Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe
MSMSGS = "C:\Program Files\Messenger\msmsgs.exe" /background

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = NOTEPAD.EXE %1

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry key not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Browser Helper Objects:

(no name) - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll - {02478D38-C3F9-4EFB-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD}
(no name) - C:\Program Files\Windows Desktop Search\dsWebAllow.dll - {2F85D76C-0569-466F-A488-493E6BD0E955}
My Global Search Bar BHO - C:\Program Files\MyGlobalSearch\bar\4.bin\MGSBAR.DLL - {37B85A21-692B-4205-9CAD-2626E4993404}
(no name) - C:\Program Files\NewDotNet\newdotnet7_48.dll - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E}
(no name) - C:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - (no file) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB}
(no name) - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
(no name) - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll - {9030D464-4C02-4ABF-8ECC-5164760863C6}
(no name) - C:\Program Files\Windows Live Toolbar\msntb.dll - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
XBTP02634 - (no file) - {F97DA966-F09D-4cab-BF29-75A0026986EA}

--------------------------------------------------

Enumerating Task Scheduler jobs:

MP Scheduled Scan.job

--------------------------------------------------

Enumerating Download Program Files:

[StagingUI Object]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\STAGINGUI.OCX
CODEBASE = http://zone.msn.com/binFrameWork/v10...I.cab34120.cab

[Controller Class]
CODEBASE = https://www.windowsonecare.com/insta...SSWebAgent.CAB

[Windows Genuine Advantage Validation Tool]
InProcServer32 = C:\WINDOWS\system32\legitcheckcontrol.dll
CODEBASE = http://go.microsoft.com/fwlink/?linkid=39204

[{1F2F4C9E-6F09-47BC-970D-3C54734667FE}]
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab

[Yahoo! Audio Conferencing]
InProcServer32 = C:\PROGRA~1\Yahoo!\MESSEN~1\yacscom.dll
CODEBASE = http://us.chat1.yimg.com/us.yimg.com...45/yacscom.cab

[Microsoft Data Collection Control]
InProcServer32 = C:\WINDOWS\system32\odc.dll
CODEBASE = https://support.microsoft.com/OAS/ActiveX/odc.cab

[YInstStarter Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\yinsthelper.dll
CODEBASE = http://us.dl1.yimg.com/download.yaho...st_current.cab

[{33564D57-0000-0010-8000-00AA00389B71}]
CODEBASE = http://download.microsoft.com/downlo...22/wmv9VCM.CAB

[{3451DEDE-631F-421C-8127-FD793AFC6CC8}]
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab

[ZoneBuddy Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\ZBUDDY.OCX
CODEBASE = http://zone.msn.com/BinFrameWork/v10...y.cab32846.cab

[{44990200-3C9D-426D-81DF-AAB636FA4345}]
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab

[{44990301-3C9D-426D-81DF-AAB636FA4345}]
CODEBASE = http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab

[MSN Photo Upload Tool]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll
CODEBASE = http://groups.msn.com/controls/PhotoUC/MsnPUpld.cab

[ZonePAChat Object]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\ZPACHAT.OCX
CODEBASE = http://zone.msn.com/binframework/v10...t.cab32846.cab

[WUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\wuweb.dll
CODEBASE = http://update.microsoft.com/windowsu...?1152911741953

[MUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\muweb.dll
CODEBASE = http://update.microsoft.com/microsof...?1153203545156

[{9C024426-7859-4B2D-AB4C-B1E370AE7549}]
CODEBASE = http://ca.mcafee.com/Apps/WSC/en-ca/...cannerCtrl.cab

[Update Class]
InProcServer32 = C:\WINDOWS\system32\iuctl.dll
CODEBASE = http://v4.windowsupdate.microsoft.co...987.9850231481

[MsnMessengerSetupDownloadControl Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNMESSENGERSETUPDOWNLOADER.OCX
CODEBASE = http://messenger.msn.com/download/Ms...Downloader.cab

[ZoneIntro Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\ZINTRO.OCX
CODEBASE = http://zone.msn.com/binFramework/v10...o.cab34246.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx
CODEBASE = http://fpdownload2.macromedia.com/ge...sh/swflash.cab

[StadiumProxy Class]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\STPROXY.DLL
CODEBASE = http://zone.msn.com/binframework/v10...y.cab35645.cab

[{E5D419D6-A846-4514-9FAD-97E826C84822}]
CODEBASE = http://fdl.msn.com/zone/datafiles/heartbeat.cab

[MSN Chat Control 4.5]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\MSNCHAT45.OCX
CODEBASE = http://chat.msn.com/controls/msnchat45.cab

[CheckersZPA Object]
InProcServer32 = C:\WINDOWS\DOWNLOADED PROGRAM FILES\CHECKERSZPA.OCX
CODEBASE = http://zone.msn.com/bingame/zpagames...A.cab38514.cab

--------------------------------------------------

Enumerating Winsock LSP files:

Protocol #1: C:\Program Files\Spyware Doctor\FilterLSP.dll
Protocol #2: C:\Program Files\Spyware Doctor\FilterLSP.dll
Protocol #3: C:\Program Files\Spyware Doctor\FilterLSP.dll
Protocol #4: C:\Program Files\Common Files\PC Tools\LSP\PCTLsp.dll
Protocol #5: C:\Program Files\Common Files\PC Tools\LSP\PCTLsp.dll
Protocol #6: C:\Program Files\Common Files\PC Tools\LSP\PCTLsp.dll
Protocol #12: C:\Program Files\iolo\Common\Firewall\iFW_Xfilter.dll (file MISSING)
Protocol #13: C:\Program Files\iolo\Common\Firewall\iFW_Xfilter.dll (file MISSING)
Protocol #32: C:\Program Files\Common Files\PC Tools\LSP\PCTLsp.dll
Protocol #33: C:\Program Files\Spyware Doctor\FilterLSP.dll

--------------------------------------------------