Sorry for the delay, im not at home and havent been lately, so im controlling my computer via teamviewer.
Thanks again for your help
Logs:
OTL.txt:
OTL logfile created on: 11/7/2010 9:52:58 AM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Tina\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18975)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 63.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 78.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 456.92 Gb Total Spaaace | 68.68 Gb Free Space | 15.03% Space Free | Partition Type: NTFS
Drive D: | 8.84 Gb Total Space | 0.99 Gb Free Space | 11.24% Space Free | Partition Type: NTFS
Computer Name: TYLERS-COMPUTER | User Name: Tina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010/11/07 09:52:26 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Tina\Desktop\OTL.exe
PRC - [2010/09/18 06:42:43 | 012,479,664 | ---- | M] (Mozilla Messaging) -- C:\Program Files\Mozilla Thunderbird\thunderbird.exe
PRC - [2010/09/16 18:01:42 | 000,975,928 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2010/09/01 07:31:54 | 009,762,088 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunes.exe
PRC - [2010/08/13 12:08:46 | 000,033,056 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
PRC - [2010/08/13 11:58:56 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010/08/09 23:00:42 | 000,013,088 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe
PRC - [2010/06/13 05:55:34 | 000,113,664 | ---- | M] () -- C:\Program Files\Rainmeter\Rainmeter.exe
PRC - [2010/04/29 14:39:34 | 000,304,464 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2010/04/29 14:39:32 | 000,437,584 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2010/04/16 02:18:34 | 000,173,352 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
PRC - [2009/12/18 00:14:00 | 000,713,544 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
PRC - [2009/12/18 00:12:10 | 001,044,808 | ---- | M] (TuneUp Software) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
PRC - [2009/09/11 07:24:32 | 000,735,960 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe
PRC - [2009/09/11 07:23:46 | 002,054,360 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe
PRC - [2009/05/12 19:37:57 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/05/01 23:15:46 | 000,015,872 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerAssistant.exe
PRC - [2007/09/02 12:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe
PRC - [2006/09/28 08:42:24 | 000,065,536 | ---- | M] (Hewlett-Packard Company) -- C:\hp\support\hpsysdrv.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010/11/07 09:52:26 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Tina\Desktop\OTL.exe
MOD - [2010/08/31 10:39:57 | 001,684,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll
MOD - [2008/05/01 23:15:35 | 000,004,608 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerHook.dll
MOD - [2007/09/02 12:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - File not found [Disabled | Stopped] -- -- (iWinTrusted)
SRV - [2010/09/18 22:16:54 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010/08/13 11:58:56 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010/04/29 14:39:34 | 000,304,464 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2010/04/16 02:18:34 | 000,173,352 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
SRV - [2010/03/18 12:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/02/19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010/01/24 13:21:31 | 000,435,016 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2009/12/18 00:12:10 | 001,044,808 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2009/12/18 00:08:54 | 000,030,024 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\WINDOWS\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2009/09/11 07:33:18 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009/09/11 07:24:32 | 000,735,960 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn)
SRV - [2009/04/26 19:05:00 | 002,870,429 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2008/05/23 07:58:34 | 000,594,600 | ---- | M] ( ) [Disabled | Stopped] -- C:\Windows\System32\lxducoms.exe -- (lxdu_device)
SRV - [2008/05/23 07:58:22 | 000,098,984 | ---- | M] () [Disabled | Stopped] -- C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxduserv.exe -- (lxduCATSCustConnectService)
SRV - [2008/01/18 22:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2005/10/11 16:52:28 | 000,233,472 | ---- | M] () [Disabled | Stopped] -- C:\WINDOWS\System32\dns\bin\named.exe -- (twdns)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Tina\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2010/08/05 21:25:14 | 000,697,328 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\sptd.sys -- (sptd)
DRV - [2010/07/10 04:37:00 | 011,008,040 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010/04/29 14:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2010/02/12 15:36:35 | 000,836,384 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\ae1000va.sys -- (AE1000)
DRV - [2009/10/14 07:24:44 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2009/09/11 07:26:26 | 000,038,240 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\epfwwfp.sys -- (epfwwfp)
DRV - [2009/09/11 07:26:20 | 000,135,048 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\epfw.sys -- (epfw)
DRV - [2009/09/11 07:23:50 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009/09/11 07:17:16 | 000,116,008 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\eamon.sys -- (eamon)
DRV - [2009/06/19 09:10:40 | 000,033,096 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\epfwndis.sys -- (Epfwndis)
DRV - [2009/02/11 11:38:14 | 002,324,512 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\RTKVHDA.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/11/26 12:51:02 | 000,333,824 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\netr61.sys -- (rt61x86)
DRV - [2008/08/01 18:51:14 | 001,052,704 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\nvmfdx32.sys -- (NVENETFD)
DRV - [2008/01/28 21:44:04 | 000,384,896 | ---- | M] (Hauppauge Computer Works, Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\hcw18bda.sys -- (hcw18bda)
DRV - [2008/01/18 20:53:24 | 000,073,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2007/10/06 03:38:24 | 000,935,936 | ---- | M] (YewSoft) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\CamthWDM.sys -- (CamthWDM)
DRV - [2007/03/19 08:58:50 | 000,101,672 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2006/12/07 10:04:40 | 000,258,048 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\HSXHWBS2.sys -- (HSXHWBS2)
DRV - [2006/12/07 10:04:26 | 000,659,968 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\HSX_CNXT.sys -- (winachsf)
DRV - [2006/12/07 10:03:32 | 000,985,600 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\HSX_DP.sys -- (HSF_DP)
DRV - [2006/11/28 11:44:52 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2006/11/02 04:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006/11/02 04:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006/11/02 04:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006/11/02 04:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006/11/02 04:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006/11/02 04:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006/11/02 04:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006/11/02 04:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006/11/02 04:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006/11/02 04:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006/11/02 04:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006/11/02 04:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006/11/02 04:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2006/11/02 04:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006/11/02 04:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006/11/02 04:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006/11/02 04:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2006/11/02 04:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006/11/02 04:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006/11/02 04:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006/11/02 04:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2006/11/02 04:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006/11/02 04:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006/11/02 04:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006/11/02 04:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006/11/02 04:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006/11/02 04:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006/11/02 04:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006/11/02 04:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006/11/02 04:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006/11/02 04:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006/11/02 04:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006/11/02 04:49:30 | 000,017,512 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2006/11/02 04:49:28 | 000,016,488 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2006/11/02 04:49:20 | 000,014,952 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2006/11/02 03:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006/11/02 03:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006/11/02 03:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006/11/02 03:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006/11/02 03:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006/11/02 03:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006/11/02 02:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006/11/02 02:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)
DRV - [2005/12/18 19:42:12 | 000,008,801 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\DScaler\DSDrv4.sys -- (DSDrv4)
DRV - [2005/12/12 12:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\PS2.sys -- (Ps2)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3984932898-1970420750-1500784559-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-3984932898-1970420750-1500784559-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultenginename: "AIM Search"
FF - prefs.js..browser.search.defaulturl: "http://aim.search.aol.com/search/search?query={searchTerms}&invocationType=tb50-ff-aim-chromesbox-en-us"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8
FF - prefs.js..extensions.enabledItems: {38AB6A6C-CC4C-4f9e-A3DD-3C5681EF18A1}:1.0.3.93
FF - prefs.js..extensions.enabledItems: flashplugin@idm:4.4.0.468
FF - prefs.js..extensions.enabledItems: paypalfirefoxplugin@orbiscom:2.2.26.0
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {9c51bd27-6ed8-4000-a2bf-36cb95c0c947}:11.0.1
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 9
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.3.20100310105313
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50-ff-aim-ab-en-us&query="
