Files\a.zipC:\Program Files\uy.exeC:\WINDOWS\customess_uninstall.exeC:\DOCUMENTS AND SETTINGS\Chris\app.exeC:\DOCUMENTS AND SETTINGS\Chris\3481.batC:\DOCUMENTS AND SETTINGS\Chris\8619.batC:\DOCUMENTS AND SETTINGS\Chris\install.exeC:\DOCUMENTS AND SETTINGS\Chris\2867.batC:\WINDOWS\system32
ek.exeC:\WINDOWS\system32\vbzip10.dll 6) Return to Killbox, go to the File menu, and choose ' Paste from Clipboard'. 7) Click the red-and-white ' Delete File' button.  Click ' Yes' at the Delete on Reboot prompt.  Click ' No' at the Pending Operations prompt. 2. Reboot your PC 3. Go here and Download AVG Anti-Spyware ( 30 day free trial version) Save it to Your Desktop   Double Click AVG Anti-Spyware-setup (It will create its own folder) Once the program starts You will be at the Status menu Under 'Your computers Security' Click Update now (next to last update) After the update loads Under Automatic updates Uncheck download and install updates automatically(recommended) (you can always select maual updates the next day) At the top toolbar Click Scanner Then the settings tab Under How to act? Set default action for detected malwareTo Quarantine Under how to scan All boxes should be checked Under Possibly unwanted software All boxes should be checked Under reports Select Automatically generate report after every scan Uncheck Only if threats were found Under what to scan Scan every file should be highlited Exit AVG  (But do not run it yet)   Reboot into Safe Mode This can be done by Restart your PC, and after it starts, but before you see the Windows Splash screen Begin tapping the F8 key twice a second untill you reach another menu screen (black background with white menu choices) Use your arrow keys and select Safe Mode and then Enter Run AVG Anti-Spyware Click scanner Select Complete system scan Once the scan finishes Select Apply all actions (The items found will be quarantined) Click save report as (Another window will open) Save it to your desktop (By default It will be saved in the AVG folder as) C:\Program Files\Grisoft\AVG anti-spyware 7.5\Reports Exit AVG   Reboot your PC in Normal Mode->>Re run Hijackthis and post a fresh Hijackthis log. Double click the report-scan txt. you saved to your desktop It will open in Notepad Copy and paste that report as a reply to this thread Your reply should include a fresh Hijackthis log your report_scan.txt log from AVG bamajim   Graduate of MRU CastleCops  Instructor

Virus & Spyware

unable to access regedit or task manager

Was this post helpful?