Hello Bob. Just to be safe, could you follow the PreWork link in my signature? That'll help us determine if it's malware or not. Thanks.

*JM*

Thanks JMarket.
I did as you asked. Do I copy and paste the log files or is there a way to attach them?

Here are my logs.
First my SysProt Log:

SysProt AntiRootkit v1.0.1.0
by swatkat
************************************************** ****************************************
************************************************** ****************************************
Process:
Name: [System Idle Process]
PID: 0
Hidden: No
Window Visible: No
Name: System
PID: 4
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\smss.exe
PID: 540
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\csrss.exe
PID: 596
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\winlogon.exe
PID: 620
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\services.exe
PID: 664
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\lsass.exe
PID: 676
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\svchost.exe
PID: 820
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\svchost.exe
PID: 896
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\svchost.exe
PID: 932
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\svchost.exe
PID: 992
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\svchost.exe
PID: 1056
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\spoolsv.exe
PID: 1264
Hidden: No
Window Visible: No
Name: C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
PID: 1384
Hidden: No
Window Visible: No
Name: C:\Program Files\Spyware Terminator\sp_rsser.exe
PID: 1420
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\wdfmgr.exe
PID: 1548
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\wltrysvc.exe
PID: 1584
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\bcmwltry.exe
PID: 1636
Hidden: No
Window Visible: No
Name: C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
PID: 1684
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\alg.exe
PID: 1936
Hidden: No
Window Visible: No
Name: C:\WINDOWS\explorer.exe
PID: 1008
Hidden: No
Window Visible: No
Name: C:\Program Files\Common Files\Symantec Shared\Security Center\SymSCUI.exe
PID: 1476
Hidden: No
Window Visible: No
Name: C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
PID: 1656
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system\hpsysdrv.exe
PID: 1664
Hidden: No
Window Visible: No
Name: C:\WINDOWS\AGRSMMSG.exe
PID: 668
Hidden: No
Window Visible: No
Name: C:\hp\KBD\kbd.exe
PID: 1880
Hidden: No
Window Visible: No
Name: C:\Program Files\iTunes\iTunesHelper.exe
PID: 2020
Hidden: No
Window Visible: No
Name: C:\WINDOWS\ALCXMNTR.EXE
PID: 2000
Hidden: No
Window Visible: No
Name: C:\Program Files\Spyware Terminator\SpywareTerminatorShield.Exe
PID: 1832
Hidden: No
Window Visible: No
Name: C:\WINDOWS\system32\ctfmon.exe
PID: 380
Hidden: No
Window Visible: No
Name: C:\Program Files\iPod\bin\iPodService.exe
PID: 588
Hidden: No
Window Visible: No
Name: C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe
PID: 1860
Hidden: No
Window Visible: Yes
Name: C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
PID: 1088
Hidden: No
Window Visible: No
Name: G:\SysProt\SysProt.exe
PID: 3772
Hidden: No
Window Visible: Yes
************************************************** ****************************************
************************************************** ****************************************
Kernel Modules:
Module Name: \??\G:\SysProt\SysProtDrv.sys
Service Name: SysProtDrv.sys
Module Base: F3C97000
Module End: F3CA2000
Hidden: No
Module Name: C:\WINDOWS\system32\ntkrnlpa.exe
Service Name: ---
Module Base: 804D7000
Module End: 806CD280
Hidden: No
Module Name: C:\WINDOWS\system32\hal.dll
Service Name: ---
Module Base: 806CE000
Module End: 806EE380
Hidden: No
Module Name: C:\WINDOWS\system32\KDCOM.DLL
Service Name: ---
Module Base: FB02C000
Module End: FB02E000
Hidden: No
Module Name: C:\WINDOWS\system32\BOOTVID.dll
Service Name: ---
Module Base: FAF3C000
Module End: FAF3F000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\ACPI.sys
Service Name: ACPI
Module Base: FA9FD000
Module End: FAA2B000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\WMILIB.SYS
Service Name: ---
Module Base: FB02E000
Module End: FB030000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\pci.sys
Service Name: PCI
Module Base: FA9EC000
Module End: FA9FD000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\isapnp.sys
Service Name: isapnp
Module Base: FAB2C000
Module End: FAB35000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\pciide.sys
Service Name: PCIIde
Module Base: FB0F4000
Module End: FB0F5000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\PCIIDEX.SYS
Service Name: ---
Module Base: FADAC000
Module End: FADB3000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\MountMgr.sys
Service Name: MountMgr
Module Base: FAB3C000
Module End: FAB47000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\ftdisk.sys
Service Name: Disk
Module Base: FA9CD000
Module End: FA9EC000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\PartMgr.sys
Service Name: PartMgr
Module Base: FADB4000
Module End: FADB9000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\VolSnap.sys
Service Name: VolSnap
Module Base: FAB4C000
Module End: FAB59000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\atapi.sys
Service Name: atapi
Module Base: FA9B5000
Module End: FA9CD000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\disk.sys
Service Name: ---
Module Base: FAB5C000
Module End: FAB65000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\CLASSPNP.SYS
Service Name: ---
Module Base: FAB6C000
Module End: FAB79000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\sr.sys
Service Name: sr
Module Base: FA984000
Module End: FA996000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\PxHelp20.sys
Service Name: PxHelp20
Module Base: FADBC000
Module End: FADC1000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\KSecDD.sys
Service Name: KSecDD
Module Base: FA96D000
Module End: FA984000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\Ntfs.sys
Service Name: Ntfs
Module Base: FA8E0000
Module End: FA96D000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\NDIS.sys
Service Name: NDIS
Module Base: FA8B3000
Module End: FA8E0000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\SISAGPX.sys
Service Name: SISAGP
Module Base: FAB7C000
Module End: FAB86000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\ohci1394.sys
