Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

View previous topic View next topic Go down

Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Chrismixx on 6th November 2009, 7:38 am

I have recieved a few Updates automatically from windows updater (native to xp) and I installed but evry time I restart it acts like it never installed and needs to reinstall it. if I dont then it seems like my comp. runs slower cause the update is in queue or something.
Second I have been getting Active shield (I believe its called that) software updates. A blue and grey square box pop up from the bottmom right saying updates are available and asks me to install themn. but I havent since I think the original updates supposedly from windows messed my machine up.
Also when the Active Shield updates come up I always get aa error message Saying something like this: " An Active X control is trying to interact with ..................Do you wanna allow this interaction YesorNo. When I Click NO I then get an error called Script Error I forget what all it says but at the bottom it asks "Do you wanna continue running Script? Yes or No" I click No and it reappears when I click No again it goes away.

Also The Microsoft updates I mentioned that never finish installing and will always prompt me to install upon start up are for "Microsoft SQL database or Server (I forget) 2005" and it will nbever finish. SO I had to turn off automatic updates on my machine to get it to stop. I dont wanna keep updates turned off - any idea how I can delete this update even if it is not the cause odf the problem?

I am also wondering if the updates I mentioned above may not be the source of the problem. Basically my computer runs alot slower than normal and freezes up a lot. It doesnt look like there are any new processes running nor do I get any type of error messages to indicate what might be the cause. It is just alot slower 90% of the time. I have ran virus scans with Avira and deleted the few infections it did find but it didnt seem to help my innitial problem of it running slow and freezing up randomly.

Thank you very much for your help,
-Chris
Here is my HiJack This Log File:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:30:40 PM, on 11/5/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Digidesign\Drivers\MMERefresh.exe
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\dmadmin.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Sprint\Sprint SmartView\RDVCHG.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Digidesign\Pro Tools\ProToolsLE.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Digidesign\Pro Tools\digiSPTIService.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
C:\Documents and Settings\Chrismixx_Master\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Chrismixx_Master\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Chrismixx_Master\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Chrismixx_Master\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [You must be registered and logged in to see this link.]
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 64.29.148.37:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {33335478-0680-4242-9754-56A4E728E8D6} - (no file)
O2 - BHO: TBSB07451 - {1F42B3D4-1C76-45D7-AC0A-24D3F27AA8DE} - C:\Program Files\RSToolbar\RapidShare Search Bar\tbu05686\rapidsharebot.dll
O2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {ad55c869-668e-457c-b270-0cfb2f61116f} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: RapidShare Search Bar - {A3EAF105-FBC1-470B-BC69-B27CA48A0640} - C:\Program Files\RSToolbar\RapidShare Search Bar\tbu05686\rapidsharebot.dll
O4 - HKLM\..\Run: [HotKeyz.exe Startup] C:\Program Files\Skynergy\HotKeyz\HotKeyz.exe Startup
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Sprint SmartView] "C:\Program Files\Sprint\Sprint SmartView\SprintSV.exe" -a
O4 - HKLM\..\Run: [RDVCHG] "C:\Program Files\Sprint\Sprint SmartView\RDVCHG.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [DigidesignMMERefresh] C:\Program Files\Digidesign\Drivers\MMERefresh.exe
O4 - HKCU\..\Run: [AutoHotkey] C:\Program Files\AutoHotkey\AutoHotkey.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Chrismixx_Master\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Zeus Drag and Drop - C:\Program Files\Zeus\DragAndDrop.html
O8 - Extra context menu item: E&xport to Microsoft Excel - [You must be registered and logged in to see this link.]
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: iOpus iMacros - {0483894E-2422-45E0-8384-021AFF1AF3CD} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: iMacros Web Automation - {0483894E-2422-45E0-8384-021AFF1AF3CD} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: (no name) - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll
O9 - Extra 'Tools' menuitem: &KeyScrambler... - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: bmnet.dll
O10 - Unknown file in Winsock LSP: bmnet.dll
O10 - Unknown file in Winsock LSP: bmnet.dll
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - [You must be registered and logged in to see this link.]
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [You must be registered and logged in to see this link.]
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - [You must be registered and logged in to see this link.]
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Digidesign MME Refresh Service (DigiRefresh) - Digidesign, A Division of Avid Technology, Inc. - C:\Program Files\Digidesign\Drivers\MMERefresh.exe
O23 - Service: digiSPTIService - Digidesign, A Division of Avid Technology, Inc. - C:\Program Files\Digidesign\Pro Tools\digiSPTIService.exe
O23 - Service: Google Desktop Manager 5.8.809.23506 (GoogleDesktopManager-092308-165331) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate1c9c39f62dc04d4) (gupdate1c9c39f62dc04d4) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Sprint RcAppSvc (SprintRcAppSvc) - SmithMicro Inc. - C:\Program Files\Sprint\Sprint SmartView\RcAppSvc.exe

--
End of file - 11528 bytes


Last edited by Chrismixx on 6th November 2009, 7:47 am; edited 2 times in total

Chrismixx
Novice
Novice

Posts Posts : 19
Joined Joined : 2009-04-03
OS OS : Windows XP
Points Points : 28109
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Chrismixx on 6th November 2009, 7:44 am

?

Chrismixx
Novice
Novice

Posts Posts : 19
Joined Joined : 2009-04-03
OS OS : Windows XP
Points Points : 28109
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Dr Jay on 6th November 2009, 4:00 pm

Please download ComboFix from [You must be registered and logged in to see this link.]

Rename ComboFix.exe to commy.exe before you save it to your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found [You must be registered and logged in to see this link.]
  • Click Start>Run then copy paste the following command into the Run box & click OK "%userprofile%\desktop\commy.exe" /stepdel
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console


Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


  • Click on Yes, to continue scanning for malware.
  • When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14310
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302971
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Chrismixx on 7th November 2009, 12:21 pm

Here is my combo fix log file, it said it ersed a bunch of infexted files. Is this going to fix the whole problem? I s there a way I can test it somehow to verify whteerher it is fȋxed or not? Thank you for your help I am very impressed with Geek Police and eally appreciate the help.

-Chris
------------------------------------------------------------------------------------------

ComboFix 09-11-06.03 - Chrismixx_Master 11/07/2009 3:15.1.4 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1013.611 [GMT -8:00]
Running from: c:\documents and settings\Chrismixx_Master\My Documents\Downloads\commy.exe.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\a3kebook.ini
c:\windows\akebook.ini
c:\windows\ANS2000.INI
c:\windows\system32\FTPx.dll
c:\windows\system32\kungsfdxnmmrrt.dat
c:\windows\system32\msvcsv60.dll
c:\windows\system32\pthreadVC.dll
c:\windows\system32\slibqqe.dll
c:\windows\system32\sslibfg.dll

Infected copy of c:\windows\system32\drivers\vaxscsi.sys was found and disinfected
Restored copy from - Kitty ate it :p
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_kungsfppoaiqqm


((((((((((((((((((((((((( Files Created from 2009-10-07 to 2009-11-07 )))))))))))))))))))))))))))))))
.

2009-10-31 22:21 . 2008-12-04 06:13 15872 ----a-w- c:\windows\system32\digicoin.dll
2009-10-31 22:21 . 2006-12-09 05:21 90112 ----a-w- c:\windows\system32\WinMMFix.dll
2009-10-31 22:21 . 2008-12-04 07:36 2554655 ----a-w- c:\windows\system32\dgfwdio.dll
2009-10-31 22:21 . 2008-12-04 06:11 176128 ----a-w- c:\windows\system32\Diomidi.DLL
2009-10-31 22:21 . 2008-12-04 10:01 24080 ----a-w- c:\windows\system32\drivers\dgfwboot.sys
2009-10-31 22:21 . 2008-12-04 06:11 196608 ----a-w- c:\windows\system32\Digi32.dll
2009-10-31 22:21 . 2008-12-04 06:10 364544 ----a-w- c:\windows\system32\digiasio.dll
2009-10-26 00:27 . 2009-10-26 00:27 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\Acoustica
2009-10-26 00:27 . 2007-08-07 18:32 57344 ----a-w- c:\windows\system32\Wnaspint.dll
2009-10-26 00:27 . 2009-10-26 00:27 -------- d-----w- c:\program files\Acoustica Shared Effects
2009-10-26 00:18 . 2009-10-26 00:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Acoustica
2009-10-26 00:18 . 2009-10-26 00:29 -------- d-----w- c:\program files\Acoustica Mixcraft 4
2009-10-21 09:16 . 2009-10-21 09:16 45056 ----a-r- c:\documents and settings\Chrismixx_Master\Application Data\Microsoft\Installer\{6815FCDD-401D-481E-BA88-31B4754C2B46}\ARPPRODUCTICON.exe
2009-10-21 09:16 . 2009-10-21 09:17 -------- d--h--w- c:\documents and settings\Chrismixx_Master\Application Data\FDBTemp
2009-10-17 12:01 . 2009-10-17 12:01 -------- d-----w- c:\windows\system32\wbem\Repository
2009-10-15 09:54 . 2009-10-17 12:00 -------- d-----w- c:\program files\Free PDF to Word Doc Converter
2009-10-14 02:55 . 2009-10-14 02:56 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\4shared Desktop
2009-10-14 02:55 . 2009-10-17 12:00 -------- d-----w- c:\program files\4shared Desktop

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-07 09:44 . 2009-04-27 01:01 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\Digidesign
2009-11-07 01:04 . 2009-04-22 23:06 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater
2009-11-06 08:29 . 2009-04-03 18:48 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-11-06 08:23 . 2009-05-12 19:37 4045527 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-11-06 08:10 . 2008-06-18 18:37 -------- d-----w- c:\program files\Common Files\Adobe
2009-11-04 23:49 . 2009-05-12 05:50 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\TeraCopy
2009-10-31 23:45 . 2008-10-01 22:02 86056 ----a-w- c:\documents and settings\Chrismixx_Master\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-10-31 23:41 . 2008-03-19 06:21 -------- d-----w- c:\program files\Digidesign
2009-10-31 23:41 . 2008-03-19 06:21 -------- d-----w- c:\program files\Common Files\Digidesign
2009-10-31 23:41 . 2008-02-20 13:20 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-10-31 23:41 . 2008-04-29 21:11 -------- d-----w- c:\program files\Microsoft ActiveSync
2009-10-31 23:40 . 2009-04-05 05:48 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-10-31 23:40 . 2009-07-19 03:49 -------- d-----w- c:\program files\Business-in-a-Box
2009-10-31 23:40 . 2009-05-12 05:49 -------- d-----w- c:\program files\SoundMaven
2009-10-31 20:03 . 2009-07-22 05:59 -------- d-----w- c:\program files\Keyword Avalanche
2009-10-21 09:20 . 2008-03-19 06:35 -------- d-----w- c:\program files\Waves
2009-10-21 09:15 . 2008-10-02 13:34 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\uTorrent
2009-10-21 07:03 . 2008-10-06 02:29 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\Apple Computer
2009-10-21 07:00 . 2008-04-07 07:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2009-10-21 02:48 . 2008-03-19 07:17 -------- d-----w- c:\program files\Antares Audio Technologies
2009-10-20 06:00 . 2009-09-22 05:59 3695616 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\AutoLaunch.exe
2009-10-20 06:00 . 2009-06-21 05:59 2353992 ----a-w- c:\documents and settings\All Users\Application Data\Lavasoft\Ad-Aware\update\Ad-Aware.exe
2009-10-17 17:19 . 2008-12-20 20:14 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-10-17 17:13 . 2008-12-20 20:20 -------- d-----w- c:\program files\Microsoft Works
2009-10-16 07:59 . 2008-10-31 03:54 256 ----a-w- c:\windows\system32\pool.bin
2009-10-13 04:03 . 2008-10-06 02:29 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\Waves Preferences
2009-10-09 03:44 . 2008-02-20 13:24 -------- d-----w- c:\program files\Google
2009-10-08 11:22 . 2009-10-08 11:22 -------- d-----w- c:\program files\Synchro Arts Ltd
2009-10-07 12:47 . 2009-10-07 12:46 -------- d-----w- c:\program files\iTunes
2009-10-07 12:47 . 2009-10-07 12:46 -------- d-----w- c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2009-10-07 12:46 . 2009-10-07 12:46 -------- d-----w- c:\program files\iPod
2009-10-07 12:46 . 2008-04-07 07:12 -------- d-----w- c:\program files\Common Files\Apple
2009-10-07 12:40 . 2009-10-07 12:40 -------- d-----w- c:\program files\Bonjour
2009-10-07 12:39 . 2009-02-03 20:13 -------- d-----w- c:\program files\QuickTime
2009-10-07 12:32 . 2009-10-07 12:32 -------- d-----w- c:\program files\Apple Software Update
2009-10-07 05:17 . 2009-10-07 04:32 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\DeepBurner
2009-10-07 04:31 . 2009-10-07 04:31 -------- d-----w- c:\program files\Astonsoft
2009-10-06 11:03 . 2009-10-06 11:03 -------- d-----w- c:\program files\FLV Video Converter
2009-10-06 10:54 . 2008-05-03 12:28 -------- d-----w- c:\program files\Common Files\Real
2009-10-06 10:53 . 2006-07-12 01:35 348160 ----a-w- c:\windows\system32\msvcr71.dll
2009-09-30 07:08 . 2009-07-19 06:41 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\vlc
2009-09-30 05:01 . 2009-08-07 07:15 7 ----a-w- c:\windows\sbacknt.bin
2009-09-30 04:02 . 2009-09-30 04:02 -------- d-----w- c:\program files\Common Files\Pd
2009-09-30 03:50 . 2009-09-30 03:50 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\Sprint
2009-09-30 03:45 . 2008-12-04 03:05 -------- d-----w- c:\program files\Sierra Wireless
2009-09-30 03:45 . 2008-12-04 03:05 -------- d-----w- c:\program files\Common Files\Motorola Shared
2009-09-30 03:45 . 2009-09-30 03:45 -------- d-----w- c:\program files\Sprint
2009-09-30 03:45 . 2009-09-30 03:45 -------- d-----w- c:\program files\Novatel Wireless
2009-09-30 03:29 . 2009-09-30 03:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Sprint
2009-09-30 02:18 . 2009-05-24 10:20 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\FileZilla
2009-09-29 13:03 . 2009-05-26 02:44 -------- d-----w- c:\program files\WinHTTrack
2009-09-29 13:03 . 2009-05-21 08:59 -------- d-----w- c:\program files\Nvu
2009-09-29 11:41 . 2009-09-29 11:36 -------- d-----w- c:\program files\Glary Utilities
2009-09-29 11:41 . 2009-09-29 11:41 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\GlarySoft
2009-09-29 06:25 . 2008-11-09 20:51 -------- d-----w- c:\program files\DNA
2009-09-29 03:01 . 2009-09-29 02:48 -------- d-----w- c:\program files\PCPitstop
2009-09-29 02:48 . 2009-09-29 02:48 -------- d-----w- c:\documents and settings\All Users\Application Data\PCPitstop
2009-09-27 20:29 . 2009-05-20 23:45 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-09-25 11:47 . 2009-09-25 11:47 -------- d-----w- c:\program files\Psicraft
2009-09-25 11:47 . 2009-09-25 11:47 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\Psicraft
2009-09-25 05:10 . 2009-09-25 05:10 -------- d-----w- c:\documents and settings\Chrismixx_Master\Application Data\Blue Cat Audio
2009-09-25 04:49 . 2009-09-25 04:49 -------- d-----w- c:\program files\Common Files\Tmp
2009-09-25 04:14 . 2009-09-25 04:13 -------- d-----w- c:\program files\pd
2009-09-25 04:12 . 2009-09-25 04:12 -------- d-----w- c:\program files\SoundHack
2009-09-25 04:11 . 2009-09-25 04:11 40070 ----a-r- c:\documents and settings\Chrismixx_Master\Application Data\Microsoft\Installer\{0F0B0627-3CC7-4C3D-B246-D84FD3B30488}\_bb32ea6.exe
2009-09-25 04:09 . 2009-09-25 04:09 40070 ----a-r- c:\documents and settings\Chrismixx_Master\Application Data\Microsoft\Installer\{E699454B-70AE-4483-A6ED-8C9AC9E23446}\_7e87390c.exe
2009-09-24 04:45 . 2009-09-24 04:45 4096 ----a-w- c:\windows\d3dx.dat
2009-09-24 04:39 . 2009-09-24 04:39 -------- d-----w- c:\program files\CPUID
2009-09-22 00:09 . 2009-09-22 00:09 79144 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.0.1.8\SetupAdmin.exe
2009-09-15 06:54 . 2009-04-05 05:48 -------- d-----w- c:\program files\Spybot - Search & Destroy
2009-09-12 04:25 . 2008-03-21 19:18 16 ----a-w- c:\windows\msocreg32.dat
2009-09-11 14:18 . 2004-08-10 18:51 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-10 22:54 . 2009-04-03 18:48 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 22:53 . 2009-04-03 18:48 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-09 17:16 . 2009-03-20 17:26 -------- d-----w- c:\program files\Microsoft Silverlight
2009-09-04 21:03 . 2004-08-10 18:51 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-29 08:08 . 2004-08-10 18:51 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-29 02:42 . 2009-10-07 12:31 40448 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2009-08-29 02:42 . 2009-10-07 12:31 2065696 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-08-26 08:00 . 2004-08-10 18:51 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-18 06:33 . 2009-08-18 06:33 1193832 ----a-w- c:\windows\system32\FM20.DLL
2009-04-18 02:48 . 2009-04-18 02:48 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AutoHotkey"="c:\program files\AutoHotkey\AutoHotkey.exe" [2008-03-09 240640]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2007-08-30 205480]
"Google Update"="c:\documents and settings\Chrismixx_Master\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [2008-10-26 133104]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 1289000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Sprint SmartView"="c:\program files\Sprint\Sprint SmartView\SprintSV.exe" [2009-05-27 75008]
"RDVCHG"="c:\program files\Sprint\Sprint SmartView\RDVCHG.exe" [2009-05-27 316672]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-10-06 198160]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-09-05 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"DigidesignMMERefresh"="c:\program files\Digidesign\Drivers\MMERefresh.exe" [2008-12-04 77824]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"combofix"="c:\commy.exe\CF3582.exe" [2009-11-07 389120]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-04 435096]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-25 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"midi2"=EMGM4U2K.dll
"wave8"=Digi32.dll
"MIDI7"=diomidi.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ lsdelete

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Bluetooth.lnk]
backup=c:\windows\pss\Bluetooth.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Service Manager.lnk]
backup=c:\windows\pss\Service Manager.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Windows Search.lnk]
backup=c:\windows\pss\Windows Search.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Chrismixx_Master^Start Menu^Programs^Startup^MagicDisc.lnk]
backup=c:\windows\pss\MagicDisc.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Chrismixx_Master^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Chrismixx_Master^Start Menu^Programs^Startup^VOIP Phone Buddy.lnk]
backup=c:\windows\pss\VOIP Phone Buddy.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG8_TRAY
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SIDEBAR
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WSearch"=2 (0x2)
"TuneUp.Defrag"=3 (0x3)
"SQLBrowser"=2 (0x2)
"MSSQL$ACT7"=2 (0x2)
"CiSvc"=3 (0x3)
"Bonjour Service"=2 (0x2)
"Apple Mobile Device"=2 (0x2)
"Adobe LM Service"=2 (0x2)
"ACT! Scheduler"=2 (0x2)
"Microsoft Office Groove Audit Service"=3 (0x3)
"odserv"=3 (0x3)
"McAfee SiteAdvisor Service"=2 (0x2)
"MSSQL$ADMINDB"=2 (0x2)
"ERSvc"=2 (0x2)
"DPANService"=2 (0x2)
"DigiRefresh"=2 (0x2)
"DellAMBrokerService"=3 (0x3)
"RichVideo"=2 (0x2)
"btwdins"=2 (0x2)
"RoxLiveShare9"=2 (0x2)
"LexBceS"=2 (0x2)
"gupdate1c9c39f62dc04d4"=2 (0x2)
"gusvc"=2 (0x2)
"FastUserSwitchingCompatibility"=3 (0x3)
"avg8wd"=2 (0x2)
"WMPNetworkSvc"=3 (0x3)
"stllssvr"=3 (0x3)
"StarWindService"=3 (0x3)
"VSS"=3 (0x3)
"helpsvc"=2 (0x2)
"NVSvc"=2 (0x2)
"WinDefend"=2 (0x2)
"ose"=3 (0x3)
"MDM"=2 (0x2)
"iPod Service"=3 (0x3)
"Google MediaServer"=2 (0x2)
"digiSPTIService"=3 (0x3)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\documents and settings\Chrismixx_Master\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
"DellAutomatedPCTuneUp"="c:\program files\DellAutomatedPCTuneUp\PTAgnt.exe" /startup
"Aim6"="c:\program files\AIM6\aim6.exe" /d locale=en-US [You must be registered and logged in to see this link.]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"DigidesignMMERefresh"=c:\program files\Digidesign\Drivers\MMERefresh.exe
"RTHDCPL"=RTHDCPL.EXE
"Alcmtr"=ALCMTR.EXE
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe"
"UDC Integration"=
"NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
"Super Screen Capture"=c:\program files\Zeallsoft\Super Screen Capture\SSCapture.exe
"Sprint SmartView"="c:\program files\Sprint\Sprint SmartView\SprintSV.exe" -a
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe"
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe"
"dellsupportcenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe"
"Act! Preloader"="c:\program files\ACT\Act for Windows\ActSage.exe" -preload

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
"DNS7reminder"="c:\program files\Nuance\NaturallySpeaking9\Ereg\Ereg.exe" -r "c:\documents and settings\All Users\Application Data\Nuance\NaturallySpeaking9\Ereg.ini
"SSBkgdUpdate"="c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"H2O"=c:\program files\SyncroSoft\Pos\H2O\cledx.exe
"Livestream Procaster"="c:\program files\Livestream Procaster\Procaster.exe" -autorun
"Sprint SmartView"="c:\program files\Sprint\Sprint SmartView\SprintSV.exe" -a
"RDVCHG"="c:\program files\Sprint\Sprint SmartView\RDVCHG.exe"
"DigidesignMMERefresh"=c:\program files\Digidesign\Drivers\MMERefresh.exe
"MacDrive application for Digidesign"="c:\program files\Mediafour\MacDrive 7\MacDriveD.exe"
"PC Pitstop Optimize Reminder"=c:\program files\PCPitstop\Optimize3\Reminder-Optimize3.exe
"PC Pitstop Optimize Scheduler"=c:\program files\PCPitstop\Optimize\PCPOptimize.exe -boot
"Ad-Watch"=c:\program files\Lavasoft\Ad-Aware\AAWTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"SerialNumber"="A109A-K13-3ZXD-BAP5-TE"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"c:\\Program Files\\Soulseek\\slsk.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\AIM6\\aim6.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Dell Network Assistant\\ezi_hnm2.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\WinHTTrack\\WinHTTrack.exe"=
"c:\\Program Files\\DNA\\btdna.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\SoulseekNS\\slsk.exe"=
"c:\\WINDOWS\\system32\\logonui.exe"=
"c:\\WINDOWS\\system32\\winlogon.exe"=
"c:\\Program Files\\Dell Support Center\\bin\\sprtsvc.exe"=
"c:\\Program Files\\Java\\jre1.6.0_07\\bin\\javaws.exe"=
"c:\\Program Files\\Java\\jre1.6.0_07\\bin\\javaw.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\CodeMeter\\Runtime\\bin\\CodeMeter.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"10421:UDP"= 10421:UDP:SingleClick Discovery Protocol
"10426:UDP"= 10426:UDP:SingleClick ICC
"1434:UDP"= 1434:UDP:*:Disabled:DPANSQL
"85:TCP"= 85:TCP:BroadWave Web Server
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [4/4/2009 9:59 PM 64160]
R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [5/8/2009 6:38 AM 130936]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [5/12/2009 11:15 AM 108289]
R2 datunidr;DellAutomatedPCTuneUp UniDriver;c:\windows\system32\drivers\datunidr.sys [8/23/2007 4:29 PM 5376]
R2 iPodDrv;iPodDrv;c:\windows\system32\drivers\iPodDrv.sys [7/6/2009 2:37 PM 6656]
R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\drivers\cledx.sys [8/15/2009 4:51 PM 33792]
R3 DIGIFW;Service for Mbox 2 Pro Driver (WDM);c:\windows\system32\drivers\digifw.sys [5/14/2009 11:09 PM 167952]
R3 KeyScrambler;KeyScrambler;c:\windows\system32\drivers\keyscrambler.sys [4/2/2009 11:46 PM 114024]
S2 EmgicUsb;emagic USB kernel driver;c:\windows\system32\drivers\EMGICUSB.sys [4/29/2008 7:47 PM 19076]
S2 EMGM4U2K;emagic MT4 configuration node;c:\windows\system32\drivers\EMGM4U2K.sys [4/29/2008 7:48 PM 12564]
S2 gupdate1c9c39f62dc04d4;Google Update Service (gupdate1c9c39f62dc04d4);c:\program files\Google\Update\GoogleUpdate.exe [4/22/2009 3:09 PM 133104]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [3/9/2009 11:06 AM 1028432]
S3 dalwdmservice;dal service;c:\windows\system32\drivers\Dalwdm.sys [4/26/2009 4:42 PM 97808]
S3 DGFWBOOT;Bootloader Service for Mbox 2 Pro Driver (WDM);c:\windows\system32\drivers\dgfwboot.sys [10/31/2009 2:21 PM 24080]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [4/17/2009 6:47 PM 30192]
S3 MBX2DFU;MBX2DFU;c:\windows\system32\DRIVERS\MBX2DFU.sys --> c:\windows\system32\DRIVERS\MBX2DFU.sys [?]
S3 MBX2MIDK;Digidesign Mbox 2 Midi Driver;c:\windows\system32\drivers\mbx2midk.sys --> c:\windows\system32\drivers\mbx2midk.sys [?]
S3 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [6/12/2009 12:49 AM 348752]
S4 Google MediaServer;Google MediaServer;c:\program files\Google\Google Media Server\GoogleMediaServer.exe [5/18/2009 3:39 PM 622080]
S4 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [4/3/2009 9:41 PM 210216]
S4 MSSQL$ACT7;SQL Server (ACT7);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [11/24/2008 9:31 PM 29263712]
S4 MSSQL$ADMINDB;MSSQL$ADMINDB;c:\program files\Microsoft SQL Server\MSSQL$ADMINDB\Binn\sqlservr.exe -sADMINDB --> c:\program files\Microsoft SQL Server\MSSQL$ADMINDB\Binn\sqlservr.exe -sADMINDB [?]
S4 PCPitstop Scheduling;PCPitstop Scheduling;c:\program files\PCPitstop\PCPitstopScheduleService.exe [9/28/2009 6:48 PM 90352]
S4 SQLAgent$ADMINDB;SQLAgent$ADMINDB;c:\program files\Microsoft SQL Server\MSSQL$ADMINDB\Binn\sqlagent.EXE -i ADMINDB --> c:\program files\Microsoft SQL Server\MSSQL$ADMINDB\Binn\sqlagent.EXE -i ADMINDB [?]
S4 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 6:19 PM 13592]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - MBR
*Deregistered* - mbr

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder

2009-11-03 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-03-09 05:59]

2009-11-05 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 19:34]

2009-11-07 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2009-09-29 02:27]

2009-11-07 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-22 23:06]

2009-11-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-22 23:09]

2009-11-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-22 23:09]

2009-11-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4064850953-1254726527-2671110822-1014Core.job
- c:\documents and settings\Chrismixx_Master\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-10-26 09:45]

2009-11-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4064850953-1254726527-2671110822-1014UA.job
- c:\documents and settings\Chrismixx_Master\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-10-26 09:45]

2009-10-22 c:\windows\Tasks\jucheck.job
- c:\program files\Java\jre6\bin\jucheck.exe [2009-05-05 12:07]

2009-11-07 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-04 02:20]

2009-11-07 c:\windows\Tasks\User_Feed_Synchronization-{EC8B80E3-72EA-4C07-87B8-A260774EABF9}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 11:31]
.
.
------- Supplementary Scan -------
.
uStart Page = [You must be registered and logged in to see this link.]
uSearch Bar =
uInternet Settings,ProxyServer = 64.29.148.37:80
uInternet Settings,ProxyOverride = *.local
IE: &Zeus Drag and Drop - c:\program files\Zeus\DragAndDrop.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send To Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
LSP: bmnet.dll
Trusted Zone: motive.com\patttbc.att
Name-Space Handler: ftp\* - {419A0123-4312-1122-A0C0-434FDA6DA542} - c:\program files\CoreFTP\pftpns.dll
DPF: Microsoft XML Parser for Java - [You must be registered and logged in to see this link.]
FF - ProfilePath - c:\documents and settings\Chrismixx_Master\Application Data\Mozilla\Firefox\Profiles\11ldmnw2.default\
FF - prefs.js: browser.startup.homepage - [You must be registered and logged in to see this link.]
FF - component: c:\documents and settings\Chrismixx_Master\Application Data\Mozilla\Firefox\Profiles\11ldmnw2.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
FF - component: c:\documents and settings\Chrismixx_Master\Application Data\Mozilla\Firefox\Profiles\11ldmnw2.default\extensions\keyscrambler@qfx.software.corporation\components\KeyScramblerIE.dll
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npyaxmpb.dll
FF - plugin: c:\program files\Opera\program\plugins\npdivx32.dll
FF - hȋdden: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.
- - - - ORPHANS REMOVED - - - -

URLSearchHooks-{33335478-0680-4242-9754-56A4E728E8D6} - (no file)
BHO-{ad55c869-668e-457c-b270-0cfb2f61116f} - (no file)
AddRemove-Roger Nichols Digital DETAILER VST RTAS_is1 - c:\program files\Roger Nichols Digital
AddRemove-Roger Nichols Digital DYNAM-IZER VST RTAS_is1 - c:\program files\Roger Nichols Digital
AddRemove-Roger Nichols Digital FINIS VST RTAS_is1 - c:\program files\Roger Nichols Digital
AddRemove-Roger Nichols Digital FREQUAL-IZER VST RTAS_is1 - c:\program files\Roger Nichols Digital
AddRemove-Roger.Nichols.Digital.SPL-IZER.VST.RTAS_is1 - c:\program files\Roger Nichols Digital



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [You must be registered and logged in to see this link.]
Rootkit scan 2009-11-07 03:42
Windows 5.1.2600 Service Pack 3 NTFS

scanning hȋdden processes ...

scanning hȋdden autostart entries ...

scanning hȋdden files ...


c:\docume~1\CHRISM~1\LOCALS~1\Temp\BIT7.tmp 0 bytes

scan completed successfully
hȋdden files: 1

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, [You must be registered and logged in to see this link.]

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe >>UNKNOWN [0x83BD25D0]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> 0x83bd25d0
\Driver\iaStor -> 0x83bd2808
Warning: possible MBR rootkit infection !
user & kernel MBR OK
Use "Recovery Console" command "fixmbr" to clear infection !

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD\000.fcl"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-4064850953-1254726527-2671110822-1014\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-4064850953-1254726527-2671110822-1014\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{246F67ED-CAB5-234B-8C6D-382F711EF655}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"naoiopooodhbmfcfoildbmddnlig"=hex:6a,61,6e,66,66,64,66,68,69,62,6c,64,69,70,
6d,67,65,6f,68,67,00,f9
"maaiimhpachicnlfdkeknafodh"=hex:6a,61,6e,66,66,64,66,68,69,62,6c,64,69,70,6d,
67,65,6f,68,67,00,f9

[HKEY_USERS\S-1-5-21-4064850953-1254726527-2671110822-1014\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{48A738AB-4907-9C62-F4CB-7CE385AC60A4}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"nadmiildkefajgfijjabjjmoipkn"=hex:6a,61,6d,68,69,67,64,70,6f,6a,61,6c,6c,6a,
70,69,6d,62,6c,6a,00,00
"mabbcgcgeddhaannpnldnnbkpj"=hex:6a,61,6d,68,69,67,64,70,6f,6a,61,6c,6c,6a,70,
69,6d,62,6c,6a,00,85

[HKEY_USERS\S-1-5-21-4064850953-1254726527-2671110822-1014\Software\YourCompanyName\YourProductName\Version*]
"VersionData"=hex:92,63,e3,90,a1,37,5d,3a,8a,06,1e,67,57,6e,92,6d,e7,da,73,6a,
e5,99,22,96,45,2b,4d,32,27,96,5f,9e,e2,49,19,8d,78,d5,70,c4,41,7a,a5,cb,30,\
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'lsass.exe'(712)
c:\windows\system32\bmnet.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
c:\windows\system32\dllhost.exe
c:\program files\Dell Network Assistant\hnm_svc.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\locator.exe
c:\windows\system32\wscntfy.exe
c:\progra~1\MICROS~3\rapimgr.exe
c:\program files\iPod\bin\iPodService.exe
.
**************************************************************************
.
Completion time: 2009-11-07 4:03 - machine was rebooted
ComboFix-quarantined-files.txt 2009-11-07 12:02

Pre-Run: 19,418,431,488 bytes free
Post-Run: 19,387,990,016 bytes free

WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn

- - End Of File - - F4A1ACF8C1028B9A06734880A206F29B

Chrismixx
Novice
Novice

Posts Posts : 19
Joined Joined : 2009-04-03
OS OS : Windows XP
Points Points : 28109
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Dr Jay on 7th November 2009, 8:30 pm

Sorry...but not close. There is much to clean.

Please download Malwarebytes Anti-Malware from [You must be registered and logged in to see this link.].

Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Full Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • Please save the log to a location you will remember.
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the entire report in your next reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.

==

Please download CKScanner by askey127 from [You must be registered and logged in to see this link.]

Save it to your desktop.

  • Doubleclick CKScanner.exe and click Search For Files.
  • After a very short time, when the cursor hourglass disappears, click Save List To File.
  • A message box will verify that the file is saved.
  • Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.


==

Please post the Malwarebytes and CKScanner logs in your next reply.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14310
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302971
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Chrismixx on 10th November 2009, 2:43 am

Ok, I can see now how it is not just a one quick fix, I really appreciate your help and the rest of the team for making Geek Police possible, I would have no way to fix this except taking it to a reapair shop, thank you very very much. One question I hacve is about audio plugins (RTAS) for ProTools (an audio production program) I noticed that a lot of what the ck scanner turned up is warnigs that trace back to the majority of these plugin files. Whenever I download something ne I always scan it with Avira Anti-Vir, Malware bytes and sometimes trojan remover. If they come back clean I open them sometimes if they dont I will fix the infected and I guess that moves them to quarantine but still allows the application to work. Is this true? and if so Is this the proper steps I should take to safeguard my vomp form future attacks? Are there any other programs I should scan downloadded items with besides the three mentioned above? And to your knowledge is Avira Anti-Vir (the free edition) a solid antivirus program to be using as my primary protection? I used to use AVG free but tried this after learning about it and it seemed to catch stuff alot more often than AVG would. PLease reccommend any other programs I should be using on a regular basis to prevent as many futuer attacks as possible.

Thanks Again,
-Chris
------------------------------------------------------------------------------------------------
MAlwarebytes Log file:
Malwarebytes' Anti-Malware 1.41
Database version: 2775
Windows 5.1.2600 Service Pack 3

11/9/2009 4:29:01 PM
mbam-log-2009-11-09 (16-29-01).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|)
Objects scanned: 473479
Time elapsed: 6 hour(s), 18 minute(s), 36 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 13

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\iZotope\Spectron\Uninstall\UNWISE.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
C:\Program Files\Waves\DiamondUninstall\UNWISE.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
C:\Program Files\Waves\Multimaximizer\UNWISE.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
C:\Program Files\Arturia\minimoog V\UNWISE.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
C:\Program Files\Recycle\UNWISE.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
C:\Program Files\Steinberg\Cubase SX 3\UNWISE.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP594\A0099400.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP605\A0103419.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP605\A0103732.EXE (Malware.Packer.Morphine) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Documents\Audio Plugs&Progs\Audio_Programs_PlugIns\Nero+ keygen\Nero 66xx nȯne Keygen.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Chrismixx_Master\My Documents\ChrisMixx_LapTop_HD\Asst_PC&A_Few_Mac_Prog\Sony Vegas + DVD + keygen\DVD Architect 4.0.125\Sony DVD Architect v4.0 Keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Chrismixx_Master\My Documents\ChrisMixx_LapTop_HD\Asst_PC&A_Few_Mac_Prog\Sony Vegas + DVD + keygen\Vegas 7.0a\Sony Vegas v7.0a Keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Chrismixx_Master\My Documents\ChrisMixx_LapTop_HD\Asst_PC&A_Few_Mac_Prog\Sony Vegas 6.0d + Sony DVD Architect 3.0 + Universal Sony Keygen\keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.


------------------------------------------------------------------------------------------------

CK SCanner Log File:

CKScanner - Additional Security Risks - These are not necessarily bad
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.v3.12.vst.rtas.htdm.mas.au.mac.osx.ub.incl.keygen-dynamics\d-io312a.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.v3.12.vst.rtas.htdm.mas.au.mac.osx.ub.incl.keygen-dynamics\d-io312b.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.v3.12.vst.rtas.htdm.mas.au.mac.osx.ub.incl.keygen-dynamics\d-io312c.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.v3.12.vst.rtas.htdm.mas.au.mac.osx.ub.incl.keygen-dynamics\d-io312d.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.v3.12.vst.rtas.htdm.mas.au.mac.osx.ub.incl.keygen-dynamics\d-io312e.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.v3.12.vst.rtas.htdm.mas.au.mac.osx.ub.incl.keygen-dynamics\d-io312f.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.v3.12.vst.rtas.htdm.mas.au.mac.osx.ub.incl.keygen-dynamics\d-io312g.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.v3.12.vst.rtas.htdm.mas.au.mac.osx.ub.incl.keygen-dynamics\dynamics.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.v3.12.vst.rtas.htdm.mas.au.mac.osx.ub.incl.keygen-dynamics\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.v3.12.vst.rtas.htdm.mas.au.mac.osx.ub.incl.keygen-dynamics\torrent downloaded from demonoid.com.txt
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.vst.dx.as.rtas.htdm.v3.15.incl.keygen-air\air.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.vst.dx.as.rtas.htdm.v3.15.incl.keygen-air\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\mac apps\izotope.ozone.vst.dx.as.rtas.htdm.v3.15.incl.keygen-air\setup.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\macromedia flash mx (final) with key gen\keygen.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\multiple psp plugins\psp mixpack\crack.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\nero+ keygen\nero-6.6.0.16.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\nero+ keygen\torrent_downloaded_from_demonoid_com.txt
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\all digidesign protools rtas plug-ins may2k3 edition all works-no d-fx and surround scope\ik multimedia amplitube v1.2\crack\readme-crack.txt
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope spectron dx vst rtas v1.04 incl keygen-h2o\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope spectron dx vst rtas v1.04 incl keygen-h2o\h2o.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope spectron dx vst rtas v1.04 incl keygen-h2o\infra-red.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope spectron dx vst rtas v1.04 incl keygen-h2o\setup.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope.ozone.dx.vst.rtas.v3.04.incl.keygen-h2o.shareconnector\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope.ozone.dx.vst.rtas.v3.04.incl.keygen-h2o.shareconnector\h2o.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope.ozone.dx.vst.rtas.v3.04.incl.keygen-h2o.shareconnector\infra-red.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope.ozone.dx.vst.rtas.v3.04.incl.keygen-h2o.shareconnector\setup.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope.trash.dx.vst.rtas.v1.04.incl.keygen-h2o\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope.trash.dx.vst.rtas.v1.04.incl.keygen-h2o\h2o.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope.trash.dx.vst.rtas.v1.04.incl.keygen-h2o\heaven.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\protools plugins\izotope.trash.dx.vst.rtas.v1.04.incl.keygen-h2o\setup.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\pspaudioware.psp.neon.vst.dx.rtas.v1.1.incl.keygen-beat\b-neo11a.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\pspaudioware.psp.neon.vst.dx.rtas.v1.1.incl.keygen-beat\b-neo11b.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\pspaudioware.psp.neon.vst.dx.rtas.v1.1.incl.keygen-beat\b-neon11.part1.rar
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\pspaudioware.psp.neon.vst.dx.rtas.v1.1.incl.keygen-beat\b-neon11.part2.rar
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\pspaudioware.psp.neon.vst.dx.rtas.v1.1.incl.keygen-beat\beat.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\pspaudioware.psp.neon.vst.dx.rtas.v1.1.incl.keygen-beat\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\pspaudioware.psp.neon.vst.dx.rtas.v1.1.incl.keygen-beat\keygen.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\pspaudioware.psp.neon.vst.dx.rtas.v1.1.incl.keygen-beat\pspneon_1.1.0.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\reason-recycle\keygen.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\reason-recycle\recycle 2.1+keygen h2o-working.rar
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\reason-recycle\reason\reason-recycle\keygen.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\reason-recycle\reason\reason-recycle\recycle 2.1+keygen h2o-working.rar
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\true.audio.truerta.level.4.v3.3.incl.keygen-beat\beat.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\true.audio.truerta.level.4.v3.3.incl.keygen-beat\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\true.audio.truerta.level.4.v3.3.incl.keygen-beat\keygen.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\true.audio.truerta.level.4.v3.3.incl.keygen-beat\truerta_se.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\videoconverters_dvd programs\crack.zip
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\wavearts.power.suite.vst.dx.rtas.v5.08.incl.keygen.by.daz\keygen.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\wavearts.power.suite.vst.dx.rtas.v5.08.incl.keygen.by.daz\keygen.rar
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\wavearts.power.suite.vst.dx.rtas.v5.08.incl.keygen.by.daz\powersuite5.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\wavearts.power.suite.vst.dx.rtas.v5.08.incl.keygen.by.daz\powersuite5.rar
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\keygen.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\powersuite5.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.finalplug.dx.vst.rtas.v5.06-talio\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.finalplug.dx.vst.rtas.v5.06-talio\setup.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.finalplug.dx.vst.rtas.v5.06-talio\talio.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.masterverb.dx.vst.rtas.v5.07-talio\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.masterverb.dx.vst.rtas.v5.07-talio\setup.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.masterverb.dx.vst.rtas.v5.07-talio\talio.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.multidynamics.dx.vst.rtas.v5.06-talio\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.multidynamics.dx.vst.rtas.v5.06-talio\setup.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.multidynamics.dx.vst.rtas.v5.06-talio\talio.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.trackplug.dx.vst.rtas.v5.06.fȋxed-talio\file_id.diz
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.trackplug.dx.vst.rtas.v5.06.fȋxed-talio\nf-2004.jpg
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.trackplug.dx.vst.rtas.v5.06.fȋxed-talio\nf-2004.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.trackplug.dx.vst.rtas.v5.06.fȋxed-talio\setup.exe
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waveartspowersuite\!_wavearts power suite v5.08 incl. keygen\atskiti pluginai\wave.arts.trackplug.dx.vst.rtas.v5.06.fȋxed-talio\talio.nfo
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waves ssl ch. strp_4000\crack\readme.txt
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waves ssl ch. strp_4000\crack\ssllib 1.0
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waves ssl ch. strp_4000\crack\ssllib 1.0.dll
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waves ssl ch. strp_4000\crack\ssllib 1.1
c:\documents and settings\all users\documents\audio plugs&progs\audio_programs_plugins\waves ssl ch. strp_4000\crack\ssllib 1.1.dll
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\vito.technology.eyephoto.v1.1.xscale.wm2003.wm5.wm6.cracked-sympda.rar
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\vito.technology.funcontact.v2.15.xscale.wm5.wm6.cracked-sympda.rar
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper.mht
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\readme.txt
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\0000icon.013
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\000cabad.015
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\000cabae.016
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\000cabaf.017
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\00german.009
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\0dialogs.010
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\0dialogs.011
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\0english.008
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\0icon_x2.014
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\button~1.000
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\button~1.007
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\dialog~1.012
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\leftso~1.001
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\popupc~1.005
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\popupc~1.006
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\rights~1.002
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\setupdll.999
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\tasksw~1.003
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\tasksw~1.004
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\vitobuttonmapper_pocket.cab
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\wince cab installer.exe
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\_setup.xml
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\macrorecorder\vitomacrorecorder_pocket.cab
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\macrorecorder\wince cab installer.exe
c:\documents and settings\all users\documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\vito_quickcontact\crack\quickcontact2.exe
c:\documents and settings\all users\documents\moblie_phone_apps\spb.software.for.windows.mobile.-.pocket.pc.(may 2008).rak+\productivity\spb mobile shell v2.1\keygen.exe
c:\documents and settings\all users\documents\my music\27gigs of music in here\(pc cracks & codes)dvdxcopy dvd x copy platinum_key.zip
c:\documents and settings\all users\documents\my music\27gigs of music in here\ableton live 4.0.1 full+serial and crack [working 100%].rar
c:\documents and settings\all users\documents\my music\27gigs of music in here\bum fights_bling bling_the crack head.mpg
c:\documents and settings\all users\documents\my music\27gigs of music in here\cakewalk_sonar4_producer_edition_crack.rar
c:\documents and settings\all users\documents\my music\27gigs of music in here\dvd x copy platinum.3.11+ crack.part2.rar
c:\documents and settings\all users\documents\my music\27gigs of music in here\family guy - stewie's addicted to crack.asf
c:\documents and settings\all users\documents\my music\27gigs of music in here\fruity loops studio v4.5.1 + keygen.zip
c:\documents and settings\all users\documents\my music\27gigs of music in here\propellerheads.reason 2.5 crack_no_cds (the real one).rar
c:\documents and settings\all users\documents\my music\b.b. king\the rpm hits 1951-1957\22 - b.b. king - i'm cracking up over you.m4a
c:\documents and settings\all users\documents\my music\bullys wit fullys\dj heat & ya boy-the new bay 5.5\2 - bullys wit fullys - cracker_jacks.mp3
c:\documents and settings\all users\documents\my music\gang starr\hard to earn\10 - gang starr - words from the nutcracker featuring melachi the nutcracker.mp3
c:\documents and settings\all users\documents\my music\jay-z\vol.1 in my lifetime\12 - jay-z - rap game-crack game.mp3
c:\documents and settings\all users\documents\my music\jr writer versus jae millz\kochece- clientele vol 2\2 - jr writer versus jae millz - 2) crack intro.mp3
c:\documents and settings\all users\documents\my music\neil diamond\album\00 - neil diamond - cracklin rose.mp3
c:\documents and settings\all users\documents\my music\sage francis\personal journals (advance)\1 - sage francis - crack pipes.mp3
c:\documents and settings\all users\documents\my music\stone temple pilots\unknown\11 - stone temple pilots - 11 - crackerman.mp3
c:\documents and settings\all users\documents\my music\the game presents ya boy\face of l.a\22 - the game presents ya boy - 100 bars of crack.mp3
c:\documents and settings\all users\documents\my music\the kaze\kamakaze, timez up\4 - the kaze - 04 - crackin jaws.mp3
c:\documents and settings\all users\documents\my music\the notorious b.i.g\life after death (cd 2)\5 - notorious big - ten crack commandments.mp3
c:\documents and settings\all users\documents\my music\the notorious b.i.g\life after death (disc 2)\5 - the notorious b.i.g. - ten crack commandments.mp3
c:\documents and settings\all users\documents\my music\transplants\smartftp 3.0.1023.4 + activation crack.rar
c:\documents and settings\all users\documents\my music\twilight circus dub sound system\in dub vol. 1\7 - twilight circus dub sound system - cracking dub.m4a
c:\documents and settings\all users\documents\my music\villain accelerate\villain accelerate - maid of gold\7 - sixtoo - cracktivity.mp3
c:\documents and settings\all users\documents\samples\samples\mpc samples 1-4\mpc sample sets1-4\comp_mpc_samp\crack snare.wav
c:\documents and settings\all users\documents\samples\samples\mpc samples 1-4\mpc sample sets1-4\comp_mpc_samp\crackinclap.wav
c:\documents and settings\all users\documents\samples\samples\mpc samples 1-4\mpc sample sets1-4\comp_mpc_samp\snarecracker.wav
c:\documents and settings\all users\documents\samples\samples\mpc samples 1-4\mpc sample sets1-4\comp_mpc_samp\stereocrackjawclaps.wav
c:\documents and settings\all users\documents\samples\samples\samples & loops 2\drums & percussion\electro & breakbeat\crackle syncopated.wav
c:\documents and settings\all users\documents\samples\samples\sound effects\wood_crack_large_tree.mp3
c:\documents and settings\all users\start menu\programs\waves\documents\x-crackle help.lnk
c:\documents and settings\chrismixx_master\application data\azureus\torrents\auslogics_boost_speed_v4_3_9_185_incl_keygen__h33t____mixala_kis__.torrent
c:\documents and settings\chrismixx_master\application data\utorrent\applian replay converter v2.80 + dvt crack.1.torrent
c:\documents and settings\chrismixx_master\application data\utorrent\applian replay converter v2.80 + dvt crack.2.torrent
c:\documents and settings\chrismixx_master\application data\utorrent\applian replay converter v2.80 + dvt crack.3.torrent
c:\documents and settings\chrismixx_master\application data\utorrent\applian replay converter v2.80 + dvt crack.torrent
c:\documents and settings\chrismixx_master\application data\utorrent\smartftp 3.0.1023.4 + activation crack.rar.torrent
c:\documents and settings\chrismixx_master\favorites\ftouchsl 2.5 crack download serial keygen torrent free warez key rapidshare full version.url
c:\documents and settings\chrismixx_master\favorites\ftouchsl 2.5 crack download serial keygen torrent free warez key rapidshare full version.url
c:\documents and settings\chrismixx_master\favorites\blackberry\blackberry leather holster with swivel belt clip for curve - shopcrackberry.url
c:\documents and settings\chrismixx_master\my documents\aaa_protools_folder\chrismixx _ clients\blast holiday\recording\chopped & screwed\new school crack (blast, l's, cash flow)_chrismixxrgh1.wav
c:\documents and settings\chrismixx_master\my documents\aaa_protools_folder\chrismixx _ clients\blast holiday\recording\chopped & screwed\new school crack (blast, l's, cash flow)_newverse_chrismixxrgh2.wav
c:\documents and settings\chrismixx_master\my documents\ableton\library\presets\audio effects\vinyl distortion\crack.adv
c:\documents and settings\chrismixx_master\my documents\chrismixx_420 my documents\vito.technology.funcontact.v2.15.xscale.wm5.wm6.cracked-sympda.rar
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\adaware 6 keygen.exe
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\adobe after effects 7 pro\crack!!!!!!!\keygen.exe
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\adobe after effects 7 pro\crack!!!!!!!\keygen.exe
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\adobe after effects 7 pro\program files\adobe\adobe after effects 7.0\support files\presets\image - special effects\cracked tiles.ffx
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\alkohol120%\crack\sn.txt
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\alkohol120%\crack\activator\alcohol_120%_activator.nfo
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\easy.dvd.shrink.v3.0.21-tbe\crack\dvdshrink.exe
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\ipod.access.for.windows.v2.6.winall.incl.keymaker-core\keygen.exe
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas + dvd + keygen\dvd architect 4.0.125\dvd architect release notes.url
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas + dvd + keygen\dvd architect 4.0.125\dvdarchitect40.exe
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas + dvd + keygen\dvd architect 4.0.125\dvdarchitect40_manual.pdf
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas + dvd + keygen\vegas 7.0a\torrent_downloaded_from_demonoid.com.txt
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas + dvd + keygen\vegas 7.0a\vegas release notes.url
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas + dvd + keygen\vegas 7.0a\vegas70a.exe
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas + dvd + keygen\vegas 7.0a\vegas70a_manual.pdf
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas + dvd + keygen\vegas 7.0a\vegas_+_dvd.nfo
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas 6.0d + sony dvd architect 3.0 + universal sony keygen\dvdarchitect30.exe
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas 6.0d + sony dvd architect 3.0 + universal sony keygen\instructions.txt
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas 6.0d + sony dvd architect 3.0 + universal sony keygen\torrent_downloaded_from_demonoid.com.txt
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\sony vegas 6.0d + sony dvd architect 3.0 + universal sony keygen\vegas6.0d.exe
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\speed.video.converter.v3.0.15.winall.incl.keygen-virility\-- password here --.url
c:\documents and settings\chrismixx_master\my documents\chrismixx_laptop_hd\asst_pc&a_few_mac_prog\speed.video.converter.v3.0.15.winall.incl.keygen-virility\speed.video.converter.v3.0.15.winall.incl.keygen-virility.rar
c:\documents and settings\chrismixx_master\my documents\downloads\auslogics_boost_speed_v4_3_9_185_incl_keygen__h33t____mixala_kis__.torrent
c:\documents and settings\chrismixx_master\my documents\downloads\mediamonkey_gold_v3.0.1.116_rc4_incl._keygen_by_icu.3956041.tpb.torrent
c:\documents and settings\chrismixx_master\my documents\downloads\[isohunt] fruity loops studio full xxl crack included.rar.torrent
c:\documents and settings\chrismixx_master\my documents\downloads\[isohunt] macromedia dreamweaver cs3 + plugins and crack.torrent
c:\documents and settings\chrismixx_master\my documents\downloads\[isohunt] microsoft office 2007 with crack [smaragdtorrent.to].torrent
c:\documents and settings\chrismixx_master\my documents\downloads\[torrentsworld.net] - reason 4 + keygen + patch rps.torrent
c:\documents and settings\chrismixx_master\my documents\downloads\vuze\auslogics boost speed v4.3.9.185 incl.keygen [h33t] [^mixala_kis^]\boost-speed-setup.exe
c:\documents and settings\chrismixx_master\my documents\downloads\vuze\auslogics boost speed v4.3.9.185 incl.keygen [h33t] [^mixala_kis^]\boostspeedkeygen.exe
c:\documents and settings\chrismixx_master\my documents\downloads\vuze\auslogics boost speed v4.3.9.185 incl.keygen [h33t] [^mixala_kis^]\snd.nfo
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\cracking bios, use the followin' code.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\cracking zip password files.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\debug, learn how crack windows.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\ebay hackcracktip.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\google crack search.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\how to download directly from crackdb.com.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\modify .exe files and crack a program.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\compression and cracks for dummies.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\cracking zip password files.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\debug, learn how crack windows.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\ebay hackcracktip.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\google crack search.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\a cracking tutorial\c101-90.000
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\a cracking tutorial\c101-90.001
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\a cracking tutorial\c101-90.002
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\a cracking tutorial\c101-90.003
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\a cracking tutorial\c101-90.004
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\200 hacking tutorials(ewares.org)\a cracking tutorial\ed!son.nfo
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\more hacking\a guide to internet security- becoming an uebercracker.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\more hacking\compression and cracks for dummies.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\more hacking\the cracking manual.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\more hacking\a cracking tutorial\c101-90.000
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\more hacking\a cracking tutorial\c101-90.001
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\more hacking\a cracking tutorial\c101-90.002
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\more hacking\a cracking tutorial\c101-90.003
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\more hacking\a cracking tutorial\c101-90.004
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\more hacking\a cracking tutorial\ed!son.nfo
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\tutorials - blacksun.box.sk\novell\novell netware - cracking netware.htm
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\l2\1000 hacking tutorials - the best of (2008)\tutorials - blacksun.box.sk\tools\how to use the fast zip cracker (fzc).html
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\pc_2gb_carddata\my e-books\google crack search.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\pc_2gb_carddata\my e-books\internettips\pw\cracking zip password files.txt
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\pc_2gb_carddata\my programs\all vito technology applications [h33t] [mambo04]\vito.technology.eyephoto.v1.1.xscale.wm2003.wm5.wm6.cracked-sympda.rar
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\pc_2gb_carddata\my programs\all vito technology applications [h33t] [mambo04]\vito.technology.funcontact.v2.15.xscale.wm5.wm6.cracked-sympda.rar
c:\documents and settings\chrismixx_master\my documents\listgrabber standard 2009\filesfromdesktop_5_2_09\pro.tools.le.7.4.cs2.hybrid\m$\protools.v7.4.music.production.toolkit.addon_r33p\crack.nfo
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\vito.technology.eyephoto.v1.1.xscale.wm2003.wm5.wm6.cracked-sympda.rar
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\vito.technology.funcontact.v2.15.xscale.wm5.wm6.cracked-sympda.rar
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper.mht
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\readme.txt
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\0000icon.013
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\000cabad.015
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\000cabae.016
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\000cabaf.017
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\00german.009
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\0dialogs.010
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\0dialogs.011
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\0english.008
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\0icon_x2.014
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\button~1.000
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\button~1.007
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\dialog~1.012
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\leftso~1.001
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\popupc~1.005
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\popupc~1.006
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\rights~1.002
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\setupdll.999
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\tasksw~1.003
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\tasksw~1.004
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\vitobuttonmapper_pocket.cab
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\wince cab installer.exe
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\buttonmapper\_setup.xml
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\macrorecorder\vitomacrorecorder_pocket.cab
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\buttonmapper\vito buttonmapper v4.0_ppc - cracked\macrorecorder\wince cab installer.exe
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\all vito technology applications [h33t] [mambo04]\vito_quickcontact\crack\quickcontact2.exe
c:\documents and settings\chrismixx_master\my documents\moblie_phone_apps\spb.software.for.windows.mobile.-.pocket.pc.(may 2008).rak+\productivity\spb mobile shell v2.1\keygen.exe
c:\documents and settings\chrismixx_master\my documents\my ebooks\i cracked the code! start making money today 2000% guaranteed! new method 2008 clickbank rich jerk ebay affiliate project x ewen chia cb.zip
c:\documents and settings\chrismixx_master\my documents\my ebooks\42 hb\crackproof your software(no starch-2002).pdf
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\beginners-guide-to-cracking.txt
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\crackersreference.zip
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack a game and tools.zip
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack a game.rar
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack any cd protection.rar
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack cd protection.doc
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack cd's.zip
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack.exe
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how_to_crack.exe
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\[txt] how to crack stuff.zip
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack programz (by trinity)\code.jpg
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack programz (by trinity)\error.jpg
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack programz (by trinity)\mail.gif
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack programz (by trinity)\sdr.jpg
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack programz (by trinity)\thumbs.db
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack programz (by trinity)\trinity.jpg
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how to crack programz (by trinity)\tutor1.htm
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how_to_crack_programz\#cracks.diz
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how_to_crack_programz\trinity.nfo
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\how_to_crack_programz\tutor.exe
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\anti-social\hacking\keygen_usefull_breakpoints_how_to\keygen-usefull-breakpoints-howto.txt
c:\documents and settings\chrismixx_master\my documents\my ebooks\ebooks & texts\computers\cracking [You must be registered and logged in to see this link.]
c:\documents and settings\chrismixx_master\my documents\my investments\forex\forex killer v2.14 & v3.32 & keygen\forex killer v2.14 & v3.32 & keygen.zip
c:\documents and settings\chrismixx_master\my documents\my investments\forex\forex killer v2.14 & v3.32 & keygen\forex killer v2.14 & v3.32 & keygen\forexkillerinstructions.pdf
c:\documents and settings\chrismixx_master\my documents\my investments\forex\forex killer v2.14 & v3.32 & keygen\forex killer v2.14 & v3.32 & keygen\forexkillerlearningbook.pdf
c:\documents and settings\chrismixx_master\my documents\my investments\forex\forex killer v2.14 & v3.32 & keygen\forex killer v2.14 & v3.32 & keygen\keygen.rar
c:\documents and settings\chrismixx_master\my documents\my investments\forex\forex killer v2.14 & v3.32 & keygen\forex killer v2.14 & v3.32 & keygen\rar password.txt
c:\documents and settings\chrismixx_master\my documents\my investments\forex\forex killer v2.14 & v3.32 & keygen\forex killer v2.14 & v3.32 & keygen\forexkiller v2.14\forexkiller2.exe
c:\documents and settings\chrismixx_master\my documents\my investments\forex\forex killer v2.14 & v3.32 & keygen\forex killer v2.14 & v3.32 & keygen\forexkiller v2.14\pricedataexamplefrommetatrader.csv
c:\documents and settings\chrismixx_master\my documents\my investments\forex\forex killer v2.14 & v3.32 & keygen\forex killer v2.14 & v3.32 & keygen\forexkiller v2.14\sys
c:\documents and settings\chrismixx_master\my documents\my investments\forex\forex killer v2.14 & v3.32 & keygen\forex killer v2.14 & v3.32 & keygen\forexkiller v3.32\forexkiller3.exe
c:\documents and settings\chrismixx_master\my documents\my investments\forex\forex killer v2.14 & v3.32 & keygen\forex killer v2.14 & v3.32 & keygen\forexkiller v3.32\sys
c:\documents and settings\chrismixx_master\my documents\my music\100 masterpieces\100 masterpieces\3 - 100 masterpieces - 1892 tchaikovsky waltz of the flowers, from the nutcracker.mp3
c:\documents and settings\chrismixx_master\my documents\my music\311\evolver\3 - 311 - crack the code.mp3
c:\documents and settings\chrismixx_master\my documents\my music\artist\title\2 - artist - andre nickatina; crack raidor razor (2).mp3
c:\documents and settings\chrismixx_master\my documents\my music\artist\title\2 - artist - andre nickatina; crack raidor razor (3).mp3
c:\documents and settings\chrismixx_master\my documents\my music\artist\title\2 - artist - andre nickatina; crack raidor razor.mp3
c:\documents and settings\chrismixx_master\my documents\my music\celly cel\the g filez\11 - celly cell - get it crackin' (2).mp3
c:\documents and settings\chrismixx_master\my documents\my music\celly cel\the g filez\11 - celly cell - get it crackin'.mp3
c:\documents and settings\chrismixx_master\my documents\my music\tchaikovsky\classical music for people who\00 - tchaikovsky - nutcrackerwaltz of the flowers.mp3
c:\documents and settings\chrismixx_master\my documents\my music\unknown\unknown\00 - andre nickatina - crack raider razor (2).mp3
c:\documents and settings\chrismixx_master\my documents\my music\unknown\unknown\00 - andre nickatina - crack raider razor (3).mp3
c:\documents and settings\chrismixx_master\my documents\my music\unknown\unknown\00 - andre nickatina - crack raider razor.mp3
c:\documents and settings\chrismixx_master\my documents\my music\unknown\unknown\1 - msi pt grimm betty's trash - freestyle on crack.mp3
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\get google ads free! -- new secret!! -- newbie affiliate made $109,620. - cracked foff 5.10.09.exe
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\[isohunt] get google ads free! -- new secret!! -- newbie affiliate made $109,620. - cracked foff 5.10.09.exe [smaragdtorrent.to].torrent
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\ebay4thofjuly\black-cat-firecrackers.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\ebay4thofjuly\buy-firecrackers-online.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\ebay4thofjuly\firecrackers.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\ebay4thofjuly\m80-firecrackers.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\active-file-recovery-crack.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\getdataback-data-recovery-crack.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\magic-recovery-crack.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\recover-my-files-keygen.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\active_file_recovery_crack_page_1.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\active_file_recovery_crack_page_2.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\active_file_recovery_crack_page_3.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\getdataback_data_recovery_crack_page_1.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\getdataback_data_recovery_crack_page_2.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\getdataback_data_recovery_crack_page_3.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\magic_recovery_crack_page_1.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\magic_recovery_crack_page_2.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\magic_recovery_crack_page_3.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\recover_my_files_keygen_page_1.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\recover_my_files_keygen_page_2.php
c:\documents and settings\chrismixx_master\my documents\webmarketing_online$$\85sitesadsense_10pak\hard-drive\links\recover_my_files_keygen_page_3.php
scanner sequence 3.ZZ.11
----- EOF -----

Chrismixx
Novice
Novice

Posts Posts : 19
Joined Joined : 2009-04-03
OS OS : Windows XP
Points Points : 28109
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Dr Jay on 10th November 2009, 3:10 am

On the ProTools, I am guessing all of those were keygens, which is a form of software piracy. They will probable not work. I will explain that below. Now, I will give you software recommendations for antivirus or firewall after your computer is declared clean.

C:\Documents and Settings\All Users\Documents\Audio Plugs&Progs\Audio_Programs_PlugIns\Nero+ keygen\Nero 66xx nȯne Keygen.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Chrismixx_Master\My Documents\ChrisMixx_LapTop_HD\Asst_PC&A_Few_Mac_Prog\Sony Vegas + DVD + keygen\DVD Architect 4.0.125\Sony DVD Architect v4.0 Keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Chrismixx_Master\My Documents\ChrisMixx_LapTop_HD\Asst_PC&A_Few_Mac_Prog\Sony Vegas + DVD + keygen\Vegas 7.0a\Sony Vegas v7.0a Keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Chrismixx_Master\My Documents\ChrisMixx_LapTop_HD\Asst_PC&A_Few_Mac_Prog\Sony Vegas 6.0d + Sony DVD Architect 3.0 + Universal Sony Keygen\keygen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

As you can see above, keygens are the TOP CONTRIBUTOR in the infection of your computer.

Your computer has a lot of keygens, which is a form of software piracy. What is so bad about Cracks, Hacks, Pirated software, warez, or Keygens?

Most popular cracks or keygens I see, are for Adobe CS3, a lot of different games, Nero, Kaspersky antivirus, and much more. All of these cracks and keygens have what is called "cloaked malware." Most hacks for games that come in the form of a program or installer, will also be infected. It is the opportunity for attackers to present a seemingly safe situation (where the opportunity to steal something is in play), while the malware infects your system in the process. Yes, it will install what you were looking for, but also allow malware to potentially take control of your computer.

Lastly, it is illegal. I will counsel you that we do not report such incidents. However, it is not good practice to pirate software.

==

Please re-open Malwarebytes, click the Update tab, and click Check for Updates. Then, click the Scanner tab, select Perform Quick Scan, and press Scan. Remove selected, and post the log in your next reply.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14310
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302971
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Chrismixx on 10th November 2009, 4:51 am

updated and rescanned with Malware, it came back clean. Also for the record most of the programs and plugins I download are technically not illegal from my understanding since I am a student I get them from a site that says it is fully legal as long as it is used for educational purposes.
----------------------------------------------------------------------------------------------------
Malwarebytes Log:

Malwarebytes' Anti-Malware 1.41
Database version: 3137
Windows 5.1.2600 Service Pack 3

11/9/2009 8:28:43 PM
mbam-log-2009-11-09 (20-28-43).txt

Scan type: Quick Scan
Objects scanned: 121394
Time elapsed: 8 minute(s), 21 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Chrismixx
Novice
Novice

Posts Posts : 19
Joined Joined : 2009-04-03
OS OS : Windows XP
Points Points : 28109
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Dr Jay on 10th November 2009, 5:22 am

Download Security Check by screen317 from [You must be registered and logged in to see this link.] or [You must be registered and logged in to see this link.].
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14310
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302971
# Likes # Likes : 10

View user profile

Back to top Go down

Re: Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Chrismixx on 10th November 2009, 5:33 am

HEre it is:

Results of screen317's Security Check version 0.99.0
Windows XP Service Pack 3
``````````````````````````````
Antivirus/Firewall Check:

Windows Firewall Enabled!
Avira AntiVir Personal - Free Antivirus
Avira updated!
``````````````````````````````
Anti-malware/Other Utilities Check:

Ad-Aware
Spyware Doctor 6.0
Spybot - Search & Destroy
Windows Defender
McAfee SiteAdvisor
Trojan Remover 6.7.9
HijackThis 2.0.2
TuneUp Utilities 2008
CCleaner (remove only)
Java(TM) 6 Update 13
Java(TM) 6 Update 7
Out of date Java installed!
Adobe Flash Player 10
Adobe Reader 9.2
``````````````````````````````
Process Check:
objlist.exe by Laurent

Ad-Aware AAWService.exe
Ad-Aware AAWTray.exe is disabled!
``````````````````````````````
DNS Vulnerability Check:

GREAT! (Not vulnerable to DNS cache poisoning)

`````````End of Log```````````

Chrismixx
Novice
Novice

Posts Posts : 19
Joined Joined : 2009-04-03
OS OS : Windows XP
Points Points : 28109
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Slow & Frozen Comp. ~ Security/SOFTWARE Automatic Updates The Culprit?

Post by Dr Jay on 10th November 2009, 5:39 am

Please download the newest version of Java from [You must be registered and logged in to see this link.].

Before installing: it is important to remove older versions of Java since it does not do so automatically and old versions still leave you vulnerable.
Go to the Control Panel and enter Add or Remove Programs.
Search in the list for all previous installed versions of Java. (J2SE Runtime Environment). Please uninstall/remove each of them.

Once old versions are gone, please install the newest version.

==

Please read the following information that I have provided, which will help you prevent malicious software in the future. Please keep in mind, malware is a continuous danger on the Internet. It is highly important to stay safe while browsing, to prevent re-infection.

Software recommendations

Firewall

  • [You must be registered and logged in to see this link.]: the free version is just as good as the premium. I have linked you to the free version.
  • [You must be registered and logged in to see this link.]: the free version is just as good as the premium. I have linked you to the free version. The optional security suite enhances the firewall by 40% increase. If you would like to install the suite that includes antivirus, then remove your old antivirus first.
  • [You must be registered and logged in to see this link.]: free and excellent firewall.


AntiSpyware

  • [You must be registered and logged in to see this link.]
    SpywareBlaster is a program that prevents spyware from installing on your computer. A tutorial on using SpywareBlaster may be found [You must be registered and logged in to see this link.].
  • [You must be registered and logged in to see this link.].
    Spybot - Search & Destroy is a spyware and adware removal program. It also has realtime protection, TeaTimer to help safeguard your computer against spyware. (The link for Spybot - Search & Destroy contains a tutorial that will help you download, install, and begin using Spybot).


NOTE: Please keep ALL of these programs up-to-date and run them whenever you suspect a problem to prevent malware problems.

Resident Protection help
A number of programs have resident protection and it is a good idea to run the resident protection of one of each type of program to maintain protection. However, it is important to run only one resident program of each type since they can conflict and become less effective. That means only one antivirus, firewall, and scanning anti-spyware program at a time. Passive protectors such as SpywareBlaster can be run with any of them.

Rogue programs help
There are a lot of rogue programs out there that want to scare you into giving them your money and some malware actually claims to be security programs. If you get a popup for a security program that you did not install yourself, do NOT click on it and ask for help immediately. It is very important to run an antivirus and firewall, but you can't always rely on reviews and ads for information. Ask in a security forum that you trust if you are not sure. If you are unsure and looking for anti-spyware programs, you can find out if it is a rogue here:
[You must be registered and logged in to see this link.]

Securing your computer

  • [You must be registered and logged in to see this link.] - It is very important to make sure that both Internet Explorer and Windows are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.
  • [You must be registered and logged in to see this link.] replaces your current HOSTS file with one containing well known ad sites and other bad sites. This prevents your computer from connecting to those sites by redirecting them to 127.0.0.1, which is your local computer's loopback address, meaning it will be difficult to infect your computer in the future.


Please consider using an alternate browser
Mozilla's Firefox browser is a very good alternative. In addition to being generally more secure than Internet Explorer, it has a very good built-in popup blocker and add-ons, like NoScript, can make it even more secure. Opera is another good option.

If you are interested:


Thank you for choosing GeekPolice. Please see [You must be registered and logged in to see this link.] if you would like to leave feedback or contribute to our site. Do you have any more questions?


Dr. Jay (DJ)


[You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.] ~ [You must be registered and logged in to see this link.]

Dr Jay
Head Administrator
Head Administrator

Posts Posts : 14310
Joined Joined : 2009-09-06
Gender Gender : Male
OS OS : Windows 10 Home & Pro
Arch. Arch. : x64 (64-bit)
Protection Protection : Bitdefender Total Security
Points Points : 302971
# Likes # Likes : 10

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum