R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
file://C:\DOCUME~1\Mat\LOCALS~1\Temp\sp.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about
:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about
:blank
O2 - BHO: (no name) - SOFTWARE - (no file)
O2 - BHO: (no name) - {00DBDAC8-4691-4797-8E6A-7C6AB89BC441} - C:\WINDOWS\System32\sstqr.dll (file missing)
O2 - BHO: (no name) - {1F058D1A-A39B-4468-924A-4E1E289BCA6A} - C:\WINDOWS\System32\jjfmfa.dll (file missing)
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\Program Files\RXToolBar\sfcont.dll (file missing)
- BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: (no name) - {78364D99-A640-4ddf-B91A-67EFF8373045} - C:\WINDOWS\system32\appwiz.dll (file missing)
O2 - BHO: MSEvents Object - {FC148228-87E1-4D00-AC06-58DCAA52A4D1} - C:\WINDOWS\System32\vtstt.dll (file missing)
O3 - Toolbar: Band Class - {BDF6CE3D-F5C5-4462-9814-3C8EAC330CA8} - C:\WINDOWS\AdRoar.dll (file missing)
O4 - HKLM\..\Run: [Life FireWall Update1] FireWall-Update1.exe
O4 - HKLM\..\RunServices: [Life FireWall Update1] FireWall-Update1.exe
O4 - HKCU\..\Run: [Life FireWall Update1] FireWall-Update1.exe
O4 - HKCU\..\Run: [WinFixer2005] "C:\Program Files\WinFixer_2005\uwfx5.exe" /min
O4 - HKCU\..\Run: [WinFixer2006] "C:\Program Files\WinFixer_2006\uwfx6.exe" /min
O4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1049.dll,InstantAccess
O8 - Extra context menu item: Web Rebates -
file://C:\Program Files\websearch\System\Temp\topr1150_script0.htm
O9 - Extra button: Microsoft AntiSpyware helper - {1772D6E8-158D-4E83-B180-C0DF6514E72C} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {1772D6E8-158D-4E83-B180-C0DF6514E72C} - (no file) (HKCU)
O15 - Trusted Zone:
http://*.billingnow.com
O15 - Trusted Zone: *.blazefind.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.flingstone.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone:
http://*.reliablestats.com
O15 - Trusted Zone: *.searchbarcash.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.skoobidoo.com
O15 - Trusted Zone: *.slotch.com
O15 - Trusted Zone: *.slotchbar.com
O15 - Trusted Zone:
http://*.winantispyware.com
O15 - Trusted Zone:
http://*.winantivirus.com
O15 - Trusted Zone:
http://*.winantiviruspro.com
O15 - Trusted Zone: *.windupdates.com
O15 - Trusted Zone:
http://*.winfixer.com
O15 - Trusted Zone:
http://*.winnanny.com
O15 - Trusted Zone:
http://*.winsoftware.com
O15 - Trusted Zone: *.xxxtoolbar.com
O15 - Trusted Zone: *.ysbweb.com
O15 - Trusted Zone: *.blazefind.com (HKLM)
O15 - Trusted Zone: *.clickspring.net (HKLM)
O15 - Trusted Zone:
http://ny.contentmatch.net (HKLM)
O15 - Trusted Zone: *.flingstone.com (HKLM)
O15 - Trusted Zone: *.mt-download.com (HKLM)
O15 - Trusted Zone: *.my-internet.info (HKLM)
O15 - Trusted Zone: *.searchbarcash.com (HKLM)
O15 - Trusted Zone: *.searchmiracle.com (HKLM)
O15 - Trusted Zone: *.skoobidoo.com (HKLM)
O15 - Trusted Zone: *.slotch.com (HKLM)
O15 - Trusted Zone: *.slotchbar.com (HKLM)
O15 - Trusted Zone: *.windupdates.com (HKLM)
O15 - Trusted Zone: *.xxxtoolbar.com (HKLM)
O15 - Trusted Zone: *.ysbweb.com (HKLM)
O15 - Trusted IP range: 67.19.185.246
O15 - Trusted IP range: 67.19.185.246 (HKLM)
O16 - DPF: {0D62A517-E7C6-4E1F-A577-07D4AC549A48} (Progetto1.int_ver32) -
http://advnt01.com/dialer/int_ver32n.CAB
O16 - DPF: {0E79192A-C52C-4260-920F-639AC2296203} -
http://scripts.downloadv3.com/binari...1048_EN_XP.cab
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} -
http://static.windupdates.com/cab/Me.../bridge-c7.cab
O16 - DPF: {39EA2F6F-3F50-4F58-9C63-4B3D53B0926E} -
http://scripts.downloadv3.com/binari...1049_EN_XP.cab
O16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} -
http://scripts.dlv4.com/binaries/IA/...vc32_EN_XP.cab
O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} (Installer Class) -
http://www.xxxtoolbar.com/ist/softwa...006_cracks.cab
O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} (MediaGatewayX) -
http://static.zangocash.com/cab/Zang...ridge-c356.cab
O16 - DPF: {A1426AC5-8CE5-4A00-B71E-011D35709AC6} (Progetto1.int_ver34) -
http://advnt01.com/dialer/int_ver34.CAB
O16 - DPF: {EFB23983-5803-4914-ADA3-C0EA2CFBDC37} -
http://scripts.downloadv3.com/binari...SS_1072_XP.cab
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Program Files\RXToolBar\sfcont.dll
O18 - Filter: text/plain - {BAB34DCF-061A-4B64-A421-5FCD9CC4F680} - C:\WINDOWS\System32\jjfmfa.dll
O20 - Winlogon Notify: sstqr - sstqr.dll (file missing)
O20 - Winlogon Notify: vtstt - C:\WINDOWS\System32\vtstt.dll (file missing)