LuLu

July 12, 2007

Hope this isn't too risque' for this forum. If it is, then please delete as you see fit.

THE RULES FOR BEDROOM GOLF

1. Each player shall furnish his own equipment for

play - normally one club & two balls.

2. Play on a course must be approved by the owner of

the hole.

3. Unlike outdoor golf, the object is to get the club

in the hole and keep the balls out of the hole.

4. For the most effective play, the club should have

a firm shaft. Course owners are permitted to check

shaft stiffness before play begins.

5. Course owners reserve the right to measure the length

of the club to avoid damage to the hole.

6. The object of the game is to take as many strokes

as necessary until the course owner is satisfied that

play is complete. Failure to do so may result in being

denied permission to play the course again.

7. It is considered bad form to begin playing the hole

immediately upon arrival at the course. The experienced

player will normally take time to admire the course,

with special attention to the well formed bunkers.

8. Players are cautioned not to mention other courses

they have played or are currently playing to the owner

of the course being played. Upset course owners have

been known to damage a player's equipment for this reason.

9. Players are encouraged to have proper rain gear

along, just in case.

10. Players should assure themselves that their match

has been properly scheduled. Particularly when a new

course is being played for the first time. Previous

players have been known to become irate if they discover

someone else playing what they consider to be a private

course.

11. Players should not assume that the course is in

shape for play at all times. Some players may be embarrassed

if they find the course to be temporarily under repair.

Players are advised to be extremely tactful in this

situation. More experienced players will find alternate

means of play when this is the case.

12. Players are advised to obtain the course owner's

permission before attempting to play the back nine.

13. Slow play is encouraged; However, players should

be prepared to proceed at a quicker pace at least temporarily,

at the course owner's request.

14. It is considered outstanding performance, time

permitting, to play the same hole several times in

one match.

15. The course owner will be the sole judge of who

is the best player.

16. Players are advised to think twice before considering

membership at a given course. Additional assessments

may be levied by the course owner and the rules are

subject to change. For this reason many players prefer

to continue to play several different courses.

July 12, 2007

Took this yesterday. Thought it looks kinda cool...

July 10, 2007

Well, my MRI is over. It took 40 minutes and let me tell you, it's hard to stay still that long. lol But it wasn't bad at all. I went in about hip deep, and they gave me headphones so I could listen to the radio, so that made things a whole lot easier for me. Music has always been a fail-safe for me. Anyway, that machine is LOUD as a mo-fo. They had me wear earplugs (yes, even with the headphones) and even with music blaring in my ears, I could still hear the pings and pangs of the machine. Quite a different experince than just a regular ol' X-ray that's for sure. I'm just glad I didn't have to go in all the way. To be honest, I don't think I'd fit. That's the smallest MRI tunnel I've seen since I started looking it up on the net. But anyway, I go to the doc in approximately 5 days for my results. I hope they find a cause for the pain/swelling/numbness in my foot and ankle. If they don't, then I shall consider myself certifiably insane. :blink: :lol:

Member Rankings · July 10, 2007

You got almost same amount of posts just in couple of months, than i got in about 2 years. Come on, you will be Power Member soon with that posting tempo.

LOL thanks for the vote of confidence.

Member Rankings · July 10, 2007

I think it's gonna take loooong time to me being a Power Member.

You and me both. :unsure:

July 10, 2007

BTW I'm not saying that just cos everyone slags AOL, I'm on AOL myself so know all too well how slow and unreliable the browser is. I only use Firefox but my girlfriend almost always uses AOL, even though she knows off by heart now the two responses from me when she can't get a site to load - "Run Crap Cleaner" and "Use Firefox"

LOL no I understand. I use AOL myself, but only for chatting and emailing. And even then it'll go retarded. AOL is the only program I know that will lose the connection even when you have an outside connection (dsl, cable, etc). And then you get messages like "Email information is not available at this time. Please try again later." What the hell kind of crap is that? Stupid crap program. lol

Anyway, I put CCleaner on my cousin's laptop. She'll need it. lol And have emailed her to tell her she'll have to try reinstalling IE7. Hopefully the laptop won't crash this time around. :lol:

July 10, 2007

Definitely tell her to dump the AOL browser, its terrible, and recommend she try using Firefox or IE7 again.

