Velocity Reviews - IE Problem

I am stupid! I forgot the logs. After all I am only 10 years old.

HijackThis:

Logfile of HijackThis v1.98.2
Scan saved at 4:59:19 PM, on 9/16/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\cisvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\cidaemon.exe
C:\WINDOWS\system32\netdde.exe
C:\WINDOWS\system32\clipsrv.exe
C:\WINDOWS\wanmpsvc.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\PROGRA~1\AOLCOM~1\COMPAN~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\slrundll.exe
C:\HijackThis\HijackThis.exe

N1 - Netscape 4: user_pref("browser.startup.homepage",
"http://home.netscape.com/"); (C:\Program
Files\Netscape\Users\0470486_0001\prefs.js)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P
Networking.exe /AUTOSTART
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search &
Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program
Files\Microsoft Works\WkDetect.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program
Files\America Online 9.0\aoltray.exe
O4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL
Companion\companion.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: Norton Antivirus Fix 1.lnk = C:\Program Files\Common
Files\Symantec Shared\ccRegVfy.exe
O4 - Global Startup: Norton Antivirus Fix 2.lnk = C:\Program Files\Common
Files\Symantec Shared\ccApp.exe
O4 - Global Startup: Spybot SD Resident.lnk = C:\Program Files\Spybot -
Search & Destroy\TeaTimer.exe
O15 - Trusted Zone: *.bigfix.com
O15 - Trusted Zone: *.freearcade.com
O15 - Trusted Zone: *.houstonisd.org
O15 - Trusted Zone: *.jkrowling.com
O15 - Trusted Zone: *.mugglenet.com
O15 - Trusted Zone: *.scholastic.com
O15 - Trusted Zone: http://www.scsmgmt.com
O15 - Trusted Zone: *.warnerbros.com
O15 - Trusted Zone: *.windowsupdate.com
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) -
http://www.symantec.com/techsupp/act...a/SymAData.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) -
http://www.symantec.com/techsupp/act...ActiveData.cab

Spybot S&D:

--- Search result list ---
Error during check!: Winpup32 (Ungültiger Datentyp für '') ()

Conducent TimeSink: System library (File, fixed)
C:\WINDOWS\VcpDLL.dll

Conducent TimeSink: System library (File, fixed)
C:\WINDOWS\TSAd.dll

Conducent TimeSink: Global settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\Software\TimeSink, Inc.

Conducent TimeSink: Program directory (Directory, fixed)
C:\Program Files\TimeSink\

Conducent TimeSink: Settings for current user (Registry key, fixed)

HKEY_USERS\S-1-5-21-1535768319-4018756791-2989862193-1005\Software\TimeSink,
Inc.

DSO Exploit: Data source object exploit (Registry change, fixed)
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Inter net
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, fixed)

HKEY_USERS\S-1-5-21-1535768319-4018756791-2989862193-1005\Software\Microsoft\Windows\CurrentVersion\Int ernet
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, fixed)
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Inter net
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, fixed)
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Inter net
Settings\Zones\0\1004!=W=3

DSO Exploit: Data source object exploit (Registry change, fixed)
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Internet
Settings\Zones\0\1004!=W=3

--- Spybot - Search && Destroy version: 1.3 ---
2004-05-12 Includes\Cookies.sbi
2004-05-12 Includes\Dialer.sbi
2004-05-12 Includes\Hijackers.sbi
2004-05-12 Includes\Keyloggers.sbi
2004-05-12 Includes\LSP.sbi
2004-05-12 Includes\Malware.sbi
2004-05-12 Includes\Revision.sbi
2004-05-12 Includes\Security.sbi
2004-05-12 Includes\Spybots.sbi
2004-05-12 Includes\Tracks.uti
2004-05-12 Includes\Trojans.sbi

