

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = *. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = *.

MSIE: Internet Explorer v6.00 SP2 (.2180)Ĭ:\Program Files\Windows Defender\MsMpEng.exeĬ:\Program Files\Lavasoft\Ad-Aware\aawservice.exeĬ:\Program Files\F-Secure\Anti-Virus\fsgk32st.exeĬ:\Program Files\F-Secure\Common\FSMA32.EXEĬ:\Program Files\F-Secure\Anti-Virus\FSGK32.EXEĬ:\Program Files\F-Secure\Common\FSMB32.EXEĬ:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exeĬ:\Program Files\F-Secure\Common\FCH32.EXEĬ:\Program Files\F-Secure\Anti-Virus\fsqh.exeĬ:\Program Files\F-Secure\Common\FAMEH32.EXEĬ:\Program Files\F-Secure\Common\FNRB32.EXEĬ:\Program Files\F-Secure\FSAUA\program\fsaua.exeĬ:\Program Files\F-Secure\Common\FIH32.EXEĬ:\Program Files\F-Secure\FWES\Program\fsdfwd.exeĬ:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exeĬ:\Program Files\F-Secure\Anti-Virus\fsav32.exeĬ:\Program Files\Common Files\InstallShield\UpdateService\issch.exeĬ:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exeĬ:\Program Files\F-Secure\Common\FSM32.EXEĬ:\Program Files\Spybot - Search & Destroy\TeaTimer.exeĬ:\Program Files\F-Secure\FSGUI\fsguidll.exeĬ:\program files\common files\installshield\updateservice\isuspm.exeĬ:\Program Files\Common Files\InstallShield\UpdateService\agent.exeĬ:\Program Files\F-Secure\Anti-Virus\fssm32.exeĬ:\Program Files\Security Task Manager\TaskMan.exeĬ:\Program Files\Internet Explorer\IEXPLORE.EXEĬ:\Program Files\Trend Micro\HijackThis\HijackThis.exe Had three or so Trojans that I think F-secure removed but they kept popping up even after they were removed in past so not sure if "removal" is final. Ad-Aware, F-Secure finds infected files - can't remove (or do so fully), previous Trojans found and removed(?) after browsers hijacked think spyware/trojans still lurking somewhere.
