يعطيك العافيه زيزوم ..
بس كمان نزلت البرنامج اللي طلبتو مني ..وحاطلك التقرير ..
عشان ابغا اعرف من وين المشكله .!؟
وهل ممكن ترجع تاني ولا لأ ..!
.
--------------------------\\\ Start Report Of HijackThis ---------------
.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 04:52:09 ص, on 10/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\hp\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
D:\Program Files\hp\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\HPQ\SHARED\HPQWMI.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\ALJAWA~1.5GH\ALJAWAL 3.5G HSDPA DATA CARD.exe
C:\DOCUME~1\Welcome\LOCALS~1\Temp\bntoz\runn.exe
C:\WINDOWS\system32\cmd.exe
C:\DOCUME~1\Welcome\LOCALS~1\Temp\bntoz\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - D:\Program Files\GetRight\xx2gr.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Documents and Settings\Welcome\Desktop\download\مجلد جديد\Save Flash\SaveFlash.dll
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [HP Software Update] D:\Program Files\hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Program Files\hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = D:\Program Files\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Download with GetRight - D:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - D:\Program Files\GetRight\GRbrowse.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6B78B13A-6E99-4588-8EAB-C2399B202022} (iVocalize Web Conference 4 Setup) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{4C8FC9EA-B0BA-498D-BABA-406BBAC8559D}: NameServer = 212.118.133.101 62.149.114.7
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
--
End of file - 6554 bytes
.
.
--------------------------\\\ End Report Of Of HijackThis ---------------
.
.
.
.
--------------------------\\\ Start Report Of Running Processes ---------------
.
==================================================
Process Name : smss.exe
ProcessID : 432
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Windows NT Session Manager
Company : Microsoft Corporation
Window Title :
File Size : 50,688
File Created Date : 18/06/1425 04:56:58 ص
File Modified Date : 18/06/1425 04:56:58 ص
Filename : C:\WINDOWS\System32\smss.exe
Base Address : 0x48580000
Created On : 03/02/1429 02:49:36 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 388 K
Mem Usage Peak : 700 K
Page Faults : 292
Pagefile Usage : 168 K
Pagefile Peak Usage : 1676 K
File Attributes : A
==================================================
==================================================
Process Name : csrss.exe
ProcessID : 512
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Client Server Runtime Process
Company : Microsoft Corporation
Window Title :
File Size : 6,144
File Created Date : 18/06/1425 04:56:50 ص
File Modified Date : 18/06/1425 04:56:50 ص
Filename : C:\WINDOWS\system32\csrss.exe
Base Address : 0x4A680000
Created On : 03/02/1429 02:49:39 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 5260 K
Mem Usage Peak : 5376 K
Page Faults : 16546
Pagefile Usage : 2124 K
Pagefile Peak Usage : 2124 K
File Attributes : A
==================================================
==================================================
Process Name : winlogon.exe
ProcessID : 952
Priority : High
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Windows NT Logon Application
Company : Microsoft Corporation
Window Title :
File Size : 502,272
File Created Date : 18/06/1425 04:56:58 ص
File Modified Date : 18/06/1425 04:56:58 ص
Filename : C:\WINDOWS\system32\winlogon.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:49:40 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 5452 K
Mem Usage Peak : 14112 K
Page Faults : 7810
Pagefile Usage : 11116 K
Pagefile Peak Usage : 12468 K
File Attributes : A
==================================================
==================================================
Process Name : services.exe
ProcessID : 996
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Services and Controller app
Company : Microsoft Corporation
Window Title :
File Size : 108,032
File Created Date : 18/06/1425 04:56:56 ص
File Modified Date : 18/06/1425 04:56:56 ص
Filename : C:\WINDOWS\system32\services.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:49:41 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 4460 K
Mem Usage Peak : 4556 K
Page Faults : 2116
Pagefile Usage : 2488 K
Pagefile Peak Usage : 3128 K
File Attributes : A
==================================================
==================================================
Process Name : lsass.exe
ProcessID : 1008
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : LSA l (Export Version)
Company : Microsoft Corporation
Window Title :
File Size : 13,312
File Created Date : 18/06/1425 04:56:52 ص
File Modified Date : 18/06/1425 04:56:52 ص
