- Joined
- Jul 18, 2007
- Messages
- 33
Rogue Windows PC Defender / Trojan / Task Manager won't load - posted in Virus, Trojan, Spyware, and Malware Removal Help: DescriptionAll of a sudden getting pop ups reporting PC Defender; cant. Sluggish pc - posted in Resolved or inactive PC Troubleshooting: I am running windows XP with norton av. My system was recently infected with internet security 2010. Norton was able to repair it but the computer was still acting slow. I ran the symantec restore which is on a partition on my drive and reinstalled the factory image hoping this would eliminate the problem. Snow leopard free download. After all the updates I.
Solved: I am still content with adobe acrobat xi pro. I just purchased a new computer and cant find the download file anywhere. Where can I find it? Download acrobat pro xi ajp87743985. If you own Acrobat Pro XI – or Acrobat Standard XI – you also qualify for a reduced price when purchasing a perpetual (one-time) license. A one-time purchase includes desktop software and lets you work with free Adobe Document Cloud services only. See the Acrobat. Reinstall Acrobat 11.0 and upon launch select Help Check for Updates to upgrade to 11.0.4. The upgrade to 11.0.4 completes successfully. If you still see a problem, check that the NSHighResolutionCapable setting is set to 'true' in the Info.plist file at /Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro. Adobe acrobat xi professional 11.0 3.
Rogue Windows PC Defender / Trojan / Task Manager won't load - posted in Virus, Trojan, Spyware, and Malware Removal Help: DescriptionAll of a sudden getting pop ups reporting PC Defender; cant. Sluggish pc - posted in Resolved or inactive PC Troubleshooting: I am running windows XP with norton av. My system was recently infected with internet security 2010. Norton was able to repair it but the computer was still acting slow. I ran the symantec restore which is on a partition on my drive and reinstalled the factory image hoping this would eliminate the problem. Snow leopard free download. After all the updates I.
Solved: I am still content with adobe acrobat xi pro. I just purchased a new computer and cant find the download file anywhere. Where can I find it? Download acrobat pro xi ajp87743985. If you own Acrobat Pro XI – or Acrobat Standard XI – you also qualify for a reduced price when purchasing a perpetual (one-time) license. A one-time purchase includes desktop software and lets you work with free Adobe Document Cloud services only. See the Acrobat. Reinstall Acrobat 11.0 and upon launch select Help Check for Updates to upgrade to 11.0.4. The upgrade to 11.0.4 completes successfully. If you still see a problem, check that the NSHighResolutionCapable setting is set to 'true' in the Info.plist file at /Applications/Adobe Acrobat XI Pro/Adobe Acrobat Pro. Adobe acrobat xi professional 11.0 3.
Ctsvolfe.exe Error
Hi, I recently got a virus on my computer that my anti-malware was able to get rid of, but now my computer will randomly shut down with the message: NT Authority System windows must shut down DCOM Server Process Launcher service terminated unexpectedly. It does this about once a day. Here is the HJT log. Thanks.
Logfile of HijackThis v1.99.1
Scan saved at 10:20:43 PM, on 1/27/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
c:Program FilesSophosSophos Anti-VirusSavService.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32WLTRYSVC.EXE
C:WINDOWSSystem32bcmwltry.exe
C:WINDOWSsystem32spoolsv.exe
c:program filescommon fileslogishrdlvmvfmLVPrcSrv.exe
C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
C:Program FilesSymantecLiveUpdateAluSchedulerSvc.exe
C:Program FilesBonjourmDNSResponder.exe
C:WINDOWSeHomeehRecvr.exe
C:WINDOWSeHomeehSched.exe
C:WINDOWSsystem32lxcrcoms.exe
C:WINDOWSsystem32LxrJD31s.exe
c:Program FilesSophosSophos Anti-VirusSAVAdminService.exe
C:Program FilesSpyware DoctorpctsAuxs.exe
C:Program FilesSpyware DoctorpctsSvc.exe
c:Program FilesSophosAutoUpdateALsvc.exe
C:Program FilesSpyware DoctorpctsTray.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesViewpointCommonViewpointService.exe
C:WINDOWSehomemcrdsvc.exe
C:WINDOWSsystem32dllhost.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSehomeehtray.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSsystem32WLTRAY.exe
C:WINDOWSsystem32igfxsrvc.exe
C:WINDOWSeHomeehmsas.exe
C:WINDOWSstsystra.exe
C:Program FilesDellQuickSetquickset.exe
C:Program FilesCreativeMixerCTSVolFE.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:Program FilesJavajre1.5.0_03binjusched.exe
C:Program FilesCommon FilesLogiShrdLComMgrCommunications_Helper.exe
C:WINDOWSsystem32wbemwmiprvse.exe
C:Program FilesLogitechQuickCam10QuickCam10.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesLexmark 2400 Serieslxcrmon.exe
C:Program FilesLexmark 2400 Seriesezprint.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesAIM6aim6.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesiPodbiniPodService.exe
C:Program FilesSophosAutoUpdateALMon.exe
C:Program FilesCommon FilesLogiShrdLComMgrLVComSX.exe
C:Program FilesViewpointViewpoint ManagerViewMgr.exe
C:Program FilesCommon FilesLogishrdLQCVFXCOCIManager.exe
C:Program FilesAIM6aolsoftware.exe
C:Program FilesSkypePlugin ManagerskypePM.exe
C:Program FilesSpyware Doctorupgrade.exe
C:WINDOWSsystem32rundll32.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesMicrosoft OfficeOFFICE11POWERPNT.EXE
C:Program FilesMicrosoft OfficeOFFICE11WINWORD.EXE
C:Program FilesHijackthisHijackThis.exe
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.dell.com/
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = webproxy.ucsd.edu:3128
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:Program FilesLexmark Toolbartoolband.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O2 - BHO: Sophos Web Content Scanner - {39EA7695-B3F2-4C44-A4BC-297ADA8FD235} - c:Program FilesSophosSophos Anti-VirusSophosBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.0.926.3450swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_219B3E1547538286.dll
O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:Program FilesLexmark Toolbartoolband.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O4 - HKLM.Run: [ehTray] C:WINDOWSehomeehtray.exe
O4 - HKLM.Run: [SynTPEnh] 'C:Program FilesSynapticsSynTPSynTPEnh.exe'
O4 - HKLM.Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM.Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM.Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe
O4 - HKLM.Run: [Broadcom Wireless Manager UI] C:WINDOWSsystem32WLTRAY.exe
O4 - HKLM.Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM.Run: [Dell QuickSet] C:Program FilesDellQuickSetquickset.exe
O4 - HKLM.Run: [ShowLOMControl] 0001
O4 - HKLM.Run: [CTSVolFE.exe] 'C:Program FilesCreativeMixerCTSVolFE.exe' /r
O4 - HKLM.Run: [TkBellExe] 'C:Program FilesCommon FilesRealUpdate_OBrealsched.exe' -osboot
O4 - HKLM.Run: [SunJavaUpdateSched] C:Program FilesJavajre1.5.0_03binjusched.exe
O4 - HKLM.Run: [LogitechCommunicationsManager] 'C:Program FilesCommon FilesLogiShrdLComMgrCommunications_Helper.exe'
O4 - HKLM.Run: [LogitechQuickCamRibbon] 'C:Program FilesLogitechQuickCam10QuickCam10.exe' /hide
O4 - HKLM.Run: [ISTray] 'C:Program FilesSpyware DoctorpctsTray.exe'
O4 - HKLM.Run: [QuickTime Task] 'C:Program FilesQuickTimeQTTask.exe' -atboottime
O4 - HKLM.Run: [iTunesHelper] 'C:Program FilesiTunesiTunesHelper.exe'
O4 - HKLM.Run: [RemoteControl] 'C:Program FilesCyberLinkPowerDVDPDVDServ.exe'
O4 - HKLM.Run: [lxcrmon.exe] 'C:Program FilesLexmark 2400 Serieslxcrmon.exe'
O4 - HKLM.Run: [EzPrint] 'C:Program FilesLexmark 2400 Seriesezprint.exe'
O4 - HKLM.Run: [FaxCenterServer] 'C:Program FilesLexmark Fax Solutionsfm3032.exe' /s
O4 - HKLM.Run: [LXCRCATS] rundll32 C:WINDOWSSystem32spoolDRIVERSW32X863LXCRtime.dll,[email protected]
O4 - HKCU.Run: [MSMSGS] 'C:Program FilesMessengermsmsgs.exe' /background
O4 - HKCU.Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU.Run: [Aim6] 'C:Program FilesAIM6aim6.exe' /d locale=en-US ee://aol/imApp
O4 - HKCU.Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU.Run: [jamtray] C:/Program Files/Jaman Player/jamtray.exe
O4 - HKCU.Run: [updateMgr] 'C:Program FilesAdobeAcrobat 7.0ReaderAdobeUpdateManager.exe' AcRdB7_0_9 -reboot 1
O4 - HKCU.Run: [Skype] 'C:Program FilesSkypePhoneSkype.exe' /nosplash /minimized
O4 - Global Startup: AutoUpdate Monitor.lnk = C:Program FilesSophosAutoUpdateALMon.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:Program FilesLogitechDesktop Messenger8876480ProgramLogitechDesktopMessenger.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:WINDOWSsystem32GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~4OFFICE11EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_03binnpjpi150_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_03binnpjpi150_03.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~4OFFICE11REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O10 - Unknown file in Winsock LSP: c:program filesbonjourmdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1148486252875
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:Program FilesLogitechDesktop Messenger8876480ProgramGAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 - AppInit_DLLs: c:PROGRA~1SophosSOPHOS~1SOPHOS~1.DLL
O20 - Winlogon Notify: igfxcui - C:WINDOWSSYSTEM32igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:Program FilesSymantecLiveUpdateAluSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:Program FilesDellSupportbrkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:Program FilesSymantecLiveUpdateLuComServer_3_4.EXE
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:program filescommon fileslogishrdlvmvfmLVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:Program FilesCommon FilesLogiShrdSrvLnchSrvLnch.exe
O23 - Service: lxcr_device - - C:WINDOWSsystem32lxcrcoms.exe
O23 - Service: Lexar JD31 (LxrJD31s) - Unknown owner - C:WINDOWSSYSTEM32LxrJD31s.exe
O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) - Sophos Plc - c:Program FilesSophosSophos Anti-VirusSAVAdminService.exe
O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Plc - c:Program FilesSophosSophos Anti-VirusSavService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:Program FilesSpyware DoctorpctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:Program FilesSpyware DoctorpctsSvc.exe
O23 - Service: Sophos AutoUpdate Service - Sophos Plc - c:Program FilesSophosAutoUpdateALsvc.exe
O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:Program FilesCommon FilesSymantec SharedSupport Controlsssrc.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:Program FilesViewpointCommonViewpointService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:WINDOWSSystem32WLTRYSVC.EXE
Logfile of HijackThis v1.99.1
Scan saved at 10:20:43 PM, on 1/27/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
c:Program FilesSophosSophos Anti-VirusSavService.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32WLTRYSVC.EXE
C:WINDOWSSystem32bcmwltry.exe
C:WINDOWSsystem32spoolsv.exe
c:program filescommon fileslogishrdlvmvfmLVPrcSrv.exe
C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
C:Program FilesSymantecLiveUpdateAluSchedulerSvc.exe
C:Program FilesBonjourmDNSResponder.exe
C:WINDOWSeHomeehRecvr.exe
C:WINDOWSeHomeehSched.exe
C:WINDOWSsystem32lxcrcoms.exe
C:WINDOWSsystem32LxrJD31s.exe
c:Program FilesSophosSophos Anti-VirusSAVAdminService.exe
C:Program FilesSpyware DoctorpctsAuxs.exe
C:Program FilesSpyware DoctorpctsSvc.exe
c:Program FilesSophosAutoUpdateALsvc.exe
C:Program FilesSpyware DoctorpctsTray.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesViewpointCommonViewpointService.exe
C:WINDOWSehomemcrdsvc.exe
C:WINDOWSsystem32dllhost.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSehomeehtray.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSsystem32WLTRAY.exe
C:WINDOWSsystem32igfxsrvc.exe
C:WINDOWSeHomeehmsas.exe
C:WINDOWSstsystra.exe
C:Program FilesDellQuickSetquickset.exe
C:Program FilesCreativeMixerCTSVolFE.exe
C:Program FilesCommon FilesRealUpdate_OBrealsched.exe
C:Program FilesJavajre1.5.0_03binjusched.exe
C:Program FilesCommon FilesLogiShrdLComMgrCommunications_Helper.exe
C:WINDOWSsystem32wbemwmiprvse.exe
C:Program FilesLogitechQuickCam10QuickCam10.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesCyberLinkPowerDVDPDVDServ.exe
C:Program FilesLexmark 2400 Serieslxcrmon.exe
C:Program FilesLexmark 2400 Seriesezprint.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesAIM6aim6.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesiPodbiniPodService.exe
C:Program FilesSophosAutoUpdateALMon.exe
C:Program FilesCommon FilesLogiShrdLComMgrLVComSX.exe
C:Program FilesViewpointViewpoint ManagerViewMgr.exe
C:Program FilesCommon FilesLogishrdLQCVFXCOCIManager.exe
C:Program FilesAIM6aolsoftware.exe
C:Program FilesSkypePlugin ManagerskypePM.exe
C:Program FilesSpyware Doctorupgrade.exe
C:WINDOWSsystem32rundll32.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesMicrosoft OfficeOFFICE11POWERPNT.EXE
C:Program FilesMicrosoft OfficeOFFICE11WINWORD.EXE
C:Program FilesHijackthisHijackThis.exe
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.dell.com/
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = webproxy.ucsd.edu:3128
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:Program FilesLexmark Toolbartoolband.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O2 - BHO: Sophos Web Content Scanner - {39EA7695-B3F2-4C44-A4BC-297ADA8FD235} - c:Program FilesSophosSophos Anti-VirusSophosBHO.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.0.926.3450swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:Program FilesGoogleGoogle ToolbarComponentfastsearch_219B3E1547538286.dll
O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:Program FilesLexmark Toolbartoolband.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar.dll
O4 - HKLM.Run: [ehTray] C:WINDOWSehomeehtray.exe
O4 - HKLM.Run: [SynTPEnh] 'C:Program FilesSynapticsSynTPSynTPEnh.exe'
O4 - HKLM.Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM.Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM.Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe
O4 - HKLM.Run: [Broadcom Wireless Manager UI] C:WINDOWSsystem32WLTRAY.exe
O4 - HKLM.Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM.Run: [Dell QuickSet] C:Program FilesDellQuickSetquickset.exe
O4 - HKLM.Run: [ShowLOMControl] 0001
O4 - HKLM.Run: [CTSVolFE.exe] 'C:Program FilesCreativeMixerCTSVolFE.exe' /r
O4 - HKLM.Run: [TkBellExe] 'C:Program FilesCommon FilesRealUpdate_OBrealsched.exe' -osboot
O4 - HKLM.Run: [SunJavaUpdateSched] C:Program FilesJavajre1.5.0_03binjusched.exe
O4 - HKLM.Run: [LogitechCommunicationsManager] 'C:Program FilesCommon FilesLogiShrdLComMgrCommunications_Helper.exe'
O4 - HKLM.Run: [LogitechQuickCamRibbon] 'C:Program FilesLogitechQuickCam10QuickCam10.exe' /hide
O4 - HKLM.Run: [ISTray] 'C:Program FilesSpyware DoctorpctsTray.exe'
O4 - HKLM.Run: [QuickTime Task] 'C:Program FilesQuickTimeQTTask.exe' -atboottime
O4 - HKLM.Run: [iTunesHelper] 'C:Program FilesiTunesiTunesHelper.exe'
O4 - HKLM.Run: [RemoteControl] 'C:Program FilesCyberLinkPowerDVDPDVDServ.exe'
O4 - HKLM.Run: [lxcrmon.exe] 'C:Program FilesLexmark 2400 Serieslxcrmon.exe'
O4 - HKLM.Run: [EzPrint] 'C:Program FilesLexmark 2400 Seriesezprint.exe'
O4 - HKLM.Run: [FaxCenterServer] 'C:Program FilesLexmark Fax Solutionsfm3032.exe' /s
O4 - HKLM.Run: [LXCRCATS] rundll32 C:WINDOWSSystem32spoolDRIVERSW32X863LXCRtime.dll,[email protected]
O4 - HKCU.Run: [MSMSGS] 'C:Program FilesMessengermsmsgs.exe' /background
O4 - HKCU.Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU.Run: [Aim6] 'C:Program FilesAIM6aim6.exe' /d locale=en-US ee://aol/imApp
O4 - HKCU.Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU.Run: [jamtray] C:/Program Files/Jaman Player/jamtray.exe
O4 - HKCU.Run: [updateMgr] 'C:Program FilesAdobeAcrobat 7.0ReaderAdobeUpdateManager.exe' AcRdB7_0_9 -reboot 1
O4 - HKCU.Run: [Skype] 'C:Program FilesSkypePhoneSkype.exe' /nosplash /minimized
O4 - Global Startup: AutoUpdate Monitor.lnk = C:Program FilesSophosAutoUpdateALMon.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:Program FilesLogitechDesktop Messenger8876480ProgramLogitechDesktopMessenger.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:WINDOWSsystem32GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~4OFFICE11EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_03binnpjpi150_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_03binnpjpi150_03.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~4OFFICE11REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O10 - Unknown file in Winsock LSP: c:program filesbonjourmdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1148486252875
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:Program FilesLogitechDesktop Messenger8876480ProgramGAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O20 - AppInit_DLLs: c:PROGRA~1SophosSOPHOS~1SOPHOS~1.DLL
O20 - Winlogon Notify: igfxcui - C:WINDOWSSYSTEM32igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:Program FilesSymantecLiveUpdateAluSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: DSBrokerService - Unknown owner - C:Program FilesDellSupportbrkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:Program FilesSymantecLiveUpdateLuComServer_3_4.EXE
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:program filescommon fileslogishrdlvmvfmLVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:Program FilesCommon FilesLogiShrdSrvLnchSrvLnch.exe
O23 - Service: lxcr_device - - C:WINDOWSsystem32lxcrcoms.exe
O23 - Service: Lexar JD31 (LxrJD31s) - Unknown owner - C:WINDOWSSYSTEM32LxrJD31s.exe
O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) - Sophos Plc - c:Program FilesSophosSophos Anti-VirusSAVAdminService.exe
O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Plc - c:Program FilesSophosSophos Anti-VirusSavService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:Program FilesSpyware DoctorpctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:Program FilesSpyware DoctorpctsSvc.exe
O23 - Service: Sophos AutoUpdate Service - Sophos Plc - c:Program FilesSophosAutoUpdateALsvc.exe
O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:Program FilesCommon FilesSymantec SharedSupport Controlsssrc.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:Program FilesViewpointCommonViewpointService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:WINDOWSSystem32WLTRYSVC.EXE
Ctsvolfe.exe
CTSVolFE.exe is known as Volume Control and it is developed by Creative Technology Ltd, it is also developed. We have seen about 32 different instances of CTSVolFE.exe in different location. Xerox workcentre 7132 driver.
