Ok, here is my smitrem log. And, Yes! My desktop is finally back to normal! I can actually change the picture now! Thank you so much! Please let me know if I still have files/infections, etc., that need to be remove. Thanks.
smitRem © log file
version 2.8
by noahdfear
Microsoft Windows XP [Version 5.1.2600]
The current date is: Mon 03/27/2006
The current time is: 14:15:36.18
Running from
C:\Documents and Settings\Owner\Desktop\Unused Desktop Shortcuts\smitRem
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Pre-run SharedTask Export
(GetSTS.exe) SharedTaskScheduler exporter by Lawrence Abrams (Grinler)
Copyright(C) 2006 BleepingComputer.com
Registry Pseudo-Format Mode (Not a valid reg file):
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"
"{03B1C4D9-BC71-8916-38AD-9DEA5D213614}"="OLE Module"
"{DABB03E9-AC0D-3740-E3E5-4B37C80837E5}"="DDE Module"
"{38D4D5D0-423E-4220-B6F9-30918C2AE4A4}"=""
"{303F44D5-5FEA-4509-ABDE-5E00C3F2125A}"="DDE Module"
"{FB153DCE-822E-47ec-8D00-2706E7864B37}"=""
"{DABB23E9-AC0D-3740-E3E5-4B37C80837E5}"="DDE Module"
"{0BC9BC01-54D4-4CCE-2B7D-955164314CD4}"="OLE Module"
"{F33812FB-F35C-4674-90F6-FD757C419C51}"="DDE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
@="%SystemRoot%\System32\browseui.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
@="%SystemRoot%\System32\browseui.dll"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
checking for ShudderLTD key
ShudderLTD key not present!
checking for PSGuard.com key
PSGuard.com key not present!
checking for WinHound.com key
WinHound.com key not present!
spyaxe uninstaller NOT present
Winhound uninstaller NOT present
SpywareStrike uninstaller NOT present
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Existing Pre-run Files
~~~ Program Files ~~~
~~~ Shortcuts ~~~
Install.dat
~~~ Favorites ~~~
~~~ system32 folder ~~~
atmtd.dll._
~~~ Icons in System32 ~~~
~~~ Windows directory ~~~
desktop.html
~~~ Drive root ~~~
~~~ Miscellaneous Files/folders ~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003
Craig.Peacock@beyondlogic.org
Killing PID 1472 'explorer.exe'
Killing PID 1472 'explorer.exe'
Starting registry repairs