FF - HKLM\software\mozilla\Firefox\Extensions\\flashplugin@idm: C:\Users\Tina\AppData\Roaming\IDM\bin\flash [2010/05/15 17:27:36 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\paypalfirefoxplugin@orbiscom: C:\Program Files\PayPal\PayPal Plug-In [2010/01/23 16:25:31 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{98e34367-8df7-42b4-837b-20b892ff0847}: C:\ProgramData\iWin Games\firefox [2009/05/23 21:12:11 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{000a9d1c-beef-4f90-9363-039d445309b8}: C:\Program Files\Google\Google Gears\Firefox\ [2010/01/04 04:13:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/09/28 19:52:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/09/28 19:52:19 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010/10/29 20:08:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010/09/02 12:54:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010/01/24 12:07:09 | 000,000,000 | ---D | M]
[2010/05/18 07:20:29 | 000,000,000 | ---D | M] -- C:\Users\Tina\AppData\Roaming\mozilla\Extensions
[2010/04/20 19:37:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tina\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010/05/18 07:20:29 | 000,000,000 | ---D | M] -- C:\Users\Tina\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2010/11/04 15:37:44 | 000,000,000 | ---D | M] -- C:\Users\Tina\AppData\Roaming\mozilla\Firefox\Profiles\1657tio7.default\extensions
[2010/02/01 00:10:00 | 000,000,000 | ---D | M] () -- C:\Users\Tina\AppData\Roaming\mozilla\Firefox\Profiles\1657tio7.default\extensions\{38AB6A6C-CC4C-4f9e-A3DD-3C5681EF18A1}
[2010/05/15 16:20:00 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Tina\AppData\Roaming\mozilla\Firefox\Profiles\1657tio7.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010/03/06 23:36:36 | 000,000,000 | ---D | M] (Tamper Data) -- C:\Users\Tina\AppData\Roaming\mozilla\Firefox\Profiles\1657tio7.default\extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}
[2010/01/04 04:13:23 | 000,000,000 | ---D | M] (jDownFF) -- C:\Users\Tina\AppData\Roaming\mozilla\Firefox\Profiles\1657tio7.default\extensions\{a3b24d40-bac4-11dc-95ff-0800200c9a66}
[2010/05/21 16:35:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tina\AppData\Roaming\mozilla\Firefox\Profiles\1657tio7.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010/08/21 12:48:52 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Tina\AppData\Roaming\mozilla\Firefox\Profiles\1657tio7.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/08/21 12:48:46 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Tina\AppData\Roaming\mozilla\Firefox\Profiles\1657tio7.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/01/04 01:48:47 | 000,000,000 | ---D | M] -- C:\Users\Tina\AppData\Roaming\mozilla\Firefox\Profiles\1657tio7.default\extensions\firefox@tvunetworks.com
[2010/01/11 20:34:52 | 000,004,554 | ---- | M] () -- C:\Users\Tina\AppData\Roaming\Mozilla\FireFox\Profiles\1657tio7.default\searchplugins\aim-search.xml
[2010/10/14 20:40:45 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/02/19 16:53:46 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2009/05/20 00:49:50 | 000,083,376 | ---- | M] (NHN USA Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll
[2009/05/27 15:41:50 | 000,069,632 | ---- | M] (NHN USA Inc. ) -- C:\Program Files\Mozilla Firefox\plugins\npijjiFFPlugin1.dll
[2010/05/15 17:27:18 | 000,238,776 | ---- | M] (Pando Networks) -- C:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll
[2007/04/16 12:07:12 | 000,180,293 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
[2009/12/03 13:11:58 | 000,002,202 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google-com.xml
[2009/12/10 09:59:34 | 000,002,198 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google-search.xml
O1 HOSTS File: ([2010/09/22 16:55:46 | 000,620,296 | ---- | M]) - C:\WINDOWS\System32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 fr.a2dfp.net
O1 - Hosts: 127.0.0.1 m.fr.a2dfp.net
O1 - Hosts: 127.0.0.1 ad.a8.net
O1 - Hosts: 127.0.0.1 asy.a8ww.net
O1 - Hosts: 127.0.0.1 abcstats.com
O1 - Hosts: 127.0.0.1 a.abv.bg
O1 - Hosts: 127.0.0.1 adserver.abv.bg
O1 - Hosts: 127.0.0.1 adv.abv.bg
O1 - Hosts: 127.0.0.1 bimg.abv.bg
O1 - Hosts: 127.0.0.1 ca.abv.bg
O1 - Hosts: 127.0.0.1 www2.a-counter.kiev.ua
O1 - Hosts: 127.0.0.1 track.acclaimnetwork.com
O1 - Hosts: 127.0.0.1 accuserveadsystem.com
O1 - Hosts: 127.0.0.1 www.accuserveadsystem.com
O1 - Hosts: 127.0.0.1 achmedia.com
O1 - Hosts: 127.0.0.1 aconti.net
O1 - Hosts: 127.0.0.1 secure.aconti.net
O1 - Hosts: 127.0.0.1 www.aconti.net #[Dialer.Aconti]
O1 - Hosts: 127.0.0.1 ads.active.com
O1 - Hosts: 127.0.0.1 am1.activemeter.com
O1 - Hosts: 127.0.0.1 www.activemeter.com #[Tracking.Cookie]
O1 - Hosts: 127.0.0.1 ads.activepower.net
O1 - Hosts: 127.0.0.1 stat.active24stats.nl #[Tracking.Cookie]
O1 - Hosts: 127.0.0.1 ad2games.com
O1 - Hosts: 16355 more lines...
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe ()
O4 - HKU\S-1-5-21-3984932898-1970420750-1500784559-1000..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood=1 = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3984932898-1970420750-1500784559-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3984932898-1970420750-1500784559-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O7 - HKU\S-1-5-21-3984932898-1970420750-1500784559-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 64.233.217.2 64.233.217.3 192.168.1.1
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (C:\WINDOWS\system32\dllcache\recycled.exe) - C:\Windows\System32\dllcache\recycled.exe File not found
O24 - Desktop WallPaper: C:\Users\Tina\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Tina\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O30 - LSA: Security Packages - (.common-controls_6595b64144ccf1df_6.0) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/06/21 09:19:32 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
MsConfig - Services: "WinDefend"
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk - C:\PROGRA~1\MCAFEE~1\20DEB9~1.181\SSSCHE~1.EXE - File not found
MsConfig - StartUpFolder: C:^Users^Tina^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip - Reg Error: Value error. - File not found
MsConfig - StartUpFolder: C:^Users^Tina^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^LimeWire On Startup.lnk - C:\Program Files\LimeWire\LimeWire.exe - (Lime Wire, LLC)
MsConfig - StartUpReg: [b]AdobeAAMUpdater-1.0[/b] - hkey= - key= - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: [b]AdobeCS5ServiceManager[/b] - hkey= - key= - C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: [b]DAEMON Tools Pro Agent[/b] - hkey= - key= - C:\Program Files\DAEMON Tools Pro\DTAgent.exe (DT Soft Ltd)
MsConfig - StartUpReg: [b]DirectPlayerCore[/b] - hkey= - key= - C:\Program Files\NBC Direct\DirectPlayerCore.exe (NBC Universal)
MsConfig - StartUpReg: [b]DivXUpdate[/b] - hkey= - key= - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
MsConfig - StartUpReg: [b]HP Software Update[/b] - hkey= - key= - c:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Co.)
MsConfig - StartUpReg: [b]Launcher[/b] - hkey= - key= - C:\WINDOWS\SMINST\Launcher.exe (soft thinks)
MsConfig - StartUpReg: [b]OsdMaestro[/b] - hkey= - key= - C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
MsConfig - StartUpReg: [b]Pando Media Booster[/b] - hkey= - key= - C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
MsConfig - StartUpReg: [b]Skype[/b] - hkey= - key= - C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig - StartUpReg: [b]SpeedUpMyPC[/b] - hkey= - key= - C:\Program Files\Uniblue\SpeedUpMyPC\launcher.exe (Uniblue Systems Limited)
MsConfig - StartUpReg: [b]Steam[/b] - hkey= - key= - c:\program files\steam\steam.exe (Valve Corporation)
MsConfig - StartUpReg: [b]SwitchBoard[/b] - hkey= - key= - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: [b]WebcamMaxMoniter[/b] - hkey= - key= - C:\Program Files\WebcamMax\wcmmon.exe ()
MsConfig - StartUpReg: [b]Windows Defender[/b] - hkey= - key= - File not found
MsConfig - State: "bootini" - 2
MsConfig - State: "startup" - 2
MsConfig - State: "services" - 2
SafeBootMin: AppMgmt - C:\Windows\System32\appmgmts.dll File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {BD08A9D5-0E5C-4f42-99A3-C0CB5E860557} - Solid State ION Internet Explorer Plugin
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
Drivers32: msacm.ac3acm - C:\Windows\System32\AC3ACM.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\Windows\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.scg726 - C:\Windows\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.voxacm160 - C:\Windows\System32\vct3216.acm (Voxware, Inc.)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.dvsd - C:\Windows\System32\mcdvd_32.dll (MainConcept)
Drivers32: vidc.ffds - C:\Program Files\Combined Community Codec Pack\Filters\FFDShow\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
Drivers32: vidc.VP60 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.XFR1 - C:\Windows\System32\xfcodec.dll ()
Drivers32: vidc.xvid - C:\Windows\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)
NetSvcs: UxTuneUp - C:\WINDOWS\System32\uxtuneup.dll (TuneUp Software)
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2012/06/21 09:51:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard
[2012/06/21 09:39:59 | 000,000,000 | ---D | C] -- C:\Windows\SMINST
[2012/06/21 09:32:45 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capicom.dll
[2012/06/21 09:32:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Symantec
[2012/06/21 09:32:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2012/06/21 09:31:09 | 000,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2012/06/21 09:29:35 | 000,000,000 | ---D | C] -- C:\hp
[2012/06/21 09:29:27 | 000,985,600 | ---- | C] (Conexant Systems, Inc.) -- C:\Windows\System32\drivers\HSX_DP.sys
[2012/06/21 09:29:27 | 000,659,968 | ---- | C] (Conexant Systems, Inc.) -- C:\Windows\System32\drivers\HSX_CNXT.sys
[2012/06/21 09:29:27 | 000,258,048 | ---- | C] (Conexant Systems, Inc.) -- C:\Windows\System32\drivers\HSXHWBS2.sys
[2012/06/21 09:29:27 | 000,172,032 | ---- | C] (Conexant Systems, Inc.) -- C:\Windows\System32\UCI32m15.dll
[2012/06/21 09:29:27 | 000,094,208 | ---- | C] (Conexant) -- C:\Windows\System32\mdmxsdk.dll
[2012/06/21 09:29:27 | 000,008,192 | ---- | C] (Conexant Systems, Inc.) -- C:\Windows\System32\drivers\XAudio.sys
[2012/06/21 09:29:25 | 000,000,000 | ---D | C] -- C:\Program Files\Online Services
[2012/06/21 09:29:25 | 000,000,000 | ---D | C] -- C:\Program Files\earthlink totalaccess
[2012/06/21 09:29:06 | 000,352,768 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\idecoiins.dll
[2012/06/21 09:29:06 | 000,352,768 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\idecoi.dll
[2012/06/21 09:29:06 | 000,101,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvstor32.sys
[2012/06/21 09:28:57 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2012/06/21 09:28:57 | 000,000,000 | ---D | C] -- C:\Windows\System32\OEM
[2012/06/21 09:28:40 | 000,000,000 | ---D | C] -- C:\Boot
[2012/06/21 09:27:13 | 000,000,000 | ---D | C] -- C:\ProgramData\PC-Doctor
[2012/06/21 09:26:44 | 000,000,000 | ---D | C] -- C:\Program Files\PC-Doctor 5 for Windows
[2012/06/21 09:24:23 | 000,032,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msonpmon.dll
[2012/06/21 09:22:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2012/06/21 09:22:23 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2012/06/21 09:22:13 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2012/06/21 09:20:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2012/06/21 09:20:18 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2012/06/21 09:19:32 | 000,072,176 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\pxhpinst.exe
[2012/06/21 09:19:16 | 000,000,000 | ---D | C] -- C:\ProgramData\muvee Technologies
[2012/06/21 09:19:16 | 000,000,000 | ---D | C] -- C:\Program Files\muvee Technologies
[2012/06/21 09:19:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\muvee Technologies
[2012/06/21 09:18:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Real
[2012/06/21 09:17:59 | 000,000,000 | ---D | C] -- C:\Program Files\Real
[2012/06/21 09:16:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LS Getting Started
[2012/06/21 09:16:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\LightScribe
[2012/06/21 09:16:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SureThing Shared
[2012/06/21 09:15:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Sonic
[2012/06/21 09:15:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PX Storage Engine
[2012/06/21 09:14:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Sonic Shared
[2012/06/21 09:14:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Roxio
[2012/06/21 09:14:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Roxio Shared
[2012/06/21 09:14:34 | 000,000,000 | ---D | C] -- C:\Program Files\Roxio
[2012/06/21 09:09:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\HP
[2012/06/21 09:09:07 | 000,000,000 | ---D | C] -- C:\Program Files\HP
[2012/06/21 09:08:08 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2012/06/21 09:02:57 | 000,000,000 | ---D | C] -- C:\ProgramData\WildTangent
[2012/06/21 09:02:27 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2012/06/21 08:57:04 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2012/06/21 08:57:04 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2012/06/21 08:57:02 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2012/06/21 08:56:54 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2012/06/21 08:56:44 | 000,339,968 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2012/06/21 08:56:43 | 004,390,912 | ---- | C] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
[2012/06/21 08:56:43 | 002,523,680 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2012/06/21 08:56:00 | 000,139,264 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\System32\hcwecppp.ax
[2012/06/21 08:56:00 | 000,096,256 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\System32\hcwcp.ax
[2012/06/21 08:54:36 | 000,604,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvuninst.exe
[2012/06/21 08:54:35 | 000,313,888 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvexpbar.dll
[2012/06/21 08:54:34 | 001,108,512 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcpluir.dll
[2012/06/21 08:54:33 | 000,801,312 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcplui.exe
[2012/06/21 08:54:33 | 000,420,384 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcpl.cpl
[2012/06/21 08:45:16 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hccoin.dll
[2012/06/21 08:44:21 | 000,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard
[2012/06/21 08:43:36 | 000,048,760 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\System32\RUNCLOSE.OCX
[2012/06/21 08:43:36 | 000,019,072 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\System32\drivers\PS2.sys
[2012/06/21 08:42:55 | 000,253,952 | ---- | C] (Hewlett-Packard Development Company, L.P.) -- C:\Windows\System32\cPC_DMIRD.dll
[2012/06/21 08:40:49 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc71.dll
[2012/06/21 08:40:28 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2012/06/21 08:34:54 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT
[2012/06/21 08:32:39 | 000,000,000 | ---D | C] -- C:\Windows\Debug
[2012/06/21 08:31:06 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010/11/07 09:52:20 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Tina\Desktop\OTL.exe
[2010/11/04 14:12:55 | 000,000,000 | ---D | C] -- C:\Users\Tina\Desktop\FullHDWallpapersPack38
[2010/11/02 17:51:48 | 000,000,000 | ---D | C] -- C:\Users\Tina\Desktop\Virus Tools
[2010/10/21 00:51:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Office Genuine Advantage
[2010/10/21 00:17:12 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2010/10/21 00:16:58 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2010/10/21 00:05:32 | 000,000,000 | ---D | C] -- C:\Users\Tina\AppData\Roaming\vlc
[2010/10/21 00:03:21 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2010/10/20 23:55:59 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2010/10/20 23:55:59 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2010/10/20 23:55:55 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2010/10/20 23:55:55 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2010/10/20 23:55:54 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2010/10/20 23:34:28 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2010/10/20 23:34:28 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2010/10/20 23:34:28 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2010/10/20 23:26:40 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshhttp.dll
[2010/10/20 23:26:37 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\httpapi.dll
[2010/10/20 23:26:11 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll
[2010/10/20 23:18:22 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2010/10/20 23:18:22 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2010/10/20 23:18:22 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2010/10/20 23:18:22 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2010/10/20 23:18:21 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2010/10/20 23:18:21 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2010/10/20 23:18:21 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2010/10/20 23:18:20 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2010/10/20 23:18:20 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2010/10/20 23:18:19 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2010/10/20 23:18:17 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2010/10/20 23:18:14 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2010/10/20 23:18:14 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2010/10/20 23:18:14 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2010/10/20 23:18:13 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2010/10/20 23:18:10 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2010/10/20 23:18:10 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2010/10/20 23:17:42 | 000,523,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2010/10/20 23:17:42 | 000,511,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2010/10/20 23:17:34 | 000,347,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2010/10/20 23:17:33 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2010/10/20 23:17:32 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2010/10/20 23:17:31 | 000,472,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2010/10/20 23:17:26 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2010/10/20 23:17:26 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2010/10/20 23:17:24 | 000,329,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
[2010/10/20 23:17:00 | 001,314,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2010/10/20 23:15:36 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiohlp.dll
[2010/10/20 23:15:33 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NETSTAT.EXE
[2010/10/20 23:15:33 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ARP.EXE
[2010/10/20 23:15:33 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\finger.exe
[2010/10/20 23:15:33 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\HOSTNAME.EXE
[2010/10/20 23:15:32 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ROUTE.EXE
[2010/10/20 23:15:32 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MRINFO.EXE
[2010/10/20 23:15:31 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
[2010/10/20 23:12:39 | 002,868,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2010/10/20 23:12:39 | 002,386,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2010/10/20 23:12:17 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2010/10/20 23:12:15 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2010/10/20 23:11:37 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.tlb
[2010/10/20 23:11:37 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amcompat.tlb
[2010/10/20 23:11:16 | 001,256,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2010/10/20 23:10:30 | 008,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2010/10/20 23:09:29 | 003,545,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2010/10/20 23:09:28 | 003,598,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2010/10/20 23:09:15 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2010/10/20 23:09:06 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2010/10/20 23:09:05 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2010/10/20 23:08:26 | 002,037,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2010/10/20 23:07:01 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvfw32.dll
[2010/10/20 23:07:01 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
[2010/10/20 23:07:01 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2010/10/20 23:07:01 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avicap32.dll
[2010/10/20 23:06:42 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
[2010/10/20 23:06:41 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\L2SecHC.dll
[2010/10/20 23:06:40 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlansec.dll
[2010/10/20 23:03:59 | 000,289,792 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2010/10/20 23:03:59 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2010/10/20 23:03:59 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2010/10/20 23:03:59 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
[2010/10/20 23:03:45 | 000,604,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOD.DLL
[2010/10/20 23:03:39 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rastls.dll
[2010/10/20 23:03:38 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\raschap.dll
[2010/10/20 23:03:06 | 000,636,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localspl.dll
[2010/10/20 23:02:48 | 000,420,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2010/10/20 23:02:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2010/10/20 22:59:38 | 000,062,464 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codeca.acm
[2010/10/20 22:59:30 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2010/10/20 22:59:09 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
[2010/10/20 22:58:57 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDApi.dll
[2010/10/20 22:58:51 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2010/10/20 22:58:33 | 000,317,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MP4SDECD.DLL
[2010/10/20 22:58:29 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2010/10/20 22:58:19 | 000,866,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2010/10/20 22:58:15 | 000,714,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2010/10/20 22:55:09 | 000,310,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unregmp2.exe
[2010/10/20 22:55:06 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
[2010/10/20 22:55:05 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
[2010/10/20 22:55:05 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
[2010/10/20 21:42:52 | 000,044,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2010/10/20 21:42:51 | 002,421,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2010/10/20 21:42:10 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2010/10/20 21:42:10 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2010/10/20 21:42:10 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2010/10/20 21:41:58 | 000,171,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2010/10/20 21:41:58 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2010/10/13 15:43:34 | 000,000,000 | ---D | C] -- C:\Program Files\Cablenut
[2010/10/11 18:55:20 | 000,659,456 | ---- | C] (Speed Guide Inc.) -- C:\Users\Tina\Desktop\TCPOptimizer.exe
[2010/10/08 19:42:39 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2010/10/08 19:42:33 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2010/10/08 19:42:32 | 000,000,000 | ---D | C] -- C:\Users\Tina\AppData\Local\temp
[2010/10/08 19:01:40 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2010/10/08 19:01:40 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2010/10/08 19:01:40 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2010/10/08 19:00:42 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2010/10/08 18:58:09 | 000,000,000 | ---D | C] -- C:\ComboFix
[2010/10/08 18:57:26 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/10/08 18:57:00 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2010/10/08 16:45:08 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/10/08 16:45:07 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/10/08 16:45:06 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/08/25 21:25:32 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Program Files\taskkill.exe
[2010/01/23 08:41:27 | 000,065,536 | ---- | C] ( ) -- C:\Windows\System32\drivers\Interop.MessengerAPI.dll
[2009/07/12 14:26:28 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Tina\AppData\Roaming\pcouffin.sys
[2009/06/04 21:18:31 | 000,438,272 | ---- | C] ( ) -- C:\Windows\System32\LXDUhcp.dll
[2009/06/04 21:18:31 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxduinpa.dll
[2009/06/04 21:18:31 | 000,339,968 | ---- | C] ( ) -- C:\Windows\System32\lxduiesc.dll
[2009/06/04 21:18:30 | 001,069,056 | ---- | C] ( ) -- C:\Windows\System32\lxduserv.dll
[2009/06/04 21:18:30 | 000,851,968 | ---- | C] ( ) -- C:\Windows\System32\lxduusb1.dll
[2009/06/04 21:18:30 | 000,679,936 | ---- | C] ( ) -- C:\Windows\System32\lxduhbn3.dll
[2009/06/04 21:18:30 | 000,651,264 | ---- | C] ( ) -- C:\Windows\System32\lxdupmui.dll
[2009/06/04 21:18:30 | 000,577,536 | ---- | C] ( ) -- C:\Windows\System32\lxdulmpm.dll
[2009/06/04 21:18:29 | 000,765,952 | ---- | C] ( ) -- C:\Windows\System32\lxducomc.dll
[2009/06/04 21:18:29 | 000,376,832 | ---- | C] ( ) -- C:\Windows\System32\lxducomm.dll
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2012/06/21 09:19:32 | 000,000,074 | ---- | M] () -- C:\autoexec.bat
[2012/06/21 08:36:12 | 000,041,176 | ---- | M] () -- C:\Windows\System32\license.rtf
[2010/11/07 09:55:46 | 000,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{E2E13397-3B52-423F-8AEE-3CD4FE7D0C30}.job
[2010/11/07 09:52:26 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Tina\Desktop\OTL.exe
[2010/11/07 08:52:48 | 000,037,581 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2010/11/07 08:52:47 | 000,037,581 | ---- | M] () -- C:\ProgramData\nvModes.001
[2010/11/07 08:52:17 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/11/07 08:52:16 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/11/07 08:52:15 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/11/04 16:13:12 | 000,000,175 | ---- | M] () -- C:\Users\Tina\Desktop\.htaccess
[2010/11/04 15:45:25 | 000,000,162 | ---- | M] () -- C:\Users\Tina\Desktop\.htaccesss
[2010/11/04 15:37:23 | 014,501,038 | ---- | M] () -- C:\Users\Tina\Desktop\Virus Tools.zip
[2010/11/04 15:30:59 | 023,636,796 | ---- | M] () -- C:\Users\Tina\Desktop\itunes_x_0_1_untitled__by_gpopper-d2ybvpj.zip
[2010/11/04 15:23:52 | 000,111,104 | ---- | M] () -- C:\Users\Tina\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/04 14:07:35 | 000,081,710 | ---- | M] () -- C:\Users\Tina\Desktop\me.jpg
[2010/11/04 14:03:06 | 078,139,868 | ---- | M] () -- C:\Users\Tina\Desktop\nbe-media.com_FullHDWallpapersPack38.rar
[2010/11/04 14:00:26 | 055,359,110 | ---- | M] () -- C:\Users\Tina\Desktop\Sexy Women HD Widescreen Wallpapers vol142.rar
[2010/11/04 13:41:20 | 000,039,870 | ---- | M] () -- C:\Users\Tina\Desktop\44228_152338241471811_152338114805157_261025_965314_n.jpg
[2010/11/04 12:32:18 | 004,334,366 | ---- | M] () -- C:\Users\Tina\Desktop\My Chemical Romance - Sing.mp3
[2010/11/04 12:11:16 | 304,804,791 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010/11/03 14:06:45 | 088,374,390 | ---- | M] () -- C:\Users\Tina\Desktop\EMINEM.GWRming.2010..rar
[2010/11/02 22:08:59 | 007,672,781 | ---- | M] () -- C:\Users\Tina\Desktop\rihanna-love_the_way_you_lie_pt_2_feat_eminem.mp3
[2010/11/02 18:58:29 | 000,002,194 | ---- | M] () -- C:\Users\Tina\Desktop\FirstBackup.spg
[2010/11/02 18:58:28 | 000,002,194 | ---- | M] () -- C:\Users\Tina\Desktop\sg_backup_2010-11-02-1958.spg
[2010/10/21 10:19:11 | 000,653,876 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/10/21 10:19:11 | 000,122,330 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/10/21 09:58:27 | 000,002,058 | ---- | M] () -- C:\Users\Public\Desktop\BlackBerry Desktop Software.lnk
[2010/10/21 00:48:38 | 003,836,824 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010/10/11 18:55:22 | 000,659,456 | ---- | M] (Speed Guide Inc.) -- C:\Users\Tina\Desktop\TCPOptimizer.exe
[2010/10/08 19:38:37 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\HOSTS.MVP
[2010/10/08 16:45:14 | 000,000,780 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/10/08 15:05:02 | 000,001,456 | ---- | M] () -- C:\Users\Tina\AppData\Local\Adobe Save for Web 12.0 Prefs
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2012/06/21 09:29:27 | 000,144,201 | ---- | C] () -- C:\Windows\System32\drivers\HSFProf.cty
[2012/06/21 09:28:41 | 000,333,203 | RHS- | C] () -- C:\bootmgr
[2012/06/21 09:08:17 | 000,000,311 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2012/06/21 08:56:00 | 000,174,716 | ---- | C] () -- C:\Windows\System32\drivers\hcw18enc.rom
[2012/06/21 08:56:00 | 000,141,200 | ---- | C] () -- C:\Windows\System32\drivers\hcw18apu.rom
[2012/06/21 08:56:00 | 000,066,048 | ---- | C] () -- C:\Windows\System32\hcwxds.dll
[2012/06/21 08:56:00 | 000,016,382 | ---- | C] () -- C:\Windows\System32\drivers\hcw18mlC.rom
[2012/06/21 08:56:00 | 000,014,264 | ---- | C] () -- C:\Windows\System32\drivers\hcw18mlB.rom
[2012/06/21 08:44:23 | 000,061,440 | ---- | C] () -- C:\Windows\System32\OsdRemove.exe
[2012/06/21 08:41:01 | 000,327,680 | ---- | C] () -- C:\Windows\System32\pythoncom24.dll
[2012/06/21 08:41:01 | 000,102,400 | ---- | C] () -- C:\Windows\System32\pywintypes24.dll
[2010/11/04 16:12:37 | 000,000,175 | ---- | C] () -- C:\Users\Tina\Desktop\.htaccess
[2010/11/04 15:50:20 | 009,340,260 | ---- | C] () -- C:\Users\Tina\Desktop\Make Her Say.mp3
[2010/11/04 15:49:56 | 007,920,243 | ---- | C] () -- C:\Users\Tina\Desktop\Dreams.mp3
[2010/11/04 15:45:25 | 000,000,162 | ---- | C] () -- C:\Users\Tina\Desktop\.htaccesss
[2010/11/04 15:31:13 | 014,501,038 | ---- | C] () -- C:\Users\Tina\Desktop\Virus Tools.zip
[2010/11/04 15:30:26 | 023,636,796 | ---- | C] () -- C:\Users\Tina\Desktop\itunes_x_0_1_untitled__by_gpopper-d2ybvpj.zip
[2010/11/04 15:09:04 | 007,672,781 | ---- | C] () -- C:\Users\Tina\Desktop\rihanna-love_the_way_you_lie_pt_2_feat_eminem.mp3
[2010/11/04 14:07:35 | 000,081,710 | ---- | C] () -- C:\Users\Tina\Desktop\me.jpg
[2010/11/04 14:01:07 | 078,139,868 | ---- | C] () -- C:\Users\Tina\Desktop\nbe-media.com_FullHDWallpapersPack38.rar
[2010/11/04 13:58:55 | 055,359,110 | ---- | C] () -- C:\Users\Tina\Desktop\Sexy Women HD Widescreen Wallpapers vol142.rar
[2010/11/04 13:41:20 | 000,039,870 | ---- | C] () -- C:\Users\Tina\Desktop\44228_152338241471811_152338114805157_261025_965314_n.jpg
[2010/11/04 12:32:12 | 004,334,366 | ---- | C] () -- C:\Users\Tina\Desktop\My Chemical Romance - Sing.mp3
[2010/11/03 13:42:20 | 088,374,390 | ---- | C] () -- C:\Users\Tina\Desktop\EMINEM.GWRming.2010..rar
[2010/11/02 18:58:28 | 000,002,194 | ---- | C] () -- C:\Users\Tina\Desktop\sg_backup_2010-11-02-1958.spg
[2010/11/02 18:58:28 | 000,002,194 | ---- | C] () -- C:\Users\Tina\Desktop\FirstBackup.spg
[2010/11/02 15:47:10 | 304,804,791 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010/10/21 09:58:27 | 000,002,058 | ---- | C] () -- C:\Users\Public\Desktop\BlackBerry Desktop Software.lnk
[2010/10/21 00:50:52 | 000,037,581 | ---- | C] () -- C:\ProgramData\nvModes.001
[2010/10/21 00:50:51 | 000,037,581 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2010/10/20 23:18:22 | 000,057,667 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2010/10/20 23:06:44 | 002,501,921 | ---- | C] () -- C:\Windows\System32\wlan.tmf
[2010/10/11 17:51:43 | 000,006,324 | ---- | C] () -- C:\ProgramData\lxdu.log
[2010/10/08 19:01:40 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2010/10/08 19:01:40 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2010/10/08 19:01:40 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2010/10/08 19:01:40 | 000,077,312 | ---- | C] () -- C:\Windows\MBR.exe
[2010/10/08 19:01:40 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2010/10/08 16:45:14 | 000,000,780 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/10/05 15:51:03 | 000,000,616 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\Rim.Desktop.Exception.log
[2010/10/05 15:46:42 | 000,001,602 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
[2010/09/20 02:48:26 | 000,000,132 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\Adobe GIF Format CS5 Prefs
[2010/09/20 02:07:11 | 000,000,132 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010/09/02 20:09:09 | 000,000,600 | ---- | C] () -- C:\Users\Tina\AppData\Local\PUTTY.RND
[2010/09/01 03:30:49 | 000,034,308 | ---- | C] () -- C:\Windows\System32\BASSMOD.dll
[2010/07/28 14:47:11 | 000,001,456 | ---- | C] () -- C:\Users\Tina\AppData\Local\Adobe Save for Web 12.0 Prefs
[2010/07/09 14:04:40 | 000,041,872 | ---- | C] () -- C:\Windows\System32\xfcodec.dll
[2010/05/20 22:26:35 | 000,000,600 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\winscp.rnd
[2010/04/04 13:00:12 | 000,081,920 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\ezpinst.exe
[2010/04/03 22:28:56 | 000,000,014 | ---- | C] () -- C:\Windows\System32\systeminfo3.dll
[2010/04/01 17:05:37 | 000,024,206 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\UserTile.png
[2010/01/24 06:41:17 | 000,000,011 | ---- | C] () -- C:\Windows\v34peformatei.dll
[2010/01/24 06:41:17 | 000,000,011 | ---- | C] () -- C:\Windows\eithirtyfour.dll
[2010/01/24 06:41:17 | 000,000,000 | ---- | C] () -- C:\Windows\tellei34.sys
[2010/01/24 06:41:17 | 000,000,000 | ---- | C] () -- C:\Windows\System32\sysaddei34.dll
[2010/01/23 09:09:12 | 000,001,053 | ---- | C] () -- C:\Windows\System32\13l.dll
[2009/08/17 01:05:59 | 000,000,031 | ---- | C] () -- C:\Windows\GunzLauncher.INI
[2009/08/17 00:20:54 | 000,000,262 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/08/03 14:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009/07/12 14:37:24 | 000,000,668 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\vso_ts_preview.xml
[2009/07/12 14:31:49 | 000,000,034 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\pcouffin.log
[2009/07/12 14:26:28 | 000,007,176 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\pcouffin.cat
[2009/07/12 14:26:28 | 000,001,144 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\pcouffin.inf
[2009/07/09 19:47:53 | 000,000,074 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\AVSMediaPlayer.m3u
[2009/06/04 21:34:44 | 000,002,588 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\wklnhst.dat
[2009/06/04 21:22:54 | 000,360,448 | ---- | C] () -- C:\Windows\System32\lxducoin.dll
[2009/06/04 21:20:57 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxduvs.dll
[2009/06/04 21:19:28 | 001,036,288 | ---- | C] () -- C:\Windows\System32\lxdudrs.dll
[2009/06/04 21:19:28 | 000,081,920 | ---- | C] () -- C:\Windows\System32\lxducaps.dll
[2009/06/04 21:19:28 | 000,069,632 | ---- | C] () -- C:\Windows\System32\lxducnv4.dll
[2009/06/04 21:19:27 | 000,000,252 | ---- | C] () -- C:\ProgramData\FastPics.log
[2009/06/04 21:19:08 | 000,000,044 | ---- | C] () -- C:\Windows\System32\lxdurwrd.ini
[2009/06/04 21:18:31 | 000,389,120 | ---- | C] () -- C:\Windows\System32\LXDUinst.dll
[2009/06/04 21:18:29 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdugrd.dll
[2009/06/04 21:15:31 | 000,000,000 | ---- | C] () -- C:\ProgramData\UpdaterLog.txt
[2009/05/16 01:57:01 | 000,643,072 | ---- | C] () -- C:\Windows\CohUpdater_UI_Win.dll
[2009/05/15 21:04:22 | 000,139,104 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2009/05/15 21:04:22 | 000,022,328 | ---- | C] () -- C:\Users\Tina\AppData\Roaming\PnkBstrK.sys
[2009/05/15 21:03:48 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2009/05/14 13:47:06 | 000,001,356 | ---- | C] () -- C:\Users\Tina\AppData\Local\d3d9caps.dat
[2009/05/13 12:05:20 | 000,111,104 | ---- | C] () -- C:\Users\Tina\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/10/07 08:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2008/10/07 08:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008/10/07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2007/03/06 03:47:24 | 000,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2007/01/12 09:07:48 | 000,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll
[2007/01/12 09:07:48 | 000,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/11/02 07:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 02:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/03/18 08:16:04 | 000,540,178 | ---- | C] () -- C:\Windows\System32\x264vfw.dll
[2005/11/08 07:54:26 | 000,000,890 | ---- | C] () -- C:\Windows\System32\WLAN.INI
[2005/10/11 16:39:44 | 000,045,056 | ---- | C] () -- C:\Windows\System32\bindevt.dll
[2004/12/19 08:29:40 | 000,139,264 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2004/12/19 08:17:10 | 000,524,288 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2002/10/06 13:42:56 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll
[2002/10/04 18:04:24 | 000,921,600 | ---- | C] () -- C:\Windows\System32\VorbisEnc.dll
[2002/10/04 18:04:24 | 000,188,416 | ---- | C] () -- C:\Windows\System32\vorbis.dll
[2002/10/04 18:04:16 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ogg.dll
[2002/05/15 18:38:40 | 000,091,136 | ---- | C] () -- C:\Windows\System32\mp4fil32.dll
[color=#E56717]========== Custom Scans ==========[/color]
[color=#A23BEC]< CODE >[/color]
[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]
[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2009/05/12 19:37:58 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2009/05/12 19:37:57 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2009/05/12 19:37:57 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\WINDOWS\explorer.exe
[2009/05/12 19:37:57 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2009/05/12 19:37:57 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009/05/12 20:05:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=6D06CD98D954FE87FB2DB8108793B399 -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a\explorer.exe
[2009/05/12 20:05:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=BD06F0BF753BC704B653C3A50F89D362 -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20668_none_501f261995dcf2cf\explorer.exe
[2009/05/12 19:37:57 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2006/11/02 04:45:07 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=FD8C53FB002217F6F888BCF6F5D7084D -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_4f7de5167cd15deb\explorer.exe
[2008/01/18 22:33:12 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe
[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2006/11/02 04:45:57 | 000,308,224 | ---- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD -- C:\WINDOWS\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe
[2008/01/18 22:33:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008/01/18 22:33:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\WINDOWS\System32\winlogon.exe
[2008/01/18 22:33:38 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\WINDOWS\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]
[2008/01/18 22:38:04 | 000,242,744 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\System32\rsaenh.dll
[2008/01/18 22:36:12 | 000,225,792 | ---- | M] (Microsoft Corporation)[b] Unable to obtain MD5[/b] -- C:\WINDOWS\System32\SLC.dll
[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]
[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
[color=#A23BEC]< %systemroot%\System32\config\*.sav >[/color]
[2006/11/02 05:34:05 | 000,008,192 | ---- | M] () -- C:\WINDOWS\System32\config\COMPONENTS.SAV
[2006/11/02 05:34:05 | 000,020,480 | ---- | M] () -- C:\WINDOWS\System32\config\DEFAULT.SAV
[2006/11/02 05:34:05 | 000,008,192 | ---- | M] () -- C:\WINDOWS\System32\config\SECURITY.SAV
[2006/11/02 05:34:08 | 010,133,504 | ---- | M] () -- C:\WINDOWS\System32\config\SOFTWARE.SAV
[2006/11/02 05:34:08 | 001,826,816 | ---- | M] () -- C:\WINDOWS\System32\config\SYSTEM.SAV
[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /90 >[/color]
[2010/09/01 07:56:00 | 000,139,104 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[color=#E56717]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 164 bytes -> C:\ProgramData\TEMP:8D93F5F7
@Alternate Data Stream - 158 bytes -> C:\ProgramData\TEMP:3B3A35EC
@Alternate Data Stream - 153 bytes -> C:\ProgramData\TEMP:8B919608
@Alternate Data Stream - 153 bytes -> C:\ProgramData\TEMP:81A8EE18
@Alternate Data Stream - 149 bytes -> C:\ProgramData\TEMP:0C889ACE
@Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:E90251A2
@Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:DE22ABA0
@Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:BF1DFF11
@Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:2CEFEABF
@Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:0E1DD4C5
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:0142BC01
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:6FF000AB
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:D17E8AFC
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:127BB39D
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:7C60A173
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:43F3A9F8
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:93B1FB40
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:FCC014E1
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:172B8774
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:38337420
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:C83012A4
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:FE759207
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:DF8984AC
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:A950EF43
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:360CDAC9
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:6B50A605
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:8F4E260C
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:8DFE5191
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:9A953997
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:D1BDBEB1
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:E52B0D7C
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:ADBEEC66
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:8E87BEE4
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:8668AB36
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:7CD67850
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:7AA328E7
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:1409277B
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:0D4A6333
@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:590B1A90
@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:573DC2A3
@Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:7FA4F083
@Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:9D7DCAE4
@Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:8BB2EC84
< End of report >
Extra.txt:
OTL Extras logfile created on: 11/7/2010 9:52:58 AM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Tina\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18975)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 63.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 78.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 456.92 Gb Total Space | 68.68 Gb Free Space | 15.03% Space Free | Partition Type: NTFS
Drive D: | 8.84 Gb Total Space | 0.99 Gb Free Space | 11.24% Space Free | Partition Type: NTFS
Computer Name: TYLERS-COMPUTER | User Name: Tina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-3984932898-1970420750-1500784559-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOaFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
[color=#E56717]========== System Restore Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
[color=#E56717]========== Authorized Applications List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" = C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink -- (EarthLink, Inc.)
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{35A89EC4-D5E0-4C2D-BFCD-DD512EBB51D2}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{498B00D9-41C7-4B31-8607-04CE941AEBF9}" = lport=4482 | protocol=6 | dir=in | name=blackberry desktop software music sync service data transfer |
"{579A8C61-D59B-4018-B981-3B73D9F5D0F1}" = lport=4482 | protocol=17 | dir=in | name=blackberry desktop software music sync service discovery |
"{654E7D6B-D096-4A78-8DAF-AF4A4737226F}" = lport=8375 | protocol=17 | dir=in | name=league of legends launcher |
"{7907A074-9509-47FD-85C0-BE17A2E38631}" = lport=8375 | protocol=6 | dir=in | name=league of legends launcher |
"{A807787C-D828-4D03-B44F-CD4F7750B912}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{AFE1FE0D-986E-4868-A2FA-407BAB88E009}" = lport=4481 | protocol=6 | dir=in | name=blackberry desktop software music sync service data transfer |
"{B21B4EF7-C25F-4B8A-87B4-412B1A0F82D1}" = lport=2869 | protocol=6 | dir=in | app=system |
"{BA99CCF9-FAAC-42A1-82C4-CAB22417FB57}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{BDA70001-0228-4485-A1B3-93DC1924F144}" = lport=4481 | protocol=17 | dir=in | name=blackberry desktop software music sync service discovery |
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0058E044-3EE4-41C6-9B05-B4873FC3C9D8}" = protocol=17 | dir=in | app=c:\program files\curse\curseclient.exe |
"{03B694F5-98D2-424D-9187-EAD58BE19F83}" = protocol=17 | dir=in | app=c:\riot games\league of legends\game\league of legends.exe |
"{03BE97E1-7BD3-4B69-84DD-A52FAC9AC626}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{04BE2BE7-9688-402D-9600-97C136FCF108}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead\left4dead.exe |
"{05DB70D1-5546-4435-99A0-EF6D9225F465}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{06071C46-8FAD-43E2-8295-B0959BC8C402}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0878782C-AFC0-44EB-ABD0-F9D02E01B06F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0AACE15C-5C97-4745-88B6-B9ED6E6F7DD9}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0D32D683-511D-483E-881E-3B2610693D8B}" = protocol=17 | dir=in | app=c:\program files\research in motion\blackberry desktop\rim.desktop.exe |
"{0F80BBAD-6E1D-4AC1-B89E-9467605BDC5A}" = protocol=6 | dir=in | app=c:\windows\system32\lxducoms.exe |
"{0FAE3F0E-1D48-45B5-BFED-82DFAF8CA661}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{0FB0BD4B-4C04-4806-BE06-4B3C8DF2467C}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe |
"{1017CFD3-B38D-4AE8-BBA5-363DAA8CEAFB}" = protocol=17 | dir=in | app=c:\program files\earthlink totalaccess\taskpanl.exe |
"{1286593A-0EFB-45AF-BF22-A6A7C8C1B3AC}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1779B45E-A2FB-48D9-990F-1D96D105A426}" = protocol=17 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"{1C476501-6F79-4552-9CD9-F86CCA99E171}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1ED1E455-F6F3-4E33-8B6B-017532BF3E47}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{21387F8D-FA93-4B4B-BA6E-9B017C5F0B96}" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |
"{2146F47E-BF59-46DC-AD3C-924F8509A148}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{23F557C6-BAB4-4A0D-9825-AAF0FAF92FB8}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\global agenda live\binaries\launcherbin\hirezlauncherui.exe |
"{248C601B-66AA-4D1D-B5F8-3C593A103CE8}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{27962C21-0EF4-4B56-8336-2E7716BAA364}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{2819F06F-FF56-4090-8447-EEA00CA98210}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{2B3624F0-BC47-448F-9BD3-ABEAF88796AC}" = protocol=6 | dir=in | app=c:\riot games\league of legends\game\league of legends.exe |
"{321071A4-9B47-42E4-99A7-BC77F18CBA5B}" = protocol=17 | dir=in | app=c:\riot games\league of legends\air\lolclient.exe |
"{399909AF-29E1-499B-B8A3-4306D09183B5}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{39C5FD7C-0304-4471-B28B-E6D1E2032E4F}" = protocol=6 | dir=in | app=c:\riot games\league of legends\air\lolclient.exe |
"{3A6221FE-C825-4798-A6A3-3CDB7BBCBA19}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{3A77A96A-8374-4D66-9DF5-E96B72FD573B}" = protocol=17 | dir=in | app=c:\windows\system32\lxducoms.exe |
"{3DCB5C54-6F98-468F-A2FD-17D3324893C6}" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"{43511008-1ADF-4A47-A768-DD97B9BD3A81}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe |
"{443BE788-2189-4E65-A706-9FE6AC1F180E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{4650B53B-8A96-4E97-9274-3CCA62C71456}" = dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{46A0002A-4162-482F-B702-4DA2F6D4432D}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{4709D43C-64AD-4162-B408-3C33F1F1819E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{489D2695-1B12-419F-AFC8-AB820B7E5AD7}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{492BBB4D-03BA-4068-8168-BE4939997BEB}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead\left4dead.exe |
"{4F7ACC6B-03AF-473D-A520-AC53BBECF66E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5069617B-125E-4023-9D9D-DACFA6D807CE}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{51009AA8-05DB-4D02-B807-C1FEBAB38CD9}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead\left4dead.exe |
"{510E0DAF-D7E6-4DE4-BBB7-AA6D41903C29}" = protocol=17 | dir=in | app=c:\program files\nbc direct\directplayercore.exe |
"{56E2C7BA-1316-449B-93AD-7AE36C285044}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{66836D61-DEF4-40C1-A9D3-51A77BD69ED0}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6D21EEFD-8CE4-44EE-80B7-8C537DCEC5BB}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{6EB58FF7-4660-4EDC-BA32-AB33D41E50CB}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{702EA6C2-AA4B-4D30-8B04-B85604236894}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\global agenda live\binaries\launcherbin\hirezlauncherui.exe |
"{7079741D-B85D-4732-A250-E8D71FB44CB4}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{72143308-741C-4C86-8B9A-0392DF23A6BF}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{72C42123-60B8-4567-9B10-4533B2B3E0FB}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{734C87A3-766D-4A72-915D-E950712F8051}" = protocol=17 | dir=in | app=c:\program files\earthlink totalaccess\taskpanl.exe |
"{75205DD6-B743-4356-82AE-1A54C9E89D1E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{75C050CA-6095-4DFA-A2E8-A562AF83C326}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7717C151-FF7B-4CD3-9224-B4CFD19127B3}" = protocol=6 | dir=in | app=c:\program files\curse\curseclient.exe |
"{780828D6-09BF-41F8-8B8C-47B4895AE26B}" = protocol=6 | dir=in | app=c:\program files\earthlink totalaccess\taskpanl.exe |
"{7ACE9182-3C5C-4712-ADEC-8AD6D675210E}" = protocol=6 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{7B51A122-DA86-4B51-A304-52C704BDEA26}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{7BC11E29-952D-470C-87D0-7426380141EE}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7BD8F06B-4633-48A7-AD0F-5A87B00CA97C}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7DA8C547-94BE-4FBC-824E-5E617C6651F2}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7E0D4042-3127-45B5-9548-73693B4A7D2E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{7EEE663D-9BA9-4251-9BCE-E9B88F144270}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{8E7B6246-AFBD-4AB8-9794-986D41DAECD5}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{94D12B92-6D39-42F0-B2F4-46F4B44561AC}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{97D2220C-6542-4D27-AA20-DA49DC3153CE}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{98FC5322-97B5-4B19-9D20-5ADBF975B55D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{9D4B1F24-F46A-4FBD-9A19-ABF0710A5EC6}" = protocol=6 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{9E596D63-6A04-4DC5-B371-7EB75440B7AD}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{9F9B20B1-D4F0-41FF-8F26-793AD004311E}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{A0F2EB14-8B32-4054-83B7-441F9FF7B6ED}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe |
"{A59B8DD6-AA92-44E5-AE7D-ECDCF6BE04B4}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{A9966B76-719C-4F22-9A85-C33D3C91E76E}" = protocol=17 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{AC163FFA-6652-40C4-B7B6-B920DD6D92A8}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{AD246280-3B13-4570-AC8E-3BFCF99CEFC1}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe |
"{AF8A3FF8-71E6-493C-AFCD-20739AD467F5}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{B27C5DA2-B1AD-4D26-AEFE-0C3D8820668F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{B87E5A3A-FAC5-4487-B2C6-A857B5838E6E}" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |
"{BA48E335-D91E-4B65-8A49-95E238608A03}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{BB258B52-B11C-4F59-997B-1DFF2F274882}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{BE705BCA-7C3F-4046-B7DA-E969ABC9E2FD}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{BE76DC02-121A-4CE1-B1A9-0873BBF8CBB2}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C24B30F5-EC3E-458E-9564-6DCE425CA0D4}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C2CD9538-80CF-4CA3-AE9D-1F6A335D61C4}" = protocol=6 | dir=in | app=c:\program files\earthlink totalaccess\taskpanl.exe |
"{C647AE77-3F5D-43E8-BDD6-DA8D871039CB}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C951F0B1-0EA9-4C10-81C9-EC86ACA867D7}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{C9CBC2BA-8F5A-48CF-8C98-CE2CCFB26FFC}" = protocol=6 | dir=in | app=c:\program files\opera 10 beta\opera.exe |
"{CE0CAB55-A17F-43B1-85A1-AF569891BA28}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D0DEB832-2AA5-4DB2-81B9-D1CEF664A94B}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{D28E4A80-DCCF-4E43-A018-66F0C8BED702}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{D5ADE395-E907-48BD-9775-88FE758919CD}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{DA6BEC2B-270B-43C5-8C8D-36C42F99E07D}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{DAAED29B-3893-44BA-9A49-7373E2E2A748}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{DAB47069-031E-4A32-ACA0-1774C3F1AC90}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe |
"{DC055076-0D35-4F0E-AD1F-F473AE4C206F}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{DE16FFE5-B138-4851-BD7C-57F59A29BAB3}" = protocol=6 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"{DE3333C1-9D7F-47CA-9A65-651F005DD348}" = protocol=17 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{E309F4D7-BCB3-4EBC-A301-5E13ABBC30C1}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E4443459-2C3C-4497-B0D3-2A216CB92A8F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{E95CB553-B0CC-41F8-87AE-AB9C66EE8435}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead\left4dead.exe |
"{F00DDA2D-E4EF-41D2-8234-69AACEBB1A09}" = protocol=6 | dir=in | app=c:\program files\research in motion\blackberry desktop\rim.desktop.exe |
"{F23D41BD-37F5-4DC2-98E6-2E0F22156887}" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"{F594224E-2665-4D3D-A906-582BC88651C9}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F63CB479-8923-46AD-BF21-EDA269C7D3CD}" = protocol=17 | dir=in | app=c:\program files\opera 10 beta\opera.exe |
"{F7A37735-6622-4846-A3C3-A47F56482AE6}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F8293015-074F-4D62-B1FA-0B75D3EBA02A}" = protocol=6 | dir=in | app=c:\program files\nbc direct\directplayercore.exe |
"{F8502366-B47D-44AD-98F0-26E95BCB2527}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{F9BB4D27-5825-4823-A095-22EF32F39E2D}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{FA416D6B-A984-4809-8921-D5D509D5D78F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{FEE53410-2B62-4B11-BBDA-790A405C3E6B}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01348EAE-FD1C-4E80-9803-AF966F59330E}" = TweetAttacks AC
"{02828774-BEAF-39B4-E4F5-F093D6184402}" = TidySongs
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0CFD3BAF-9F4D-4D70-BD0B-638EA2504C25}" = PSSWCORE
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{0DEA94ED-915A-4834-A87E-388D012C8E02}" = Medal of Honor Allied Assault
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}" = Roxio Creator EasyArchive
"{1DAFF305-A88A-40AC-A882-EB2C6F53AF94}" = League of Legends
"{1DCC7418-2089-4BDD-B321-3771956160FC}" = ijji Auto Installer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{23C12370-3A82-4558-B727-F345B473AD87}" = BlackBerry Device Software Updater
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 18
"{288DB08D-0708-4A94-B055-55B99E39EB62}" = Adobe Creative Suite 5 Master Collection
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine
"{32343DB6-9A52-40C9-87E4-5E7C79791C87}" = MSXML 4.0 SP2 and SOAP Toolkit 3.0
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{350FB27C-CF62-4EF3-AF9D-70FF313FE221}" = iTunes
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Roxio Activation Module
"{3BD633E0-4BF8-4499-9149-88F0767D449C}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{40F7AED3-0C7D-4582-99F6-484A515C73F2}" = HP Easy Setup - Frontend
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A31C596-64D5-4613-83FD-D655A421588C}" = ESET Smart Security
"{4DDC3BED-CC68-44AA-B435-D727B620CA5B}" = Linksys Wireless-G PCI Adapter
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In
"{573995A6-0C98-4AD9-A43D-CBA379024DC5}" = Opera 10.00
"{5AD4A795-3BDC-4667-A881-8FBC56F407D1}" = iTunesFolderWatch
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{6421F085-1FAA-DE13-D02A-CFB412C522A4}" = Acrobat.com
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AF49698-949A-4C89-9B31-041D2CCB5FBD}" = muvee autoProducer 6.0
"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works
"{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}" = Adobe Flash Player 10 ActiveX
"{7197F874-B0E0-4A73-A880-7E712F4D0EB7}}_is1" = Uninstall KnightOnline
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73317C31-2B6E-4B88-9865-B97C1331A39D}" = PayPal Plug-In
"{75E71ADD-042C-4F30-BFAC-A9EC42351313}" = Python 2.4.3
"{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 2.99.13.900
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{81ED8831-D6A4-4460-B1F8-2A4919EFFEA7}_is1" = TreeWalk
"{82A51429-57E5-4F83-B030-539EDE2464DB}" = MSN Toolbar
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{8503C901-85D7-4262-88D2-8D8B2A7B08B8}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Patch
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{8C6027FD-53DC-446D-BB75-CACD7028A134}" = HP Update
"{8CEA85DE-955B-4BF4-87F2-0BAA62821633}" = HP Photosmart Essential2.5
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90A40409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007
"{91120000-0014-0000-0000-0000000FF1CE}_PROR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{938B1CD7-7C60-491E-AA90-1F1888168240}" = Roxio MyDVD Basic v9
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9DBA770F-BF73-4D39-B1DF-6035D95268FC}" = HP Customer Feedback
"{9DF0BE48-16F0-4E36-814D-9B4FDFFAF25F}" = PayPal Plug-In
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A67BB21E-D419-45BB-AB86-7D87D14BBCE2}" = Safari
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components
"{AB5E289E-76BF-4251-9F3F-9B763F681AE0}" = HP Customer Experience Enhancements
"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B32C4059-6E7A-41EF-AD20-56DF1872B923}" = Business Contact Manager for Outlook 2007
"{B83FC356-B7C0-441F-8A4D-D71E088E7974}" = NVIDIA PhysX
"{BC2FE771-EDBE-3087-A676-2B6C45A2BF7E}" = Google Gears
"{BD68F46D-8A82-4664-8E68-F87C55BDEFD4}" = Microsoft SQL Server Native Client
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims 3
"{C0D2F614-5CE5-4DCB-8678-E5C9AF7044F8}" = Microsoft SQL Server VSS Writer
"{C1FCDCA1-2759-4E5E-84EE-3A665BB2F513}" = iPhoneBrowser
"{C4124E95-5061-4776-8D5D-E3D931C778E1}" = Microsoft VC9 runtime libraries
"{C69E6BC6-98A7-40DB-8F69-7C769E3CDFA1}" = TweetAttacks
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator Basic v9
"{CCA1EEA3-555E-4D05-AC46-4B49C6C5D887}" = Apple Mobile Device Support
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype 4.2
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D25F26E6-7F37-4580-9E83-2BDD9BE9E0CE}" = BlackBerry Desktop Software 6.0
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{D9D1A2FD-56B2-4F21-B959-745FE43CAB8C}" = Vegas Pro 9.0
"{DAA82B72-FB3E-45F7-88A6-CB095546282E}" = Mp3 Song Plays Increaser
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DB52432E-3AD8-41A5-A586-0F065FB6A31E}" = Game Cam
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E4A71A41-BCC8-480a-9E69-0DA29CBA7ECA}" = kikin plugin 2.4
"{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1" = Uniblue SpeedUpMyPC
"{E82FBDF4-8C05-4513-B8D8-2331135ECA22}_is1" = MKV to DVD Converter
"{EB900AF8-CC61-4E15-871B-98D1EA3E8025}" = QuickTime
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F46BF5EA-0B4E-4A41-8C4B-3B127346E30F}" = NBC Direct
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{F6CB5EF8-483C-4C64-8A4F-6E89EDBF77D2}" = FFB - Facebook Friend Bomber
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FE3997D3-6B56-4AC4-A99C-9DDFC45359BF}" = TuneUp Utilities Language Pack (en-US)
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"4Media MP4 to MP3 Converter" = 4Media MP4 to MP3 Converter
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AIM_7" = AIM 7
"AllToAVI" = AllToAVI v4 r5394
"Anywhere PE Viewer_is1" = Anywhere PE Viewer 0.1.7
"AVI Codec Pack" = AVI Codec Pack
"AVS Audio Converter 5.1_is1" = AVS Audio Converter version 5.1
"AVS Audio Converter 6.1_is1" = AVS Audio Converter version 6.1
"AVS Audio Editor 4.2_is1" = AVS Audio Editor version 4.2
"AVS Audio Recorder 3.9_is1" = AVS Audio Recorder version 3.9
"AVS Disc Creator_is1" = AVS Disc Creator version 3.5
"AVS DVD Authoring_is1" = AVS DVD Authoring
"AVS DVD Copy_is1" = AVS DVD Copy version 4.1.1
"AVS Media Player_is1" = AVS Media Player 3.1
"AVS Registry Cleaner 1.1_is1" = AVS Registry Cleaner version 1.1
"AVS Ringtone Maker 1.6_is1" = AVS Ringtone Maker version 1.6
"AVS SystemInfo_is1" = AVS System Info
"AVS TV Recorder_is1" = AVS TV Recorder 2.0.1
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS Video Editor 4_is1" = AVS Video Editor 4 4.2.1.166
"AVS Video Recorder_is1" = AVS Video Recorder 2.4 (Service Version)
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"AVSCoverEditor_AVS4YOU_is1" = AVS Cover Editor 1.3.1.96 (AVS4YOU)
"BlackBerry_Desktop" = BlackBerry Desktop Software 6.0
"Business Contact Manager for Outlook 2007" = Business Contact Manager for Outlook 2007
"Cablenut" = Cablenut 4.08
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Cisco Connect" = Cisco Connect
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2009-09-09
"Digsby" = Digsby
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX Setup
"DScaler 4.1.15_is1" = DScaler 4.1.15
"Facebook FriendAdder Pro" = Facebook FriendAdder Pro
"FileZilla Client" = FileZilla Client 3.3.2.1
"Fraps" = Fraps (remove only)
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.3
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.5
"FriendBlasterPro_is1" = FriendBlasterPro
"FrostWire" = FrostWire 4.20.6
"Game Cam" = Game Cam 2.54.0.47
"Google Chrome" = Google Chrome
"Graboid Video" = Graboid Video 1.71
"Gunz" = ijji - Gunz
"Hauppauge WinTV NT4/Win2000 Drivers" = Hauppauge WinTV NT4/Win2000 Drivers
"HijackThis" = HijackThis 2.0.2
"hon" = Heroes of Newerth
"HP Photosmart Essential" = HP Photosmart Essential 2.0
"InstallShield_{3BD633E0-4BF8-4499-9149-88F0767D449C}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch
"InstallShield_{8503C901-85D7-4262-88D2-8D8B2A7B08B8}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.5 Multiplayer Patch
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"JDownloader" = JDownloader
"kikin plugin (JDownloader Edition)" = kikin plugin (JDownloader Edition) 1.11
"Lexmark 5600-6600 Series" = Lexmark 5600-6600 Series
"LimeWire" = LimeWire 5.5.8
"MainApp.exe_is1" = CloneDVD 4.1.0.23
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"MobMap_is1" = MobMap 3.55
"Mozilla Firefox (3.6.10)" = Mozilla Firefox (3.6.10)
"Mozilla Thunderbird (3.1.4)" = Mozilla Thunderbird (3.1.4)
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"Opera" = Opera
"OsdMaestro" = HP On-Screen Cap/Num/Scroll Lock Indicator
"PC-Doctor 5 for Windows" = Hardware Diagnostic Tools
"PROR" = Microsoft Office Professional 2007
"Proxy Finder Enterprise Edition" = Proxy Finder Enterprise Edition
"Proxy Server Finder" = Proxy Server Finder
"Rainmeter" = Rainmeter (remove only)
"RealVNC_is1" = VNC Personal Edition P4.5.3
"RegCure" = RegCure 2.0.0.0
"RocketDock_is1" = RocketDock 1.3.5
"Software Informer_is1" = Software Informer 1.0 BETA
"SolidStateIONIE" = Solid State ION Internet Explorer Plugin
"Steam App 17050" = Global Agenda - Demo
"Steam App 500" = Left 4 Dead
"TeamViewer 5" = TeamViewer 5
"TidySongs" = TidySongs (remove only)
"tidysongs15.27F6A35B76E5883BF9E6FEE514586561E60595CA.1" = TidySongs
"TubeBlasterPro_is1" = TubeBlasterPro
"TuneUp Utilities" = TuneUp Utilities
"Uninstall_is1" = Uninstall 1.0.0.1
"Unlocker" = Unlocker 1.8.7
"uTorrent" = ĩTorrent
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VLC media player 1.1.4
"WebcamMax" = WebcamMax
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"winscp3_is1" = WinSCP 4.2.7
"World of Warcraft" = World of Warcraft
"Xfire" = Xfire (remove only)
"XPort 360_is1" = XPort 360
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
[HKEY_USERS\S-1-5-21-3984932898-1970420750-1500784559-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"090215de958f1060" = Curse Client
"idm_flash" = IDM Flash 4.4.0.468
"ijji.com" = ijji
"NBC Direct" = NBC Direct
"UnityWebPlayer" = Unity Web Player
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 10/27/2010 5:56:22 PM | Computer Name = Tylers-Computer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 10/27/2010 5:56:22 PM | Computer Name = Tylers-Computer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 3057
Error - 10/27/2010 5:56:22 PM | Computer Name = Tylers-Computer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 3057
Error - 10/27/2010 5:56:23 PM | Computer Name = Tylers-Computer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 10/27/2010 5:56:23 PM | Computer Name = Tylers-Computer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 4087
Error - 10/27/2010 5:56:23 PM | Computer Name = Tylers-Computer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 4087
Error - 10/27/2010 5:56:24 PM | Computer Name = Tylers-Computer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 10/27/2010 5:56:24 PM | Computer Name = Tylers-Computer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 5117
Error - 10/27/2010 5:56:24 PM | Computer Name = Tylers-Computer | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 5117
Error - 10/27/2010 6:39:08 PM | Computer Name = Tylers-Computer | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
[ Media Center Events ]
Error - 8/19/2009 11:16:56 PM | Computer Name = Tylers-Computer | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.SqmFlushSession failed; Win32 GetLastError
returned 0D Process: DefaultDomain Object Name: Media Center Guide
Error - 8/19/2009 11:17:24 PM | Computer Name = Tylers-Computer | Source = ehRecvr | ID = 4
Description =
Error - 10/7/2009 5:25:36 PM | Computer Name = Tylers-Computer | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 10/11/2009 11:57:25 PM | Computer Name = Tylers-Computer | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 10/14/2010 8:54:17 PM | Computer Name = Tylers-Computer | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 10/14/2010 10:07:03 PM | Computer Name = Tylers-Computer | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 10/20/2010 10:46:59 PM | Computer Name = Tylers-Computer | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
[ System Events ]
Error - 10/29/2010 5:20:45 PM | Computer Name = Tylers-Computer | Source = DCOM | ID = 10010
Description =
Error - 11/2/2010 4:47:16 PM | Computer Name = Tylers-Computer | Source = EventLog | ID = 6008
Description = The previous system shutdown at 12:32:48 AM on 11/2/2010 was unexpected.
Error - 11/2/2010 4:47:23 PM | Computer Name = Tylers-Computer | Source = HTTP | ID = 15016
Description =
Error - 11/3/2010 2:00:03 PM | Computer Name = Tylers-Computer | Source = EventLog | ID = 6008
Description = The previous system shutdown at 1:57:36 PM on 11/3/2010 was unexpected.
Error - 11/3/2010 2:00:06 PM | Computer Name = Tylers-Computer | Source = HTTP | ID = 15016
Description =
Error - 11/4/2010 12:58:27 PM | Computer Name = Tylers-Computer | Source = Service Control Manager | ID = 7011
Description =
Error - 11/4/2010 1:11:27 PM | Computer Name = Tylers-Computer | Source = EventLog | ID = 6008
Description = The previous system shutdown at 1:09:12 PM on 11/4/2010 was unexpected.
Error - 11/4/2010 1:11:31 PM | Computer Name = Tylers-Computer | Source = HTTP | ID = 15016
Description =
Error - 11/4/2010 1:12:45 PM | Computer Name = Tylers-Computer | Source = Service Control Manager | ID = 7009
Description =
Error - 11/4/2010 1:12:45 PM | Computer Name = Tylers-Computer | Source = Service Control Manager | ID = 7000
Description =
[ TuneUp Events ]
Error - 7/9/2010 8:00:11 PM | Computer Name = Tylers-Computer | Source = TuneUp.UtilitiesSvc | ID = 300
Description =
< End of report >