Filename : C:\WINDOWS\system32\lsass.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:49:41 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 1576 K
Mem Usage Peak : 7172 K
Page Faults : 14161
Pagefile Usage : 7944 K
Pagefile Peak Usage : 8064 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 1176
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 18/06/1425 04:56:58 ص
File Modified Date : 18/06/1425 04:56:58 ص
Filename : C:\WINDOWS\system32\svchost.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:49:42 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 5244 K
Mem Usage Peak : 5364 K
Page Faults : 1521
Pagefile Usage : 6764 K
Pagefile Peak Usage : 27188 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 1252
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 18/06/1425 04:56:58 ص
File Modified Date : 18/06/1425 04:56:58 ص
Filename : C:\WINDOWS\system32\svchost.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:49:42 ص
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 4700 K
Mem Usage Peak : 4812 K
Page Faults : 1402
Pagefile Usage : 5176 K
Pagefile Peak Usage : 5524 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 1288
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 18/06/1425 04:56:58 ص
File Modified Date : 18/06/1425 04:56:58 ص
Filename : C:\WINDOWS\System32\svchost.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:49:42 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 26380 K
Mem Usage Peak : 35068 K
Page Faults : 24024
Pagefile Usage : 21104 K
Pagefile Peak Usage : 30928 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 1336
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 18/06/1425 04:56:58 ص
File Modified Date : 18/06/1425 04:56:58 ص
Filename : C:\WINDOWS\system32\svchost.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:49:42 ص
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 3624 K
Mem Usage Peak : 3676 K
Page Faults : 2223
Pagefile Usage : 1624 K
Pagefile Peak Usage : 1684 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 1492
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 18/06/1425 04:56:58 ص
File Modified Date : 18/06/1425 04:56:58 ص
Filename : C:\WINDOWS\system32\svchost.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:49:43 ص
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 4620 K
Mem Usage Peak : 4636 K
Page Faults : 1216
Pagefile Usage : 4752 K
Pagefile Peak Usage : 4812 K
File Attributes : A
==================================================
==================================================
Process Name : Explorer.EXE
ProcessID : 1652
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)
Description : Windows Explorer
Company : Microsoft Corporation
Window Title : Program Manager
File Size : 1,033,216
File Created Date : 18/06/1425 04:56:50 ص
File Modified Date : 28/05/1428 10:23:08 ص
Filename : C:\WINDOWS\Explorer.EXE
Base Address : 0x01000000
Created On : 03/02/1429 02:49:44 ص
Visible Windows : 2
Hidden Windows : 20
User Name : COOL16021428\Welcome
Mem Usage : 32088 K
Mem Usage Peak : 55360 K
Page Faults : 125587
Pagefile Usage : 28748 K
Pagefile Peak Usage : 50812 K
File Attributes : A
==================================================
==================================================
Process Name : spoolsv.exe
ProcessID : 1932
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)
Description : Spooler SubSystem App
Company : Microsoft Corporation
Window Title :
File Size : 57,856
File Created Date : 18/06/1425 04:56:58 ص
File Modified Date : 04/05/1426 11:53:32 م
Filename : C:\WINDOWS\system32\spoolsv.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:49:44 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 8044 K
Mem Usage Peak : 8192 K
Page Faults : 2484
Pagefile Usage : 9292 K
Pagefile Peak Usage : 9564 K
File Attributes : A
==================================================
==================================================
Process Name : HP Wireless Assistant.exe
ProcessID : 2044
Priority : Normal
Product Name : hp Wireless Assistant
Version : 1, 0, 0, 26
Description : hp Wireless Assistant Module
Company : Hewlett-Packard Company
Window Title :
File Size : 790,528
File Created Date : 17/02/1428 05:56:39 م
File Modified Date : 30/09/1425 09:40:04 ص
Filename : C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:49:45 ص
Visible Windows : 0
Hidden Windows : 1
User Name : COOL16021428\Welcome
Mem Usage : 5000 K
Mem Usage Peak : 5008 K
Page Faults : 1286
Pagefile Usage : 5480 K
Pagefile Peak Usage : 5508 K
File Attributes : A
==================================================
==================================================
Process Name : realsched.exe
ProcessID : 152
Priority : Normal
Product Name : RealPlayer (32-bit)
Version : 0.1.0.3760
Description : RealNetworks Scheduler
Company : RealNetworks, Inc.