Service Name: ohci1394
Module Base: FAB8C000
Module End: FAB9B000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\1394BUS.SYS
Service Name: ---
Module Base: FAB9C000
Module End: FABA9000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\Mup.sys
Service Name: Mup
Module Base: FA898000
Module End: FA8B3000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\gagp30kx.sys
Service Name: gagp30kx
Module Base: FABAC000
Module End: FABB8000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\processr.sys
Service Name: Processor
Module Base: FA0D9000
Module End: FA0E2000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\sisgrp.sys
Service Name: SiS315
Module Base: FA09D000
Module End: FA0D9000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\VIDEOPRT.SYS
Service Name: ---
Module Base: FA089000
Module End: FA09D000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\imapi.sys
Service Name: Imapi
Module Base: FABDC000
Module End: FABE7000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\cdrom.sys
Service Name: Cdrom
Module Base: FABEC000
Module End: FABF9000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\redbook.sys
Service Name: redbook
Module Base: FABFC000
Module End: FAC0B000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\ks.sys
Service Name: ---
Module Base: FA066000
Module End: FA089000
Hidden: No
Module Name: C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys
Service Name: GEARAspiWDM
Module Base: FAE8C000
Module End: FAE93000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\ALCXWDM.SYS
Service Name: ALCXWDM
Module Base: F9E39000
Module End: FA066000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\portcls.sys
Service Name: ---
Module Base: F9E15000
Module End: F9E39000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\drmk.sys
Service Name: ---
Module Base: FAC3C000
Module End: FAC4B000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\usbohci.sys
Service Name: usbohci
Module Base: FAE9C000
Module End: FAEA1000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\USBPORT.SYS
Service Name: ---
Module Base: F9DF2000
Module End: F9E15000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\usbehci.sys
Service Name: usbehci
Module Base: FAEA4000
Module End: FAEAB000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\AGRSM.sys
Service Name: AgereSoftModem
Module Base: F9C69000
Module End: F9D9F000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\Modem.SYS
Service Name: Modem
Module Base: FAEAC000
Module End: FAEB4000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\serial.sys
Service Name: Serial
Module Base: FAC4C000
Module End: FAC5C000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\serenum.sys
Service Name: Serenum
Module Base: FB004000
Module End: FB008000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\parport.sys
Service Name: Parport
Module Base: F9C55000
Module End: F9C69000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\i8042prt.sys
Service Name: i8042prt
Module Base: FAC5C000
Module End: FAC69000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\PS2.sys
Service Name: Ps2
Module Base: FAEB4000
Module End: FAEBA000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\kbdclass.sys
Service Name: Kbdclass
Module Base: FAEBC000
Module End: FAEC2000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\audstub.sys
Service Name: audstub
Module Base: FB22A000
Module End: FB22B000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
Service Name: Rasl2tp
Module Base: FAC6C000
Module End: FAC79000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\ndistapi.sys
Service Name: NdisTapi
Module Base: FB008000
Module End: FB00B000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\ndiswan.sys
Service Name: NdisWan
Module Base: F9C3E000
Module End: F9C55000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\raspppoe.sys
Service Name: RasPppoe
Module Base: FAC7C000
Module End: FAC87000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\raspptp.sys
Service Name: PptpMiniport
Module Base: FAC8C000
Module End: FAC98000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\TDI.SYS
Service Name: ---
Module Base: FAEC4000
Module End: FAEC9000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\psched.sys
Service Name: PSched
Module Base: F9C2D000
Module End: F9C3E000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\msgpc.sys
Service Name: Gpc
Module Base: FAC9C000
Module End: FACA5000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\ptilink.sys
Service Name: Ptilink
Module Base: FAECC000
Module End: FAED1000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\raspti.sys
Service Name: Raspti
Module Base: FAED4000
Module End: FAED9000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\termdd.sys
Service Name: TermDD
Module Base: FACAC000
Module End: FACB6000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\mouclass.sys
Service Name: Mouclass
Module Base: FAEDC000
Module End: FAEE2000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\swenum.sys
Service Name: swenum
Module Base: FB072000
Module End: FB074000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\update.sys
Service Name: Update
Module Base: F9BF9000
Module End: F9C2D000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\mssmbios.sys
Service Name: mssmbios
Module Base: FB010000
Module End: FB014000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\NDProxy.SYS
Service Name: NDProxy
Module Base: FACBC000
Module End: FACC6000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\usbhub.sys
Service Name: usbhub
Module Base: FACEC000
Module End: FACFB000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\USBD.SYS
Service Name: ---
Module Base: FB086000
Module End: FB088000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\Fs_Rec.SYS
Service Name: Fs_Rec
Module Base: FB09C000
Module End: FB09E000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\Beep.SYS
Service Name: Beep
Module Base: FB09E000
Module End: FB0A0000
Hidden: No
Module Name: C:\WINDOWS\System32\drivers\vga.sys
Service Name: VgaSave
Module Base: FAEFC000
Module End: FAF02000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\mnmdd.SYS
Service Name: mnmdd
Module Base: FB0A0000
Module End: FB0A2000
Hidden: No
Module Name: C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
Service Name: RDPCDD
Module Base: FB0A2000
Module End: FB0A4000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\Npfs.SYS
Service Name: Npfs
Module Base: FAF0C000
Module End: FAF14000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\rasacd.sys
Service Name: RasAcd
Module Base: F9BF1000
Module End: F9BF4000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\ipsec.sys
Service Name: IPSec
Module Base: F4A21000
Module End: F4A34000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\tcpip.sys
Service Name: Tcpip
Module Base: F49C9000
Module End: F4A21000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\netbt.sys
Service Name: NetBT
Module Base: F49A1000
Module End: F49C9000
Hidden: No
Module Name: C:\WINDOWS\System32\drivers\afd.sys
Service Name: AFD
Module Base: F497F000
Module End: F49A1000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\netbios.sys
Service Name: NetBIOS
Module Base: FAD0C000
Module End: FAD15000
Hidden: No
Module Name: \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
Service Name: sp_rsdrv2
Module Base: F495C000
Module End: F497F000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\srvkp.sys
Service Name: SiSkp
Module Base: F9BED000
Module End: F9BF1000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\rdbss.sys
Service Name: Rdbss
Module Base: F4931000
Module End: F495C000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
Service Name: MRxSmb
Module Base: F489B000
Module End: F4909000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\ipnat.sys
Service Name: IpNat
Module Base: F487A000
Module End: F489B000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\wanarp.sys
Service Name: Wanarp
Module Base: FAD1C000
Module End: FAD25000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\Fips.SYS
Service Name: Fips
Module Base: FAD2C000
Module End: FAD35000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\Fastfat.SYS
Service Name: Fastfat
Module Base: F47B7000
Module End: F47DA000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
Service Name: USBSTOR
Module Base: FAF2C000
Module End: FAF33000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\hidusb.sys
Service Name: HidUsb
Module Base: F4AC5000
Module End: F4AC8000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\HIDCLASS.SYS
Service Name: ---
Module Base: FAD4C000
Module End: FAD55000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\HIDPARSE.SYS
Service Name: ---
Module Base: FADF4000
Module End: FADFB000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\mouhid.sys
Service Name: mouhid
Module Base: F4AC1000
Module End: F4AC4000
Hidden: No
Module Name: \SystemRoot\System32\Drivers\dump_atapi.sys
Service Name: ---
Module Base: F479F000
Module End: F47B7000
Hidden: Yes
Module Name: \SystemRoot\System32\Drivers\dump_WMILIB.SYS
Service Name: ---
Module Base: FB0CC000
Module End: FB0CE000
Hidden: Yes
Module Name: C:\WINDOWS\System32\watchdog.sys
Service Name: ---
Module Base: FADFC000
Module End: FAE01000
Hidden: No
Module Name: C:\WINDOWS\System32\drivers\Dxapi.sys
Service Name: ---
Module Base: F4AA5000
Module End: F4AA8000
Hidden: No
Module Name: C:\WINDOWS\System32\drivers\dxgthk.sys
Service Name: ---
Module Base: FB116000
Module End: FB117000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\mdc8021x.sys
Service Name: MDC8021X
Module Base: F466B000
Module End: F466F000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\ndisuio.sys
Service Name: Ndisuio
Module Base: F4663000
Module End: F4667000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\mrxdav.sys
Service Name: MRxDAV
Module Base: F44AA000
Module End: F44D7000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\srv.sys
Service Name: Srv
Module Base: F4367000
Module End: F43BA000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\Cdfs.SYS
Service Name: Cdfs
Module Base: F42CF000
Module End: F42DF000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\wdmaud.sys
Service Name: wdmaud
Module Base: F400A000
Module End: F401F000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\sysaudio.sys
Service Name: sysaudio
Module Base: F483A000
Module End: F4849000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\HTTP.sys
Service Name: HTTP
Module Base: F3D97000
Module End: F3DD8000
Hidden: No
Module Name: C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
Service Name: BCM43XX
Module Base: F39FA000
Module End: F3A4D000
Hidden: No
Module Name: C:\WINDOWS\system32\drivers\kmixer.sys
Service Name: kmixer
Module Base: F3906000
Module End: F3930000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\Null.SYS
Service Name: Null
Module Base: FB25B000
Module End: FB25C000
Hidden: No
Module Name: C:\WINDOWS\System32\Drivers\Msfs.SYS
Service Name: Msfs
Module Base: FAF04000
Module End: FAF09000
Hidden: No
************************************************** ****************************************
************************************************** ****************************************
No SSDT Hooks found
************************************************** ****************************************
************************************************** ****************************************
No Kernel Hooks found
************************************************** ****************************************
************************************************** ****************************************
No IRP Hooks found
************************************************** ****************************************
************************************************** ****************************************
Ports:
Local Address: YOUR-4F1261A8E5:NETBIOS-SSN
Remote Address: 0.0.0.0:0
Type: TCP
Process: System
State: LISTENING
Local Address: YOUR-4F1261A8E5:1025
Remote Address: 0.0.0.0:0
Type: TCP
Process: C:\WINDOWS\system32\alg.exe
State: LISTENING
Local Address: YOUR-4F1261A8E5:MICROSOFT-DS
Remote Address: 0.0.0.0:0
Type: TCP
Process: System
State: LISTENING
Local Address: YOUR-4F1261A8E5:EPMAP
Remote Address: 0.0.0.0:0
Type: TCP
Process: C:\WINDOWS\system32\svchost.exe
State: LISTENING
Local Address: YOUR-4F1261A8E5:1900
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\svchost.exe
State: NA
Local Address: YOUR-4F1261A8E5:138
Remote Address: NA
Type: UDP
Process: System
State: NA
Local Address: YOUR-4F1261A8E5:NETBIOS-NS
Remote Address: NA
Type: UDP
Process: System
State: NA
Local Address: YOUR-4F1261A8E5:123
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\svchost.exe
State: NA
Local Address: YOUR-4F1261A8E5:1900
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\svchost.exe
State: NA
Local Address: YOUR-4F1261A8E5:123
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\svchost.exe
State: NA
