[b]SDFix: Version 1.240 [/b] Run by me on Mon 05/18/2009 at 11:57 PM Microsoft Windows XP [Version 5.1.2600] Running From: C:\SDFix [b]Checking Services [/b]: Restoring Default Security Values Restoring Default Hosts File Rebooting [b]Checking Files [/b]: No Trojan Files Found Removing Temp Files [b]ADS Check [/b]: [b]Final Check [/b]: catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-19 00:30:52 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 [b]Remaining Services [/b]: Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:LocalSubNet:Disabled:@xpsp2res.dll,-22019" "C:\\Documents and Settings\\me\\Local Settings\\Temp\\WZSE0.TMP\\SymNRT.exe"="C:\\Documents and Settings\\me\\Local Settings\\Temp\\WZSE0.TMP\\SymNRT.exe:*:Enabled:Norton Removal Tool" "C:\\Program Files\\AVG\\AVG8\\avgupd.exe"="C:\\Program Files\\AVG\\AVG8\\avgupd.exe:*:Enabled:avgupd.exe" "C:\\Program Files\\AVG\\AVG8\\avgnsx.exe"="C:\\Program Files\\AVG\\AVG8\\avgnsx.exe:*:Enabled:avgnsx.exe" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" [b]Remaining Files [/b]: [b]Files with Hidden Attributes [/b]: Wed 22 Oct 2008 949,072 A.SHR --- "C:\Program Files\SpybotSD\advcheck.dll" Mon 15 Sep 2008 1,562,960 A.SHR --- "C:\Program Files\SpybotSD\SDHelper.dll" Mon 7 Jul 2008 1,429,840 A.SHR --- "C:\Program Files\SpybotSD\SDUpdate.exe" Mon 7 Jul 2008 4,891,472 A.SHR --- "C:\Program Files\SpybotSD\SpybotSD.exe" Thu 5 Mar 2009 2,260,480 A.SHR --- "C:\Program Files\SpybotSD\TeaTimer.exe" Wed 22 Oct 2008 962,896 A.SHR --- "C:\Program Files\SpybotSD\Tools.dll" Sun 26 Jun 2005 616,448 ..SHR --- "C:\Program Files\SUPER\cygwin1.dll" Tue 21 Jun 2005 45,568 ..SHR --- "C:\Program Files\SUPER\cygz.dll" Thu 27 Dec 2007 72,704 ..SHR --- "C:\Program Files\SUPER\Setup.exe" Wed 3 May 2006 163,328 ..SHR --- "C:\WINDOWS\system32\flvDX.dll" Wed 21 Feb 2007 31,232 ..SHR --- "C:\WINDOWS\system32\msfDX.dll" Mon 3 Jun 2002 84,992 ...HR --- "C:\Program Files\SUPER\mencoder\14_43260.dll" Mon 3 Jun 2002 44,032 ...HR --- "C:\Program Files\SUPER\mencoder\28_83260.dll" Mon 9 Dec 2002 73,766 ...HR --- "C:\Program Files\SUPER\mencoder\atrc3260.dll" Mon 9 Dec 2002 65,575 ...HR --- "C:\Program Files\SUPER\mencoder\cook3260.dll" Sun 9 Jun 2002 36,864 ...HR --- "C:\Program Files\SUPER\mencoder\ddnt3260.dll" Mon 3 Jun 2002 20,480 ...HR --- "C:\Program Files\SUPER\mencoder\dnet3260.dll" Mon 9 Dec 2002 102,437 ...HR --- "C:\Program Files\SUPER\mencoder\drv13260.dll" Mon 9 Dec 2002 176,165 ...HR --- "C:\Program Files\SUPER\mencoder\drv23260.dll" Mon 9 Dec 2002 208,935 ...HR --- "C:\Program Files\SUPER\mencoder\drv33260.dll" Mon 9 Dec 2002 217,127 ...HR --- "C:\Program Files\SUPER\mencoder\drv43260.dll" Sun 9 Jun 2002 40,448 ...HR --- "C:\Program Files\SUPER\mencoder\dspr3260.dll" Sat 3 Nov 2001 225,280 ...HR --- "C:\Program Files\SUPER\mencoder\ivvideo.dll" Tue 10 Apr 2001 225,280 ...HR --- "C:\Program Files\SUPER\mencoder\qtmlClient.dll" Fri 20 Feb 2004 232,960 ...HR --- "C:\Program Files\SUPER\mencoder\raac.dll" Sun 9 Jun 2002 525,824 ...HR --- "C:\Program Files\SUPER\mencoder\rnco3260.dll" Mon 9 Dec 2002 245,805 ...HR --- "C:\Program Files\SUPER\mencoder\rnlt3260.dll" Mon 9 Dec 2002 45,093 ...HR --- "C:\Program Files\SUPER\mencoder\rv103260.dll" Mon 9 Dec 2002 98,341 ...HR --- "C:\Program Files\SUPER\mencoder\rv203260.dll" Mon 9 Dec 2002 94,247 ...HR --- "C:\Program Files\SUPER\mencoder\rv303260.dll" Mon 9 Dec 2002 90,151 ...HR --- "C:\Program Files\SUPER\mencoder\rv403260.dll" Mon 9 Dec 2002 102,439 ...HR --- "C:\Program Files\SUPER\mencoder\sipr3260.dll" Sun 9 Jun 2002 49,152 ...HR --- "C:\Program Files\SUPER\mencoder\tokr3260.dll" [b]Finished![/b]