Window Title :
File Size : 185,896
File Created Date : 17/02/1428 06:49:51 م
File Modified Date : 17/02/1428 06:49:52 م
Filename : C:\Program Files\Common Files\Real\Update_OB\realsched.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:49:45 ص
Visible Windows : 0
Hidden Windows : 1
User Name : COOL16021428\Welcome
Mem Usage : 204 K
Mem Usage Peak : 2932 K
Page Faults : 31619
Pagefile Usage : 4368 K
Pagefile Peak Usage : 4380 K
File Attributes : A
==================================================
==================================================
Process Name : HPWuSchd2.exe
ProcessID : 196
Priority : Normal
Product Name : hp digital imaging - hp all-in-one series
Version : 53.0.13.000
Description : Hewlett-Packard Product Assistant
Company : Hewlett-Packard Co.
Window Title :
File Size : 49,152
File Created Date : 03/04/1426 08:12:54 م
File Modified Date : 03/04/1426 08:12:54 م
Filename : D:\Program Files\hp\HP Software Update\HPWuSchd2.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:49:45 ص
Visible Windows : 0
Hidden Windows : 1
User Name : COOL16021428\Welcome
Mem Usage : 2196 K
Mem Usage Peak : 2196 K
Page Faults : 559
Pagefile Usage : 724 K
Pagefile Peak Usage : 724 K
File Attributes : A
==================================================
==================================================
Process Name : SMax4PNP.exe
ProcessID : 212
Priority : Normal
Product Name : SMax4PNP Application
Version : 5, 0, 2, 2
Description : SMax4PNP MFC Application
Company : Analog Devices, Inc.
Window Title :
File Size : 1,388,544
File Created Date : 17/02/1428 05:41:52 م
File Modified Date : 01/09/1425 06:11:10 ص
Filename : C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:49:45 ص
Visible Windows : 0
Hidden Windows : 2
User Name : COOL16021428\Welcome
Mem Usage : 4020 K
Mem Usage Peak : 4140 K
Page Faults : 1511
Pagefile Usage : 2396 K
Pagefile Peak Usage : 2844 K
File Attributes : A
==================================================
==================================================
Process Name : Smax4.exe
ProcessID : 220
Priority : Normal
Product Name : SoundMAX Control Panel
Version : 5, 0, 2, 6
Description : SoundMAX Control Center
Company : Analog Devices, Inc.
Window Title :
File Size : 860,160
File Created Date : 17/02/1428 05:41:51 م
File Modified Date : 09/08/1425 09:41:54 ص
Filename : C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:49:46 ص
Visible Windows : 0
Hidden Windows : 1
User Name : COOL16021428\Welcome
Mem Usage : 3272 K
Mem Usage Peak : 3272 K
Page Faults : 827
Pagefile Usage : 1348 K
Pagefile Peak Usage : 1348 K
File Attributes : A
==================================================
==================================================
Process Name : avp.exe
ProcessID : 184
Priority : Normal
Product Name : Kaspersky Anti-Virus
Version : 6.0.0.299
Description : Kaspersky Anti-Virus
Company : Kaspersky Lab
Window Title :
File Size : 139,367
File Created Date : 24/02/1427 04:09:22 م
File Modified Date : 24/02/1427 04:09:22 م
Filename : C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:49:46 ص
Visible Windows : 0
Hidden Windows : 3
User Name : COOL16021428\Welcome
Mem Usage : 3576 K
Mem Usage Peak : 6052 K
Page Faults : 3060
Pagefile Usage : 5620 K
Pagefile Peak Usage : 5644 K
File Attributes : A
==================================================
==================================================
Process Name : msmsgs.exe
ProcessID : 228
Priority : Normal
Product Name : Messenger
Version : 4.7.3001
Description : Windows Messenger
Company : Microsoft Corporation
Window Title :
File Size : 1,694,208
File Created Date : 17/02/1428 05:18:58 م
File Modified Date : 29/08/1425 04:24:38 م
Filename : C:\Program Files\Messenger\msmsgs.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:49:46 ص
Visible Windows : 0
Hidden Windows : 6
User Name : COOL16021428\Welcome
Mem Usage : 2372 K
Mem Usage Peak : 5068 K
Page Faults : 1857
Pagefile Usage : 4684 K
Pagefile Peak Usage : 4696 K
File Attributes : A
==================================================
==================================================
Process Name : ctfmon.exe
ProcessID : 244
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : CTF Loader
Company : Microsoft Corporation
Window Title :
File Size : 15,360
File Created Date : 18/06/1425 04:56:50 ص
File Modified Date : 18/06/1425 04:56:50 ص
Filename : C:\WINDOWS\system32\ctfmon.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:49:46 ص
Visible Windows : 0
Hidden Windows : 4
User Name : COOL16021428\Welcome
Mem Usage : 3204 K
Mem Usage Peak : 3216 K
Page Faults : 896
Pagefile Usage : 1440 K
Pagefile Peak Usage : 1460 K
File Attributes : A
==================================================
==================================================
Process Name : hpqtra08.exe
ProcessID : 344
Priority : Normal
Product Name : hp digital imaging - hp all-in-one series
Version : 53.0.13.000
Description : HP Digital Imaging Monitor
Company : Hewlett-Packard Co.
Window Title :
File Size : 282,624
File Created Date : 03/04/1426 08:23:26 م
File Modified Date : 03/04/1426 08:23:26 م
Filename : D:\Program Files\hp\Digital Imaging\bin\hpqtra08.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:49:47 ص
Visible Windows : 0
Hidden Windows : 29
User Name : COOL16021428\Welcome
Mem Usage : 6740 K
Mem Usage Peak : 6744 K
Page Faults : 2212
Pagefile Usage : 6760 K
Pagefile Peak Usage : 6788 K
File Attributes : A
==================================================
==================================================
Process Name : BTTray.exe
ProcessID : 412
Priority : Normal
Product Name : Bluetooth Software 4.0.1.600
Version : 4.0.1.600
Description : Bluetooth Tray Application
Company : Broadcom Corporation.
Window Title :
File Size : 569,405
File Created Date : 13/09/1425 09:20:42 ص
File Modified Date : 13/09/1425 09:20:42 ص
Filename : C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:49:47 ص
Visible Windows : 0
Hidden Windows : 2
User Name : COOL16021428\Welcome
Mem Usage : 6272 K
Mem Usage Peak : 6508 K
Page Faults : 7156
Pagefile Usage : 6888 K
Pagefile Peak Usage : 7156 K
File Attributes : A
==================================================
==================================================
Process Name : BTSTAC~1.EXE
ProcessID : 624
Priority : Normal
Product Name : Bluetooth Software 4.0.1.600
Version : 4.0.1.600
Description : Bluetooth Stack COM Server
Company : Broadcom Corporation.
Window Title :
File Size : 1,261,652
File Created Date : 13/09/1425 09:20:02 ص
File Modified Date : 13/09/1425 09:20:02 ص
Filename : C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
Base Address : 0x00400000
Created On : 03/02/1429 02:49:48 ص
Visible Windows : 0
Hidden Windows : 1
User Name : COOL16021428\Welcome
Mem Usage : 7808 K
Mem Usage Peak : 7988 K
Page Faults : 7668
Pagefile Usage : 9168 K
Pagefile Peak Usage : 9372 K
File Attributes : A
==================================================
==================================================
Process Name : hpqSTE08.exe
ProcessID : 912
Priority : Normal
Product Name : hp digital imaging - hp all-in-one series
Version : 53.0.13.000
Description : HP CUE Status
Company : Hewlett-Packard Co.
Window Title :
File Size : 204,800
File Created Date : 03/04/1426 09:40:38 م
File Modified Date : 03/04/1426 09:40:38 م
Filename : D:\Program Files\hp\Digital Imaging\bin\hpqSTE08.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:49:53 ص
Visible Windows : 0
Hidden Windows : 31
User Name : COOL16021428\Welcome
Mem Usage : 11956 K
Mem Usage Peak : 11956 K
Page Faults : 30097
Pagefile Usage : 8172 K
Pagefile Peak Usage : 8572 K
File Attributes : A
==================================================
==================================================
Process Name : avp.exe
ProcessID : 1548
Priority : Normal
Product Name : Kaspersky Anti-Virus
Version : 6.0.0.299
Description : Kaspersky Anti-Virus
Company : Kaspersky Lab
Window Title :
File Size : 139,367
File Created Date : 24/02/1427 04:09:22 م
File Modified Date : 24/02/1427 04:09:22 م
Filename : C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:50:02 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 20780 K
Mem Usage Peak : 42468 K
Page Faults : 411736
Pagefile Usage : 41696 K
Pagefile Peak Usage : 72992 K
File Attributes : A
==================================================
==================================================
Process Name : btwdins.exe
ProcessID : 1704
Priority : Normal
Product Name : Bluetooth Software 4.0.1.600
Version : 4.0.1.600
Description : Bluetooth Support Server
Company : Broadcom Corporation.
Window Title :
File Size : 254,007
File Created Date : 13/09/1425 09:11:22 ص
File Modified Date : 13/09/1425 09:11:22 ص
Filename : C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:50:02 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 3232 K
Mem Usage Peak : 3588 K
Page Faults : 2638
Pagefile Usage : 4988 K
Pagefile Peak Usage : 5536 K
File Attributes : A
==================================================
==================================================
Process Name : inetinfo.exe
ProcessID : 1768
Priority : Normal
Product Name : Internet Information Services
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Internet Information Services
Company : Microsoft Corporation
Window Title :
File Size : 15,872
File Created Date : 11/04/1428 03:49:51 م
File Modified Date : 17/06/1425 10:56:52 م
Filename : C:\WINDOWS\system32\inetsrv\inetinfo.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:50:02 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 9960 K
Mem Usage Peak : 10528 K
Page Faults : 2841
Pagefile Usage : 8812 K
Pagefile Peak Usage : 9244 K
File Attributes : A
==================================================
==================================================
Process Name : MDM.EXE
ProcessID : 1796
Priority : Normal
Product Name : Microsoft® Visual Studio .NET
Version : 7.00.9466
Description : Machine Debug Manager
Company : Microsoft Corporation
Window Title :
File Size : 322,120
File Created Date : 19/04/1424 08:25:00 م
File Modified Date : 19/04/1424 08:25:00 م
Filename : C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
Base Address : 0x00400000
Created On : 03/02/1429 02:50:02 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 3588 K
Mem Usage Peak : 3628 K
Page Faults : 1017
Pagefile Usage : 4064 K
Pagefile Peak Usage : 4120 K
File Attributes : A
==================================================
==================================================
Process Name : sqlservr.exe
ProcessID : 1812
Priority : Normal
Product Name : Microsoft SQL Server
Version : 2005.090.1399.00
Description : SQL Server Windows NT
Company : Microsoft Corporation
Window Title :
File Size : 28,768,528
File Created Date : 12/09/1426 10:51:46 ص
File Modified Date : 12/09/1426 10:51:46 ص
Filename : C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:50:02 ص
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 1588 K
Mem Usage Peak : 25164 K
Page Faults : 6782
Pagefile Usage : 32132 K
Pagefile Peak Usage : 35204 K
File Attributes : A
==================================================
==================================================
Process Name : SMAgent.exe
ProcessID : 280
Priority : Normal
Product Name : SoundMAX service agent
Version : 3, 2, 6, 0
Description : SoundMAX service agent component
Company : Analog Devices, Inc.
Window Title :
File Size : 45,056
File Created Date : 17/02/1428 05:41:51 م
File Modified Date : 14/07/1423 11:50:10 ص
Filename : C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:50:02 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 1948 K
Mem Usage Peak : 1948 K
Page Faults : 494
Pagefile Usage : 708 K
Pagefile Peak Usage : 708 K
File Attributes : A
==================================================
==================================================
Process Name : wdfmgr.exe
ProcessID : 536
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.2.3790.1230 built by: DNSRV(bld4act)
Description : Windows User Mode Driver Manager
Company : Microsoft Corporation
Window Title :
File Size : 38,912
File Created Date : 24/06/1425 10:45:04 م
File Modified Date : 24/06/1425 07:05:14 م
Filename : C:\WINDOWS\system32\wdfmgr.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:50:03 ص
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 1912 K
Mem Usage Peak : 1924 K
Page Faults : 479
Pagefile Usage : 2072 K
Pagefile Peak Usage : 2104 K
File Attributes : A
==================================================
==================================================
Process Name : wmiprvse.exe
ProcessID : 2316
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : WMI
Company : Microsoft Corporation
Window Title :
File Size : 218,112
File Created Date : 17/02/1428 05:17:47 م
File Modified Date : 18/06/1425 07:56:58 ص
Filename : C:\WINDOWS\system32\wbem\wmiprvse.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:50:07 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 5336 K
Mem Usage Peak : 5476 K
Page Faults : 2819
Pagefile Usage : 5008 K
Pagefile Peak Usage : 5864 K
File Attributes : A
==================================================
==================================================
Process Name : alg.exe
ProcessID : 2372
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Application Layer Gateway Service
Company : Microsoft Corporation
Window Title :
File Size : 44,544
File Created Date : 18/06/1425 04:56:48 ص
File Modified Date : 18/06/1425 04:56:48 ص
Filename : C:\WINDOWS\System32\alg.exe
Base Address : 0x01000000
Created On : 03/02/1429 02:50:07 ص
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 3748 K
Mem Usage Peak : 3768 K
Page Faults : 975
Pagefile Usage : 4152 K
Pagefile Peak Usage : 4184 K
File Attributes : A
==================================================
==================================================
Process Name : HPQWMI.exe
ProcessID : 2864
Priority : Normal
Product Name : hpqwmi Module
Version : 1, 0, 4, 1
Description : hpqwmi Module
Company : Hewlett-Packard Development Company, L.P.
Window Title :
File Size : 98,304
File Created Date : 17/02/1428 05:44:20 م
File Modified Date : 20/08/1425 08:40:18 ص
Filename : C:\Program Files\HPQ\SHARED\HPQWMI.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:50:14 ص
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 4056 K
Mem Usage Peak : 4084 K
Page Faults : 1045
Pagefile Usage : 5104 K
Pagefile Peak Usage : 5152 K
File Attributes : A
==================================================
==================================================
Process Name : wuauclt.exe
ProcessID : 3392
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 7.0.6000.381 (winmain(wmbla).070730-1740)
Description : Windows Update Automatic Updates
Company : Microsoft Corporation
Window Title :
File Size : 53,080
File Created Date : 17/02/1428 05:20:37 م
File Modified Date : 16/07/1428 04:19:16 م
Filename : C:\WINDOWS\system32\wuauclt.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:51:08 ص
Visible Windows : 0
Hidden Windows : 0
User Name : COOL16021428\Welcome
Mem Usage : 4108 K
Mem Usage Peak : 4124 K
Page Faults : 1063
Pagefile Usage : 5228 K
Pagefile Peak Usage : 5260 K
File Attributes : A
==================================================
==================================================
Process Name : iexplore.exe
ProcessID : 1052
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
Description : Internet Explorer
Company : Microsoft Corporation
Window Title : مشكلة في الـ Usb - زيزوووم للأمن والحمايه - Microsoft Internet Explorer
File Size : 93,184
File Created Date : 17/02/1428 05:19:57 م
File Modified Date : 18/06/1425 07:56:52 ص
Filename : C:\Program Files\Internet Explorer\iexplore.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:52:25 ص
Visible Windows : 2
Hidden Windows : 27
User Name : COOL16021428\Welcome
Mem Usage : 62028 K
Mem Usage Peak : 62092 K
Page Faults : 208009
Pagefile Usage : 61860 K
Pagefile Peak Usage : 64968 K
File Attributes : A
==================================================
==================================================
Process Name : msnmsgr.exe
ProcessID : 2632
Priority : Normal
Product Name : Messenger
Version : 8.1.0178.00
Description : Messenger
Company : Microsoft Corporation
Window Title : THE END WORLD، ? .? Ch!c Ch!ck ? .? - محادثة
File Size : 5,674,352
File Created Date : 01/01/1428 09:55:14 ص
File Modified Date : 01/01/1428 09:55:14 ص
Filename : C:\Program Files\MSN Messenger\msnmsgr.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:52:42 ص
Visible Windows : 5
Hidden Windows : 35
User Name : COOL16021428\Welcome
Mem Usage : 12984 K
Mem Usage Peak : 41168 K
Page Faults : 380072
Pagefile Usage : 40520 K
Pagefile Peak Usage : 50876 K
File Attributes : A
==================================================
==================================================
Process Name : msnmsgr.exe
ProcessID : 260
Priority : Normal
Product Name : Messenger
Version : 8.1.0178.00
Description : Messenger
Company : Microsoft Corporation
Window Title :
File Size : 5,674,352
File Created Date : 01/01/1428 09:55:14 ص
File Modified Date : 01/01/1428 09:55:14 ص
Filename : C:\Program Files\MSN Messenger\msnmsgr.exe
Base Address : 0x00400000
Created On : 03/02/1429 02:53:09 ص
Visible Windows : 1
Hidden Windows : 34
User Name : COOL16021428\Welcome
Mem Usage : 14812 K
Mem Usage Peak : 36300 K
Page Faults : 46703
Pagefile Usage : 27664 K
Pagefile Peak Usage : 29304 K
File Attributes : A
==================================================
==================================================
Process Name : IEXPLORE.EXE
ProcessID : 3752
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
Description : Internet Explorer
Company : Microsoft Corporation
Window Title :
File Size : 93,184
File Created Date : 17/02/1428 05:19:57 م
File Modified Date : 18/06/1425 07:56:52 ص
Filename : C:\Program Files\Internet Explorer\IEXPLORE.EXE
Base Address : 0x00400000
Created On : 03/02/1429 04:15:35 ص
Visible Windows : 0
Hidden Windows : 1
User Name : COOL16021428\Welcome
Mem Usage : 16260 K
Mem Usage Peak : 18284 K
Page Faults : 9842
Pagefile Usage : 12344 K
Pagefile Peak Usage : 14844 K
File Attributes : A
==================================================
==================================================
Process Name : ALJAWAL 3.5G HSDPA DATA CARD.exe
ProcessID : 2132
Priority : Normal
Product Name : ALJAWAL 3.5G HSDPA DATACARD
Version : HOST01.11.18.01.00.76
Description : ALJAWAL 3.5G HSDPA DATACARD
Company : Huawei Technologies
Window Title :
File Size : 335,872
File Created Date : 26/01/1429 10:01:45 ص
File Modified Date : 25/06/1428 01:09:18 م
Filename : C:\PROGRA~1\ALJAWA~1.5GH\ALJAWAL 3.5G HSDPA DATA CARD.exe
Base Address : 0x00400000
Created On : 03/02/1429 04:34:52 ص
Visible Windows : 0
Hidden Windows : 115
User Name : COOL16021428\Welcome
Mem Usage : 18920 K
Mem Usage Peak : 18980 K
Page Faults : 17741
Pagefile Usage : 13316 K
Pagefile Peak Usage : 13372 K
File Attributes : A
==================================================
==================================================
Process Name : runn.exe
ProcessID : 1996
Priority : Normal
Product Name :
Version :
Description :
Company :
Window Title :
File Size : 71,680
File Created Date : 03/02/1429 01:52:00 ص
File Modified Date : 23/01/1429 10:24:26 م
Filename : C:\DOCUME~1\Welcome\LOCALS~1\Temp\bntoz\runn.exe
Base Address : 0x00400000
Created On : 03/02/1429 04:52:00 ص
Visible Windows : 0
Hidden Windows : 0
User Name : COOL16021428\Welcome
Mem Usage : 2252 K
Mem Usage Peak : 2252 K
Page Faults : 642
Pagefile Usage : 924 K
Pagefile Peak Usage : 928 K
File Attributes : A
==================================================
==================================================
Process Name : cmd.exe
ProcessID : 3664
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : Windows Command Processor
Company : Microsoft Corporation
Window Title :
File Size : 388,608
File Created Date : 18/06/1425 04:56:50 ص
File Modified Date : 18/06/1425 04:56:50 ص
Filename : C:\WINDOWS\system32\cmd.exe
Base Address : 0x4AD00000
Created On : 03/02/1429 04:52:00 ص
Visible Windows : 0
Hidden Windows : 1
User Name : COOL16021428\Welcome
Mem Usage : 3008 K
Mem Usage Peak : 3072 K
Page Faults : 844
Pagefile Usage : 2184 K
Pagefile Peak Usage : 2260 K
File Attributes : A
==================================================
==================================================
Process Name : wmiprvse.exe
ProcessID : 1112
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Description : WMI
Company : Microsoft Corporation
Window Title :
File Size : 218,112
File Created Date : 17/02/1428 05:17:47 م
File Modified Date : 18/06/1425 07:56:58 ص
Filename : C:\WINDOWS\system32\wbem\wmiprvse.exe
Base Address : 0x01000000
Created On : 03/02/1429 04:52:02 ص
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 5824 K
Mem Usage Peak : 5824 K
Page Faults : 1484
Pagefile Usage : 6452 K
Pagefile Peak Usage : 6452 K
File Attributes : A
==================================================
==================================================
Process Name : CProcess.exe
ProcessID : 2496
Priority : Normal
Product Name : CurrProcess
Version : 1.11
Description : CurrProcess
Company : NirSoft
Window Title :
File Size : 35,840
File Created Date : 03/02/1429 01:51:59 ص
File Modified Date : 08/06/1426 04:46:34 ص
Filename : C:\DOCUME~1\Welcome\LOCALS~1\Temp\bntoz\CProcess.exe
Base Address : 0x00400000
Created On : 03/02/1429 04:52:10 ص
Visible Windows : 0
Hidden Windows : 0
User Name : COOL16021428\Welcome
Mem Usage : 2260 K
Mem Usage Peak : 2324 K
Page Faults : 999
Pagefile Usage : 960 K
Pagefile Peak Usage : 1628 K
File Attributes : A
==================================================
.
.
--------------------------\\\ End Report Of Running Processes ---------------
.
.
.
.
--------------------------\\\ Windows XP Startup List ---------------
.
HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute
autocheck autochk *
autocheck autochk *
Auto Check Utility
Microsoft Corporation
5.01.2600.2180
c:\windows\system32\autochk.exe
HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms
rdpclip
rdpclip
RDP Clip Monitor
Microsoft Corporation
5.01.2600.2180
c:\windows\system32\rdpclip.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\userinit.exe
Userinit Logon Application
Microsoft Corporation
5.01.2600.2180
c:\windows\system32\userinit.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\l
Explorer.exe
Explorer.exe
Windows Explorer
Microsoft Corporation
6.00.2900.3156
c:\windows\explorer.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
hpWirelessAssistant
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
hp Wireless Assistant Module
Hewlett-Packard Company
1.00.0000.0026
c:\program files\hpq\hp wireless assistant\hp wireless assistant.exe
TkBellExe
"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
RealNetworks Scheduler
RealNetworks, Inc.
0.01.0000.3760
c:\program files\common files\real\update_ob\realsched.exe
HP Software Update
D:\Program Files\hp\HP Software Update\HPWuSchd2.exe
Hewlett-Packard Product Assistant
Hewlett-Packard Co.
53.00.0013.0000
d:\program files\hp\hp software update\hpwuschd2.exe
SoundMAXPnP
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
SMax4PNP MFC Application
Analog Devices, Inc.
5.00.0002.0002
c:\program files\analog devices\soundmax\smax4pnp.exe
SoundMAX
"C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
SoundMAX Control Center
Analog Devices, Inc.
5.00.0002.0006
c:\program files\analog devices\soundmax\smax4.exe
kav
"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
Kaspersky Anti-Virus
Kaspersky Lab
6.00.0000.0299
c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avp.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
HP Digital Imaging Monitor
Hewlett-Packard Co.
53.00.0013.0000
d:\program files\hp\digital imaging\bin\hpqtra08.exe
BTTray.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\BTTray.lnk
Bluetooth Tray Application
Broadcom Corporation.
4.00.0001.0600
c:\program files\widcomm\bluetooth software\bttray.exe
Adobe Reader Speed Launch.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
Adobe Acrobat SpeedLauncher
Adobe Systems Incorporated
8.00.0000.0000
d:\program files\reader\reader_sl.exe
Adobe Reader Synchronizer.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
8.00.0000.0000
d:\program files\reader\adobecollabsync.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
MSMSGS
"C:\Program Files\Messenger\msmsgs.exe" /background
Windows Messenger
Microsoft Corporation
4.07.0000.3001
c:\program files\messenger\msmsgs.exe
ctfmon.exe
C:\WINDOWS\system32\ctfmon.exe
CTF Loader
Microsoft Corporation
5.01.2600.2180
c:\windows\system32\ctfmon.exe
Task Scheduler
1-Click Maintenance.job
C:\Program Files\TuneUp Utilities 2006\SystemOptimizer.exe /schedulestart
TuneUp System Optimizer
TuneUp Software GmbH
1.03.0000.0391
c:\program files\tuneup utilities 2006\systemoptimizer.exe
ErrorKiller Scheduled Scan.job
D:\Program Files\ErrorKiller\ErrorKiller.exe scheduled
File not found: D:\Program Files\ErrorKiller\ErrorKiller.exe scheduled
HPpromotions journeysoftware.job
C:\Program Files\hp\digital imaging\bin\hp promotions\journeysoftware\HPpromo.exe /N "journeysoftware" -r
HPpromo
hp
5.00.0001.0006
c:\program files\hp\digital imaging\bin\hp promotions\journeysoftware\hppromo.exe
.
.
----------- End Report ---------------