Local Address: YOUR-4F1261A8E5:9370
Remote Address: NA
Type: UDP
Process: C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe
State: NA
Local Address: YOUR-4F1261A8E5:4500
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\lsass.exe
State: NA
Local Address: YOUR-4F1261A8E5:500
Remote Address: NA
Type: UDP
Process: C:\WINDOWS\system32\lsass.exe
State: NA
Local Address: YOUR-4F1261A8E5:MICROSOFT-DS
Remote Address: NA
Type: UDP
Process: System
State: NA
************************************************** ****************************************
************************************************** ****************************************
Hidden files/folders:
Object: C:\7049dc7077cb04e5d8\update\eula.rtf
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\idndl.exe
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\ie7.cat
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\iecustom.dll
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\iereseticons.exe
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\iesetup.exe
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\legitlibm.dll
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\nlsdl.exe
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\update.exe
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\update.exe.manifest
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\update.inf
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\update.ver
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\updspapi.dll
Status: Access denied
Object: C:\7049dc7077cb04e5d8\update\xmllitesetup.exe
Status: Access denied
Object: C:\Documents and Settings\Ali\Local Settings\Temp\Temporary Internet Files\Content.IE5\05IV89KX\D784095794%26ged%3D0%3A 0%3Aytg4odhmmjdmyjbkzwnmosxc4txj_ek-msglmsshidemoaeqkntl34tg1d-zqc0grxjdzoqjaysa0zadt2ix8wwyhksmgfbhdib3lijmvbmls ltsuvyifvi_ru7ehgi8imie
Status: Hidden
Object: C:\Documents and Settings\Ali\Local Settings\Temp\Temporary Internet Files\Content.IE5\Q1LFQDMV\dref=http%253A%252F%252 Ffriends.myspace.com%252Findex.cfm%253Ffuseaction% 253Duser[1].onlinefriends%2526friendID%253D31604201%2526MyTok en%253D71559cb7-03f0-48a6
Status: Hidden
Object: C:\Documents and Settings\Ali\Local Settings\Temp\Temporary Internet Files\Content.IE5\Q1LFQDMV\dref=http%253A%252F%252 Fmess[1].reply%2526friendId%253D141997005%2526type%253DInb ox%2526messageID%253D454749764%2526fed%253DTrue%25 26MyToken%253Dfad4f664-5f38-
Status: Hidden
Object: C:\Documents and Settings\Ali\Local Settings\Temp\Temporary Internet Files\Content.IE5\WHIZKXU3\dref=http%253A%252F%252 Ffriends.myspace.com%252Findex.cfm%253Ffuseaction% 253Duser[1].onlinefriends%2526friendID%253D31604201%2526MyTok en%253D71559cb7-03f0-48a6
Status: Hidden
Object: C:\Documents and Settings\Ali\Local Settings\Temp\Temporary Internet Files\Content.IE5\WHIZKXU3\dref=http%253A%252F%252 Fmess[1].reply%2526friendId%253D141997005%2526type%253DInb ox%2526messageID%253D454749764%2526fed%253DTrue%25 26MyToken%253Dfad4f664-5f38-
Status: Hidden
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Apple Computer\iTunes
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Apple Computer
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Identities\{AD715A3A-E794-4151-902B-EE061C23A7A2}
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Identities
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\InterMute\SpySubtract\tmp\3
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\InterMute\SpySubtract\tmp
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\InterMute\SpySubtract
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\InterMute
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Macromedia\Flash Player\#SharedObjects\2CQJLD9L
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Macromedia\Flash Player\#SharedObjects
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\sett ings.sol
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Macromedia\Flash Player\macromedia.com\support
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Macromedia\Flash Player\macromedia.com
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Macromedia\Flash Player
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Macromedia
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Address Book\Compaq_Owner.wab
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Address Book\Compaq_Owner.wab~
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Address Book\Owner.wab
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Address Book\Owner.wab~
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Address Book
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Credentials\S-1-5-21-1586018753-1138326336-622385223-1009
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Credentials
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1586018753-1138326336-622385223-1009\6d9f885ff3fdfa045240d2f597187bce_ee2450bd-289c-444f-b981-734143f91c85
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1586018753-1138326336-622385223-1009
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Crypto\RSA
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Crypto
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\brndlog.bak
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\brndlog.txt
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Desktop.htt
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Compaq Organize.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\iTunes.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\RealPlayer.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Media Player
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\MMC
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Protect\CREDHIST
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Protect\S-1-5-21-1586018753-1138326336-622385223-1009\855e38e8-b4d2-429c-89bb-387c852d372a
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Protect\S-1-5-21-1586018753-1138326336-622385223-1009\Preferred
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Protect\S-1-5-21-1586018753-1138326336-622385223-1009
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Protect\S-1-5-21-3100231891-200788143-3377690211-1003\f81103b1-119d-4354-b8f4-41110e20e8bb
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Protect\S-1-5-21-3100231891-200788143-3377690211-1003\Preferred
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Protect\S-1-5-21-3100231891-200788143-3377690211-1003
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Protect
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\SystemCertificates\My\Certificates
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\SystemCertificates\My\CRLs
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\SystemCertificates\My\CTLs
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\SystemCertificates\My
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\SystemCertificates
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Real\Msg
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Real\RealPlayer\ErrorLogs\CDBurning.log
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Real\RealPlayer\ErrorLogs\GenDevices.log
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Real\RealPlayer\ErrorLogs
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Real\RealPlayer
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Real\rnadmin\rnsystem.dat
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Real\rnadmin
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Real
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\SampleView
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\appguard0.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\appguard1.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\appguard2.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\appguard3.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\appguard4.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\bg01.gif
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\bg02.gif
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\bg07.gif
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\clamguard0.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\clamguard1.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\Enhance_security.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\info.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\Install_wsg.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\intguard0.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\intguard1.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\intguard2.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\intguard3.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\intguard4.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\intguard5.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\language.inf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\language.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\li.gif
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\li2.gif
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\offlinehelp.html
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\ScanAdvanced2.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\scancustom.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\scancustom2.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\ScanExtension2.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\scanfast.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\scanfast2.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\scanfull.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\scanfull2.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\Scanfullvirus2.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\scansmart2.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\Scanvirus2a.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\Scanvirus2b.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\Scanvirus2c.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\SecurityCheck.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\sysguard0.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\sysguard1.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\sysguard2.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\sysguard3.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\top.gif
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\util01.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\util02.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\util03.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct\util04.rtf
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator\LanguageAct
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Spyware Terminator
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Sun\Java\Deployment\deployment.properties
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Sun\Java\Deployment\javaws\cache
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Sun\Java\Deployment\javaws
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Sun\Java\Deployment
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Sun\Java
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Sun
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data\Symantec
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Application Data
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Cookies\index.dat
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Cookies
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Desktop\Help and Support.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Desktop\Register with HP.url
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Desktop
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Favorites\Desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Favorites\Links\Customize Links.url
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Favorites\Links\Free Hotmail.url
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Favorites\Links\Windows Marketplace.url
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Favorites\Links\Windows Media.url
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Favorites\Links\Windows.url
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Favorites\Links
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Favorites\MSN.com.url
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Favorites\Radio Station Guide.url
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Favorites
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Apple Computer\iTunes
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Apple Computer
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\ApplicationHistory\RegAsm.exe.11f1da13.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\ApplicationHistory
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\fusioncache.dat
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\IconCache.db
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\CD Burning
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-1586018753-1138326336-622385223-1009
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Credentials
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\HelpCtr
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Internet Explorer
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Media Player
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\OFFICE
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Windows
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNS.DTD
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNS.XML
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Windows Media\10.0
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Windows Media\9.0
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Windows Media
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Works\Portfolio\wsbsamp.wsb
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Works\Portfolio
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Works
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142030}\1033.MST
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142030}\Java 2 Runtime Environment, SE v1.4.2_03.msi
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142030}
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\History\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\History\History.IE5\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\History\History.IE5\index.dat
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\History\History.IE5\MSHist012009091420090 915\index.dat
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\History\History.IE5\MSHist012009091420090 915
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\History\History.IE5
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\History
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\debugf.txt
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\IadHide5.dll
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\jusched.log
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\LSBurnWatcher.log
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temp
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\4DWJQ1Y1\Behaviors[1].css
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\4DWJQ1Y1\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\4DWJQ1Y1\detectBrandLocale[1].js
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\4DWJQ1Y1\NavBar[1].xml
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\4DWJQ1Y1\PCHSettings[1].htc
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\4DWJQ1Y1\shared[1].css
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\4DWJQ1Y1\Statistics[1].htc
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\4DWJQ1Y1\tshoot[1].css
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\4DWJQ1Y1
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\AVQPKBEX\clear[1].gif
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\AVQPKBEX\Context[1].htm
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\AVQPKBEX\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\AVQPKBEX\firstpage[1].htm
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\AVQPKBEX\hdw_generic_result[1].htm
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\AVQPKBEX\NavBar[1].htm
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\AVQPKBEX
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\buttonForm[1].js
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\Common[1].js
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\coUA[1].css
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\lang_NavBar[1].js
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\logo_compaq[1].gif
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\PCHSettings[1].htc
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\shared[1].css
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\Statistics[1].htc
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\tsctl[1].htm
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\tshoot_shared[1].js
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5\vendorprefs[1].xml
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KB29SVW5
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KLMB87MZ\Common[1].js
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KLMB87MZ\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KLMB87MZ\hdw_generic[1].htm
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KLMB87MZ\navbar_red[1].gif
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KLMB87MZ\PCHBtnMonitor[1].html
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KLMB87MZ\search_arrow_red[1].bmp
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KLMB87MZ\shared[1].css
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5\KLMB87MZ
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\Content.IE5
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings\Temporary Internet Files
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Local Settings
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\My Documents\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\My Documents\My Music\Desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\My Documents\My Music\Sample Music.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\My Documents\My Music
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\My Documents\My Pictures\Desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\My Documents\My Pictures\Sample Pictures.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\My Documents\My Pictures
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\My Documents\My Videos\Desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\My Documents\My Videos
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\My Documents
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\NetHood
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\NTUSER.DAT
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\ntuser.dat.LOG
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\ntuser.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\PrintHood
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Recent\bcmwlcpl.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Recent\CustAtStartUp.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Recent\Desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Recent\region.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Recent\system32.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Recent
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\Desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\Entertainment.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\Finance.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\Games.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\Music.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\News & Sports.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\PC Help & Tools.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\PC Security.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\Pictures.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\Productivity.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\Shopping.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\Travel & Leisure.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize\Video.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compaq Organize
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Compressed (zipped) Folder.ZFSendToTarget
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Desktop (create shortcut).DeskLink
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\Mail Recipient.MAPIMail
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\My Documents.mydocs
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo\RecordNow!.RecordNowS endToExt
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\SendTo
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Accessibility\desktop.in i
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Accessibility\Magnifier. lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Accessibility\Narrator.l nk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Accessibility
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Address Book.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Command Prompt.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Entertainment\desktop.in i
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Entertainment\RealPlayer .lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Entertainment
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Notepad.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Synchronize.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Tour Windows XP.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories\Windows Explorer.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Accessories
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Install Adobe Photoshop Album 2.0 Starter Edition.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Install Microsoft Money 2005.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Internet Explorer.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Multi-channel Sound Manager.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Online Services\Easy Internet Sign-up.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Online Services
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Outlook Express.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\PC Help & Tools\PC-Doctor.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\PC Help & Tools
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Quicken\Install Quicken New User Edition.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Quicken
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Remote Assistance.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Startup\desktop.ini
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Startup
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\WeatherBug\Install WeatherBug.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\WeatherBug
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Windows Media Player.lnk
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu\Programs
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Start Menu
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\amipro.sam
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\excel.xls
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\excel4.xls
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\lotus.wk4
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\powerpnt.ppt
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\presenta.shw
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\quattro.wb2
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\sndrec.wav
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\winword.doc
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\winword2.doc
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\wordpfct.wpd
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates\wordpfct.wpg
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\Templates
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\WINDOWS\system
Status: Access denied
Object: C:\Documents and Settings\Compaq_Owner\WINDOWS
Status: Access denied
Object: C:\Documents and Settings\Mary\Favorites\Declan Galbraith\YouTube - Declan Galbraith Crying 2008.05.24 Beijing LIVE 5.1ch.url
Status: Hidden
Object: C:\Documents and Settings\Mary\Favorites\Declan Galbraith\YouTube - Declan Galbraith in China LIVE Love Hurts2007.10.21.url
Status: Hidden
Object: C:\Documents and Settings\Mary\Favorites\Declan Galbraith\YouTube - Declan Galbraith Tell Me Why 2008.05.24 Beijing LIVE.url
Status: Hidden
Object: C:\Documents and Settings\Mary\Local Settings\Temp\Temporary Internet Files\Content.IE5\73ZT5NU8\Type=click&FlightID=107 86&AdID=19484&TargetID=1916&Segments=3,7,26,36,43, 48,60,70,85,86,91,119,130,133,154,277,337,357,448, 593,594,600,626,674,686,819,824,862
Status: Hidden
Object: C:\Documents and Settings\Mary\Local Settings\Temp\Temporary Internet Files\Content.IE5\I36FZLW2\piclist[2].subdal&border_color=%23ffffff&background_color=%2 3ffffff&title_color=%23000000&text_color=%23000000 &override=1&class=my_banner_class&show_title=0& s
Status: Hidden
Object: C:\Documents and Settings\Mary\Local Settings\Temp\Temporary Internet Files\Content.IE5\O1SZKHWR\Type=click&FlightID=107 86&AdID=19484&TargetID=1916&Segments=3,7,26,36,43, 48,60,70,85,86,91,119,130,133,154,277,337,357,448, 593,594,600,626,674,686,819,824,862
Status: Hidden
Object: C:\System Volume Information\catalog.wci
Status: Access denied
Object: C:\System Volume Information\MountPointManagerRemoteDatabase
Status: Access denied
Object: C:\System Volume Information\tracking.log
Status: Access denied
Object: C:\System Volume Information\_restore{DDE3EB95-4B24-44D8-AD38-1F974B96C2F0}
Status: Access denied

