HJT log

[Sylvander]

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 11:09:20, on 07/09/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZONELABS\vsmon.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\PROGRA~1\CPUUSAGE\CpuUsage.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\Promon.exe
C:\WINNT\StartupMonitor.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\cahoot webcard\CahootWebcard.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Wireless Device\Versato.exe
C:\Program Files\Wireless Device\MulMouse.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\Wireless Device\MagicWl.exe
C:\Program Files\Wireless Device\OSD.EXE
C:\Program Files\HijackThis v2,00 Beta\HiJackThis_v2.exe
C:\Program Files\Mozilla Firefox\firefox.exe

O2 - BHO: (no name) - s - (no file)
O2 - BHO: (no name) - SlimBho2.dll' - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Orbiscom - {D81AB57B-7327-4347-B7C7-9EF7CA87CE09} - C:\WINNT\system32\SlimBho2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: &Netcraft Toolbar - {D554D8FC-B36D-4BB4-93DB-4A3394D505E3} - C:\Program Files\Netcraft Toolbar\nctb.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Promon.exe] Promon.exe
O4 - HKLM\..\Run: [Run StartupMonitor] StartupMonitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CahootWebcard] C:\Program Files\cahoot webcard\CahootWebcard.exe /dontopenmycards
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [TClockEx] C:\Program Files\TClockEx\TCLOCKEX.EXE
O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O4 - Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Enable Wireless Keyboard Driver.lnk = C:\Program Files\Wireless Device\Versato.exe
O4 - Global Startup: Enable Wireless Mouse Driver.lnk = C:\Program Files\Wireless Device\MulMouse.exe
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINNT\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINNT\System32\browseui.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: CpuUsage (CpuUsageServ) - OuterTechnologies - C:\PROGRA~1\CPUUSAGE\CpuUsage.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: O&O Defrag 2000 (OOD2000) - O&O Software GmbH - C:\WINNT\system32\OOD2000.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZONELABS\vsmon.exe

--
End of file - 6148 bytes

[classicsoftware]

Any symptoms or problems?????

[Sylvander]

Nothing serious that I'm aware of.

There's no "Windows->Open Program" event in "Sounds and Multimedia".
I can't get my CD-R drive to burn [it's probably the drive that's faulty].
I find if I "Hibernate", then "Resume" things don't work right [no response to clicking on an icon].
All's well if I shut down and restart, or just restart.

[Sylvander]

Anyone awake? :(

[classicsoftware]

Anyone awake? :(

Not really. My bad. I don't see anything in your log. You can run Comboxfix and see if it finds anything.... Postr the log and I won't wait 2 weeks to respond this time.....

[Sylvander]

ComboFix 07-09-18.4 - "abb" 20/09/2007 7:23:08.1 - FAT32x86
Microsoft Windows 2000 Professional 5.0.2195.4.1252.1.1033.18.134 [GMT 1:00]
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINNT\system32\regsvc.exe

.
((((((((((((((((((((((((( Files Created from 2007-08-20 to 2007-09-20 )))))))))))))))))))))))))))))))
.

2007-09-20 07:21 51,200 --a------ C:\WINNT\NirCmd.exe
2007-09-20 06:31 16,384 --a----t- C:\WINNT\system32\Perflib_Perfdata_2a4.dat
2007-09-19 20:45 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\MailFrontier
2007-09-18 16:17 98,304 --a------ C:\WINNT\system32\qttask.exe
2007-09-18 16:13 <DIR> d-------- C:\Program Files\ACE Mega CoDecS Pack
2007-09-18 15:25 16,384 --a------ C:\WINNT\system32\Perflib_Perfdata_424.dat
2007-09-18 11:45 <DIR> d-------- C:\Program Files\GSpot
2007-09-18 10:18 <DIR> d-------- C:\Program Files\RADVideo
2007-09-18 09:59 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\LightScribe
2007-09-18 09:57 16,384 --a------ C:\WINNT\system32\Perflib_Perfdata_430.dat
2007-09-17 09:27 <DIR> d-------- C:\Program Files\Common Files\LightScribe
2007-09-17 09:21 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\Ahead
2007-09-17 09:17 <DIR> d-------- C:\Program Files\Nero
2007-09-17 09:17 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-09-17 09:17 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
2007-09-16 10:04 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\BitTorrent
2007-09-15 11:12 16,384 --a------ C:\WINNT\system32\Perflib_Perfdata_39c.dat
2007-09-15 08:07 16,384 --a------ C:\WINNT\system32\Perflib_Perfdata_3f8.dat
2007-09-15 08:07 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\Skype
2007-09-15 08:06 <DIR> d-------- C:\Program Files\Skype
2007-09-15 08:06 <DIR> d-------- C:\Program Files\Common Files\Skype
2007-09-15 08:06 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
2007-09-14 10:03 <DIR> d-------- C:\Program Files\Audacity
2007-09-13 15:11 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\AdobeUM
2007-09-09 12:28 <DIR> d-------- C:\Program Files\CDCheck
2007-09-09 07:59 <DIR> d-------- C:\Program Files\Smart Projects
2007-09-07 16:29 <DIR> d--h----- C:\WINNT\PIF
2007-09-07 09:59 <DIR> d-------- C:\DOCUME~1\abb\.thinupload
2007-09-07 09:26 <DIR> d-------- C:\Program Files\ParLoc
2007-09-07 09:14 <DIR> d-------- C:\Program Files\MP3Gain
2007-09-07 08:56 <DIR> d-------- C:\Program Files\Spider v1,16
2007-09-07 08:46 <DIR> d-------- C:\Program Files\CDex_150
2007-09-07 08:32 <DIR> d-------- C:\Program Files\OpenExpert
2007-09-01 17:17 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\Ashampoo
2007-09-01 17:16 <DIR> d-------- C:\Program Files\Ashampoo
2007-09-01 17:16 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\ashampoo
2007-08-29 14:53 <DIR> d-------- C:\Program Files\HP Simple Backup
2007-08-29 14:48 <DIR> d-------- C:\WINNT\system32\dla
2007-08-28 21:47 <DIR> d-------- C:\Program Files\Unknown Device Identifier v5,02
2007-08-28 21:32 12,592 --a------ C:\WINNT\system32\drivers\UsbScan.sys
2007-08-26 22:17 16,384 --a------ C:\WINNT\system32\Perflib_Perfdata_3c0.dat
2007-08-24 09:47 76,976 -ra------ C:\WINNT\system32\drivers\pnp680r.sys
2007-08-22 10:13 <DIR> d-------- C:\WINNT\ShellNew
2007-08-21 23:11 109,782 --a------ C:\WINNT\CopernicAgentUninstall.exe
2007-08-21 23:11 <DIR> d-------- C:\Program Files\Copernic Agent
2007-08-21 23:11 <DIR> d-------- C:\Program Files\Common Files\Copernic
2007-08-21 23:11 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\Copernic
2007-08-21 19:02 86,016 --a------ C:\WINNT\unvise32qt.exe
2007-08-21 18:58 <DIR> d-------- C:\WINNT\system32\QuickTime
2007-08-21 18:58 <DIR> d-------- C:\Program Files\QuickTime
2007-08-21 18:57 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
2007-08-21 16:56 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\COWON
2007-08-21 16:54 <DIR> d-------- C:\Program Files\JetAudio
2007-08-21 16:54 <DIR> d-------- C:\Program Files\Common Files\COWON
2007-08-21 16:21 <DIR> d-------- C:\My Music
2007-08-21 16:18 <DIR> d-------- C:\Program Files\Common Files\xing shared
2007-08-21 16:16 <DIR> d-------- C:\Program Files\Real
2007-08-21 16:16 <DIR> d-------- C:\Program Files\Common Files\Real
2007-08-21 16:15 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\Real
2007-08-21 12:02 <DIR> d-------- C:\Program Files\GPLGS
2007-08-21 12:01 87,800 --a------ C:\WINNT\system32\cpwmon2k.dll
2007-08-21 12:01 <DIR> d-------- C:\Program Files\Acro Software
2007-08-21 10:50 <DIR> d-------- C:\Program Files\BillP Studios
2007-08-21 10:50 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\WinPatrol
2007-08-21 10:39 12,032 --a------ C:\WINNT\system32\drivers\phylock.sys
2007-08-21 10:32 <DIR> d-------- C:\Program Files\Image for Windows
2007-08-21 09:08 75,248 --a------ C:\WINNT\zllsputility.exe
2007-08-21 09:08 4,212 ---h----- C:\WINNT\system32\zllictbl.dat
2007-08-21 09:08 11,264 --a------ C:\WINNT\system32\SpOrder.dll
2007-08-21 09:07 1,086,952 --a------ C:\WINNT\system32\zpeng24.dll
2007-08-21 09:07 <DIR> d-------- C:\WINNT\system32\ZoneLabs
2007-08-21 09:06 <DIR> d-------- C:\WINNT\Internet Logs
2007-08-20 22:27 8,448 --a------ C:\WINNT\system32\drivers\Moufiltr.sys
2007-08-20 22:27 57,344 --a------ C:\WINNT\system32\HKLock.dll
2007-08-20 22:27 57,344 --a------ C:\WINNT\HKLock.dll
2007-08-20 22:27 358,912 --a------ C:\WINNT\CallVers.exe
2007-08-20 22:27 13,312 --a------ C:\WINNT\system32\drivers\kbfilter.sys
2007-08-20 22:27 11,648 --a------ C:\WINNT\system32\drivers\UsbFltr.sys
2007-08-20 22:26 306,688 --a------ C:\WINNT\IsUninst.exe
2007-08-20 22:26 <DIR> d-------- C:\Program Files\Wireless Device
2007-08-20 20:45 <DIR> d-------- C:\Program Files\hp deskjet 840c series
2007-08-20 20:45 <DIR> d-------- C:\Program Files\Hewlett-Packard
2007-08-20 19:39 16,384 --a------ C:\WINNT\system32\Perflib_Perfdata_240.dat
2007-08-20 17:21 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\mirkes.de
2007-08-20 16:35 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\RootsMagic
2007-08-20 16:35 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\RootsMagic
2007-08-20 15:27 6,550 --a------ C:\WINNT\jautoexp.dat
2007-08-20 15:27 46,352 --a------ C:\WINNT\setdebug.exe
2007-08-20 15:27 313,856 --a------ C:\WINNT\system32\dx3j.dll
2007-08-20 15:27 171,280 --a------ C:\WINNT\system32\jit.dll
2007-08-20 15:27 139,536 --a------ C:\WINNT\system32\javaee.dll
2007-08-20 15:20 <DIR> d--h----- C:\WINNT\$SQLUninstallMDAC28SP1-KB927779-x86-ENU$
2007-08-20 15:15 2,071,368 --------- C:\WINNT\system32\dllcache\wmvcore.dll
2007-08-20 15:12 840,976 --------- C:\WINNT\system32\dllcache\mmcndmgr.dll
2007-08-20 15:04 0 --a------ C:\WINNT\nsreg.dat
2007-08-20 15:04 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\Talkback
2007-08-20 07:08 299,520 --a------ C:\WINNT\uninst.exe
2007-08-20 07:00 <DIR> d-------- C:\WINNT\forms
2007-08-20 07:00 <DIR> d-------- C:\Program Files\Windows Messaging
2007-08-19 22:33 <DIR> d-------- C:\DOCUME~1\abb\APPLIC~1\MailWasher

[Sylvander]

(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
18/08/07 15:00 58000 --a------ C:\WINNT\system32\drivers\cdr4_2K.sys
18/08/07 15:00 23420 --a------ C:\WINNT\system32\drivers\cdralw2k.sys
17/08/07 23:49 --------- d-------- C:\Program Files\microsoft frontpage
17/08/07 23:48 271 ---h----- C:\Program Files\desktop.ini
17/08/07 23:48 21952 ---h----- C:\Program Files\folder.htt
17/08/07 23:46 --------- d-------- C:\Program Files\Accessories
07/12/99 04:00 32528 --a------ C:\WINNT\inf\wbfirdma.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"Synchronization Manager"="mobsync.exe" [19/06/03 12:05 C:\WINNT\system32\mobsync.exe]
"Promon.exe"="Promon.exe" [13/04/00 18:34 C:\WINNT\system32\promon.exe]
"Run StartupMonitor"="StartupMonitor.exe" [20/05/00 17:23 C:\WINNT\StartupMonitor.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [12/07/07 04:00 ]
"Tweak UI"="TWEAKUI.CPL" [18/06/00 14:03 C:\WINNT\system32\tweakui.cpl]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [14/09/07 08:59 ]
"WinPatrol"="C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe" [06/08/07 18:06 ]
"CahootWebcard"="C:\Program Files\cahoot webcard\CahootWebcard.exe" [19/12/01 12:06 ]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [12/01/06 15:40 ]
"QuickTime Task"="C:\WINNT\system32\qttask.exe" [18/09/07 16:17 ]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [21/08/07 16:16 ]
"ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [06/09/07 16:14 ]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"internat.exe"="internat.exe" [07/12/99 04:00 C:\WINNT\system32\internat.exe]
"TClockEx"="C:\Program Files\TClockEx\TCLOCKEX.EXE" [09/03/00 01:15 ]
"BitTorrent"="C:\Program Files\BitTorrent\bittorrent.exe" [12/01/07 07:35 ]

[HKEY_USERS\.default\software\microsoft\windows\cur rentversion\runonce]
"^SetupICWDesktop"=C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop

[HKEY_USERS\.default\software\microsoft\windows\cur rentversion\run]
"internat.exe"=internat.exe

C:\DOCUME~1\ALLUSE~1\STARTM~1\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26]
Enable Wireless Keyboard Driver.lnk - C:\Program Files\Wireless Device\Versato.exe [2007-08-20 22:26:58]
Enable Wireless Mouse Driver.lnk - C:\Program Files\Wireless Device\MulMouse.exe [2007-08-20 22:27:03]

C:\DOCUME~1\abb\STARTM~1\PROGRAMS\STARTUP\
Office Startup.lnk - C:\Program Files\Microsoft Office\Office\OSA.EXE [1996-11-17]
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-08-20 07:12:28]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\sglfb.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\tga.sys]
@="Driver"

R0 phylock;phylock;C:\WINNT\system32\drivers\phylock. sys
R0 Pnp680r;Silicon Image SiI 0680 Medley Raid Controller;C:\WINNT\system32\DRIVERS\pnp680r.sys
R1 Avg7RsNT;AVG7 Resident Driver NT;C:\WINNT\system32\Drivers\avg7rsnt.sys
R1 kbfilter;Keyboard Filter Driver;C:\WINNT\system32\drivers\kbfilter.sys
R1 moufiltr;Mouse Filter Driver;C:\WINNT\system32\drivers\moufiltr.sys
R1 UsbFltr;WayTechUSBFilterDriver;C:\WINNT\system32\d rivers\UsbFltr.sys
R2 CpuUsageServ;CpuUsage;C:\PROGRA~1\CPUUSAGE\CpuUsag e.exe
R3 S3U10Scanner;600 CU Still Image Device Service;C:\WINNT\system32\drivers\usbscan.sys
R3 usbhub20;USB 2.0 Root Hub Support;C:\WINNT\system32\DRIVERS\usbhub20.sys

*Newly Created Service* - CATCHME
.
************************************************** ************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [url]http://www.gmer.net[/url]
Rootkit scan 2007-09-20 07:25:07
Windows 5.0.2195 Service Pack 4 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

************************************************** ************************
.
Completion time: 20/09/2007 7:26:10
C:\ComboFix-quarantined-files.txt ... 20/09/07 07:26
.
--- E O F ---

[classicsoftware]

Your system seem clean to me? How is it running????

[Sylvander]

Seems fine. :)

In the course of events, for other reasons...
I restored an image made just before "Combo Fix" was installed.

Now added all items on the HJT log to the "ignorelist", so if anything additional appears I'll study it.

So I guess I can consider that image clean/good. :D