OTL Report:OTL logfile created on: 1/12/2010 10:27:19 AM - Run 1
OTL by OldTimer - Version 3.1.24.0 Folder = C:\Documents and Settings\Setha\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 63.00% Memory free
7.00 Gb Paging File | 6.00 Gb Available in Paging File | 93.00% Paging File free
Paging file location(s): C:\pagefile.sys 3072 6144E:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 128.00 Gb Total Space | 47.94 Gb Free Space | 37.45% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 21.05 Gb Total Space | 2.97 Gb Free Space | 14.13% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: SETH
Current User Name: Setha
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ========== PRC - [2010/01/12 10:27:02 | 00,544,256 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Setha\Desktop\OTL.exe
PRC - [2010/01/12 03:03:14 | 01,181,328 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
PRC - [2010/01/12 02:21:46 | 01,055,000 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe
PRC - [2010/01/12 02:21:42 | 02,033,432 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe
PRC - [2010/01/06 15:28:54 | 00,307,672 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009/11/20 20:32:14 | 00,154,216 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvsvc32.exe
PRC - [2009/10/24 21:23:14 | 00,215,104 | ---- | M] () -- C:\WINDOWS\system32\PnkBstrB.exe
PRC - [2009/10/11 04:17:35 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe
PRC - [2009/09/14 01:02:50 | 00,075,064 | ---- | M] () -- C:\WINDOWS\system32\pnkbstra.exe
PRC - [2009/06/05 10:48:14 | 00,144,712 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2009/03/08 14:09:26 | 00,638,816 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Internet Explorer\iexplore.exe
PRC - [2008/12/12 10:17:38 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
PRC - [2008/11/19 07:00:00 | 02,727,936 | ---- | M] () -- C:\Program Files\RivaTuner v2.20\RivaTuner.exe
PRC - [2008/04/13 16:12:19 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2001/08/23 04:00:00 | 00,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\unsecapp.exe
========== Modules (SafeList) ========== MOD - [2010/01/12 10:27:02 | 00,544,256 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Setha\Desktop\OTL.exe
========== Win32 Services (SafeList) ========== SRV - File not found [On_Demand | Stopped] -- -- (LiveUpdate)
SRV - File not found [Auto | Stopped] -- -- (Automatic LiveUpdate Scheduler)
SRV - [2010/01/12 03:03:14 | 01,181,328 | ---- | M] (Lavasoft) [Auto | Running] -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
SRV - [2010/01/12 02:21:42 | 00,285,392 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2009/11/20 20:32:14 | 00,154,216 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\WINDOWS\system32\nvsvc32.exe -- (NVSvc)
SRV - [2009/10/24 21:23:14 | 00,215,104 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\PnkBstrB.exe -- (PnkBstrB)
SRV - [2009/10/11 04:17:35 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2009/09/14 01:02:50 | 00,075,064 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\pnkbstra.exe -- (PnkBstrA)
SRV - [2009/08/30 11:17:30 | 03,407,412 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2009/06/26 08:26:20 | 00,085,504 | ---- | M] (PC Pitstop LLC) [Disabled | Stopped] -- C:\Program Files\PCPitstop\PCPitstopScheduleService.exe -- (PCPitstop Scheduling)
SRV - [2009/06/05 12:39:14 | 00,541,992 | ---- | M] (Apple Inc.) [On_Demand | Stopped] -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service)
SRV - [2009/06/05 10:48:14 | 00,144,712 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2008/12/12 10:17:38 | 00,238,888 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
SRV - [2008/11/04 00:06:28 | 00,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2008/10/25 10:44:08 | 00,065,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2008/07/28 23:03:49 | 00,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008/04/13 16:11:55 | 00,028,160 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\irmon.dll -- (Irmon)
SRV - [2006/10/26 13:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006/08/14 14:09:30 | 00,072,704 | ---- | M] (Adobe Systems) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service)
SRV - [2005/04/03 23:41:10 | 00,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
========== Driver Services (SafeList) ========== DRV - [2010/01/12 02:21:58 | 00,161,800 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\System32\Drivers\avgrkx86.sys -- (AvgRkx86)
DRV - [2010/01/12 02:21:57 | 00,360,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010/01/12 02:21:56 | 00,333,192 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2010/01/12 02:21:56 | 00,028,424 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2009/12/02 05:19:06 | 00,064,288 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - [2009/11/20 18:34:54 | 10,235,968 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2009/10/24 20:56:24 | 00,138,576 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK)
DRV - [2009/09/10 14:54:06 | 00,038,224 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2009/06/05 10:42:38 | 00,039,424 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usbaapl.sys -- (USBAAPL)
DRV - [2009/03/19 15:32:48 | 00,023,400 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2008/11/19 07:00:00 | 00,009,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\RivaTuner v2.20\RivaTuner32.sys -- (RivaTuner32)
DRV - [2008/09/24 10:40:22 | 04,122,368 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2008/08/18 18:54:00 | 00,145,952 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvgts.sys -- (nvgts)
DRV - [2008/08/01 11:36:00 | 00,054,784 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2008/08/01 11:36:00 | 00,022,016 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2008/07/28 17:58:23 | 00,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2008/06/20 03:08:27 | 00,225,856 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2008/04/13 10:45:12 | 00,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbaudio.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2007/11/13 00:47:45 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2007/10/18 11:44:36 | 00,025,216 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tapgamerail.sys -- (tapgamerail)
DRV - [2007/04/09 08:56:22 | 00,021,248 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2007/04/09 08:55:08 | 00,022,912 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2007/04/09 08:53:24 | 00,012,672 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2007/03/07 15:51:00 | 00,043,528 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20)
DRV - [2007/01/30 00:16:42 | 00,006,144 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\PeerGuardian2\pgfilter.sys -- (pgfilter)
DRV - [2006/10/17 00:32:39 | 00,010,344 | ---- | M] (Symantec Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\symlcbrd.sys -- (symlcbrd)
DRV - [2006/09/14 00:09:15 | 00,028,672 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CO_Mon.sys -- (CO_Mon)
DRV - [2005/08/18 16:52:06 | 00,093,568 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\nvatabus.sys -- (nvatabus)
DRV - [2004/12/20 10:05:36 | 00,056,704 | ---- | M] (Saitek) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SaiHFFB5.sys -- (SaiHFFB5)
DRV - [2004/10/25 20:02:58 | 00,021,664 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Entech.sys -- (ENTECH)
DRV - [2004/09/30 17:54:32 | 00,030,984 | ---- | M] (Immersion Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\imhidusb.sys -- (imhidusb)
DRV - [2004/04/03 00:26:34 | 00,028,640 | R--- | M] (Ideazon) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\OmniUsb.sys -- (OmniUsb)
DRV - [2004/04/03 00:26:34 | 00,008,160 | R--- | M] (Ideazon) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\OmniUsbl.sys -- (OmniUsbl)
DRV - [2004/01/05 03:57:00 | 00,030,976 | R--- | M] (Ideazon) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\OmniDrv.sys -- (OmniDrv)
DRV - [2003/09/25 21:15:32 | 00,015,872 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\GTNDIS5.sys -- (GTNDIS5)
DRV - [2001/08/23 04:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)
DRV - [2001/08/17 05:51:32 | 00,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = DISABLE
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = DISABLE
IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-725345543-1547161642-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com/IE - HKU\S-1-5-21-725345543-1547161642-839522115-1004\S-1-5-21-725345543-1547161642-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-725345543-1547161642-839522115-1004\S-1-5-21-725345543-1547161642-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555
========== FireFox ========== FF - prefs.js..browser.search.defaultEngine: "Yahoo"
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.param.yahoo-fr: "chrf-offrhap"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-offrhap"
FF - prefs.js..browser.startup.homepage: "www.google.com"
FF - prefs.js..extensions.enabledItems: battlefieldheroespatcher@ea.com:4.0.21.0
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:7
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.5.2.20080717
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.716
FF - prefs.js..extensions.enabledItems: {d494da20-8750-11db-b606-0800200c9a66}:3.0.1
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?ei=UTF-8&fr=ytff-ytbm&p="
FF - HKLM\software\mozilla\Firefox\extensions\\avg@igeared: C:\Program Files\AVG\AVG9\Toolbar\Firefox\avg@igeared
FF - HKLM\software\mozilla\Firefox\extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2010/01/12 02:21:42 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/06 15:28:59 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/06 15:28:59 | 00,000,000 | ---D | M]
[2008/06/17 19:41:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Setha\Application Data\Mozilla\Extensions
[2010/01/12 02:38:28 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Setha\Application Data\Mozilla\Firefox\Profiles\7yw0r0ke.default\extensions
[2009/06/10 00:05:47 | 00,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\Setha\Application Data\Mozilla\Firefox\Profiles\7yw0r0ke.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2008/11/14 20:39:22 | 00,000,000 | ---D | M] (Broncofox) -- C:\Documents and Settings\Setha\Application Data\Mozilla\Firefox\Profiles\7yw0r0ke.default\extensions\{d494da20-8750-11db-b606-0800200c9a66}
[2009/08/20 13:17:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Setha\Application Data\Mozilla\Firefox\Profiles\7yw0r0ke.default\extensions\battlefieldheroespatcher@ea.com
[2009/01/31 18:06:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Setha\Application Data\Mozilla\Firefox\Profiles\7yw0r0ke.default\extensions\firefox@tvunetworks.com
[2008/07/28 18:06:40 | 00,000,523 | ---- | M] () -- C:\Documents and Settings\Setha\Application Data\Mozilla\Firefox\Profiles\7yw0r0ke.default\searchplugins\daemon-search.xml
[2010/01/10 17:31:31 | 00,001,166 | ---- | M] () -- C:\Documents and Settings\Setha\Application Data\Mozilla\Firefox\Profiles\7yw0r0ke.default\searchplugins\wow-akz.xml
[2010/01/12 02:38:28 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2004/11/12 19:36:20 | 00,005,120 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Mozilla Firefox\plugins\NPAdbESD.dll
[2007/01/09 12:03:02 | 00,658,056 | ---- | M] (Move Networks) -- C:\Program Files\Mozilla Firefox\plugins\npmnqmp07010901.dll
[2007/04/16 00:14:52 | 00,147,456 | ---- | M] (PopCap Games) -- C:\Program Files\Mozilla Firefox\plugins\nppopcaploader.dll
O1 HOSTS File: (357802 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 12308 more lines...
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O3 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O3 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll File not found
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] File not found
O4 - HKLM..\Run: [RivaTuner] C:\Program Files\RivaTuner v2.20\RivaTuner.exe ()
O4 - HKLM..\Run: [RivaTunerStartupDaemon] C:\Program Files\RivaTuner v2.20\RivaTuner.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
O4 - HKLM..\RunServices: [Windows Services] C:\Documents and Settings\Setha\svchost.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-725345543-1547161642-839522115-1004_Classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe (America Online, Inc.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKLM\..Trusted Domains: 58 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\.DEFAULT\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-18\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\..Trusted Domains: internet ([]about in Trusted sites)
O15 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\..Trusted Domains: mcafee.com ([]http in Trusted sites)
O15 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\..Trusted Domains: mcafee.com ([]https in Trusted sites)
O15 - HKU\S-1-5-21-725345543-1547161642-839522115-1004\..Trusted Domains: 64 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE}
http://www.comcastsupport.com/OneClickFix/tgctlsr.cab (SupportSoft Script Runner Class)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94}
http://utilities.pcpitstop.com/Nirvana/con...s/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71}
http://download.microsoft.com/download/e/2...78f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {94E5218F-9737-4FC2-8457-567B1FF23DC0}
http://utilities.pcpitstop.com/Nirvana/con...DiskMD3Ctrl.dll (diskhealth Class)
O16 - DPF: {A553720A-BFED-4EA4-A71F-7EFCA690A1F7}
http://utilities.pcpitstop.com/Nirvana/con...opAntiVirus.dll (PCPitstop AntiVirus)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6}
http://download.mcafee.com/molbin/iss-loc/...858/mcfscan.cab (McFreeScan Class)
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6}
http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab (IWinAmpActiveX Class)
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7}
http://utilities.pcpitstop.com/Nirvana/con.../pcpitstop2.dll (PCPitstop Exam)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.87.69.150 68.87.85.102
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O21 - SSODL: Windows Services - C:\Documents and Settings\Setha\svchost.exe - CLSID or File not found.
O24 - Desktop WallPaper: C:\Documents and Settings\Setha\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Setha\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/08/12 17:28:20 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010/01/07 23:25:04 | 00,091,136 | RHS- | M] (Microsoft) - E:\autorun.exe -- [ NTFS ]
O32 - AutoRun File - [2010/01/12 01:14:22 | 00,000,029 | RHS- | M] () - E:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\autorun.exe -- [2010/01/07 23:25:04 | 00,091,136 | RHS- | M] (Microsoft)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
========== Files/Folders - Created Within 30 Days ========== [2010/01/12 10:27:04 | 00,544,256 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Setha\Desktop\OTL.exe
[2010/01/12 03:33:17 | 00,472,064 | ---- | C] ( ) -- C:\Documents and Settings\Setha\Desktop\RootRepeal.exe
[2010/01/12 03:04:25 | 00,064,288 | ---- | C] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys
[2010/01/12 02:57:27 | 00,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
[2010/01/12 02:56:44 | 00,000,000 | ---D | C] -- C:\Program Files\Lavasoft
[2010/01/12 02:56:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Lavasoft
[2010/01/12 02:54:04 | 91,338,304 | ---- | C] (Lavasoft ) -- C:\Documents and Settings\Setha\Desktop\Ad-AwareInstallation.exe
[2010/01/12 02:45:42 | 00,000,000 | ---D | C] -- C:\WINDOWS\McAfee.com
[2010/01/12 02:25:08 | 00,000,000 | -H-D | C] -- C:\$AVG
[2010/01/12 02:21:58 | 00,161,800 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgrkx86.sys
[2010/01/12 02:21:58 | 00,012,464 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010/01/12 02:21:57 | 00,360,584 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010/01/12 02:21:56 | 00,333,192 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010/01/12 02:21:56 | 00,028,424 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010/01/12 02:21:51 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\Avg
[2010/01/12 02:11:50 | 00,891,248 | ---- | C] (AVG Technologies) -- C:\Documents and Settings\Setha\Desktop\avg_free_stb_all_9_40_cnet.exe
[2010/01/12 02:08:08 | 00,891,192 | ---- | C] (AVG Technologies) -- C:\Documents and Settings\Setha\Desktop\avg_iswt_stb_en_9_40_free.exe
[2010/01/12 01:55:42 | 00,000,000 | ---D | C] -- C:\VundoFix Backups
[2010/01/12 01:27:33 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2010/01/12 01:12:35 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2010/01/12 01:12:35 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2010/01/12 01:06:12 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\avg9
[2010/01/12 01:06:12 | 00,000,000 | ---D | C] -- C:\Program Files\AVG
[2010/01/11 01:59:05 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Setha\Desktop\ElitistGroup-v1.0.1
[2010/01/08 20:32:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Setha\Desktop\254047
[2010/01/06 14:28:35 | 00,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2010/01/06 14:20:01 | 16,883,056 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Setha\Desktop\IE8-WindowsXP-x86-ENU.exe
[2010/01/06 14:12:20 | 14,969,048 | ---- | C] (PC Pitstop LLC ) -- C:\Documents and Settings\Setha\Desktop\pcmatic-setup-0002.exe
[2010/01/06 14:09:30 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PCPitstop
[2010/01/06 14:09:17 | 00,490,064 | ---- | C] (PC Pitstop ) -- C:\Documents and Settings\Setha\Desktop\optimize3-setup-0002.exe
[2009/12/24 16:37:29 | 00,069,632 | ---- | C] (Khronos Group) -- C:\WINDOWS\System32\OpenCL.dll
[2009/12/24 16:37:27 | 11,374,592 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcompiler.dll
[2009/12/13 13:21:18 | 00,000,000 | ---D | C] -- C:\Program Files\PeerGuardian2
[2009/11/25 03:23:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2009/11/25 03:23:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2009/11/25 03:20:34 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Mozilla
[2009/11/25 03:20:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Mozilla
[2009/11/11 18:46:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2009/11/11 18:45:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2009/11/11 18:45:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Threat Expert
[2009/11/11 18:45:13 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Mozilla
[2009/11/11 18:45:09 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Mozilla
[2009/06/01 22:29:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2009/04/15 21:36:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
[2008/07/28 18:30:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Xfire
[2007/10/27 14:41:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2010/01/12 10:27:02 | 00,544,256 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Setha\Desktop\OTL.exe
[2010/01/12 10:25:07 | 00,000,852 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/01/12 10:25:07 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/01/12 10:25:07 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010/01/12 10:25:07 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010/01/12 10:25:07 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010/01/12 10:25:07 | 00,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010/01/12 10:25:07 | 00,000,281 | RHS- | M] () -- C:\boot.ini
[2010/01/12 10:25:07 | 00,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/01/12 10:23:18 | 00,262,800 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010/01/12 10:22:20 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/01/12 10:22:11 | 00,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/01/12 10:22:09 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/01/12 03:59:01 | 01,872,472 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\SmitfraudFix.exe
[2010/01/12 03:43:56 | 00,000,000 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\settings.dat
[2010/01/12 03:33:17 | 00,472,064 | ---- | M] ( ) -- C:\Documents and Settings\Setha\Desktop\RootRepeal.exe
[2010/01/12 03:32:30 | 00,524,288 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\dds.scr
[2010/01/12 03:18:18 | 00,000,229 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/01/12 03:06:20 | 22,544,384 | ---- | M] () -- C:\Documents and Settings\Setha\ntuser.dat
[2010/01/12 03:06:20 | 00,000,178 | -HS- | M] () -- C:\Documents and Settings\Setha\ntuser.ini
[2010/01/12 02:57:22 | 00,000,867 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/01/12 02:54:40 | 91,338,304 | ---- | M] (Lavasoft ) -- C:\Documents and Settings\Setha\Desktop\Ad-AwareInstallation.exe
[2010/01/12 02:21:58 | 00,161,800 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgrkx86.sys
[2010/01/12 02:21:58 | 00,012,464 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\avgrsstx.dll
[2010/01/12 02:21:58 | 00,001,507 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AVG 9.0.lnk
[2010/01/12 02:21:57 | 00,360,584 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2010/01/12 02:21:56 | 46,359,526 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/01/12 02:21:56 | 00,333,192 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgldx86.sys
[2010/01/12 02:21:56 | 00,113,461 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2010/01/12 02:21:56 | 00,028,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgmfx86.sys
[2010/01/12 02:21:51 | 06,061,540 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2010/01/12 02:21:51 | 00,492,629 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2010/01/12 02:21:51 | 00,116,698 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010/01/12 02:13:49 | 00,015,598 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\AVG_antivirus_9_0_pro_serial-[Demonoid.com]_1265001.4998.torrent
[2010/01/12 02:11:49 | 00,891,248 | ---- | M] (AVG Technologies) -- C:\Documents and Settings\Setha\Desktop\avg_free_stb_all_9_40_cnet.exe
[2010/01/12 02:08:12 | 00,891,192 | ---- | M] (AVG Technologies) -- C:\Documents and Settings\Setha\Desktop\avg_iswt_stb_en_9_40_free.exe
[2010/01/12 01:14:22 | 00,000,007 | -HS- | M] () -- C:\Documents and Settings\Setha\cfg.ini
[2010/01/12 01:01:58 | 00,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/01/12 00:54:06 | 00,000,008 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\sysReserve.ini
[2010/01/11 07:46:13 | 00,000,207 | ---- | M] () -- C:\Documents and Settings\Setha\default.pls
[2010/01/11 01:58:48 | 00,262,494 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\ElitistGroup-v1.0.1.zip
[2010/01/10 18:13:14 | 00,037,888 | ---- | M] () -- C:\Documents and Settings\Setha\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/10 18:11:55 | 00,030,771 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\9(Nine)_2009_Dvdrip_xvid_Thirteen-[[Demonoid.com]]_1265001.4998.torrent
[2010/01/08 20:31:47 | 00,005,542 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\254047.zip
[2010/01/08 19:57:24 | 00,000,008 | ---- | M] () -- C:\WINDOWS\System32\nvModes.dat
[2010/01/07 22:16:35 | 00,016,854 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\[Demonoid.com]-Lady_GaGa_The_Fame_Monster_2CDRip_2009_[Cov_2CD][Bubanee]_1265001.4998.torrent
[2010/01/06 14:58:45 | 20,020,7382 | ---- | M] () -- C:\Documents and Settings\Setha\My Documents\seths.reg
[2010/01/06 14:30:09 | 02,736,564 | -H-- | M] () -- C:\Documents and Settings\Setha\Local Settings\Application Data\IconCache.db
[2010/01/06 14:30:06 | 00,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010/01/06 14:20:26 | 16,883,056 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Setha\Desktop\IE8-WindowsXP-x86-ENU.exe
[2010/01/06 14:12:43 | 14,969,048 | ---- | M] (PC Pitstop LLC ) -- C:\Documents and Settings\Setha\Desktop\pcmatic-setup-0002.exe
[2010/01/06 14:09:15 | 00,490,064 | ---- | M] (PC Pitstop ) -- C:\Documents and Settings\Setha\Desktop\optimize3-setup-0002.exe
[2010/01/01 22:36:57 | 00,015,321 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\((Demonoid.com))-A_Perfect_Getaway_2009_Unrated_DC_XviD_ExTrAScEnE_RG_1265001.4998.torrent
[2010/01/01 22:36:30 | 00,015,321 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\A_Perfect_Getaway_2009_Unrated_DC_XviD_ExTrAScEnE_RG-_Demonoid.com_-_1265001.4998.torrent
[2010/01/01 22:35:01 | 00,015,120 | ---- | M] () -- C:\Documents and Settings\Setha\Desktop\9_Nine_HD_720p_High_Quality-[]Demonoid.com[]_1265001.4998.torrent
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ========== [2010/01/12 10:25:07 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/01/12 10:25:07 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010/01/12 10:25:07 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010/01/12 03:58:56 | 01,872,472 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\SmitfraudFix.exe
[2010/01/12 03:43:56 | 00,000,000 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\settings.dat
[2010/01/12 03:32:30 | 00,524,288 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\dds.scr
[2010/01/12 03:04:37 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010/01/12 03:04:35 | 00,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010/01/12 02:57:22 | 00,000,867 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/01/12 02:21:58 | 00,001,507 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\AVG 9.0.lnk
[2010/01/12 02:21:56 | 00,113,461 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\iavichjw.avm
[2010/01/12 02:21:51 | 46,359,526 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010/01/12 02:21:51 | 06,061,540 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\avi7.avg
[2010/01/12 02:21:51 | 00,492,629 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2010/01/12 02:21:51 | 00,116,698 | ---- | C] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2010/01/12 02:13:48 | 00,015,598 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\AVG_antivirus_9_0_pro_serial-[Demonoid.com]_1265001.4998.torrent
[2010/01/12 01:14:22 | 00,000,007 | -HS- | C] () -- C:\Documents and Settings\Setha\cfg.ini
[2010/01/12 00:54:06 | 00,000,008 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\sysReserve.ini
[2010/01/11 01:58:51 | 00,262,494 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\ElitistGroup-v1.0.1.zip
[2010/01/10 18:11:55 | 00,030,771 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\9(Nine)_2009_Dvdrip_xvid_Thirteen-[[Demonoid.com]]_1265001.4998.torrent
[2010/01/08 20:31:49 | 00,005,542 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\254047.zip
[2010/01/07 22:16:35 | 00,016,854 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\[Demonoid.com]-Lady_GaGa_The_Fame_Monster_2CDRip_2009_[Cov_2CD][Bubanee]_1265001.4998.torrent
[2010/01/06 14:58:25 | 20,020,7382 | ---- | C] () -- C:\Documents and Settings\Setha\My Documents\seths.reg
[2010/01/01 22:36:57 | 00,015,321 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\((Demonoid.com))-A_Perfect_Getaway_2009_Unrated_DC_XviD_ExTrAScEnE_RG_1265001.4998.torrent
[2010/01/01 22:36:30 | 00,015,321 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\A_Perfect_Getaway_2009_Unrated_DC_XviD_ExTrAScEnE_RG-_Demonoid.com_-_1265001.4998.torrent
[2010/01/01 22:35:01 | 00,015,120 | ---- | C] () -- C:\Documents and Settings\Setha\Desktop\9_Nine_HD_720p_High_Quality-[]Demonoid.com[]_1265001.4998.torrent
[2009/12/24 16:37:29 | 00,008,743 | ---- | C] () -- C:\WINDOWS\System32\nvinfo.pb
[2009/10/14 15:58:06 | 00,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2009/04/15 20:22:23 | 00,870,128 | ---- | C] () -- C:\Documents and Settings\Setha\Application Data\mcs.rma
[2009/04/15 20:22:23 | 00,000,004 | ---- | C] () -- C:\Documents and Settings\Setha\Application Data\A272B0
[2008/10/21 21:32:03 | 00,000,033 | ---- | C] () -- C:\WINDOWS\SANYO.INI
[2008/10/07 09:13:22 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008/10/07 09:13:20 | 00,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008/09/19 12:20:26 | 00,037,888 | ---- | C] () -- C:\Documents and Settings\Setha\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/08/13 01:16:24 | 00,058,240 | ---- | C] () -- C:\WINDOWS\System32\Sdd001.dll
[2008/08/13 01:16:24 | 00,058,240 | ---- | C] () -- C:\WINDOWS\System32\Sdd000.dll
[2008/08/13 01:16:23 | 00,017,408 | ---- | C] () -- C:\WINDOWS\System32\drivers\KuirKbdFltr.sys
[2008/08/13 01:16:21 | 00,013,568 | ---- | C] () -- C:\WINDOWS\System32\drivers\KuirMouFltr.sys
[2008/08/13 01:07:21 | 00,002,352 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2008/06/05 08:58:26 | 00,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008/05/16 13:01:00 | 00,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2008/04/12 01:06:31 | 00,395,776 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2008/04/12 01:06:31 | 00,262,144 | ---- | C] () -- C:\WINDOWS\System32\TomsMoComp_ff.dll
[2008/04/12 01:06:31 | 00,112,640 | ---- | C] () -- C:\WINDOWS\System32\libmpeg2_ff.dll
[2008/04/12 01:06:30 | 02,255,360 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2008/03/31 13:25:46 | 00,831,488 | ---- | C] () -- C:\WINDOWS\System32\divx_xx0a.dll
[2008/03/21 12:30:08 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2008/03/21 12:28:54 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest
[2008/03/21 12:28:54 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest
[2008/03/21 12:28:20 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2008/01/16 18:26:41 | 00,000,000 | ---- | C] () -- C:\WINDOWS\iplayer.INI
[2008/01/12 20:19:21 | 00,065,536 | ---- | C] () -- C:\WINDOWS\System32\Gif89.dll
[2007/09/28 12:16:43 | 00,000,435 | ---- | C] () -- C:\WINDOWS\Wininit.ini
[2007/08/22 00:29:52 | 00,000,000 | ---- | C] () -- C:\WINDOWS\LCDMedia.INI
[2007/08/16 19:32:00 | 00,000,049 | ---- | C] () -- C:\WINDOWS\iltwain.ini
[2007/08/16 15:50:32 | 00,139,152 | ---- | C] () -- C:\Documents and Settings\Setha\Application Data\PnkBstrK.sys
[2007/08/01 16:31:26 | 00,000,327 | ---- | C] () -- C:\WINDOWS\DVDCreator.INI
[2007/06/26 15:15:47 | 00,094,208 | ---- | C] () -- C:\WINDOWS\System32\GTW32N50.dll
[2007/06/26 15:15:30 | 00,004,254 | ---- | C] () -- C:\WINDOWS\System32\WLAN.INI
[2007/06/20 11:48:41 | 00,138,576 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2007/04/25 14:26:59 | 00,001,362 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2007/01/03 12:43:52 | 00,003,208 | ---- | C] () -- C:\WINDOWS\DSCAMERA.INI
[2006/11/30 12:26:17 | 00,200,704 | ---- | C] () -- C:\WINDOWS\System32\teulKit.dll
[2006/10/27 23:17:40 | 00,000,075 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2006/10/17 12:01:11 | 00,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2006/09/14 00:09:15 | 00,028,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\CO_Mon.sys
[2006/09/09 23:22:16 | 00,034,308 | ---- | C] () -- C:\WINDOWS\System32\Chip.dll
[2006/08/25 15:51:17 | 00,000,040 | -HS- | C] () -- C:\Documents and Settings\Setha\Application Data\.zreglib
[2006/08/22 16:19:38 | 00,123,225 | ---- | C] () -- C:\Documents and Settings\Setha\Application Data\Cosmos Prefs
[2006/08/16 12:42:04 | 00,000,229 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006/08/12 18:55:03 | 00,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/08/12 18:23:57 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2006/08/12 17:59:31 | 00,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2006/08/12 17:56:28 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2001/11/19 19:05:18 | 00,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys
[1998/08/16 05:00:00 | 00,004,096 | ---- | C] () -- C:\WINDOWS\System32\sysres.dll
========== Alternate Data Streams ========== @Alternate Data Stream - 188 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 1352 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:eNWJcOpRQVdf1su0gcqMpH78LP
@Alternate Data Stream - 1326 bytes -> C:\Documents and Settings\Setha\Cookies:p1O0paCeBn1IAZiW5rc9M7uul1D
@Alternate Data Stream - 1257 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:D62qsaxb47nvi9izNMETS
@Alternate Data Stream - 1252 bytes -> C:\Program Files\Common Files\System:fecy59ZBxZg6ptP57DnvxzEt
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
@Alternate Data Stream - 1215 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:UEpRFIEH2WkGVEiAbRelCimr
@Alternate Data Stream - 1172 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:1c4z3gi3tHOiJHvtrQu2Mzq
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:322EAACD
@Alternate Data Stream - 1144 bytes -> C:\Documents and Settings\All Users\Application Data\Microsoft:e8X3EovcVgjRTSnof2hrN
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >