System check before XP SP3 update
Results 1 to 7 of 7

Thread: System check before XP SP3 update

  1. #1
    Join Date
    Feb 2000
    Location
    Idaho Falls, Idaho, USA
    Posts
    18,428

    System check before XP SP3 update

    Below are some logs files for the experts to examine before an XP SP3 update is applied.


    SuperAntiSpyware - Part 1


    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 11/14/2009 at 04:58 PM

    Application Version : 4.30.1004

    Core Rules Database Version : 4273
    Trace Rules Database Version: 2154

    Scan type : Complete Scan
    Total Scan Time : 00:35:26

    Memory items scanned : 735
    Memory threats detected : 2
    Registry items scanned : 8084
    Registry threats detected : 720
    File items scanned : 32559
    File threats detected : 223

    Adware.MyWebSearch
    C:\PROGRA~1\MYWEBS~1\BAR\1.BIN\MWSOEMON.EXE
    C:\PROGRA~1\MYWEBS~1\BAR\1.BIN\MWSOEMON.EXE
    [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\BAR\1.BIN\MWSOEMON.EXE
    HKLM\Software\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}
    HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}
    HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}
    HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}\InprocServer32
    HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}\InprocServer32#ThreadingModel
    HKCR\CLSID\{00A6FAF1-072E-44CF-8957-5838F569A31D}\Programmable
    C:\PROGRAM FILES\MYWEBSEARCH\SRCHASTT\1.BIN\MWSSRCAS.DLL
    HKLM\Software\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
    HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}
    HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}
    HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\InprocServer32
    HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\InprocServer32#ThreadingModel
    HKCR\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}\Programmable
    HKLM\Software\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}\InprocServer32
    HKCR\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}\InprocServer32#ThreadingModel
    C:\PROGRAM FILES\MYWEBSEARCH\BAR\1.BIN\MWSBAR.DLL
    HKLM\Software\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\InprocServer32
    HKCR\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\InprocServer32#ThreadingModel
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar#{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKU\S-1-5-21-861567501-839522115-1957994488-500\Software\Microsoft\Internet Explorer\URLSearchHooks#{00A6FAF6-072E-44cf-8957-5838F569A31D}

    Adware.Viewpoint Toolbar
    C:\PROGRAM FILES\VIEWPOINT\VIEWPOINT TOOLBAR\VIEWBAR.DLL
    C:\PROGRAM FILES\VIEWPOINT\VIEWPOINT TOOLBAR\VIEWBAR.DLL
    HKLM\Software\Classes\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}
    HKCR\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}
    HKCR\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}
    HKCR\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}\InProcServer32
    HKCR\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}\InProcServer32#ThreadingModel
    HKCR\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}\ProgID
    HKCR\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}\Programmable
    HKCR\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}\TypeLib
    HKCR\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}\VersionIndependentProgID
    HKCR\ViewBar.ViewBar.1
    HKCR\ViewBar.ViewBar.1\CLSID
    HKCR\ViewBar.ViewBar
    HKCR\ViewBar.ViewBar\CLSID
    HKCR\ViewBar.ViewBar\CurVer
    HKCR\TypeLib\{E060D9D9-E979-4C2F-A840-BE5150F84AC5}
    HKCR\TypeLib\{E060D9D9-E979-4C2F-A840-BE5150F84AC5}\1.0
    HKCR\TypeLib\{E060D9D9-E979-4C2F-A840-BE5150F84AC5}\1.0\0
    HKCR\TypeLib\{E060D9D9-E979-4C2F-A840-BE5150F84AC5}\1.0\0\win32
    HKCR\TypeLib\{E060D9D9-E979-4C2F-A840-BE5150F84AC5}\1.0\FLAGS
    HKCR\TypeLib\{E060D9D9-E979-4C2F-A840-BE5150F84AC5}\1.0\HELPDIR
    HKLM\Software\Microsoft\Internet Explorer\Toolbar#{F8AD5AA5-D966-4667-9DAF-2561D68B2012}

    Adware.Tracking Cookie
    C:\Documents and Settings\Administrator\Cookies\administrator@atdmt[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@apmebf[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@maxserving[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@adtech[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@1072616117[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@bluestreak[1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@S130376[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@mywebsearch[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@cgi-bin[3].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@bravenet[2].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][3].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@revsci[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@tribalfusion[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@2o7[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@qksrv[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@servlet[1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@clickability[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@overture[3].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@bfast[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@12845347[2].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@rightmedia[1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@insightfirst[1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@S130343[2].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@insightexpress[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[2].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@49111037[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@serving-sys[2].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@S113245[3].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@advertising[2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@mediaplex[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@1072734650[1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][2].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@zedo[1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@commission-junction[1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@hitbox[1].txt
    C:\Documents and Settings\Administrator\Cookies\[email protected][1].txt
    C:\Documents and Settings\Administrator\Cookies\administrator@87506651[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@track-star[1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@dealtime[3].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@dealtime[1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@clickability[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@2o7[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@clickability[1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@etracking[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@bannerspace[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@windowsmedia[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@nandomedia[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@click2houston[1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@pennyweb[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@thisbanner[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@www.************[1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@my_account[1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@pathfinder[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@findlaw[1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@bizrate[1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@bizrate[2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][4].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@optimost[1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][3].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\administrator@macromedia[1].txt
    C:\Documents and Settings\SUZIE\Application Data\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Cookies\suzie@collective-media[2].txt
    C:\Documents and Settings\SUZIE\Cookies\[email protected][1].txt
    C:\Documents and Settings\SUZIE\Cookies\suzie@lucidmedia[1].txt
    C:\Documents and Settings\SUZIE\Cookies\suzie@interclick[1].txt
    C:\Documents and Settings\SUZIE\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Cookies\[email protected][2].txt
    C:\Documents and Settings\SUZIE\Cookies\suzie@mywebsearch[1].txt
    C:\Documents and Settings\SUZIE\Cookies\suzie@invitemedia[2].txt
    C:\Documents and Settings\SUZIE\Cookies\[email protected][3].txt
    C:\Documents and Settings\SUZIE\Cookies\suzie@chitika[3].txt
    C:\Documents and Settings\SUZIE\Cookies\[email protected][2].txt

  2. #2
    Join Date
    Feb 2000
    Location
    Idaho Falls, Idaho, USA
    Posts
    18,428
    SuperAntiSpyware - Part 2


    Adware.MyWebSearch/FunWebProducts
    HKLM\SOFTWARE\Fun Web Products
    HKLM\SOFTWARE\Fun Web Products#JpegConversionLib
    HKLM\SOFTWARE\Fun Web Products#CacheDir
    HKLM\SOFTWARE\Fun Web Products\MSNMessenger
    HKLM\SOFTWARE\Fun Web Products\MSNMessenger#DLLFile
    HKLM\SOFTWARE\Fun Web Products\MSNMessenger#DLLDir
    HKLM\SOFTWARE\Fun Web Products\PopSwatter
    HKLM\SOFTWARE\Fun Web Products\PopSwatter#HistoryDir
    HKLM\SOFTWARE\Fun Web Products\ScreenSaver
    HKLM\SOFTWARE\Fun Web Products\ScreenSaver#ImagesDir
    HKLM\SOFTWARE\Fun Web Products\Settings
    HKLM\SOFTWARE\Fun Web Products\Settings\CursorManiaBtn
    HKLM\SOFTWARE\Fun Web Products\Settings\CursorManiaBtn#LastHTMLMenuURL
    HKLM\SOFTWARE\Fun Web Products\Settings\CursorManiaBtn#HTMLMenuRevision
    HKLM\SOFTWARE\Fun Web Products\Settings\CursorManiaBtn#ETag
    HKLM\SOFTWARE\Fun Web Products\Settings\MailStampBtn
    HKLM\SOFTWARE\Fun Web Products\Settings\MailStampBtn#LastHTMLMenuURL
    HKLM\SOFTWARE\Fun Web Products\Settings\MailStampBtn#HTMLMenuRevision
    HKLM\SOFTWARE\Fun Web Products\Settings\MailStampBtn#ETag
    HKLM\SOFTWARE\Fun Web Products\Settings\MySignatureInsertBtn
    HKLM\SOFTWARE\Fun Web Products\Settings\MySignatureInsertBtn#LastHTMLMenuURL
    HKLM\SOFTWARE\Fun Web Products\Settings\MySignatureInsertBtn#HTMLMenuRevision
    HKLM\SOFTWARE\Fun Web Products\Settings\MySignatureInsertBtn#ETag
    HKLM\SOFTWARE\Fun Web Products\Settings\MySignaturePreviewBtn
    HKLM\SOFTWARE\Fun Web Products\Settings\MySignaturePreviewBtn#LastHTMLMenuURL
    HKLM\SOFTWARE\Fun Web Products\Settings\MySignaturePreviewBtn#HTMLMenuRevision
    HKLM\SOFTWARE\Fun Web Products\Settings\MySignaturePreviewBtn#ETag
    HKLM\SOFTWARE\Fun Web Products\Settings\MyStationeryBtn
    HKLM\SOFTWARE\Fun Web Products\Settings\MyStationeryBtn#LastHTMLMenuURL
    HKLM\SOFTWARE\Fun Web Products\Settings\MyStationeryBtn#HTMLMenuRevision
    HKLM\SOFTWARE\Fun Web Products\Settings\MyStationeryBtn#ETag
    HKLM\SOFTWARE\Fun Web Products\Settings\Promos
    HKLM\SOFTWARE\Fun Web Products\Settings\Promos#BuddyTextNone.numActive
    HKLM\SOFTWARE\Fun Web Products\Settings\Promos#BuddyTextNone.0
    HKLM\SOFTWARE\Fun Web Products\Settings\Promos#BuddyFreqNone
    HKLM\SOFTWARE\Fun Web Products\Settings\Promos#BuddyTextUninstalled.numActive
    HKLM\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn
    HKLM\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn#HTMLMenuPosDeleted
    HKLM\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn#LastHTMLMenuURL
    HKLM\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn#HTMLMenuRevision
    HKLM\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn#ETag
    HKLM\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn#winword.exe.pos
    HKLM\SOFTWARE\Fun Web Products\Settings\SmileyCentralBtn#iexplore.exe.pos
    HKU\S-1-5-21-861567501-839522115-1957994488-500\SOFTWARE\MyWebSearch
    HKLM\SOFTWARE\MyWebSearch
    HKLM\SOFTWARE\MyWebSearch\bar
    HKLM\SOFTWARE\MyWebSearch\bar#Maximized
    HKLM\SOFTWARE\MyWebSearch\bar#Visible
    HKLM\SOFTWARE\MyWebSearch\bar#pid
    HKLM\SOFTWARE\MyWebSearch\bar#fwp
    HKLM\SOFTWARE\MyWebSearch\bar#un
    HKLM\SOFTWARE\MyWebSearch\bar#tiec
    HKLM\SOFTWARE\MyWebSearch\bar#Dir
    HKLM\SOFTWARE\MyWebSearch\bar#PluginPath
    HKLM\SOFTWARE\MyWebSearch\bar#CurInstall
    HKLM\SOFTWARE\MyWebSearch\bar#SettingsDir
    HKLM\SOFTWARE\MyWebSearch\bar#sr
    HKLM\SOFTWARE\MyWebSearch\bar#pl
    HKLM\SOFTWARE\MyWebSearch\bar#Id
    HKLM\SOFTWARE\MyWebSearch\bar#CacheDir
    HKLM\SOFTWARE\MyWebSearch\bar#ConfigRevision
    HKLM\SOFTWARE\MyWebSearch\bar#ConfigRevisionURL
    HKLM\SOFTWARE\MyWebSearch\bar#ConfigDateStamp
    HKLM\SOFTWARE\MyWebSearch\bar#HTMLMenuRevision
    HKLM\SOFTWARE\MyWebSearch\bar#sscSet
    HKLM\SOFTWARE\MyWebSearch\bar#sscLabel
    HKLM\SOFTWARE\MyWebSearch\MWSOEMON
    HKLM\SOFTWARE\MyWebSearch\MWSOEMON#Version
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG#Version
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG#Path
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG#StandardSmileyDir.AIM
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.numActive2
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.0
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.1
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.2
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.3
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.4
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.5
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.6
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.7
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.numActive
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.numActive2
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.0.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.1.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.2.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.3.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.4.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.5.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.6.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.7.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.8.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.9.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.10.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.11.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.12.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.numActive
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.numActive2
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.0.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.1.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.2.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.3.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.4.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.5.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.6.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.numActive2
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.0
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.1
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.2
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.3
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.4
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.5
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.6
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.7
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#GoogleTalkHTML.numActive2
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#GoogleTalkHTML.0
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#GoogleTalkHTML.1
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#GoogleTalkHTML.2
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#GoogleTalkHTML.3
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#GoogleTalkHTML.4
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#GoogleTalkHTML.5
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#GoogleTalkHTML.6
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.8
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#Yahoo.13.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.7.old
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.8
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#GoogleTalkHTML.7
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#ICQT.9
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIM.8
    HKLM\SOFTWARE\MyWebSearch\MWSOEPLG\Promo#AIMT.9
    HKLM\SOFTWARE\MyWebSearch\OEHosts
    HKLM\SOFTWARE\MyWebSearch\OEHosts#boscript
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant#pid
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant#fwp
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant#Dir
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant#esh
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant#lsp
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant#CurInstall
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant#sr
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant#pl
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant#Id
    HKLM\SOFTWARE\MyWebSearch\SearchAssistant#ConfigDateStamp
    HKLM\SOFTWARE\MyWebSearch\SkinTools
    HKLM\SOFTWARE\MyWebSearch\SkinTools#PlayerPath
    HKCR\FunWebProducts.DataControl
    HKCR\FunWebProducts.DataControl\CLSID
    HKCR\FunWebProducts.DataControl\CurVer
    HKCR\FunWebProducts.DataControl.1
    HKCR\FunWebProducts.DataControl.1\CLSID
    HKCR\FunWebProducts.HistoryKillerScheduler
    HKCR\FunWebProducts.HistoryKillerScheduler\CLSID
    HKCR\FunWebProducts.HistoryKillerScheduler\CurVer
    HKCR\FunWebProducts.HistoryKillerScheduler.1
    HKCR\FunWebProducts.HistoryKillerScheduler.1\CLSID
    HKCR\FunWebProducts.HistorySwatterControlBar
    HKCR\FunWebProducts.HistorySwatterControlBar\CLSID
    HKCR\FunWebProducts.HistorySwatterControlBar\CurVer
    HKCR\FunWebProducts.HistorySwatterControlBar.1
    HKCR\FunWebProducts.HistorySwatterControlBar.1\CLSID
    HKCR\FunWebProducts.HTMLMenu
    HKCR\FunWebProducts.HTMLMenu\CLSID
    HKCR\FunWebProducts.HTMLMenu\CurVer
    HKCR\FunWebProducts.HTMLMenu.1
    HKCR\FunWebProducts.HTMLMenu.1\CLSID
    HKCR\FunWebProducts.HTMLMenu.2
    HKCR\FunWebProducts.HTMLMenu.2\CLSID
    HKCR\FunWebProducts.IECookiesManager
    HKCR\FunWebProducts.IECookiesManager\CLSID
    HKCR\FunWebProducts.IECookiesManager\CurVer
    HKCR\FunWebProducts.IECookiesManager.1
    HKCR\FunWebProducts.IECookiesManager.1\CLSID
    HKCR\FunWebProducts.KillerObjManager
    HKCR\FunWebProducts.KillerObjManager\CLSID
    HKCR\FunWebProducts.KillerObjManager\CurVer
    HKCR\FunWebProducts.KillerObjManager.1
    HKCR\FunWebProducts.KillerObjManager.1\CLSID
    HKCR\FunWebProducts.PopSwatterBarButton
    HKCR\FunWebProducts.PopSwatterBarButton\CLSID
    HKCR\FunWebProducts.PopSwatterBarButton\CurVer
    HKCR\FunWebProducts.PopSwatterBarButton.1
    HKCR\FunWebProducts.PopSwatterBarButton.1\CLSID
    HKCR\FunWebProducts.PopSwatterSettingsControl
    HKCR\FunWebProducts.PopSwatterSettingsControl\CLSID
    HKCR\FunWebProducts.PopSwatterSettingsControl\CurVer
    HKCR\FunWebProducts.PopSwatterSettingsControl.1
    HKCR\FunWebProducts.PopSwatterSettingsControl.1\CLSID
    HKCR\MyWebSearch.ChatSessionPlugin
    HKCR\MyWebSearch.ChatSessionPlugin\CLSID
    HKCR\MyWebSearch.ChatSessionPlugin\CurVer
    HKCR\MyWebSearch.ChatSessionPlugin.1
    HKCR\MyWebSearch.ChatSessionPlugin.1\CLSID
    HKCR\MyWebSearch.HTMLPanel
    HKCR\MyWebSearch.HTMLPanel\CLSID
    HKCR\MyWebSearch.HTMLPanel\CurVer
    HKCR\MyWebSearch.HTMLPanel.1
    HKCR\MyWebSearch.HTMLPanel.1\CLSID
    HKCR\MyWebSearch.OutlookAddin
    HKCR\MyWebSearch.OutlookAddin\CLSID
    HKCR\MyWebSearch.OutlookAddin\CurVer
    HKCR\MyWebSearch.OutlookAddin.1
    HKCR\MyWebSearch.OutlookAddin.1\CLSID
    HKCR\MyWebSearch.PseudoTransparentPlugin
    HKCR\MyWebSearch.PseudoTransparentPlugin\CLSID
    HKCR\MyWebSearch.PseudoTransparentPlugin\CurVer
    HKCR\MyWebSearch.PseudoTransparentPlugin.1
    HKCR\MyWebSearch.PseudoTransparentPlugin.1\CLSID
    HKCR\MyWebSearchToolBar.SettingsPlugin
    HKCR\MyWebSearchToolBar.SettingsPlugin\CLSID
    HKCR\MyWebSearchToolBar.SettingsPlugin\CurVer
    HKCR\MyWebSearchToolBar.SettingsPlugin.1
    HKCR\MyWebSearchToolBar.SettingsPlugin.1\CLSID
    HKCR\MyWebSearchToolBar.ToolbarPlugin
    HKCR\MyWebSearchToolBar.ToolbarPlugin\CLSID
    HKCR\MyWebSearchToolBar.ToolbarPlugin\CurVer
    HKCR\MyWebSearchToolBar.ToolbarPlugin.1
    HKCR\MyWebSearchToolBar.ToolbarPlugin.1\CLSID
    HKCR\ScreenSaverControl.ScreenSaverInstaller
    HKCR\ScreenSaverControl.ScreenSaverInstaller\CLSID
    HKCR\ScreenSaverControl.ScreenSaverInstaller\CurVer
    HKCR\ScreenSaverControl.ScreenSaverInstaller.1
    HKCR\ScreenSaverControl.ScreenSaverInstaller.1\CLSID

  3. #3
    Join Date
    Feb 2000
    Location
    Idaho Falls, Idaho, USA
    Posts
    18,428
    SuperAntiSpyware - Part 3


    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}\Control
    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}\InprocServer32
    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}\InprocServer32#ThreadingModel
    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}\MiscStatus
    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}\MiscStatus\1
    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}\ProgID
    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}\Programmable
    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}\TypeLib
    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}\Version
    HKCR\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}\VersionIndependentProgID
    HKCR\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
    HKCR\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}\InprocServer32
    HKCR\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}\InprocServer32#ThreadingModel
    HKCR\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}\ProgID
    HKCR\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}\Programmable
    HKCR\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}\TypeLib
    HKCR\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}\VersionIndependentProgID
    HKCR\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}
    HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}
    HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}\Implemented Categories
    HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}\Implemented Categories\{00021493-0000-0000-C000-000000000046}
    HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}\InprocServer32
    HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}\InprocServer32#ThreadingModel
    HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}\Instance
    HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}\Instance#CLSID
    HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}\Instance\InitPropertyBag
    HKCR\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}\Instance\InitPropertyBag#Url
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}\Control
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}\InprocServer32
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}\InprocServer32#ThreadingModel
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}\MiscStatus
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}\MiscStatus\1
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}\ProgID
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}\Programmable
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}\TypeLib
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}\Version
    HKCR\CLSID\{25560540-9571-4D7B-9389-0F166788785A}\VersionIndependentProgID
    HKCR\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
    HKCR\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}\InprocServer32
    HKCR\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}\InprocServer32#ThreadingModel
    HKCR\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}\ProgID
    HKCR\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}\VersionIndependentProgID
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}\Control
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}\InprocServer32
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}\InprocServer32#ThreadingModel
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}\MiscStatus
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}\MiscStatus\1
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}\ProgID
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}\Programmable
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}\TypeLib
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}\Version
    HKCR\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}\VersionIndependentProgID
    HKCR\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
    HKCR\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}\InprocServer32
    HKCR\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}\InprocServer32#ThreadingModel
    HKCR\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}\ProgID
    HKCR\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}\Programmable
    HKCR\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}\TypeLib
    HKCR\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}\VersionIndependentProgID
    HKCR\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
    HKCR\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}\InprocServer32
    HKCR\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}\InprocServer32#ThreadingModel
    HKCR\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}\ProgID
    HKCR\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}\Programmable
    HKCR\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}\TypeLib
    HKCR\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}\VersionIndependentProgID
    HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}
    HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}\Control
    HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}\InprocServer32
    HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}\InprocServer32#ThreadingModel
    HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}\MiscStatus
    HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}\MiscStatus\1
    HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}\Programmable
    HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}\TypeLib
    HKCR\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}\Version
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\Control
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\InprocServer32
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\InprocServer32#ThreadingModel
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\MiscStatus
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\MiscStatus\1
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\ProgID
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\Programmable
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\TypeLib
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\Version
    HKCR\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\VersionIndependentProgID
    HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}
    HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}\Control
    HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}\InprocServer32
    HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}\InprocServer32#ThreadingModel
    HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}\MiscStatus
    HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}\MiscStatus\1
    HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}\Programmable
    HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}\TypeLib
    HKCR\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}\Version
    HKCR\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}
    HKCR\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}\InprocServer32
    HKCR\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}\InprocServer32#ThreadingModel
    HKCR\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
    HKCR\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}\InprocServer32
    HKCR\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}\InprocServer32#ThreadingModel
    HKCR\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}\ProgID
    HKCR\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}\Programmable
    HKCR\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}\TypeLib
    HKCR\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}\VersionIndependentProgID
    HKCR\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
    HKCR\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}\InprocServer32
    HKCR\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}\InprocServer32#ThreadingModel
    HKCR\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
    HKCR\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}\InprocServer32
    HKCR\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}\InprocServer32#ThreadingModel
    HKCR\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}\ProgID
    HKCR\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}\VersionIndependentProgID
    HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
    HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}\InprocServer32
    HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}\InprocServer32#ThreadingModel
    HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}\MiscStatus
    HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}\MiscStatus\1
    HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}\ProgID
    HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}\Programmable
    HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}\TypeLib
    HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}\Version
    HKCR\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}\VersionIndependentProgID
    HKCR\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}
    HKCR\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}\InprocServer32
    HKCR\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}\InprocServer32#ThreadingModel
    HKCR\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}\Programmable
    HKCR\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}\TypeLib
    HKCR\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
    HKCR\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}\InprocServer32
    HKCR\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}\InprocServer32#ThreadingModel
    HKCR\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}\ProgID
    HKCR\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}\Programmable
    HKCR\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}\VersionIndependentProgID
    HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
    HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}\InprocServer32
    HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}\InprocServer32#ThreadingModel
    HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}\MiscStatus
    HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}\MiscStatus\1
    HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}\ProgID
    HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}\Programmable
    HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}\TypeLib
    HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}\Version
    HKCR\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}\VersionIndependentProgID
    HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
    HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}\InprocServer32
    HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}\InprocServer32#ThreadingModel
    HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}\MiscStatus
    HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}\MiscStatus\1
    HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}\ProgID
    HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}\Programmable
    HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}\TypeLib
    HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}\Version
    HKCR\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}\VersionIndependentProgID
    HKCR\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
    HKCR\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}\InprocServer32
    HKCR\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}\InprocServer32#ThreadingModel
    HKCR\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}\ProgID
    HKCR\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}\Programmable
    HKCR\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}\TypeLib
    HKCR\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}\VersionIndependentProgID
    HKCR\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
    HKCR\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}\InprocServer32
    HKCR\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}\InprocServer32#ThreadingModel
    HKCR\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}\Programmable
    HKCR\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}\TypeLib
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}\Control
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}\InprocServer32
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}\InprocServer32#ThreadingModel
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}\MiscStatus
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}\MiscStatus\1
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}\ProgID
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}\Programmable
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}\TypeLib
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}\Version
    HKCR\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}\VersionIndependentProgID
    HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}
    HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}\1.0
    HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}\1.0\0
    HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}\1.0\0\win32
    HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}\1.0\FLAGS
    HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}\1.0\HELPDIR
    HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}
    HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}\1.0
    HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}\1.0\0
    HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}\1.0\0\win32
    HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}\1.0\FLAGS
    HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}\1.0\HELPDIR
    HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}
    HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}\1.0
    HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}\1.0\0
    HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}\1.0\0\win32
    HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}\1.0\FLAGS
    HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}\1.0\HELPDIR
    HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}
    HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}\1.0
    HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}\1.0\0
    HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}\1.0\0\win32
    HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}\1.0\FLAGS
    HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}\1.0\HELPDIR
    HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}\1.0
    HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}\1.0\0
    HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}\1.0\0\win32
    HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}\1.0\FLAGS
    HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}\1.0\HELPDIR
    HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}
    HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}\1.0
    HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}\1.0\0
    HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}\1.0\0\win32
    HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}\1.0\FLAGS
    HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}\1.0\HELPDIR
    HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}
    HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}\1.0
    HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}\1.0\0
    HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}\1.0\0\win32
    HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}\1.0\FLAGS
    HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}\1.0\HELPDIR
    HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}
    HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}\1.0
    HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}\1.0\0
    HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}\1.0\0\win32
    HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}\1.0\FLAGS
    HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}\1.0\HELPDIR
    HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}
    HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}\1.0
    HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}\1.0\0
    HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}\1.0\0\win32
    HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}\1.0\FLAGS
    HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}\1.0\HELPDIR
    HKCR\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}
    HKCR\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}\1.0
    HKCR\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}\1.0\0
    HKCR\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}\1.0\0\win32
    HKCR\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}\1.0\FLAGS
    HKCR\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}\1.0\HELPDIR
    HKCR\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}
    HKCR\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}\1.0
    HKCR\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}\1.0\0
    HKCR\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}\1.0\0\win32
    HKCR\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}\1.0\FLAGS
    HKCR\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}\1.0\HELPDIR

  4. #4
    Join Date
    Feb 2000
    Location
    Idaho Falls, Idaho, USA
    Posts
    18,428
    SuperAntiSpyware - Part 4


    HKCR\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
    HKCR\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}\ProxyStubClsid
    HKCR\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}\ProxyStubClsid32
    HKCR\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}\TypeLib
    HKCR\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}\TypeLib#Version
    HKCR\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
    HKCR\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}\ProxyStubClsid
    HKCR\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}\ProxyStubClsid32
    HKCR\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}\TypeLib
    HKCR\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}\TypeLib#Version
    HKCR\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
    HKCR\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}\ProxyStubClsid
    HKCR\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}\ProxyStubClsid32
    HKCR\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}\TypeLib
    HKCR\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}\TypeLib#Version
    HKCR\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
    HKCR\Interface\{120927BF-1700-43BC-810F-FAB92549B390}\ProxyStubClsid
    HKCR\Interface\{120927BF-1700-43BC-810F-FAB92549B390}\ProxyStubClsid32
    HKCR\Interface\{120927BF-1700-43BC-810F-FAB92549B390}\TypeLib
    HKCR\Interface\{120927BF-1700-43BC-810F-FAB92549B390}\TypeLib#Version
    HKCR\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
    HKCR\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}\ProxyStubClsid
    HKCR\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}\ProxyStubClsid32
    HKCR\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}\TypeLib
    HKCR\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}\TypeLib#Version
    HKCR\Interface\{1F52A5FA-A705-4415-B975-88503B291728}
    HKCR\Interface\{1F52A5FA-A705-4415-B975-88503B291728}\ProxyStubClsid
    HKCR\Interface\{1F52A5FA-A705-4415-B975-88503B291728}\ProxyStubClsid32
    HKCR\Interface\{1F52A5FA-A705-4415-B975-88503B291728}\TypeLib
    HKCR\Interface\{1F52A5FA-A705-4415-B975-88503B291728}\TypeLib#Version
    HKCR\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
    HKCR\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}\ProxyStubClsid
    HKCR\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}\ProxyStubClsid32
    HKCR\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}\TypeLib
    HKCR\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}\TypeLib#Version
    HKCR\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
    HKCR\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}\ProxyStubClsid
    HKCR\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}\ProxyStubClsid32
    HKCR\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}\TypeLib
    HKCR\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}\TypeLib#Version
    HKCR\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
    HKCR\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}\ProxyStubClsid
    HKCR\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}\ProxyStubClsid32
    HKCR\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}\TypeLib
    HKCR\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}\TypeLib#Version
    HKCR\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}
    HKCR\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}\ProxyStubClsid
    HKCR\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}\ProxyStubClsid32
    HKCR\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}\TypeLib
    HKCR\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}\TypeLib#Version
    HKCR\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
    HKCR\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}\ProxyStubClsid
    HKCR\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}\ProxyStubClsid32
    HKCR\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}\TypeLib
    HKCR\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}\TypeLib#Version
    HKCR\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
    HKCR\Interface\{3E720451-B472-4954-B7AA-33069EB53906}\ProxyStubClsid
    HKCR\Interface\{3E720451-B472-4954-B7AA-33069EB53906}\ProxyStubClsid32
    HKCR\Interface\{3E720451-B472-4954-B7AA-33069EB53906}\TypeLib
    HKCR\Interface\{3E720451-B472-4954-B7AA-33069EB53906}\TypeLib#Version
    HKCR\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
    HKCR\Interface\{3E720453-B472-4954-B7AA-33069EB53906}\ProxyStubClsid
    HKCR\Interface\{3E720453-B472-4954-B7AA-33069EB53906}\ProxyStubClsid32
    HKCR\Interface\{3E720453-B472-4954-B7AA-33069EB53906}\TypeLib
    HKCR\Interface\{3E720453-B472-4954-B7AA-33069EB53906}\TypeLib#Version
    HKCR\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
    HKCR\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}\ProxyStubClsid
    HKCR\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}\ProxyStubClsid32
    HKCR\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}\TypeLib
    HKCR\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}\TypeLib#Version
    HKCR\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
    HKCR\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}\ProxyStubClsid
    HKCR\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}\ProxyStubClsid32
    HKCR\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}\TypeLib
    HKCR\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}\TypeLib#Version
    HKCR\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}
    HKCR\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}\ProxyStubClsid
    HKCR\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}\ProxyStubClsid32
    HKCR\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}\TypeLib
    HKCR\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}\TypeLib#Version
    HKCR\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
    HKCR\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}\ProxyStubClsid
    HKCR\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}\ProxyStubClsid32
    HKCR\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}\TypeLib
    HKCR\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}\TypeLib#Version
