

O4 - HKUS\.DEFAULT\.\Run: C:\Program Files\InternetSecurity2010\IS2010. This anticheat and antipiracy 'tool' is a bit over eager - seems like it thinks that running VMs is as asocial as piracy. O4 - HKCU\.\Run: C:\Program Files\InternetSecurity2010\IS2010.exe nProtect GameGuard seems to be an application that does not like Workstation and VMplayer it crashes running VMs instantly or with a delay. O4 - HKCU\.\Run: C:\Program Files\PeerBlock\peerblock.exe

O4 - HKCU\.\Run: "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\.\Run: C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\.\Run: "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKLM\.\Run: Rundll32.exe "c:\windows\system32\ridadane.dll",a O4 - HKLM\.\Run: C:\WINDOWS\system32\smss32.exe Failed to connect to the GameGuard update server. O4 - HKLM\.\Run: "C:\Program Files\QuickTime\qttask.exe" -atboottime Try connecting again or confirm its network status and/or pressing 'Retry' button.

O1 - Hosts: 91.212.127.227 O2 - BHO: (no name) - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll There are already a few things I find weird, one of which is the files from 'INCA Internet Co. R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = į2 - REG:system.ini: UserInit=C:\WINDOWS\system32\winlogon32.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = C:\Program Files\Belkin\Belkin 802.11g Wireless PCI Card Configuration Utility\Belkinwcui.exeĬ:\Program Files\Mozilla Firefox\firefox.exeĬ:\Program Files\Trend Micro\HijackThis\HijackThis.exe