Sorry that was too long. Should have attached it.

Here is my DDS.TXT and my Attach.txt, otl.txt and cjeclup.txt are also attached, per your instructions. I hope this helps resolve this problem.


DDS (Ver_09-07-30.01) - NTFSx86
Run by Bob at 18:09:23.40 on Mon 09/14/2009
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.191.40 [GMT -7:00]

============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\Security Center\SymSCUI.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
G:\dds.scr
============== Pseudo HJT Report ===============
uStart Page = hxxp://www.hotmail.com/
mDefault_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=presar io&pf=desktop
mDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q105&bd=pres ario&pf=desktop
mSearch Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q105&bd=pres ario&pf=desktop
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=presar io&pf=desktop
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q105&bd=pres ario&pf=desktop
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 6.0\reader\activex\AcroIEHelper.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [SunJavaUpdateSched] c:\program files\java\j2re1.4.2_03\bin\jusched.exe
mRun: [hpsysdrv] c:\windows\system\hpsysdrv.exe
mRun: [AGRSMMSG] AGRSMMSG.exe
mRun: [KBD] c:\hp\kbd\KBD.EXE
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [iTunesHelper] c:\program files\itunes\iTunesHelper.exe
mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE
mRun: [AlcxMonitor] ALCXMNTR.EXE
mRun: [PS2] c:\windows\system32\ps2.exe
mRun: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
mRun: [Reminder] "c:\windows\creator\Remind_XP.exe"
mRun: [SpywareTerminator] "c:\program files\spyware terminator\SpywareTerminatorShield.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\com paq~1.lnk - c:\program files\compaq connections\6750491\program\Compaq Connections.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mic ros~1.lnk - c:\program files\microsoft office\office\OSA9.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\tim eco~1.lnk - c:\program files\computer business solutions\time control\WiseUpdt.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\wg1 11v~1.lnk - c:\program files\netgear\wg111v2 configuration utility\RtlWake.exe
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office11\EXCEL.EXE/3000
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office11\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
============= SERVICES / DRIVERS ===============
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2009-9-14 141312]
=============== Created Last 30 ================
2009-09-14 13:50 15,781 a------- c:\windows\system32\drivers\mdc8021x.sys
2009-09-14 13:50 909,312 a------- c:\windows\system32\AegisE5.dll
2009-09-14 13:50 110,592 a------- c:\windows\system32\AegisI5.exe
2009-09-14 13:50 57,344 a------- c:\windows\system32\bcmwld2k.exe
2009-09-14 13:50 45,056 a------- c:\windows\system32\wltrysvc.exe
2009-09-14 13:50 655,360 a------- c:\windows\system32\bcmwltry.exe
2009-09-14 13:50 143,360 a------- c:\windows\system32\bcmwlu00.exe
2009-09-14 13:50 1,069,056 a------- c:\windows\system32\bcmwlcpl.cpl
2009-09-14 13:48 338,176 a------- c:\windows\system32\drivers\bcmwl5.sys
2009-09-14 13:48 595,968 a------- c:\windows\system32\WatchPower.exe
2009-09-14 13:48 24,576 a------- c:\windows\system32\PowerOff.exe
2009-09-14 13:41 <DIR> --d----- c:\docume~1\bob\applic~1\Symantec
2009-09-14 13:41 <DIR> --d----- c:\documents and settings\bob\WINDOWS
2009-09-14 13:41 <DIR> --d----- c:\documents and settings\Bob
2009-09-14 13:12 <DIR> --dshr-- C:\cmdcons
2009-09-14 13:08 221,184 a------- c:\windows\system32\wmpns.dll
2009-09-14 13:07 1,854 a--shr-- c:\windows\system32\drivers\103C_HP_CPC_PW532AA-ABA SR1403WM NA520_YC_0Pres_QCNH514_E52NAheRED3_47_ISalmon_SASU STek Computer INC._V1.04_B3.10_T050309_WXH2_L409_M192_J80_7AMD_8 Sempron_91.81_#050812_N10390900_Z11C1048C_G1039633 0.MRK
2009-09-14 13:04 184,320 -------- c:\windows\system32\SiSApCom.dll
2009-09-14 13:04 110,592 -------- c:\windows\system32\TVMode.dll
2009-09-14 13:03 331,776 a------- c:\windows\system32\sistray.exe
2009-09-14 13:03 <DIR> --d----- c:\windows\system32\trayres
2009-09-14 13:03 95,285 a------- c:\windows\system32\VGAunistlog.ini
2009-09-14 12:56 141,312 a------- c:\windows\system32\drivers\sp_rsdrv2.sys
2009-09-14 12:56 <DIR> --d----- c:\docume~1\bob\applic~1\Spyware Terminator
2009-09-14 12:56 917,504 a------- c:\windows\system32\FLASH.OCX
2009-09-14 12:55 <DIR> --d----- c:\windows\system32\SoftwareDistribution
2009-09-14 12:47 12,160 a------- c:\windows\system32\drivers\mouhid.sys
2009-09-14 12:47 9,600 a------- c:\windows\system32\drivers\hidusb.sys
2009-09-14 11:21 <DIR> --dshr-- c:\windows\system32\dllcache
==================== Find3M ====================
2009-09-14 13:33 3,649 a------- c:\windows\viassary-hp.reg
============= FINISH: 18:09:56.03 ===============

I dont see any malware but you java does need to be updated...
Java SE Downloads - Sun Developer Network (SDN)

Lets do one more check...

You will need to download ComboFix.exe. This will give a better view to the files running, those that are hidden, and also those in the registry..Please download from one of these webpages .

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe


* IMPORTANT !!! Save ComboFix.exe to your Desktop
**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**

If you are using Firefox, make sure that your download settings are as follows:
Tools->Options->Main tab
Set to "Always ask me where to Save the files".

Disable your AntiVirus and AntiSpyware applications, usually via a right-click on the System Tray icon. They may otherwise interfere with our tools. More help on your specific AV here: How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Double-click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Recovery Console can be installed from your disc if you have Vista if you wish.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.




Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Click on Yes to continue scanning for malware.
When finished, it shall produce a log for you. Please include the ComboFix.txt in your reply.

Caution.....
Never use this program to remove files.Only use it with help from an experienced user.Wrongful use can damage your computer.

Hello,

I'm just following up. Do you still require assistance in removing your malware? Or can we put this one to bed?

If you are still in need of assistance please let us know.

Regards,
Crush
PCHF Security Team Leader