    HKCR\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
    HKCR\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}\ProxyStubClsid
    HKCR\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}\ProxyStubClsid32
    HKCR\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}\TypeLib
    HKCR\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}\TypeLib#Version
    HKCR\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKCR\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}\ProxyStubClsid
    HKCR\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}\ProxyStubClsid32
    HKCR\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}\TypeLib
    HKCR\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}\TypeLib#Version
    HKCR\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKCR\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}\ProxyStubClsid
    HKCR\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}\ProxyStubClsid32
    HKCR\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}\TypeLib
    HKCR\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}\TypeLib#Version
    HKCR\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKCR\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}\ProxyStubClsid
    HKCR\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}\ProxyStubClsid32
    HKCR\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}\TypeLib
    HKCR\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}\TypeLib#Version
    HKCR\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKCR\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}\ProxyStubClsid
    HKCR\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}\ProxyStubClsid32
    HKCR\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}\TypeLib
    HKCR\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}\TypeLib#Version
    HKCR\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
    HKCR\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}\ProxyStubClsid
    HKCR\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}\ProxyStubClsid32
    HKCR\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}\TypeLib
    HKCR\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}\TypeLib#Version
    HKCR\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
    HKCR\Interface\{991AAC62-B100-47CE-8B75-253965244F69}\ProxyStubClsid
    HKCR\Interface\{991AAC62-B100-47CE-8B75-253965244F69}\ProxyStubClsid32
    HKCR\Interface\{991AAC62-B100-47CE-8B75-253965244F69}\TypeLib
    HKCR\Interface\{991AAC62-B100-47CE-8B75-253965244F69}\TypeLib#Version
    HKCR\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}
    HKCR\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}\ProxyStubClsid
    HKCR\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}\ProxyStubClsid32
    HKCR\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}\TypeLib
    HKCR\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}\TypeLib#Version
    HKCR\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
    HKCR\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}\ProxyStubClsid
    HKCR\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}\ProxyStubClsid32
    HKCR\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}\TypeLib
    HKCR\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}\TypeLib#Version
    HKCR\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
    HKCR\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}\ProxyStubClsid
    HKCR\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}\ProxyStubClsid32
    HKCR\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}\TypeLib
    HKCR\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}\TypeLib#Version
    HKCR\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
    HKCR\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}\ProxyStubClsid
    HKCR\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}\ProxyStubClsid32
    HKCR\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}\TypeLib
    HKCR\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}\TypeLib#Version
    HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}
    HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}\ProxyStubClsid
    HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}\ProxyStubClsid32
    HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}\TypeLib
    HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}\TypeLib#Version
    HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
    HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}\ProxyStubClsid
    HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}\ProxyStubClsid32
    HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}\TypeLib
    HKCR\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}\TypeLib#Version
    HKCR\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
    HKCR\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}\ProxyStubClsid
    HKCR\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}\ProxyStubClsid32
    HKCR\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}\TypeLib
    HKCR\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}\TypeLib#Version
    HKCR\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
    HKCR\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}\ProxyStubClsid
    HKCR\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}\ProxyStubClsid32
    HKCR\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}\TypeLib
    HKCR\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}\TypeLib#Version
    HKCR\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
    HKCR\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}\ProxyStubClsid
    HKCR\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}\ProxyStubClsid32
    HKCR\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}\TypeLib
    HKCR\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}\TypeLib#Version
    HKCR\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
    HKCR\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}\ProxyStubClsid
    HKCR\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}\ProxyStubClsid32
    HKCR\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}\TypeLib
    HKCR\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}\TypeLib#Version

  5. #5
    Join Date
    Feb 2000
    Location
    Idaho Falls, Idaho, USA
    Posts
    18,428
    SuperAntiSpyware - Part 5


    HKLM\Software\FocusInteractive
    HKLM\Software\FocusInteractive\bar
    HKLM\Software\FocusInteractive\bar\Switches
    HKLM\Software\FocusInteractive\bar\Switches#incmail.exe
    HKLM\Software\FocusInteractive\bar\Switches#msimn.exe
    HKLM\Software\FocusInteractive\bar\Switches#msn.exe
    HKLM\Software\FocusInteractive\bar\Switches#outlook.exe
    HKLM\Software\FocusInteractive\bar\Switches#waol.exe
    HKLM\Software\FocusInteractive\bar\Switches#aim.exe
    HKLM\Software\FocusInteractive\bar\Switches#icq.exe
    HKLM\Software\FocusInteractive\bar\Switches#icqlite.exe
    HKLM\Software\FocusInteractive\bar\Switches#msmsgs.exe
    HKLM\Software\FocusInteractive\bar\Switches#msnmsgr.exe
    HKLM\Software\FocusInteractive\bar\Switches#ypager.exe
    HKLM\Software\FocusInteractive\bar\Switches#au
    HKLM\Software\FocusInteractive\bar\Switches#mwsSrcAs.dll
    HKLM\Software\FocusInteractive\bar\Switches#ok
    HKLM\Software\FocusInteractive\bar\Switches#od
    HKLM\Software\FocusInteractive\bar\Switches#nk
    HKLM\Software\FocusInteractive\bar\Switches#nd
    HKLM\Software\FocusInteractive\Email-IM
    HKLM\Software\FocusInteractive\Email-IM\0
    HKLM\Software\FocusInteractive\Email-IM\0#Toolbar
    HKLM\Software\FocusInteractive\Email-IM\0#AppName
    HKLM\Software\FocusInteractive\Email-IM\0#Path
    HKLM\Software\FocusInteractive\Outlook
    HKLM\Software\FocusInteractive\Outlook#MyWebSearch.OutlookAddin
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall#DisplayName
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall#HelpLink
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall#Publisher
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall#UninstallString
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall#UrlInfoAbout
    C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
    C:\Program Files\MyWebSearch\bar\1.bin\F3BROVLY.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
    C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3SHLLVW.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV
    C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
    C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
    C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST
    C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
    C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST
    C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
    C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
    C:\Program Files\MyWebSearch\bar\1.bin
    C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
    C:\Program Files\MyWebSearch\bar\Avatar
    C:\Program Files\MyWebSearch\bar\Cache\000472A1
    C:\Program Files\MyWebSearch\bar\Cache\0004AA41
    C:\Program Files\MyWebSearch\bar\Cache\0008BB70
    C:\Program Files\MyWebSearch\bar\Cache\0008BE23.bin
    C:\Program Files\MyWebSearch\bar\Cache\0008BFF0.bin
    C:\Program Files\MyWebSearch\bar\Cache\0008C11C.bin
    C:\Program Files\MyWebSearch\bar\Cache\0008C22B.bin
    C:\Program Files\MyWebSearch\bar\Cache\0008C339.bin
    C:\Program Files\MyWebSearch\bar\Cache\000E2850.bin
    C:\Program Files\MyWebSearch\bar\Cache\000E2AA9.bin
    C:\Program Files\MyWebSearch\bar\Cache\000E375F.bin
    C:\Program Files\MyWebSearch\bar\Cache\000E459C.bin
    C:\Program Files\MyWebSearch\bar\Cache\23D9DBC4.bin
    C:\Program Files\MyWebSearch\bar\Cache\files.ini
    C:\Program Files\MyWebSearch\bar\Cache
    C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
    C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
    C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
    C:\Program Files\MyWebSearch\bar\Game
    C:\Program Files\MyWebSearch\bar\History\search2
    C:\Program Files\MyWebSearch\bar\History
    C:\Program Files\MyWebSearch\bar\icons\CM.ICO
    C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
    C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
    C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
    C:\Program Files\MyWebSearch\bar\icons\WB.ICO
    C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
    C:\Program Files\MyWebSearch\bar\icons
    C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
    C:\Program Files\MyWebSearch\bar\Message
    C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S
    C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S
    C:\Program Files\MyWebSearch\bar\Notifier
    C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm
    C:\Program Files\MyWebSearch\bar\Settings\setting2.htm
    C:\Program Files\MyWebSearch\bar\Settings\setting2.htm.bak
    C:\Program Files\MyWebSearch\bar\Settings\settings.dat
    C:\Program Files\MyWebSearch\bar\Settings\settings.dat.bak
    C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
    C:\Program Files\MyWebSearch\bar\Settings
    C:\Program Files\MyWebSearch\bar
    C:\Program Files\MyWebSearch\SrchAstt\1.bin
    C:\Program Files\MyWebSearch\SrchAstt
    C:\Program Files\MyWebSearch
    C:\Program Files\FunWebProducts\PopSwatr\History\allowed
    C:\Program Files\FunWebProducts\PopSwatr\History\notallow
    C:\Program Files\FunWebProducts\PopSwatr\History
    C:\Program Files\FunWebProducts\PopSwatr
    C:\Program Files\FunWebProducts\ScreenSaver\Images
    C:\Program Files\FunWebProducts\ScreenSaver
    C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\MySignatureInsertBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\MySignaturePreviewBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\res100.html
    C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn-new.htmlx
    C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html
    C:\Program Files\FunWebProducts\Shared\Cache\temp.html
    C:\Program Files\FunWebProducts\Shared\Cache
    C:\Program Files\FunWebProducts\Shared
    C:\Program Files\FunWebProducts
    C:\WINNT\SYSTEM32\F3PSSAVR.SCR

    Adware.MyWebSearch-Installer
    C:\DOCUMENTS AND SETTINGS\SUZIE\DESKTOP\WEBFETTISETUP2.2.60.11-2.ZKFOX000.EXE

  6. #6
    Join Date
    Feb 2000
    Location
    Idaho Falls, Idaho, USA
    Posts
    18,428
    MalwareBytes


    Malwarebytes' Anti-Malware 1.41
    Database version: 3172
    Windows 5.1.2600 Service Pack 1

    11/14/2009 7:02:32 PM
    mbam-log-2009-11-14 (19-02-26).txt

    Scan type: Full Scan (C:\|)
    Objects scanned: 250407
    Time elapsed: 1 hour(s), 6 minute(s), 26 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 31
    Registry Values Infected: 5
    Registry Data Items Infected: 0
    Folders Infected: 1
    Files Infected: 17

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CLASSES_ROOT\funwebproducts.browseroverlaybarbutton (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\funwebproducts.browseroverlaybarbutton.1 (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\funwebproducts.browseroverlayembed (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\funwebproducts.browseroverlayembed.1 (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\funwebproducts.shellviewcontrol (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\funwebproducts.shellviewcontrol.1 (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\Interface\{2763e333-b168-41a0-a112-d35f96f410c0} (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\Interface\{38a7c9da-8db7-4d0f-a7b1-c4b1a305bddb} (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\Interface\{8d292ec0-6792-4a38-82ed-73a087e41ba6} (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\CLSID\{d778513b-1c40-4819-b0c5-49e40b39afd0} (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\Typelib\{621feacd-8857-43a6-ae26-451d670d5370} (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\Typelib\{98635087-3f5d-418f-990c-b1efe0797a3b} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
    HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/x-f3embed (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> No action taken.

    Registry Values Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar Search Scope Monitor (Adware.MyWebSearch) -> No action taken.

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    C:\Documents and Settings\SUZIE\Application Data\SpamBlockerUtility_Icons (Adware.Hotbar) -> No action taken.

    Files Infected:
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004340.DLL (Adware.MyWeb.FunWeb) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004341.EXE (Adware.MyWeb.FunWeb) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004346.DLL (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004347.DLL (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004348.EXE (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004349.DLL (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004351.DLL (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004352.DLL (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004353.DLL (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004354.EXE (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004355.EXE (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004356.DLL (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004357.DLL (Adware.MyWebSearch) -> No action taken.
    C:\System Volume Information\_restore{54A53C75-BE31-4BEB-A70D-C6F47808CF51}\RP4\A0004366.exe (Adware.MyWebSearch) -> No action taken.
    C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll (Adware.MyWebSearch) -> No action taken.
    C:\Documents and Settings\SUZIE\Application Data\SpamBlockerUtility_Icons\MobileSidewalk_2.ico (Adware.Hotbar) -> No action taken.
    C:\Documents and Settings\SUZIE\Application Data\SpamBlockerUtility_Icons\Software_Online_8.ico (Adware.Hotbar) -> No action taken.

  7. #7
    Join Date
    Feb 2000
    Location
    Idaho Falls, Idaho, USA
    Posts
    18,428
    HijackTHis



    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:37:52 PM, on 11/14/2009
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\svchost.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\WINNT\system32\spoolsv.exe
    c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Google\Update\GoogleUpdate.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    c:\program files\idt\intelxpv_v52\wdm\STacSV.exe
    C:\WINNT\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
    C:\Program Files\Viewpoint\Common\ViewpointService.exe
    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    C:\WINNT\System32\WgaTray.exe
    C:\WINNT\Explorer.EXE
    C:\WINNT\System32\hphmon03.exe
    C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
    C:\PROGRA~1\HEWLET~1\PHOTOS~1\HPSHAR~1\hpgs2wnf.exe
    C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
    C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINNT\System32\igfxtray.exe
    C:\WINNT\System32\hkcmd.exe
    C:\WINNT\System32\igfxpers.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\IDT\WDM\sttray.exe
    C:\WINNT\System32\ctfmon.exe
    C:\Program Files\Logitech\QuickCam10\COCIManager.exe
    C:\Program Files\Palm\Hotsync.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Webshots\WebshotsTray.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Windows Live Toolbar\msn_sl.exe
    C:\Download\HijackThis\HijackThis.exe

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O2 - BHO: Watson BHO - {B85B5D0E-E7C3-11D2-9ECF-00104BFF1A51} - C:\Program Files\Intellext\Watson\WatsonIEAdapter.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.0983.0\msneshellx.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
    O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.0983.0\msneshellx.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb09.exe
    O4 - HKLM\..\Run: [HPHmon03] C:\WINNT\System32\hphmon03.exe
    O4 - HKLM\..\Run: [CXMon] "C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe"
    O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"
    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
    O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton 360\osCheck.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\WINNT\System32\igfxpers.exe
    O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\System32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit (User 'SYSTEM')
    O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit (User 'Default user')
    O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
    O4 - S-1-5-18 Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe (User 'SYSTEM')
    O4 - .DEFAULT Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe (User 'Default user')
    O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\WebshotsTray.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: HOTSYNCSHORTCUTNAME.lnk = C:\Program Files\Palm\Hotsync.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: &Google Search - res://c:\winnt\downloaded program files\GoogleToolbar_en_2.0.107-big.dll/cmsearch.html
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: Backward &Links - res://c:\winnt\downloaded program files\GoogleToolbar_en_2.0.107-big.dll/cmbacklinks.html
    O8 - Extra context menu item: Cac&hed Snapshot of Page - res://c:\winnt\downloaded program files\GoogleToolbar_en_2.0.107-big.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/229?f41e49e5521448a3bf55cd3245c09b9b
    O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?f41e49e5521448a3bf55cd3245c09b9b
    O8 - Extra context menu item: Si&milar Pages - res://c:\winnt\downloaded program files\GoogleToolbar_en_2.0.107-big.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\winnt\downloaded program files\GoogleToolbar_en_2.0.107-big.dll/cmtrans.html
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
    O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: ICQ 4.0 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
    O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} - http://security.symantec.com/sscv6/S...in/AvSniff.cab
    O16 - DPF: {34805D32-AD89-469E-8503-A5666AEE4333} - http://207.188.7.150/3147c43c63c2c04...tzip/RdxIE.cab
    O16 - DPF: {4CCA4E80-9259-11D9-AC6E-444553544200} (FixController Control) - http://h30155.www3.hp.com/ediags/dd/...lMgr_v01_5.cab
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/06f43e9d8e8a69e...zip/RdxIE2.cab
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
    O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} - http://h20270.www2.hp.com/ediags/gmn...tDetection.cab
    O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} - http://toolbar.google.com/data/en/bi.../GoogleNav.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1126710838833
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
    O16 - DPF: {7CF052DE-C74F-421B-B04A-3B3037EF5887} (CCMPGui Class) - http://64.124.45.181/chaincast/proxy/CCMP.cab
    O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} - http://fdl.msn.com/zone/Z4/heartbeat.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10...o.cab34246.cab
    O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
    O16 - DPF: {CAACCAA2-CFCE-11D2-8683-080009FC2B79} - https://ddri.aegonusa.com/ddrint/wor...intcontrol.cab
    O16 - DPF: {DED22F57-FEE2-11D0-953B-00C04FD9152D} - http://carpoint.msn.com/components/o...autopricer.cab
    O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab
    O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://www.abacast.com/download/files/Abasetup.cab
    O16 - DPF: {E9348280-2D74-4933-BE25-73D946926795} - http://h20270.www2.hp.com/ediags/gmn...detection3.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} - http://chat.msn.com/bin/msnchat45.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{9DC79391-3803-4DB2-B43B-BDDBDB7469F0}: NameServer = 198.60.98.45,199.104.81.6,204.74.114.93
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
    O23 - Service: Google Update Service (gupdate1ca4c18705bfa60) (gupdate1ca4c18705bfa60) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
    O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe
    O23 - Service: Pml Driver - HP - C:\WINNT\System32\HPHipm09.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\system32\HPZipm12.exe
    O23 - Service: Audio Service (STacSV) - IDT, Inc. - c:\program files\idt\intelxpv_v52\wdm\STacSV.exe
    O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\SupportSoft\bin\ssrc.exe
    O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    O23 - Service: Uniblue DiskRescue - Uniblue - C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

    --
    End of file - 16423 bytes

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •