OTL by OldTimer - Version 3.2.1.2 Folder = C:\Users\DeLuca\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 65.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 81.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 452.64 Gb Total Space | 360.68 Gb Free Space | 79.68% Space Free | Partition Type: NTFS
Drive D: | 13.12 Gb Total Space | 1.75 Gb Free Space | 13.32% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: DELUCA-PC
Current User Name: DeLuca
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan
========== Processes (SafeList) ==========
PRC - [2010/04/17 19:36:16 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Users\DeLuca\Desktop\OTL.exe
PRC - [2010/04/08 21:16:23 | 000,319,792 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2010/04/08 21:13:17 | 000,285,296 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
PRC - [2010/02/25 19:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton 360\Engine\4.1.0.32\ccsvchst.exe
PRC - [2010/02/23 19:20:12 | 012,764,440 | ---- | M] () -- C:\Program Files\RegCure\RegCure.exe
PRC - [2009/10/31 01:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/07/17 23:12:12 | 000,257,440 | R--- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10c.exe
PRC - [2009/07/13 21:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
========== Modules (SafeList) ==========
MOD - [2010/04/17 19:36:16 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Users\DeLuca\Desktop\OTL.exe
MOD - [2009/07/13 21:16:15 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll
MOD - [2009/07/13 21:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll
MOD - [2009/07/13 21:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll
MOD - [2009/07/13 21:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll
MOD - [2009/07/13 21:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll
MOD - [2009/07/13 21:15:35 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll
MOD - [2009/07/13 21:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
MOD - [2009/07/13 21:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll
MOD - [2009/07/13 21:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll
MOD - [2009/07/13 21:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
MOD - [2009/07/13 21:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - [2010/02/25 19:21:50 | 000,126,392 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files\Norton 360\Engine\4.1.0.32\ccSvcHst.exe -- (N360)
SRV - [2009/07/13 21:16:21 | 000,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wwansvc.dll -- (WwanSvc)
SRV - [2009/07/13 21:16:17 | 000,151,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wbiosrvc.dll -- (WbioSrvc)
SRV - [2009/07/13 21:16:17 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\umpo.dll -- (Power)
SRV - [2009/07/13 21:16:16 | 000,037,376 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\themeservice.dll -- (Themes)
SRV - [2009/07/13 21:16:15 | 000,053,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sppuinotify.dll -- (sppuinotify)
SRV - [2009/07/13 21:16:13 | 000,043,520 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\Windows\System32\RpcEpMap.dll -- (RpcEptMapper)
SRV - [2009/07/13 21:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 21:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 21:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pnrpsvc.dll -- (PNRPsvc)
SRV - [2009/07/13 21:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pnrpsvc.dll -- (p2pimsvc)
SRV - [2009/07/13 21:16:12 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\provsvc.dll -- (HomeGroupProvider)
SRV - [2009/07/13 21:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpauto.dll -- (PNRPAutoReg)
SRV - [2009/07/13 21:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/07/13 21:15:36 | 000,194,560 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\ListSvc.dll -- (HomeGroupListener)
SRV - [2009/07/13 21:15:21 | 000,797,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2009/07/13 21:15:11 | 000,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dhcpcore.dll -- (Dhcp)
SRV - [2009/07/13 21:15:10 | 000,218,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\defragsvc.dll -- (defragsvc)
SRV - [2009/07/13 21:14:59 | 000,076,800 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\bdesvc.dll -- (BDESVC)
SRV - [2009/07/13 21:14:58 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AxInstSv.dll -- (AxInstSV) ActiveX Installer (AxInstSV)
SRV - [2009/07/13 21:14:53 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\appidsvc.dll -- (AppIDSvc)
SRV - [2009/07/13 21:14:29 | 003,179,520 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\sppsvc.exe -- (sppsvc)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 00 98 9A 4E 7B D7 CA 01 [binary data]
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\ [2010/04/10 06:08:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\ [2010/04/10 06:08:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/04/17 07:15:02 | 000,000,000 | ---D | M]
O1 HOSTS File: ([2009/06/10 17:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.1.0.32\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.1.0.32\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.1.0.32\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.1.0.32\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O13 - gopher Prefix: missing
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 17:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias [2009/07/13 22:37:08 | 000,000,000 | ---D | M]
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
NetSvcs: Themes - C:\Windows\System32\themeservice.dll (Microsoft Corporation)
NetSvcs: BDESVC - C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
========== Files/Folders - Created Within 14 Days ==========
[2010/04/17 19:36:09 | 000,562,176 | ---- | C] (OldTimer Tools) -- C:\Users\DeLuca\Desktop\OTL.exe
[2010/04/17 17:49:19 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Local\CrashDumps
[2010/04/17 17:33:31 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\Malwarebytes