That's what I figured. lol I'll definitely let her know.

July 10, 2007

I don't know if her laptop has wireless. Hmmm. Oh well, wouldn't matter much anyway. We're all poor in this neighborhood so I doubt anyone has it. lol

I thought I could just hop online too, but I was fooled. If anything, I can go to her house when she gets back and run the Kaspersky scan then. I just had another successful boot-up so I've got my fingers crossed that I did something right. lol

July 10, 2007

It doesn't work. I plugged it into my modem and got no where...I'm guessing it's because she has a different internet provider than I do but I don't really know. Figured I'd dial up to AOL with the landline, but she has the free version of AOL now so I can't even do that.

July 10, 2007

That would work if I could go online with her laptop. lol Should I download the trial version and transfer it to the laptop instead?

July 10, 2007

I have no idea if she paid for Panda or not. Most likely she did, but I can't say for sure.

I disabled GoBack and will probably uninstall it after she gives me the OK. Have no idea what the Maxtor One Touch is but will play around with it to find out.

She does use iTunes, so Quicktime has to stay, and she uses RealPlayer for some women's basketball crap she watches online. I don't know if it'll play in any other program.

She uses some AOL Explorer mess because IE 7 crashed her laptop when she had initially downloaded it. I can have her download and install it again if you think she should.

Already did a defrag and it didn't seem to change much. To be honest, the biggest improvement came after running ComboFix. I have no problems running programs and now the start up is faster. And I had 2 successful boot-ups in a row. It's a world record! lol

I'll go dump the toolbars.

July 10, 2007

Ok ZoneAlarm is gone.

And the magic number is....305m/1057m

July 10, 2007

HijackThis log...

Logfile of Trend Micro HijackThis v2.0.0 (BETA)

Scan saved at 8:58:11 PM, on 7/9/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Panda Software\Panda Internet Security 2007\pavsrv51.exe

C:\Program Files\Panda Software\Panda Internet Security 2007\AVENGINE.EXE

C:\WINDOWS\System32\svchost.exe

c:\program files\panda software\panda internet security 2007\firewall\PNMSRV.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Program Files\Roxio\GoBack\GBPoll.exe

C:\WINDOWS\system32\HPConfig.exe

C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe

C:\Program Files\Maxtor\OneTouch\Utils\SyncServices.exe

C:\Program Files\Panda Software\Panda Internet Security 2007\PavFnSvr.exe

C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe

C:\Program Files\Panda Software\Panda Internet Security 2007\AntiSpam\pskmssvc.exe

C:\Program Files\Panda Software\Panda Internet Security 2007\PsImSvc.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\WINDOWS\wanmpsvc.exe

C:\WINDOWS\system32\carpserv.exe

C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE

C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe

C:\Program Files\Panda Software\Panda Internet Security 2007\APVXDWIN.EXE

C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe

C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Roxio\GoBack\GBTray.exe

C:\Program Files\Panda Software\Panda Internet Security 2007\SRVLOAD.EXE

c:\program files\panda software\panda internet security 2007\WebProxy.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Support.com\bin\tgcmd.exe

C:\Documents and Settings\Amanda\Desktop\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.bellsouth.net/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe

R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - c:\Program Files\Microsoft Money\System\mnyside.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll

O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

O3 - Toolbar: Updated.Toolbar - {9F6A22E6-1682-4F82-9B72-6314794CB253} - C:\Program Files\Pop Blocker\Updated.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe

O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe

O4 - HKLM\..\Run: [CARPService] carpserv.exe

O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe -d

O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe

O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s

O4 - HKLM\..\Run: [QT4HPOT] C:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXE

O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [tgcmd] "C:\Program Files\Support.com\BellSouth\hcenter.exe" /starthidden /tgcmdwrapper

O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"

O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Internet Security 2007\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [sCANINICIO] "C:\Program Files\Panda Software\Panda Internet Security 2007\Inicio.exe"

O4 - HKLM\..\Run: [MaxtorOneTouch] C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe

O4 - HKLM\..\Run: [mxomssmenu] "C:\Program Files\Maxtor\OneTouch Status\maxmenumgr.exe"

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKCU\..\Run: [MoneyAgent] "c:\Program Files\Microsoft Money\System\mnyexpr.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - Global Startup: GoBack.lnk = C:\Program Files\Roxio\GoBack\GBTray.exe

O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll

O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe

O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra button: Advisor - {7D5AF893-CA81-498D-B2DB-87F46C405725} - C:\Program Files\COMPAQ\Compaq Advisor\bin\rbaLauncher.exe (file missing) (HKCU)

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

O14 - IERESET.INF: START_PAGE_URL=http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=1c02&lc=0409

O15 - Trusted Zone: http://download.windowsupdate.com

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1136931773403

O16 - DPF: {A662DA7E-CCB7-4743-B71A-D817F6D575DF} (Autodesk DWF Viewer Control) - http://www.autodesk.com/global/dwfviewer/i...ViewerSetup.cab

O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab

O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab

O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/activedata/SymAData.dll

O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/d.../ITDetector.cab

O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://mvnet.xlontech.net/qm/fox/06101102/qsp2ie06101001.cab

O17 - HKLM\System\CS1\Services\Tcpip\..\{1A528DCB-BCD0-4E2D-AA77-1D743F88A6FE}: NameServer = 205.152.0.8,205.152.32.8

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll

O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: GBPoll - Roxio, Inc. - C:\Program Files\Roxio\GoBack\GBPoll.exe

O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: MaxBackServiceInt - Unknown owner - C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe

O23 - Service: MaxSyncService (NTService1) - - C:\Program Files\Maxtor\OneTouch\Utils\SyncServices.exe

O23 - Service: Panda Function Service (PAVFNSVR) - Unknown owner - C:\Program Files\Panda Software\Panda Internet Security 2007\PavFnSvr.exe

O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe

O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Software\Panda Internet Security 2007\pavsrv51.exe

O23 - Service: Panda Antispam Engine (pmshellsrv) - Panda Software International - C:\Program Files\Panda Software\Panda Internet Security 2007\AntiSpam\pskmssvc.exe

O23 - Service: Panda Network Manager (PNMSRV) - Unknown owner - c:\program files\panda software\panda internet security 2007\firewall\PNMSRV.EXE

O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software - C:\Program Files\Panda Software\Panda Internet Security 2007\PsImSvc.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--

End of file - 11932 bytes

------------------------------------------------------------------------------------------------------------------------

ComboFix Log...

"Amanda" - 07-07-09 16:41:17 Service Pack 2

ComboFix 07-04-25.4V - Running from: "C:\Documents and Settings\Amanda\Desktop\"

((((((((((((((((((((((((((((((( Files Created from 2007-06-09 to 2007-07-09 ))))))))))))))))))))))))))))))))))

2007-07-09 13:43 <DIR> d-------- C:\DOCUME~1\Amanda\APPLIC~1\wsInspector

2007-07-09 13:40 <DIR> d-------- C:\Program Files\Startup Inspector for Windows

2007-07-09 13:34 49,152 --a------ C:\WINDOWS\nircmd.exe

2007-07-08 17:42 343,040 --a------ C:\WINDOWS\system32\mspaint.exe

2007-07-08 17:22 <DIR> d-------- C:\Program Files\SUPERAntiSpyware

2007-07-08 17:22 <DIR> d-------- C:\DOCUME~1\Amanda\APPLIC~1\SUPERAntiSpyware.com

2007-07-08 17:22 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\SUPERAntiSpyware.com

2007-07-08 17:20 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard

2007-07-08 17:19 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys

2007-07-08 17:18 <DIR> d-------- C:\Program Files\CCleaner

2007-07-07 23:02 10,160 --a------ C:\PAVPROT.BIN

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-08 00:57 -------- d--h----- C:\Program Files\installshield installation information

2007-07-08 00:51 -------- d-------- C:\Program Files\windows nt

2007-07-07 23:10 -------- d-------- C:\Program Files\quicktime

2007-07-07 23:10 -------- d-------- C:\Program Files\messenger

2007-07-07 23:02 104838 --a------ C:\PAVVTS.DAT

2007-07-07 22:53 -------- d-------- C:\Program Files\google

2007-04-16 22:47 33624 --a------ C:\WINDOWS\system32\wups.dll

2007-04-16 22:45 92504 --a------ C:\WINDOWS\system32\cdm.dll

2007-04-16 22:45 549720 --a------ C:\WINDOWS\system32\wuapi.dll

2007-04-16 22:45 53080 --a------ C:\WINDOWS\system32\wuauclt.exe

2007-04-16 22:45 43352 --a------ C:\WINDOWS\system32\wups2.dll

2007-04-16 22:45 325976 --a------ C:\WINDOWS\system32\wucltui.dll

2007-04-16 22:45 203096 --a------ C:\WINDOWS\system32\wuweb.dll

2007-04-16 22:45 1710936 --a------ C:\WINDOWS\system32\wuaueng.dll

2007-04-16 22:44 271224 --a------ C:\WINDOWS\system32\mucltui.dll

2007-04-16 22:44 208248 --a------ C:\WINDOWS\system32\muweb.dll

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]

{243B17DE-77C7-46BF-B94B-0B5F309A0E64} c:\Program Files\Microsoft Money\System\mnyside.dll

{53707962-6F74-2D53-2644-206D7942484F} C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll

{7C554162-8CB7-45A4-B8F4-8EA1C75885F9} C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll

{AA58ED58-01DD-4d91-8333-CF10577473F7} c:\program files\google\googletoolbar2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]

"ATIModeChange"="Ati2mdxx.exe"

"AtiPTA"="atiptaxx.exe"

"CARPService"="carpserv.exe"

"PreloadApp"="c:\\hp\\drivers\\printers\\photosmart\\hphprld.exe c:\\hp\\drivers\\printers\\photosmart\\setup.exe -d"

"srmclean"="C:\\Cpqs\\Scom\\srmclean.exe"

"Display Settings"="C:\\Program Files\\HPQ\\Notebook Utilities\\hptasks.exe /s"

"QT4HPOT"="C:\\PROGRA~1\\HPQ\\ONE-TO~1\\OneTouch.EXE"

"SynTPLpr"="C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe"

"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"

"Cpqset"="C:\\Program Files\\HPQ\\Default Settings\\cpqset.exe"

"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"

"MMTray"="C:\\Program Files\\MUSICMATCH\\MUSICMATCH Jukebox\\mm_tray.exe"

"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

"tgcmd"="\"C:\\Program Files\\Support.com\\BellSouth\\hcenter.exe\" /starthidden /tgcmdwrapper"

"Zone Labs Client"="C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe"

"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_10\\bin\\jusched.exe\""

"APVXDWIN"="\"C:\\Program Files\\Panda Software\\Panda Internet Security 2007\\APVXDWIN.EXE\" /s"

"SCANINICIO"="\"C:\\Program Files\\Panda Software\\Panda Internet Security 2007\\Inicio.exe\""

"MaxtorOneTouch"="C:\\Program Files\\Maxtor\\OneTouch\\utils\\Onetouch.exe"

"mxomssmenu"="\"C:\\Program Files\\Maxtor\\OneTouch Status\\maxmenumgr.exe\""

"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]

"MoneyAgent"="\"c:\\Program Files\\Microsoft Money\\System\\mnyexpr.exe\""

"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]

"{6809e580-a3a7-11d1-9a00-00a0c945b006}"="GoBack Shell Extension"

"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=""

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa

Authentication Packages REG_MULTI_SZ msv1_0\

Security Packages REG_MULTI_SZ kerberosmsv1_0schannelwdigest\

Notification Packages REG_MULTI_SZ scecli\

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]

"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Adobe Reader Speed Launch.lnk"

"backup"="C:\\WINDOWS\\pss\\Adobe Reader Speed Launch.lnkCommon Startup"

"location"="Common Startup"

"command"="C:\\PROGRA~1\\Adobe\\ACROBA~3.0\\Reader\\READER~1.EXE "

"item"="Adobe Reader Speed Launch"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Billminder.lnk]

"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Billminder.lnk"

"backup"="C:\\WINDOWS\\pss\\Billminder.lnkCommon Startup"

"location"="Common Startup"

"command"="C:\\PROGRA~1\\Quicken\\billmind.exe -startup"

"item"="Billminder"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^D-Link AirPlus.lnk]

"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\D-Link AirPlus.lnk"

"backup"="C:\\WINDOWS\\pss\\D-Link AirPlus.lnkCommon Startup"

"location"="Common Startup"

"command"="C:\\PROGRA~1\\D-LINK~1\\AirPlus.exe "

"item"="D-Link AirPlus"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Quicken Scheduled Updates.lnk]

"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Quicken Scheduled Updates.lnk"

"backup"="C:\\WINDOWS\\pss\\Quicken Scheduled Updates.lnkCommon Startup"

"location"="Common Startup"

"command"="C:\\PROGRA~1\\Quicken\\bagent.exe "

"item"="Quicken Scheduled Updates"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Quicken Startup.lnk]

"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Quicken Startup.lnk"

"backup"="C:\\WINDOWS\\pss\\Quicken Startup.lnkCommon Startup"

"location"="Common Startup"

"command"="C:\\PROGRA~1\\Quicken\\QWDLLS.EXE "

"item"="Quicken Startup"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Ulead Photo Express Calendar Checker For My Custom Edition.lnk]

"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Ulead Photo Express Calendar Checker For My Custom Edition.lnk"

"backup"="C:\\WINDOWS\\pss\\Ulead Photo Express Calendar Checker For My Custom Edition.lnkCommon Startup"

"location"="Common Startup"

"command"="C:\\PROGRA~1\\ULEADS~1\\ULEADP~1.0MY\\CalCheck.exe "

"item"="Ulead Photo Express Calendar Checker For My Custom Edition"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Watch.lnk]

"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Watch.lnk"

"backup"="C:\\WINDOWS\\pss\\Watch.lnkCommon Startup"

"location"="Common Startup"

"command"="C:\\PROGRA~1\\PVRSER~1\\Watch.exe "

"item"="Watch"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Amanda^Start Menu^Programs^Startup^AOL OpenRide.lnk]

"path"="C:\\Documents and Settings\\Amanda\\Start Menu\\Programs\\Startup\\AOL OpenRide.lnk"

"backup"="C:\\WINDOWS\\pss\\AOL OpenRide.lnkStartup"

"location"="Startup"

"command"="C:\\PROGRA~1\\COMMON~1\\AOL\\Launch\\AOLLAU~1.EXE /d suiteid=frontier_1.23.16.1 /d locale=en-US ee://aol/frontierApp /preload"

"item"="AOL OpenRide"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Amanda^Start Menu^Programs^Startup^Watch.lnk]

"path"="C:\\Documents and Settings\\Amanda\\Start Menu\\Programs\\Startup\\Watch.lnk"

"backup"="C:\\WINDOWS\\pss\\Watch.lnkStartup"

"location"="Startup"

"command"="C:\\PROGRA~1\\PVRSER~1\\Watch.exe "

"item"="Watch"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]