--- System information ---
Windows XP (Build: 2600) Service Pack 1
/ DataAccess: Microsoft Data Access Components KB870669
/ DataAccess: Security update for Microsoft Data Access Components
/ DirectX / DX9 / SP1: DirectX 9 Hotfix - KB839643
/ Windows Media Player: Windows Media Update 817787
/ Windows XP / SP2: Windows XP Hotfix - KB823182
/ Windows XP / SP2: Windows XP Hotfix - KB824105
/ Windows XP / SP2: Windows XP Hotfix - KB825119
/ Windows XP / SP2: Windows XP Hotfix - KB826939
/ Windows XP / SP2: Windows XP Hotfix - KB828035
/ Windows XP / SP2: Windows XP Hotfix - KB828741
/ Windows XP / SP2: Windows XP Hotfix - KB835732
/ Windows XP / SP2: Windows XP Hotfix - KB837001
/ Windows XP / SP2: Windows XP Hotfix - KB840315
/ Windows XP / SP2: Windows XP Hotfix - KB840374
/ Windows XP / SP2: Windows XP Hotfix - KB841873
/ Windows XP / SP2: Windows XP Hotfix (SP2) [See Q329048 for more
information]

--- Startup entries list ---
Located: HK_LM:Run, AltnetPointsManager
command:

Located: HK_LM:Run, P2P Networking
command: C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART

Located: HK_LM:Run, QuickTime Task
command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
file: C:\Program Files\QuickTime\qttask.exe
size: 77824
MD5: c9128ae6036cdf67873a516e1a00ed4b

Located: HK_CU:Run, Microsoft Works Update Detection
command: C:\Program Files\Microsoft Works\WkDetect.exe
file: C:\Program Files\Microsoft Works\WkDetect.exe
size: 28739
MD5: 3141750fad211c6dadf7c2dc2ec74da8

Located: HK_CU:Run, SpybotSD TeaTimer
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1038336
MD5: 58f7e6434d285f4c98ad3621e0bd8c8d

Located: Startup (common), America Online 9.0 Tray Icon.lnk
command: C:\Program Files\America Online 9.0\aoltray.exe
file: C:\Program Files\America Online 9.0\aoltray.exe
size: 36954
MD5: 5f1272f5c6de24cea4f736859a9a55d1

Located: Startup (common), AOL Companion.lnk
command: C:\Program Files\AOL Companion\companion.exe
file: C:\Program Files\AOL Companion\companion.exe
size: 229450
MD5: 063fd98c07665762ff189aa6cbca4c08

Located: Startup (common), BigFix.lnk
command: C:\Program Files\BigFix\BigFix.exe
file: C:\Program Files\BigFix\BigFix.exe
size: 1742384
MD5: 3802278fed9e3594b4bc3377ff0cff3b

Located: Startup (common), Norton Antivirus Fix 1.lnk
command: C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
file: C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
size: 58392
MD5: 8ab27947c7c2b3388f15ce7c3d595050

Located: Startup (common), Norton Antivirus Fix 2.lnk
command: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
file: C:\Program Files\Common Files\Symantec Shared\ccApp.exe
size: 54296
MD5: ace91f1db4e08fa62c758adf2390c07e

Located: Startup (common), Spybot SD Resident.lnk
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1038336
MD5: 58f7e6434d285f4c98ad3621e0bd8c8d

--- Browser helper object list ---
{53707962-6F74-2D53-2644-206D7942484F} ()
BHO name:
CLSID name:
description: Spybot-S&D IE Browser plugin
classification: Legitimate
known filename: SDHelper.dll
info link: http://spybot.eon.net.au/
info source: Patrick M. Kolla
Path: C:\PROGRA~1\SPYBOT~1\
Long name: SDHelper.dll
Short name:
Date (created): 5/12/2004 1:03:00 AM
Date (last access): 9/16/2004 4:24:12 PM
Date (last write): 5/12/2004 1:03:00 AM
Filesize: 744960
Attributes: archive
MD5: ABF5BA518C6A5ED104496FF42D19AD88
CRC32: 5587736E
Version: 0.1.0.3

--- ActiveX list ---
DirectAnimation Java Classes (DirectAnimation Java Classes)
DPF name: DirectAnimation Java Classes
CLSID name:
description:
classification: Legitimate
known filename: %WINDIR%\Java\classes\dajava.cab
info link:
info source: Patrick M. Kolla

Microsoft XML Parser for Java (Microsoft XML Parser for Java)
DPF name: Microsoft XML Parser for Java
CLSID name:
description:
classification: Legitimate
known filename: %WINDIR%\Java\classes\xmldso.cab
info link:
info source: Patrick M. Kolla

{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object)
DPF name:
CLSID name: QuickTime Object
description: Apple Quicktime
classification: Legitimate
known filename: QTPLUGIN.OCX
info link:
info source: Patrick M. Kolla
Path: C:\Program Files\QuickTime\
Long name: QTPlugin.ocx
Short name:
Date (created): 3/11/2004 9:00:24 PM
Date (last access): 9/16/2004 8:59:52 AM
Date (last write): 8/2/2004 2:34:08 PM
Filesize: 327736
Attributes: archive
MD5: D60B82C46B4E20CB26106A99BC58343E
CRC32: D2FD9E6C
Version: 0.6.0.3

{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} (Java Runtime Environment 1.4.2)
DPF name: Java Runtime Environment 1.4.2
CLSID name: Java Plug-in 1.4.2_03
Path: C:\Program Files\Java\j2re1.4.2_03\bin\
Long name: NPJPI142_03.dll
Short name: NPJPI1~1.DLL
Date (created): 11/19/2003 6:48:18 PM
Date (last access): 9/16/2004 4:55:50 PM
Date (last write): 11/19/2003 6:48:12 PM
Filesize: 65650
Attributes: archive
MD5: 2AD31341BE41AC9B086128AD86A2B53F
CRC32: 081CFB35
Version: 0.1.0.4

{CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class)
DPF name:
CLSID name: ActiveDataInfo Class
Path: C:\WINDOWS\Downloaded Program Files\
Long name: SymAData.dll
Short name:
Date (created): 5/17/2004 10:05:58 AM
Date (last access): 9/16/2004 5:15:16 PM
Date (last write): 5/17/2004 10:05:58 AM
Filesize: 156792
Attributes: archive
MD5: B7A28CBD0022210FD0D877C9951694F1
CRC32: C44DD1D5
Version: 0.2.0.0

{D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object)
DPF name:
CLSID name: Shockwave Flash Object
description: Macromedia Shockwave Flash Player
classification: Legitimate
known filename:
info link:
info source: Patrick M. Kolla
Path: C:\WINDOWS\System32\macromed\flash\
Long name: Flash.ocx
Short name:
Date (created): 12/8/2003 3:01:58 PM
Date (last access): 9/16/2004 4:29:38 PM
Date (last write): 12/8/2003 3:01:58 PM
Filesize: 933888
Attributes: archive
MD5: F7E435D02F7A48120B746E33254A70BC
CRC32: 02AF493D
Version: 0.7.0.0

{E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class)
DPF name:
CLSID name: ActiveDataObj Class
Path: C:\WINDOWS\Downloaded Program Files\
Long name: ActiveData.dll
Short name: ACTIVE~1.DLL
Date (created): 6/12/2002 1:16:22 PM
Date (last access): 9/16/2004 5:15:16 PM
Date (last write): 6/12/2002 1:16:22 PM
Filesize: 112312
Attributes: archive
MD5: C0A5720A581109543B113A8BEAE7868C
CRC32: 1B08DE36
Version: 0.1.0.0

--- Process list ---
Spybot - Search && Destroy process list report, 9/16/2004 5:20:20 PM

PID: 0 ( 0) [System]
PID: 4 ( 0) System
PID: 416 ( 4) \SystemRoot\System32\smss.exe
PID: 448 ( 312) C:\WINDOWS\Explorer.EXE
PID: 480 ( 416) csrss.exe
PID: 504 ( 416) \??\C:\WINDOWS\system32\winlogon.exe
PID: 548 ( 504) C:\WINDOWS\system32\services.exe
PID: 560 ( 504) C:\WINDOWS\system32\lsass.exe
PID: 724 ( 548) C:\WINDOWS\system32\svchost.exe
PID: 756 ( 448) C:\WINDOWS\System32\P2P Networking\P2P Networking.exe
PID: 788 ( 548) C:\WINDOWS\System32\svchost.exe
PID: 816 ( 448) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PID: 904 ( 548) svchost.exe
PID: 940 ( 548) svchost.exe
PID: 1012 ( 548) C:\WINDOWS\system32\spoolsv.exe
PID: 1040 ( 548) C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
PID: 1192 ( 548) alg.exe
PID: 1204 ( 548) C:\WINDOWS\System32\cisvc.exe
PID: 1228 ( 548) C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
PID: 1268 ( 548) C:\Program Files\Norton AntiVirus\navapsvc.exe
PID: 1328 ( 448) C:\Program Files\BigFix\BigFix.exe
PID: 1420 ( 448) C:\Program Files\Common Files\Symantec Shared\ccApp.exe
PID: 1444 ( 548) C:\WINDOWS\System32\tcpsvcs.exe
PID: 1488 ( 548) C:\WINDOWS\system32\slserv.exe
PID: 1504 ( 548) C:\WINDOWS\System32\snmp.exe
PID: 1528 ( 548) C:\WINDOWS\System32\svchost.exe
PID: 2644 ( 724) C:\Program Files\Messenger\msmsgs.exe
PID: 2704 ( 448) C:\Program Files\Internet Explorer\iexplore.exe
PID: 2792 ( 548) C:\WINDOWS\wanmpsvc.exe
PID: 2976 ( 548) C:\WINDOWS\system32\netdde.exe
PID: 3224 ( 548) C:\WINDOWS\system32\clipsrv.exe
PID: 3468 (1204) C:\WINDOWS\System32\cidaemon.exe
PID: 3524 ( 548) C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
PID: 3800 (1488) C:\WINDOWS\slrundll.exe
PID: 3856 ( 448) C:\Program Files\Netscape\Netscape 6\Program\netscape.exe
PID: 3920 ( 240) C:\PROGRA~1\AOLCOM~1\COMPAN~1.EXE
PID: 3988 ( 448) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe

--- Browser start & search pages list ---
Spybot - Search && Destroy browser pages report, 9/16/2004 5:20:20 PM

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page
C:\WINDOWS\System32\blank.htm
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.google.com/
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page_bak
http://www.google.com/
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page
%SystemRoot%\system32\blank.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page
http://www.msn.com
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet
Explorer\Search\SearchAssistant
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet
Explorer\Search\CustomizeSearch
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm

--- Winsock Layered Service Provider list ---
Protocol 0: MSAFD Tcpip [TCP/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip[*]

Protocol 1: MSAFD Tcpip [UDP/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip[*]

Protocol 2: MSAFD Tcpip [RAW/IP]
GUID: {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP IP protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD Tcpip[*]

Protocol 3: RSVP UDP Service Provider
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\rsvpsp.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 4: RSVP TCP Service Provider
GUID: {9D60A9E0-337A-11D0-BD88-0000C082E69A}
Filename: %SystemRoot%\system32\rsvpsp.dll
Description: Microsoft Windows NT/2k/XP RVSP
DB filename: %SystemRoot%\system32\rsvpsp.dll
DB protocol: RSVP * Service Provider

Protocol 5: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{50271A63-6A29-493C-9731-52074924D77C}] SEQPACKET 5
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 6: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{50271A63-6A29-493C-9731-52074924D77C}] DATAGRAM 5
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 7: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{C57C742C-AB04-47CA-8F93-66BB76C1B467}] SEQPACKET 0
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 8: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{C57C742C-AB04-47CA-8F93-66BB76C1B467}] DATAGRAM 0
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 9: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{3896B184-0F53-4E83-8023-19A162976A9E}] SEQPACKET 1
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 10: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{3896B184-0F53-4E83-8023-19A162976A9E}] DATAGRAM 1
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 11: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{56DE9BC2-0312-4064-98F5-8AD7C68F0B82}] SEQPACKET 2
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 12: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{56DE9BC2-0312-4064-98F5-8AD7C68F0B82}] DATAGRAM 2
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 13: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{47A840C9-B55B-469F-BD83-59A96AB5BBE9}] SEQPACKET 3
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 14: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{47A840C9-B55B-469F-BD83-59A96AB5BBE9}] DATAGRAM 3
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 15: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{07B00130-6A72-4DC0-BB5D-FDCD0CB31DED}] SEQPACKET 4
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Protocol 16: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{07B00130-6A72-4DC0-BB5D-FDCD0CB31DED}] DATAGRAM 4
GUID: {8D5F1830-C273-11CF-95C8-00805F48A192}
Filename: %SystemRoot%\system32\mswsock.dll
Description: Microsoft Windows NT/2k/XP NetBios protocol
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: MSAFD NetBIOS *

Namespace Provider 0: Tcpip
GUID: {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
Filename: %SystemRoot%\System32\mswsock.dll
Description: Microsoft Windows NT/2k/XP TCP/IP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: TCP/IP

Namespace Provider 1: NTDS
GUID: {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
Filename: %SystemRoot%\System32\winrnr.dll
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\winrnr.dll
DB protocol: NTDS

Namespace Provider 2: Network Location Awareness (NLA) Namespace
GUID: {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
Filename: %SystemRoot%\System32\mswsock.dll
Description: Microsoft Windows NT/2k/XP name space provider
DB filename: %SystemRoot%\system32\mswsock.dll
DB protocol: NLA-Namespace

AdAware:

Lavasoft Ad-aware Personal Build 6.181
Logfile created on :Thursday, September 16, 2004 5:21:45 PM
Created with Ad-aware Personal, free for private use.
Using reference-file :01R298 20.04.2004
__________________________________________________ ____

Ad-aware Settings
=========================
Set : Activate in-depth scan (Recommended)
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep scan registry

9-16-2004 5:21:45 PM - Scan started. (Smart mode)

Listing running processes
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ThreadCreationTime : 9-16-2004 1:51:56 PM
BasePriority : Normal

#:2 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ThreadCreationTime : 9-16-2004 1:51:57 PM
BasePriority : High

#:3 [services.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 9-16-2004 1:51:58 PM
BasePriority : Normal
FileSize : 99 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Services and Controller app
InternalName : services.exe
OriginalFilename : services.exe
ProductName : Microsoft
Created on : 4/21/2003 1:53:28 PM
Last accessed : 9/16/2004 10:21:45 PM
Last modified : 8/29/2002 12:00:00 PM

#:4 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 9-16-2004 1:51:58 PM
BasePriority : Normal
FileSize : 11 KB
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
OriginalFilename : lsass.exe
ProductName : Microsoft
Created on : 4/21/2003 1:53:05 PM
Last accessed : 9/16/2004 10:21:45 PM
Last modified : 8/29/2002 12:00:00 PM

#:5 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 9-16-2004 1:51:58 PM
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 4/21/2003 1:53:33 PM
Last accessed : 9/16/2004 10:21:45 PM
Last modified : 8/29/2002 12:00:00 PM

#:6 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 9-16-2004 1:51:58 PM
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 4/21/2003 1:53:33 PM
Last accessed : 9/16/2004 10:21:45 PM
Last modified : 8/29/2002 12:00:00 PM

#:7 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 9-16-2004 1:51:59 PM
BasePriority : Normal
FileSize : 50 KB
FileVersion : 5.1.2600.0 (XPClient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
OriginalFilename : spoolsv.exe
ProductName : Microsoft
Created on : 4/21/2003 1:53:31 PM
Last accessed : 9/16/2004 10:21:45 PM
Last modified : 8/29/2002 12:00:00 PM

#:8 [ccevtmgr.exe]
FilePath : C:\Program Files\Common Files\Symantec Shared\
ThreadCreationTime : 9-16-2004 1:52:00 PM
BasePriority : Normal
FileSize : 309 KB
FileVersion : 1.03.4
ProductVersion : 1.03.4
Copyright : Copyright (c) 2000-2002 Symantec Corporation. All
rights reserved.
CompanyName : Symantec Corporation
FileDescription : Event Manager Service
InternalName : ccEvtMgr
OriginalFilename : ccEvtMgr.exe
ProductName : Event Manager
Created on : 1/19/2004 1:51:18 PM
Last accessed : 9/16/2004 9:49:40 PM
Last modified : 7/17/2003 5:16:38 PM

#:9 [cisvc.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 9-16-2004 1:52:00 PM
BasePriority : Normal
FileSize : 5 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Content Index service
InternalName : cisvc.exe
OriginalFilename : cisvc.exe
ProductName : Microsoft
Created on : 4/21/2003 1:52:42 PM
Last accessed : 9/16/2004 10:21:45 PM
Last modified : 8/29/2002 12:00:00 PM

#:10 [sagent2.exe]
FilePath : C:\Program Files\Common Files\EPSON\EBAPI\
ThreadCreationTime : 9-16-2004 1:52:00 PM
BasePriority : Normal
FileSize : 112 KB
FileVersion : 1, 2, 0, 0
ProductVersion : 1, 0, 0, 0
Copyright : Copyright (C) SEIKO EPSON CORP. 2000
CompanyName : SEIKO EPSON CORPORATION
FileDescription : EPSON Printer Status Agent
InternalName : SAgent2
OriginalFilename : SAgent2.exe
ProductName : EPSON Bidirectional Printer
Created on : 1/13/2004 11:39:51 PM
Last accessed : 9/16/2004 10:21:45 PM
Last modified : 11/17/2000 7:02:00 AM

#:11 [navapsvc.exe]
FilePath : C:\Program Files\Norton AntiVirus\
ThreadCreationTime : 9-16-2004 1:52:02 PM
BasePriority : Normal
FileSize : 113 KB
FileVersion : 9.05.1015
ProductVersion : 9.05.1015
Copyright : Copyright (c) 2000-2002 Symantec Corporation. All
rights reserved.
CompanyName : Symantec Corporation
FileDescription : Norton AntiVirus Auto-Protect Service
InternalName : NAVAPSVC
OriginalFilename : NAVAPSVC.EXE
ProductName : Norton AntiVirus
Created on : 1/19/2004 1:51:00 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 11/15/2002 1:41:26 AM

#:12 [tcpsvcs.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 9-16-2004 1:52:02 PM
BasePriority : Normal
FileSize : 19 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : TCP/IP Services Application
InternalName : TCPSVCS.EXE
OriginalFilename : TCPSVCS.EXE
ProductName : Microsoft
Created on : 4/21/2003 1:53:34 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 8/29/2002 12:00:00 PM

#:13 [slserv.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 9-16-2004 1:52:02 PM
BasePriority : Normal
FileSize : 44 KB
FileVersion : 2.80.00(24Apr2000)
ProductVersion : 2.80.00
Copyright : Copyright
FileDescription : User-Level Modem Service
InternalName : slserv
OriginalFilename : slserv.exe
ProductName : Modem
Created on : 4/21/2003 1:54:18 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 1/17/2003 10:02:38 AM

#:14 [snmp.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 9-16-2004 1:52:02 PM
BasePriority : Normal
FileSize : 29 KB
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
CompanyName : Microsoft Corporation
FileDescription : SNMP Service
InternalName : snmp.exe
OriginalFilename : snmp.exe
ProductName : Microsoft
Created on : 2/6/2004 11:17:46 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 8/29/2002 12:00:00 PM

#:15 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 9-16-2004 1:52:02 PM
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 4/21/2003 1:53:33 PM
Last accessed : 9/16/2004 10:21:45 PM
Last modified : 8/29/2002 12:00:00 PM

#:16 [explorer.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 9-16-2004 1:52:12 PM
BasePriority : Normal
FileSize : 980 KB
FileVersion : 6.00.2800.1106 (xpsp1.020828-1920)
ProductVersion : 6.00.2800.1106
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Microsoft
Created on : 4/21/2003 1:52:56 PM
Last accessed : 9/16/2004 10:15:22 PM
Last modified : 8/29/2002 12:00:00 PM

#:17 [p2p networking.exe]
FilePath : C:\WINDOWS\System32\P2P Networking\
ThreadCreationTime : 9-16-2004 1:52:16 PM
BasePriority : Normal
FileSize : 457 KB
FileVersion : 1, 26, 0, 10
ProductVersion : 1, 26, 0, 10
Copyright : Copyright
CompanyName : Joltid Ltd.
FileDescription : P2P Networking
InternalName : P2P Networking
OriginalFilename : P2P Networking.exe
ProductName : P2P Networking
Created on : 8/24/2004 9:51:17 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 8/24/2004 9:51:14 PM

#:18 [teatimer.exe]
FilePath : C:\Program Files\Spybot - Search & Destroy\
ThreadCreationTime : 9-16-2004 1:52:16 PM
BasePriority : Idle
FileSize : 1014 KB
FileVersion : 1, 3, 0, 12
ProductVersion : 1, 3, 0, 12
CompanyName : Safer Networking Limited
FileDescription : System settings protector
InternalName : TeaTimer
OriginalFilename : TeaTimer.exe
ProductName : Spybot - Search & Destroy
Created on : 5/12/2004 6:03:00 AM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 5/12/2004 6:03:00 AM

#:19 [bigfix.exe]
FilePath : C:\Program Files\BigFix\
ThreadCreationTime : 9-16-2004 1:52:16 PM
BasePriority : Normal
FileSize : 1701 KB
FileVersion : 1, 7, 6, 0
ProductVersion : 1, 7, 6, 0
Copyright : Copyright
CompanyName : BigFix Inc.
FileDescription : BigFix Client Application
InternalName : BigFix
OriginalFilename : BigFix.exe
ProductName : BigFix
Created on : 4/21/2003 2:29:42 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 7/31/2002 5:22:26 PM

#:20 [ccapp.exe]
FilePath : C:\Program Files\Common Files\Symantec Shared\
ThreadCreationTime : 9-16-2004 1:52:17 PM
BasePriority : Normal
FileSize : 53 KB
FileVersion : 1.0.10.006
ProductVersion : 1.0.10.006
Copyright : Copyright (c) 2000-2002 Symantec Corporation. All
rights reserved.
CompanyName : Symantec Corporation
FileDescription : Common Client CC App
InternalName : ccApp
OriginalFilename : ccApp.exe
ProductName : Common Client
Created on : 2/4/2004 10:20:40 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 12/2/2003 10:11:04 PM

#:21 [msmsgs.exe]
FilePath : C:\Program Files\Messenger\
ThreadCreationTime : 9-16-2004 1:55:01 PM
BasePriority : Normal
FileSize : 1456 KB
FileVersion : 4.7.2009
ProductVersion : Version 4.7
Copyright : Copyright (c) Microsoft Corporation 1997-2003
CompanyName : Microsoft Corporation
FileDescription : Messenger
InternalName : msmsgs
OriginalFilename : msmsgs.exe
ProductName : Messenger
Created on : 4/15/2003 1:30:14 AM
Last accessed : 9/16/2004 9:43:37 PM
Last modified : 4/15/2003 1:30:14 AM

#:22 [cidaemon.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 9-16-2004 1:59:46 PM
BasePriority : Idle
FileSize : 8 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Indexing Service filter daemon
InternalName : cidaemon.exe
OriginalFilename : cidaemon.exe
ProductName : Microsoft
Created on : 4/21/2003 1:52:42 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 8/29/2002 12:00:00 PM

#:23 [netdde.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 9-16-2004 3:49:49 PM
BasePriority : Normal
FileSize : 103 KB
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
CompanyName : Microsoft Corporation
FileDescription : Network DDE - DDE Communication
InternalName : NETDDE.EXE
OriginalFilename : NETDDE.EXE
ProductName : Microsoft
Created on : 4/21/2003 1:53:17 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 8/29/2002 12:00:00 PM

#:24 [clipsrv.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 9-16-2004 3:49:50 PM
BasePriority : Normal
FileSize : 30 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Windows NT DDE Server
InternalName : CLIPSRV.EXE
OriginalFilename : CLIPSRV.EXE
ProductName : Microsoft
Created on : 4/21/2003 1:52:42 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 8/29/2002 12:00:00 PM

#:25 [wanmpsvc.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 9-16-2004 6:52:28 PM
BasePriority : Normal
FileSize : 64 KB
FileVersion : 9, 0, 0, 0
ProductVersion : 9, 0, 0, 0
Copyright : Copyright
CompanyName : America Online, Inc.
FileDescription : Wan Miniport (ATW) Service
InternalName : WanMPSvc
OriginalFilename : WanMPSvc.exe
ProductName : America Online
Created on : 9/16/2004 6:52:26 PM
Last accessed : 9/16/2004 10:15:23 PM
Last modified : 8/27/2003 3:27:44 PM

#:26 [acsd.exe]
FilePath : C:\PROGRA~1\COMMON~1\AOL\ACS\
ThreadCreationTime : 9-16-2004 6:52:29 PM
BasePriority : Normal
FileSize : 1356 KB
FileVersion : 1,0,22,1
ProductVersion : 1,0,22,1
Copyright : Copyright
CompanyName : America Online, Inc.
FileDescription : AOL Connectivity Service
InternalName : acsd
OriginalFilename : acsd.exe
ProductName : AOL Connectivity Service
Created on : 9/16/2004 6:52:14 PM
Last accessed : 9/16/2004 10:21:46 PM
Last modified : 9/16/2003 9:55:36 PM

#:27 [compan~1.exe]
FilePath : C:\PROGRA~1\AOLCOM~1\
ThreadCreationTime : 9-16-2004 6:54:49 PM
BasePriority : Normal
FileSize : 224 KB
FileVersion : 1, 5, 1, 2
ProductVersion : 1, 5, 1, 2
Copyright : Copyright 2003
FileDescription : Companion Module
InternalName : Companion
OriginalFilename : Companion.EXE
ProductName : Companion Module

#:28 [slrundll.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 9-16-2004 9:58:48 PM
BasePriority : Normal
FileSize : 24 KB
Created on : 4/21/2003 1:54:18 PM
Last accessed : 9/16/2004 9:56:57 PM
Last modified : 1/17/2003 9:47:52 AM

#:29 [netscape.exe]
FilePath : C:\Program Files\Netscape\Netscape 6\Program\
ThreadCreationTime : 9-16-2004 9:59:35 PM
BasePriority : Normal
FileSize : 5488 KB
FileVersion : 4.79.0.57
ProductVersion : 4.79
Copyright : Copyright Netscape Communications. 2001
CompanyName : Netscape Communications Corporation
FileDescription : Netscape Navigator application file
InternalName : NETSCAPE
OriginalFilename : NETSCAPE.EXE
ProductName : NETSCAPE
Created on : 1/14/2004 12:20:59 AM
Last accessed : 9/16/2004 9:59:36 PM
Last modified : 10/17/2001 9:51:38 AM

#:30 [spybotsd.exe]
FilePath : C:\Program Files\Spybot - Search & Destroy\
ThreadCreationTime : 9-16-2004 10:13:18 PM
BasePriority : Normal
FileSize : 3855 KB
FileVersion : 1, 3, 0, 12
ProductVersion : 1, 3, 0, 12
CompanyName : Safer Networking Limited
FileDescription : Spybot - Search & Destroy
InternalName : SpyBotSD
OriginalFilename : SpyBotSD.exe
ProductName : SpyBot-S&D
Created on : 5/12/2004 6:03:00 AM
Last accessed : 9/16/2004 10:16:40 PM
Last modified : 5/12/2004 6:03:00 AM

#:31 [ad-aware.exe]
FilePath : C:\Program Files\Lavasoft\Ad-aware 6\
ThreadCreationTime : 9-16-2004 10:21:13 PM
BasePriority : Normal
FileSize : 668 KB
FileVersion : 6.0.1.181
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 7/18/2004 2:08:08 PM
Last accessed : 9/16/2004 10:21:13 PM
Last modified : 7/13/2003 2:00:20 AM

Memory scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0

Started registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0

Started deep registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Deep scanning and examining files (C:)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

5:22:35 PM Scan stopped by user.

Summary of this scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Total scanning time :00:00:49:485
Objects scanned :27671
Objects identified :0
Objects ignored :0
New objects :0