[2010/04/17 17:33:25 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/04/17 17:33:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/04/17 17:33:23 | 000,020,824 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/04/17 17:33:23 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/04/17 17:32:39 | 005,918,768 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\DeLuca\Desktop\mbam-setup.exe
[2010/04/17 17:31:16 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2010/04/17 17:30:48 | 000,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2010/04/17 17:30:27 | 000,791,393 | ---- | C] (Lars Hederer ) -- C:\Users\DeLuca\Desktop\erunt_setup.exe
[2010/04/17 17:25:18 | 000,444,416 | ---- | C] (OldTimer Tools) -- C:\Users\DeLuca\Desktop\TFC.exe
[2010/04/17 07:12:56 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\WinBatch
[2010/04/13 17:00:27 | 000,000,000 | ---D | C] -- C:\ProgramData\RegCure
[2010/04/13 17:00:26 | 000,000,000 | ---D | C] -- C:\Program Files\RegCure
[2010/04/10 08:42:24 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\Tific
[2010/04/10 08:05:00 | 000,501,888 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0401000.020\cchpx86.sys
[2010/04/10 08:05:00 | 000,340,016 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0401000.020\symtdiv.sys
[2010/04/10 08:05:00 | 000,328,752 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0401000.020\symds.sys
[2010/04/10 08:05:00 | 000,325,680 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0401000.020\srtsp.sys
[2010/04/10 08:05:00 | 000,172,592 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0401000.020\symefa.sys
[2010/04/10 08:05:00 | 000,116,784 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0401000.020\ironx86.sys
[2010/04/10 08:05:00 | 000,043,696 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\N360\0401000.020\srtspx.sys
[2010/04/10 08:04:41 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\N360\0401000.020
[2010/04/10 08:02:56 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Local\ElevatedDiagnostics
[2010/04/10 07:05:40 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\Documents\HP Photosmart Projects
[2010/04/10 06:47:55 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\CameraWindowDC
[2010/04/10 06:47:54 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\CANON INC
[2010/04/10 06:47:01 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\ZoomBrowser EX
[2010/04/10 06:42:53 | 000,000,000 | ---D | C] -- C:\ProgramData\ZoomBrowser
[2010/04/10 06:42:37 | 000,000,000 | ---D | C] -- C:\Program Files\Canon
[2010/04/10 06:41:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Canon
[2010/04/10 06:12:01 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\Documents\Symantec
[2010/04/10 06:08:10 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2010/04/10 06:08:09 | 000,124,976 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2010/04/10 06:08:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2010/04/10 06:08:09 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec
[2010/04/10 06:07:50 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\N360
[2010/04/10 06:07:49 | 000,000,000 | ---D | C] -- C:\Program Files\Norton 360
[2010/04/10 06:07:44 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2010/04/10 06:07:44 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller
[2010/04/10 06:03:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2010/04/10 03:00:53 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2010/04/09 17:03:28 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Local\Diagnostics
[2010/04/09 00:34:21 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2010/04/09 00:33:50 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio
[2010/04/09 00:33:50 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2010/04/09 00:33:29 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2010/04/09 00:33:28 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2010/04/09 00:32:01 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8
[2010/04/09 00:31:16 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Local\Microsoft Help
[2010/04/09 00:31:13 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2010/04/09 00:31:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2010/04/09 00:30:04 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2010/04/08 23:57:53 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2010/04/08 23:02:37 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2010/04/08 23:00:05 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2010/04/08 22:59:47 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2010/04/08 21:16:29 | 000,000,000 | ---D | C] -- C:\Program Files\Ask.com
[2010/04/08 21:16:23 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2010/04/08 21:16:00 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\uTorrent
[2010/04/08 21:15:11 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\Google
[2010/04/08 21:15:11 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Local\Google
[2010/04/08 21:14:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010/04/08 21:13:50 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010/04/08 21:13:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2010/04/08 21:13:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2010/04/08 21:13:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2010/04/08 21:13:17 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2010/04/08 21:13:11 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Local\Adobe
[2010/04/08 21:13:05 | 000,000,000 | ---D | C] -- C:\ProgramData\NOS
[2010/04/08 21:12:22 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\Macromedia
[2010/04/08 20:51:24 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Local\HP
[2010/04/08 20:49:02 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\Adobe
[2010/04/08 20:48:27 | 000,000,000 | ---D | C] -- C:\ProgramData\WEBREG
[2010/04/08 20:48:27 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\HP
[2010/04/08 20:43:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Yahoo! Companion
[2010/04/08 20:43:56 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\Yahoo!
[2010/04/08 20:43:55 | 000,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2010/04/08 20:42:45 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant
[2010/04/08 20:42:13 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2010/04/08 20:41:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Hewlett-Packard
[2010/04/08 20:41:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\HP
[2010/04/08 20:40:42 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2010/04/08 20:40:18 | 000,000,000 | ---D | C] -- C:\Program Files\HP
[2010/04/08 20:39:49 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2010/04/08 17:20:58 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\Searches
[2010/04/08 17:20:48 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\Identities
[2010/04/08 17:20:38 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\Contacts
[2010/04/08 17:20:17 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Local\VirtualStore
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\AppData\Local\Temporary Internet Files
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\Templates
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\Start Menu
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\SendTo
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\Recent
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\PrintHood
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\NetHood
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\Documents\My Videos
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\Documents\My Pictures
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\Documents\My Music
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\My Documents
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\Local Settings
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\AppData\Local\History
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\Cookies
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\Application Data
[2010/04/08 17:20:07 | 000,000,000 | -HSD | C] -- C:\Users\DeLuca\AppData\Local\Application Data
[2010/04/08 17:20:04 | 000,000,000 | --SD | C] -- C:\Users\DeLuca\AppData\Roaming\Microsoft
[2010/04/08 17:20:04 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\Videos
[2010/04/08 17:20:04 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\Saved Games
[2010/04/08 17:20:04 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\Pictures
[2010/04/08 17:20:04 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\Music
[2010/04/08 17:20:04 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\Links
[2010/04/08 17:20:04 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\Favorites
[2010/04/08 17:20:04 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\Downloads
[2010/04/08 17:20:04 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\My Documents
[2010/04/08 17:20:04 | 000,000,000 | R--D | C] -- C:\Users\DeLuca\Desktop
[2010/04/08 17:20:04 | 000,000,000 | -H-D | C] -- C:\Users\DeLuca\AppData
[2010/04/08 17:20:04 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Local\Temp
[2010/04/08 17:20:04 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Local\Microsoft
[2010/04/08 17:20:04 | 000,000,000 | ---D | C] -- C:\Users\DeLuca\AppData\Roaming\Media Center Programs
========== Files - Modified Within 14 Days ==========
[2010/04/17 19:39:14 | 001,048,576 | -HS- | M] () -- C:\Users\DeLuca\NTUSER.DAT
[2010/04/17 19:36:16 | 000,562,176 | ---- | M] (OldTimer Tools) -- C:\Users\DeLuca\Desktop\OTL.exe
[2010/04/17 17:56:01 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/04/17 17:56:01 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/04/17 17:55:06 | 000,713,888 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010/04/17 17:55:06 | 000,615,122 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/04/17 17:55:06 | 000,103,496 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/04/17 17:51:08 | 000,000,366 | ---- | M] () -- C:\Windows\tasks\RegCure Startup.job
[2010/04/17 17:50:55 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/04/17 17:50:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/04/17 17:50:46 | 362,394,662 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2010/04/17 17:50:45 | 2313,957,376 | -HS- | M] () -- C:\hiberfil.sys
