DDS (Ver_09-09-29.01) - NTFSx86
Run by root at 22:19:15.81 on Sun 04/04/2010
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Professional  5.1.2600.3.1256.20.1033.18.1917.1452 [GMT -7:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Opera\opera.exe
C:\DOCUME~1\root\LOCALS~1\Temp\winvrrji.exe
C:\Documents and Settings\root\Desktop\dds.com

============== Pseudo HJT Report ===============

uStart Page = about:blank
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe"  -osboot
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
uPolicies-system: DisableTaskMgr = 1 (0x1)
uPolicies-system: DisableRegistryTools = 1 (0x1)
mPolicies-system: EnableLUA = 0 (0x0)
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

============= SERVICES / DRIVERS ===============

RUnknown abp470n5;abp470n5; [x]
S2 eabcdryme;System Image;c:\windows\system32\svchost.exe -k netsvcs [2008-4-14 14336]
S3 XDva346;XDva346;\??\c:\windows\system32\xdva346.sys --> c:\windows\system32\XDva346.sys [?]

=============== Created Last 30 ================

2010-04-04 22:03	<DIR>	a-dshr--	C:\cmdcons
2010-04-04 22:00	261,632	a-------	c:\windows\PEV.exe
2010-04-04 22:00	161,792	a-------	c:\windows\SWREG.exe
2010-04-04 22:00	98,816	a-------	c:\windows\sed.exe
2010-04-04 22:00	77,312	a-------	c:\windows\MBR.exe
2010-04-04 21:06	<DIR>	--d-----	c:\program files\common files\xing shared
2010-04-04 21:05	499,712	a-------	c:\windows\system32\msvcp71.dll
2010-04-04 21:05	348,160	a-------	c:\windows\system32\msvcr71.dll
2010-04-04 18:06	<DIR>	--d-----	c:\windows\system32\wbem\Repository
2010-04-04 05:49	<DIR>	--d-----	c:\program files\VideoLAN
2010-04-04 05:47	<DIR>	--d-----	c:\program files\common files\Real
2010-04-04 05:31	<DIR>	--d-----	c:\program files\DesktopNerds
2010-04-04 05:26	<DIR>	--d-----	C:\CFLog
2010-04-04 05:21	<DIR>	--d-----	c:\program files\Z8Games
2010-04-04 03:20	<DIR>	--d-----	c:\program files\Xfire
2010-04-04 02:24	<DIR>	--d-----	c:\docume~1\root\applic~1\X-Chat 2
2010-04-04 00:58	940,794	a-------	c:\windows\system32\LoopyMusic.wav
2010-04-04 00:58	146,650	a-------	c:\windows\system32\BuzzingBee.wav
2010-04-04 00:58	<DIR>	--d-----	c:\windows\system32\Lang
2010-04-04 00:57	<DIR>	--d-----	c:\documents and settings\root
2010-04-04 00:57	553	a-------	c:\windows\USetup.iss
2010-04-04 00:56	<DIR>	--d-----	c:\program files\Realtek
2010-04-04 00:55	140,694	a-------	c:\windows\system32\nvapps.xml
2010-04-04 00:55	17,525	a-------	c:\windows\system32\nvdisp.nvu
2010-04-04 00:55	<DIR>	--d-----	c:\windows\nview
2010-04-04 00:55	356,352	a-------	c:\windows\system32\nvudisp.exe
2010-04-04 00:53	356,352	a----r--	c:\windows\system32\NVUNINST.EXE
2010-04-04 00:52	<DIR>	--d-----	c:\program files\Spyware Doctor
2010-04-04 00:50	<DIR>	--ds----	c:\windows\system32\Microsoft
2010-04-04 00:43	8,192	a-------	c:\windows\REGLOCS.OLD
2010-04-04 00:41	101,888	ac------	c:\windows\system32\dllcache\evntagnt.dll
2010-04-04 00:41	<DIR>	--d-----	c:\program files\X-Chat 2
2010-04-04 00:40	<DIR>	--dsh---	c:\documents and settings\all users\DRM
2010-04-04 00:40	<DIR>	--ds----	c:\windows\Downloaded Program Files
2010-04-04 00:40	<DIR>	--d--r--	c:\windows\Offline Web Pages
2010-04-04 00:40	488	a---hr--	c:\windows\system32\WindowsLogon.manifest
2010-04-04 00:40	488	a---hr--	c:\windows\system32\logonui.exe.manifest
2010-04-04 00:40	749	a---hr--	c:\windows\WindowsShell.Manifest
2010-04-04 00:40	749	a---hr--	c:\windows\system32\wuaucpl.cpl.manifest
2010-04-04 00:40	749	a---hr--	c:\windows\system32\sapi.cpl.manifest
2010-04-04 00:40	749	a---hr--	c:\windows\system32\nwc.cpl.manifest
2010-04-04 00:40	749	a---hr--	c:\windows\system32\ncpa.cpl.manifest
2010-04-04 00:40	749	a---hr--	c:\windows\system32\cdplayer.exe.manifest
2010-04-04 00:40	<DIR>	--d-h---	c:\program files\WindowsUpdate
2010-04-04 00:39	<DIR>	--d-----	c:\program files\common files\MSSoap
2010-04-04 00:37	<DIR>	--d-----	c:\program files\Online Services
2010-04-04 00:37	<DIR>	--ds----	c:\documents and settings\root\UserData
2010-04-04 00:37	<DIR>	--d-----	c:\program files\Messenger
2010-04-04 00:37	<DIR>	--d-----	c:\program files\MSN Gaming Zone
2010-04-04 00:37	<DIR>	--d-----	c:\program files\Windows NT
2010-04-03 16:31	<DIR>	--d-----	c:\program files\common files\ODBC
2010-04-03 16:31	<DIR>	--d-----	c:\program files\common files\SpeechEngines
2010-04-03 16:30	<DIR>	--d--r--	c:\documents and settings\all users\Documents

==================== Find3M  ====================

2010-04-04 00:56	315,392	a-------	c:\windows\HideWin.exe
2010-04-04 00:52	86,327	a-------	c:\windows\pchealth\helpctr\offlinecache\index.dat
2010-04-04 00:38	21,640	a-------	c:\windows\system32\emptyregdb.dat
2008-04-14 05:00	164,072	a--shr--	c:\windows\system32\lsgzhdk.dll

============= FINISH: 22:19:23.14 ===============