OTL logfile created on: 11/27/2011 9:20:15 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Jim\My Documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
446.17 Mb Total Physical Memory | 35.35 Mb Available Physical Memory | 7.92% Memory free
1.03 Gb Paging File | 0.56 Gb Available in Paging File | 54.12% Paging File free
Paging file location(s): C:\pagefile.sys 672 1344 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.25 Gb Total Space | 21.86 Gb Free Space | 58.68% Space Free | Partition Type: NTFS
Computer Name: ROSELAPTOP | User Name: Jim | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\Jim\My Documents\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
PRC - c:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe (Microsoft Corporation)
PRC - c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe (Intel Corporation)
PRC - C:\Program Files\Toshiba\Windows Utilities\Hotkey.exe (TOSHIBA Inc.)
PRC - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe ()
PRC - C:\Program Files\Toshiba\TOSHIBA Zooming Utility\SmoothView.exe (TOSHIBA Corporation)
PRC - C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
PRC - C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
PRC - C:\WINDOWS\system32\DVDRAMSV.exe (Matsubleepa Electric Industrial Co., Ltd.)
========== Modules (No Company Name) ==========
MOD - C:\WINDOWS\system32\ntusbw32.dll ()
MOD - C:\Documents and Settings\Jim\Application Data\Mozilla\Firefox\Profiles\s3jrk58s.default\extensions\textlinks@lplay.com\components\lptlf.dll ()
MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\iWMSProv.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\IntStngs.dll ()
MOD - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe ()
========== Win32 Services (SafeList) ==========
SRV - (AppMgmt) -- File not found
SRV - (MsMpSvc) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SRV - (YahooAUService) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (Swupdtmr) -- c:\TOSHIBA\IVP\swupdate\swupdtmr.exe ()
SRV - (CFSvcs) -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
SRV - (DVD-RAM_Service) -- C:\WINDOWS\system32\DVDRAMSV.exe (Matsubleepa Electric Industrial Co., Ltd.)
========== Driver Services (SafeList) ==========
DRV - (MpKsl443f676c) -- c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{AAA7BAE1-CBA0-464E-A46D-7D322D9B27A6}\MpKsl443f676c.sys (Microsoft Corporation)
DRV - (MpKsle37cec70) -- c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{AAA7BAE1-CBA0-464E-A46D-7D322D9B27A6}\MpKsle37cec70.sys (Microsoft Corporation)
DRV - (MRESP50) -- C:\Program Files\Common Files\Motive\MRESP50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (MREMP50) -- C:\Program Files\Common Files\Motive\MREMP50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (FilterService) -- C:\WINDOWS\system32\drivers\lvuvcflt.sys (Logitech Inc.)
DRV - (LVUVC) Logitech Webcam 500(UVC) -- C:\WINDOWS\system32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (LVRS) -- C:\WINDOWS\system32\drivers\lvrs.sys (Logitech Inc.)
DRV - (BVRPMPR5) -- C:\WINDOWS\system32\drivers\BVRPMPR5.SYS (Avanquest Software)
DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (SMC2862W) -- C:\WINDOWS\system32\drivers\2862WICB.sys (SMC Networks, Inc.)
DRV - (ASCTRM) -- C:\WINDOWS\System32\drivers\asctrm.sys (Windows ® 2000 DDK provider)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (CAMCHALA) -- C:\WINDOWS\system32\drivers\camc6hal.sys (Conexant Systems Inc.)
DRV - (CAMCAUD) -- C:\WINDOWS\system32\drivers\camc6aud.sys (Conexant Systems Inc.)
DRV - (BoiHwsetup) -- C:\WINDOWS\system32\drivers\BoiHwSetup.sys (Quanta Computer Corp)
DRV - (meiudf) -- C:\WINDOWS\system32\drivers\meiudf.sys ()
DRV - (AR5211) -- C:\WINDOWS\system32\drivers\ar5211.sys (Atheros Communications, Inc.)
DRV - (qkbfiltr) -- C:\WINDOWS\system32\drivers\qkbfiltr.sys (Quanta Computer, Inc.)
DRV - (qmofiltr) -- C:\WINDOWS\system32\drivers\qmofiltr.sys (Quanta Computer, Inc.)
DRV - (HSFHWATI) -- C:\WINDOWS\system32\drivers\HSFHWATI.sys (Conexant Systems, Inc.)
DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys (Realtek Semiconductor Corporation )
DRV - (rtl8139) Realtek RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)
DRV - (pfc) -- C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (TBiosDrv) -- C:\WINDOWS\system32\drivers\tbiosdrv.sys ()
DRV - (Netdevio) -- C:\WINDOWS\system32\drivers\Netdevio.sys (TOSHIBA Corporation.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
http://www.toshiba.com/search
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.toshibadirect.com/dpdstart
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
http://www.toshiba.com/search
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.toshibadirect.com/dpdstart
IE - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL =
http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://search.conduit.com?SearchSource=10&ctid=CT2786678
IE - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found
IE - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Motive.com/NpMotive,version=1.0: C:\Program Files\Common Files\Motive\npMotive.dll (Alcatel-Lucent)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.10: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\npDisplayEngine: C:\Program Files\LivingPlay Games\nplplaypop.dll ( )
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/10/01 19:46:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\info@friendschecker.com: C:\Program Files\FriendsChecker\DynConFf\
[2011/10/20 13:52:42 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jim\Application Data\Mozilla\Extensions
[2011/11/13 15:28:24 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jim\Application Data\Mozilla\Firefox\Profiles\s3jrk58s.default\extensions
[2011/10/26 10:28:37 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\Jim\Application Data\Mozilla\Firefox\Profiles\s3jrk58s.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/10/20 13:52:42 | 000,000,000 | ---D | M] (LivingPlay TextLinks) -- C:\Documents and Settings\Jim\Application Data\Mozilla\Firefox\Profiles\s3jrk58s.default\extensions\textlinks@lplay.com
[2011/11/12 22:19:53 | 000,002,580 | ---- | M] () -- C:\Documents and Settings\Jim\Application Data\Mozilla\Firefox\Profiles\s3jrk58s.default\searchplugins\askcom.xml
[2011/10/24 00:00:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/10/24 00:00:52 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011/10/17 17:55:54 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011/10/17 17:55:28 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2009/10/25 05:22:33 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/10/01 19:46:43 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010/01/01 03:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
O1 HOSTS File: ([2011/11/25 23:43:07 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\TOSHIBA Zooming Utility\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [Toshiba Hotkey Utility] c:\Program Files\Toshiba\Windows Utilities\Hotkey.exe (TOSHIBA Inc.)
O4 - HKU\S-1-5-21-441780083-2570839136-2262286811-1007..\Run: [TOSCDSPD] C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AutorunsDisabled [2011/11/13 19:57:39 | 000,000,000 | -H-D | M]
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O15 - HKU\S-1-5-21-441780083-2570839136-2262286811-1007\..Trusted Domains: $talisma_url$ ([]https in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}
http://java.sun.com/update/1.5.0/jinstall-1_5_0_02-windows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E0FEE963-BB53-4215-81AD-B28C77384644}
https://pattcw.att.motive.com/wizlet/DSLActivation/static/installer/ATTInternetInstaller.cab (WebBrowserType Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{95E2F462-6E9D-4D5D-AD9D-C9EA1FF250EB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FCE184DD-7E46-46E8-8F3E-A7124841E426}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\AutorunsDisabled - No CLSID value found
O18 - Protocol\Handler\AutorunsDisabled\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\intelsusb: DllName - (ntusbw32.dll) - C:\WINDOWS\System32\ntusbw32.dll ()
O20 - Winlogon\Notify\ntusbw32: DllName - (ntusbw32.dll) - C:\WINDOWS\System32\ntusbw32.dll ()
O24 - Desktop Components:AutorunsDisabled () -
O24 - Desktop WallPaper: C:\Documents and Settings\Jim\Desktop\untitled.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jim\Desktop\untitled.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/08/09 16:19:17 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/11/27 21:45:11 | 000,041,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\qiwqosqh.sys
[2011/11/25 22:02:36 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011/11/25 21:26:53 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011/11/25 21:26:53 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011/11/25 21:26:53 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011/11/25 21:26:53 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011/11/25 21:04:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011/11/25 20:58:25 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/11/25 20:48:16 | 004,307,453 | R--- | C] (Swearware) -- C:\Documents and Settings\Jim\Desktop\ComboFix.exe
[2011/11/18 21:53:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Desktop\gmer
[2011/11/18 21:34:36 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Jim\Start Menu\Programs\Administrative Tools
[2011/11/16 15:26:27 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Jim\IECompatCache
[2011/11/15 10:22:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Sun
[2011/11/15 10:08:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Macromedia
[2011/11/15 10:08:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2011/11/14 03:51:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Adobe
[2011/11/13 19:57:39 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AutorunsDisabled
[2011/11/13 19:18:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Desktop\Autoruns
[2011/11/13 16:50:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Desktop\tdsskiller
[2011/11/13 15:51:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Sun
[2011/11/13 14:27:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\Malwarebytes
[2011/11/13 14:27:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/11/13 14:27:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/11/13 14:27:45 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/11/13 14:27:45 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/11/13 14:16:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\hBtxP0ycSiDo
[2011/11/13 14:16:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\FnF4amH6sJfLgZj
[2011/11/13 14:09:43 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Jim\PrivacIE
[2011/11/13 13:57:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\x8fRZ9hTXjVlBz0
[2011/11/13 13:57:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\eNtxA0ucSiFpGaJ
[2011/11/13 13:44:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\ogTXqjYCeIrOyAu
[2011/11/13 13:44:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\GmH6sWK7fL
[2011/11/13 13:35:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\DS1ibD3on4Q6W7R
[2011/11/13 13:35:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\zVelOBtxPy
[2011/11/13 11:49:05 | 000,222,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2011/11/13 11:35:27 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2011/11/13 11:28:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\MSNInstaller
[2011/11/13 10:02:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\FEK8gZhXkVlB
[2011/11/13 10:02:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\eZqjYeIrOAv2b3m
[2011/11/13 03:37:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\edWK8fRL9TwUeIt
[2011/11/13 03:37:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\NlONtxP0uSiDpGa
[2011/11/13 03:32:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2011/11/13 03:32:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2011/11/13 03:22:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\SZqhYCwkIrOtAuS
[2011/11/13 03:22:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\nbF3pnG5aJdKfZh
[2011/11/13 03:17:53 | 000,000,000 | ---D | C] -- C:\Program Files\DA73C
[2011/11/13 03:17:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\rttzNycAi
[2011/11/13 03:17:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\cxPuuSDDnaQ6K89
[2011/11/13 03:17:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\B4BDA
[2011/11/13 03:17:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\PmmGG5aJK8RhYw
[2011/11/13 03:17:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jim\Application Data\IOOBtP0cS34HdfT
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/11/27 22:20:12 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/11/27 22:16:03 | 000,041,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\iuuoouim.sys
[2011/11/27 21:58:44 | 000,041,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\gwsdhmey.sys
[2011/11/27 21:45:17 | 000,041,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\qiwqosqh.sys
[2011/11/26 11:56:14 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/11/26 11:55:12 | 000,000,374 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics
[2011/11/26 11:53:33 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/11/26 11:53:12 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/11/25 23:43:07 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011/11/25 22:02:58 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2011/11/25 20:51:58 | 000,000,901 | ---- | M] () -- C:\Documents and Settings\Jim\Desktop\Shortcut to ComboFix.lnk
[2011/11/25 20:48:35 | 004,307,453 | R--- | M] (Swearware) -- C:\Documents and Settings\Jim\Desktop\ComboFix.exe
[2011/11/19 09:38:13 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/11/18 21:52:17 | 000,294,216 | ---- | M] () -- C:\Documents and Settings\Jim\Desktop\gmer.zip
[2011/11/18 21:12:12 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Jim\defogger_reenable
[2011/11/17 10:58:41 | 000,100,702 | ---- | M] () -- C:\WINDOWS\System32\itusbcore.dat
[2011/11/17 10:58:41 | 000,000,196 | ---- | M] () -- C:\WINDOWS\System32\itlsvc.dat
[2011/11/17 10:53:29 | 000,037,888 | ---- | M] () -- C:\WINDOWS\System32\ntusbw32.dll
[2011/11/16 19:44:35 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Privacy Protection.lnk
[2011/11/15 23:11:34 | 000,000,001 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\AU2jIo5d.exe_.b
[2011/11/15 23:11:34 | 000,000,001 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\AU2jIo5d.exe.b
[2011/11/15 19:29:56 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2011/11/15 14:41:02 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\j04Utk.dat
[2011/11/15 09:40:14 | 004,845,856 | ---- | M] (Sysinternals - www.sysinternals.com) -- C:\Documents and Settings\Jim\Desktop\procexp.exe
[2011/11/15 09:39:33 | 000,072,268 | ---- | M] () -- C:\Documents and Settings\Jim\Desktop\procexp.chm
[2011/11/13 19:16:44 | 000,577,930 | ---- | M] () -- C:\Documents and Settings\Jim\Desktop\Autoruns.zip
[2011/11/13 16:49:51 | 001,545,878 | ---- | M] () -- C:\Documents and Settings\Jim\Desktop\tdsskiller.zip
[2011/11/13 15:08:39 | 000,000,134 | ---- | M] () -- C:\Documents and Settings\Jim\Desktop\hosts-perm.bat
[2011/11/13 14:27:50 | 000,000,792 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/11/13 11:45:10 | 000,001,945 | ---- | M] () -- C:\WINDOWS\epplauncher.mif
[2011/11/13 10:50:20 | 001,008,092 | ---- | M] () -- C:\Documents and Settings\Jim\Desktop\iexplore.exe.com
[2011/11/13 10:50:20 | 001,008,092 | ---- | M] () -- C:\Documents and Settings\Jim\Desktop\ewfijweig.com.com
[2011/11/13 01:54:50 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2011/11/10 14:11:33 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/11/07 19:00:20 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/11/06 09:03:14 | 000,447,288 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/11/06 09:03:14 | 000,073,970 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/11/25 22:02:58 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2011/11/25 22:02:49 | 000,260,272 | RHS- | C] () -- C:\cmldr
[2011/11/25 21:26:53 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/11/25 21:26:53 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/11/25 21:26:53 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/11/25 21:26:53 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/11/25 21:26:53 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/11/25 20:51:57 | 000,000,901 | ---- | C] () -- C:\Documents and Settings\Jim\Desktop\Shortcut to ComboFix.lnk
[2011/11/18 21:51:25 | 000,294,216 | ---- | C] () -- C:\Documents and Settings\Jim\Desktop\gmer.zip
[2011/11/18 21:12:12 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Jim\defogger_reenable
[2011/11/17 10:58:41 | 000,100,702 | ---- | C] () -- C:\WINDOWS\System32\itusbcore.dat
[2011/11/17 10:58:41 | 000,000,196 | ---- | C] () -- C:\WINDOWS\System32\itlsvc.dat
[2011/11/17 10:53:29 | 000,037,888 | ---- | C] () -- C:\WINDOWS\System32\ntusbw32.dll
[2011/11/16 19:58:24 | 001,008,092 | ---- | C] () -- C:\Documents and Settings\Jim\Desktop\ewfijweig.com.com
[2011/11/16 19:44:34 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Privacy Protection.lnk
[2011/11/15 23:11:34 | 000,000,001 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\AU2jIo5d.exe_.b
[2011/11/15 23:11:34 | 000,000,001 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\AU2jIo5d.exe.b
[2011/11/15 14:41:02 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\j04Utk.dat
[2011/11/13 19:15:25 | 000,577,930 | ---- | C] () -- C:\Documents and Settings\Jim\Desktop\Autoruns.zip
[2011/11/13 16:49:36 | 001,545,878 | ---- | C] () -- C:\Documents and Settings\Jim\Desktop\tdsskiller.zip
[2011/11/13 15:08:13 | 000,000,134 | ---- | C] () -- C:\Documents and Settings\Jim\Desktop\hosts-perm.bat
[2011/11/13 14:27:50 | 000,000,792 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/11/13 11:45:10 | 000,001,945 | ---- | C] () -- C:\WINDOWS\epplauncher.mif
[2011/11/13 11:39:56 | 000,001,688 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk
[2011/11/13 10:50:17 | 001,008,092 | ---- | C] () -- C:\Documents and Settings\Jim\Desktop\iexplore.exe.com
[2011/11/13 03:32:24 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/09/09 19:45:18 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2011/07/09 16:24:41 | 000,069,632 | ---- | C] () -- C:\Documents and Settings\Jim\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/12 19:32:07 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Jim\Application Data\wklnhst.dat
[2010/01/24 13:10:45 | 000,082,289 | R--- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2009/04/20 17:40:37 | 000,000,043 | ---- | C] () -- C:\WINDOWS\swupdate.INI
[2009/03/22 11:58:26 | 000,000,137 | ---- | C] () -- C:\WINDOWS\RealFlight.INI
[2008/12/04 15:42:15 | 000,270,336 | ---- | C] () -- C:\WINDOWS\System32\PlugPlayPCIDevice.exe
[2008/12/04 15:42:15 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\MFCFirstRemove.exe
[2008/04/30 05:45:04 | 000,053,248 | ---- | C] () -- C:\WINDOWS\KBStatusLED.exe
[2008/04/30 02:20:08 | 000,036,864 | ---- | C] () -- C:\WINDOWS\UnInstAP.exe
[2008/04/16 02:29:52 | 000,229,447 | ---- | C] () -- C:\WINDOWS\KBHook.dll
[2007/12/29 12:14:50 | 000,001,361 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2005/08/09 18:59:11 | 000,011,122 | ---- | C] () -- C:\WINDOWS\HWSetupStr.ini
[2005/08/09 18:59:11 | 000,002,036 | ---- | C] () -- C:\WINDOWS\SVPW32Str.ini
[2005/08/09 18:36:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NDSTray.INI
[2005/08/09 18:00:57 | 000,000,012 | ---- | C] () -- C:\WINDOWS\dirsaver.ini
[2005/08/09 17:45:20 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2005/08/09 17:39:18 | 000,000,172 | ---- | C] () -- C:\WINDOWS\Quicken.ini
[2005/08/09 17:37:42 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2005/08/09 17:37:42 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2005/08/09 17:37:42 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2005/08/09 17:37:42 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2005/08/09 17:37:42 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2005/08/09 17:37:42 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2005/08/09 17:36:54 | 000,000,228 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2005/08/09 17:32:32 | 000,128,113 | ---- | C] () -- C:\WINDOWS\System32\csellang.ini
[2005/08/09 17:32:32 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\csellang.dll
[2005/08/09 17:32:32 | 000,009,362 | ---- | C] () -- C:\WINDOWS\System32\tosmreg.ini
[2005/08/09 17:32:32 | 000,007,671 | ---- | C] () -- C:\WINDOWS\System32\cseltbl.ini
[2005/08/09 17:00:49 | 000,090,112 | ---- | C] () -- C:\WINDOWS\InstDrvr.exe
[2005/08/09 17:00:49 | 000,006,867 | ---- | C] () -- C:\WINDOWS\System32\drivers\tbiosdrv.sys
[2005/08/09 16:54:50 | 000,102,384 | ---- | C] () -- C:\WINDOWS\System32\drivers\meiudf.sys
[2005/08/09 16:26:03 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/08/09 16:21:34 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2005/08/09 16:16:35 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2005/08/09 16:15:18 | 000,001,793 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2005/08/09 15:41:18 | 000,000,384 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005/08/09 15:38:23 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2005/08/09 15:38:18 | 000,447,288 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2005/08/09 15:38:18 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2005/08/09 15:38:18 | 000,073,970 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2005/08/09 15:38:18 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2005/08/09 15:38:16 | 000,004,688 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2005/08/09 15:38:14 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2005/08/09 15:38:12 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2005/08/09 15:38:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2005/08/09 15:38:04 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2005/08/09 15:37:49 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2005/08/09 15:37:40 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2005/08/09 09:10:36 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/08/09 09:09:39 | 000,168,304 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2005/06/30 15:15:40 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2005/06/10 18:59:16 | 000,095,617 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2005/05/19 10:38:27 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004/11/11 23:08:00 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\tsbwls.dll
[2003/01/07 17:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
========== Alternate Data Streams ==========
@Alternate Data Stream - 770 bytes -> C:\WINDOWS\System32\drivers\qiwqosqh.sys:changelist
@Alternate Data Stream - 570 bytes -> C:\WINDOWS\System32\drivers\iuuoouim.sys:changelist
@Alternate Data Stream - 570 bytes -> C:\WINDOWS\System32\drivers\gwsdhmey.sys:changelist
< End of report >
Help
Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.
This topic is locked
attach.txt (21.42K)
Back to top
textbox. Do not include the word Code
.