[2010/04/17 17:44:32 | 000,284,915 | ---- | M] () -- C:\Users\DeLuca\Desktop\gmer.zip
[2010/04/17 17:33:28 | 000,000,977 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/04/17 17:32:53 | 005,918,768 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\DeLuca\Desktop\mbam-setup.exe
[2010/04/17 17:31:45 | 000,000,892 | ---- | M] () -- C:\Users\DeLuca\Desktop\NTREGOPT.lnk
[2010/04/17 17:31:45 | 000,000,873 | ---- | M] () -- C:\Users\DeLuca\Desktop\ERUNT.lnk
[2010/04/17 17:30:31 | 000,791,393 | ---- | M] (Lars Hederer ) -- C:\Users\DeLuca\Desktop\erunt_setup.exe
[2010/04/17 17:25:24 | 000,444,416 | ---- | M] (OldTimer Tools) -- C:\Users\DeLuca\Desktop\TFC.exe
[2010/04/17 17:00:00 | 000,000,392 | ---- | M] () -- C:\Windows\tasks\RegCure Program Check.job
[2010/04/17 11:31:13 | 000,897,258 | ---- | M] () -- C:\Windows\System32\drivers\N360\0401000.020\Cat.DB
[2010/04/17 07:37:21 | 000,913,720 | -H-- | M] () -- C:\Users\DeLuca\AppData\Local\IconCache.db
[2010/04/17 07:15:25 | 000,023,113 | ---- | M] () -- C:\Windows\hpqins15.dat
[2010/04/15 03:26:00 | 000,000,374 | ---- | M] () -- C:\Windows\tasks\RegCure.job
[2010/04/13 17:03:01 | 000,000,943 | ---- | M] () -- C:\Users\Public\Desktop\RegCure.lnk
[2010/04/10 14:42:15 | 000,000,162 | -H-- | M] () -- C:\Users\DeLuca\Desktop\~$ueScreen.docx
[2010/04/10 10:38:30 | 000,002,324 | ---- | M] () -- C:\Users\Public\Desktop\Norton 360.lnk
[2010/04/10 07:58:48 | 000,011,281 | ---- | M] () -- C:\Users\DeLuca\Desktop\BlueScreen.docx
[2010/04/10 06:42:53 | 000,001,248 | ---- | M] () -- C:\Users\Public\Desktop\ZoomBrowser EX.lnk
[2010/04/10 06:08:09 | 000,124,976 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
[2010/04/10 06:08:09 | 000,007,443 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2010/04/10 06:08:09 | 000,000,805 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2010/04/10 03:18:42 | 000,413,152 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010/04/09 18:29:02 | 001,556,480 | ---- | M] () -- C:\Users\DeLuca\Documents\Call tracker.accdb
[2010/04/09 00:37:04 | 000,109,208 | ---- | M] () -- C:\Users\DeLuca\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/04/09 00:31:38 | 000,000,513 | ---- | M] () -- C:\Windows\win.ini
[2010/04/08 23:57:40 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2010/04/08 23:02:03 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010/04/08 21:50:31 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010/04/08 21:16:23 | 000,000,911 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2010/04/08 21:14:43 | 000,001,986 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/04/08 21:13:53 | 000,000,967 | ---- | M] () -- C:\Users\Public\Desktop\Acrobat_com.lnk
[2010/04/08 20:48:18 | 000,197,271 | ---- | M] () -- C:\Windows\hpoins30.dat
[2010/04/08 20:43:19 | 000,002,127 | ---- | M] () -- C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2010/04/08 20:43:03 | 000,001,121 | ---- | M] () -- C:\Users\Public\Desktop\Shop for HP Supplies.lnk
[2010/04/08 20:42:43 | 000,001,275 | ---- | M] () -- C:\Users\Public\Desktop\HP Solution Center.lnk
[2010/04/08 20:42:17 | 000,002,071 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2010/04/08 20:33:17 | 000,524,288 | -HS- | M] () -- C:\Users\DeLuca\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2010/04/08 20:33:17 | 000,524,288 | -HS- | M] () -- C:\Users\DeLuca\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2010/04/08 20:33:17 | 000,065,536 | -HS- | M] () -- C:\Users\DeLuca\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2010/04/08 20:05:12 | 000,042,045 | ---- | M] () -- C:\Windows\System32\license.rtf
[2010/04/08 17:20:07 | 000,000,020 | -HS- | M] () -- C:\Users\DeLuca\ntuser.ini
========== Files Created - No Company Name ==========
[2010/04/17 17:44:29 | 000,284,915 | ---- | C] () -- C:\Users\DeLuca\Desktop\gmer.zip
[2010/04/17 17:33:28 | 000,000,977 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/04/17 17:30:49 | 000,000,892 | ---- | C] () -- C:\Users\DeLuca\Desktop\NTREGOPT.lnk
[2010/04/17 17:30:49 | 000,000,873 | ---- | C] () -- C:\Users\DeLuca\Desktop\ERUNT.lnk
[2010/04/17 07:14:33 | 000,023,113 | ---- | C] () -- C:\Windows\hpqins15.dat
[2010/04/13 17:00:34 | 000,000,366 | ---- | C] () -- C:\Windows\tasks\RegCure Startup.job
[2010/04/13 17:00:32 | 000,000,392 | ---- | C] () -- C:\Windows\tasks\RegCure Program Check.job
[2010/04/13 17:00:31 | 000,000,374 | ---- | C] () -- C:\Windows\tasks\RegCure.job
[2010/04/13 17:00:28 | 000,000,943 | ---- | C] () -- C:\Users\Public\Desktop\RegCure.lnk
[2010/04/10 14:42:15 | 000,000,162 | -H-- | C] () -- C:\Users\DeLuca\Desktop\~$ueScreen.docx
[2010/04/10 08:48:30 | 000,897,258 | ---- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\Cat.DB
[2010/04/10 08:05:00 | 000,007,787 | R--- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\symnetv.cat
[2010/04/10 08:05:00 | 000,007,444 | R--- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\symefa.cat
[2010/04/10 08:05:00 | 000,007,442 | ---- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\srtspx.cat
[2010/04/10 08:05:00 | 000,007,438 | ---- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\srtsp.cat
[2010/04/10 08:05:00 | 000,007,438 | ---- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\iron.cat
[2010/04/10 08:05:00 | 000,007,425 | R--- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\symds.cat
[2010/04/10 08:05:00 | 000,007,396 | ---- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\cchpx86.cat
[2010/04/10 08:05:00 | 000,007,368 | R--- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\symnet.cat
[2010/04/10 08:05:00 | 000,003,374 | R--- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\symefa.inf
[2010/04/10 08:05:00 | 000,002,793 | R--- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\symds.inf
[2010/04/10 08:05:00 | 000,001,754 | ---- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\cchpx86.inf
[2010/04/10 08:05:00 | 000,001,473 | R--- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\symnetv.inf
[2010/04/10 08:05:00 | 000,001,445 | R--- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\symnet.inf
[2010/04/10 08:05:00 | 000,001,388 | ---- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\srtspx.inf
[2010/04/10 08:05:00 | 000,001,382 | ---- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\srtsp.inf
[2010/04/10 08:05:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\iron.inf
[2010/04/10 08:04:41 | 000,000,172 | ---- | C] () -- C:\Windows\System32\drivers\N360\0401000.020\isolate.ini
[2010/04/10 07:58:47 | 000,011,281 | ---- | C] () -- C:\Users\DeLuca\Desktop\BlueScreen.docx
[2010/04/10 06:42:53 | 000,001,248 | ---- | C] () -- C:\Users\Public\Desktop\ZoomBrowser EX.lnk
[2010/04/10 06:08:09 | 000,007,443 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.CAT
[2010/04/10 06:08:09 | 000,000,805 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.INF
[2010/04/10 06:08:05 | 000,002,324 | ---- | C] () -- C:\Users\Public\Desktop\Norton 360.lnk
[2010/04/09 18:28:48 | 001,556,480 | ---- | C] () -- C:\Users\DeLuca\Documents\Call tracker.accdb
[2010/04/09 17:06:47 | 000,019,456 | ---- | C] () -- C:\Users\DeLuca\Documents\Resume 9-23-09.wps
[2010/04/08 23:02:03 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010/04/08 22:59:22 | 362,394,662 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2010/04/08 22:59:22 | 2313,957,376 | -HS- | C] () -- C:\hiberfil.sys
[2010/04/08 21:50:31 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010/04/08 21:16:23 | 000,000,911 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2010/04/08 21:14:43 | 000,001,986 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/04/08 21:13:53 | 000,000,967 | ---- | C] () -- C:\Users\Public\Desktop\Acrobat_com.lnk
[2010/04/08 20:43:19 | 000,002,127 | ---- | C] () -- C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2010/04/08 20:43:03 | 000,001,121 | ---- | C] () -- C:\Users\Public\Desktop\Shop for HP Supplies.lnk
[2010/04/08 20:42:43 | 000,001,275 | ---- | C] () -- C:\Users\Public\Desktop\HP Solution Center.lnk
[2010/04/08 20:42:17 | 000,002,071 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
[2010/04/08 20:39:56 | 000,001,183 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2010/04/08 20:39:55 | 000,197,271 | ---- | C] () -- C:\Windows\hpoins30.dat
[2010/04/08 20:39:55 | 000,000,587 | ---- | C] () -- C:\Windows\hpomdl30.dat
[2010/04/08 17:20:07 | 000,000,020 | -HS- | C] () -- C:\Users\DeLuca\ntuser.ini
[2010/04/08 17:20:05 | 000,524,288 | -HS- | C] () -- C:\Users\DeLuca\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2010/04/08 17:20:05 | 000,524,288 | -HS- | C] () -- C:\Users\DeLuca\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2010/04/08 17:20:05 | 000,262,144 | -HS- | C] () -- C:\Users\DeLuca\ntuser.dat.LOG1
[2010/04/08 17:20:05 | 000,065,536 | -HS- | C] () -- C:\Users\DeLuca\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2010/04/08 17:20:05 | 000,000,000 | -HS- | C] () -- C:\Users\DeLuca\ntuser.dat.LOG2
[2010/04/08 17:20:04 | 001,048,576 | -HS- | C] () -- C:\Users\DeLuca\NTUSER.DAT
[2009/07/13 19:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
========== LOP Check ==========
[2010/04/10 08:42:24 | 000,000,000 | ---D | M] -- C:\Users\DeLuca\AppData\Roaming\Tific
[2010/04/17 19:29:52 | 000,000,000 | ---D | M] -- C:\Users\DeLuca\AppData\Roaming\uTorrent
[2010/04/17 07:12:56 | 000,000,000 | ---D | M] -- C:\Users\DeLuca\AppData\Roaming\WinBatch
[2010/04/17 17:00:00 | 000,000,392 | ---- | M] () -- C:\Windows\Tasks\RegCure Program Check.job
[2010/04/17 17:51:08 | 000,000,366 | ---- | M] () -- C:\Windows\Tasks\RegCure Startup.job
[2010/04/15 03:26:00 | 000,000,374 | ---- | M] () -- C:\Windows\Tasks\RegCure.job
[2009/07/14 00:53:46 | 000,005,104 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.exe >
< MD5 for: AGP440.SYS >
[2009/07/13 21:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/13 21:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009/07/13 21:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009/07/13 21:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/13 21:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009/07/13 21:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009/07/13 21:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
< MD5 for: EVENTLOG.DLL >
[2007/05/18 01:34:04 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files (x86)\Cyberlink\PowerDirector\EventLog.dll
< MD5 for: IASTORV.SYS >
[2009/07/13 21:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys
[2009/07/13 21:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/13 21:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2009/07/13 21:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009/07/13 21:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll
< MD5 for: NVRAID.SYS >
[2009/07/13 21:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\System32\drivers\nvraid.sys
[2009/07/13 21:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvraid.sys
[2009/07/13 21:20:44 | 000,117,312 | ---- | M] (NVIDIA Corporation) MD5=3F3D04B1D08D43C16EA7963954EC768D -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvraid.sys
< MD5 for: NVSTOR.SYS >
[2009/07/13 21:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys
[2009/07/13 21:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/13 21:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys
< MD5 for: SCECLI.DLL >
[2009/07/13 21:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009/07/13 21:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2009/07/13 21:15:13 | 000,346,112 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtmsft.dll
[2009/07/13 21:15:13 | 000,215,552 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtrans.dll
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\drivers\*.sys /90 >
[2010/03/30 00:45:52 | 000,020,824 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/03/30 00:46:30 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/02/27 03:32:05 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb.sys
[2010/02/27 03:32:26 | 000,221,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb10.sys
[2010/02/27 03:32:12 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb20.sys
[2010/04/10 06:08:09 | 000,124,976 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS
< End of report >