Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

HJT Log - Please Help


  • Please log in to reply

#1
Aden

Aden

    Member

  • Member
  • PipPip
  • 29 posts
EDIT: Problem solved

Edited by Aden, 02 June 2009 - 10:11 AM.

  • 0

Advertisements


#2
Aden

Aden

    Member

  • Topic Starter
  • Member
  • PipPip
  • 29 posts
EDIT: PROBLEM SOLVED!


Also, here are my Rooter and OTL scan logs:

Rooter:
Microsoft Windows Vista Home Edition (6.0.6001) Service Pack 1

C:\ [Fixed] - NTFS - (Total:461499 Mo/Free:2906 Mo)
D:\ [Fixed] - NTFS - (Total:15359 Mo/Free:1595 Mo)
E:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)
F:\ [Removable] (Total:0 Mo/Free:0 Mo)
G:\ [Removable] (Total:0 Mo/Free:0 Mo)
H:\ [Removable] (Total:0 Mo/Free:0 Mo)
I:\ [Removable] (Total:0 Mo/Free:0 Mo)

02/06/2009|13:34

----------------------\\ Processes..

--Locked-- [System Process]
--Locked-- System
---------- \SystemRoot\System32\smss.exe
---------- C:\Windows\system32\csrss.exe
---------- C:\Windows\system32\csrss.exe
---------- C:\Windows\system32\wininit.exe
---------- C:\Windows\system32\winlogon.exe
---------- C:\Windows\system32\services.exe
---------- C:\Windows\system32\lsass.exe
---------- C:\Windows\system32\lsm.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\System32\svchost.exe
---------- C:\Windows\System32\svchost.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\System32\svchost.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\system32\svchost.exe
---------- C:\Windows\Explorer.EXE
---------- C:\Program Files\Mozilla Firefox\firefox.exe
---------- C:\Windows\system32\wbem\wmiprvse.exe
---------- C:\Windows\system32\DllHost.exe
---------- C:\Users\Aden\Desktop\Rooter.exe
---------- C:\Windows\system32\cmd.exe
---------- C:\Rooter$\RK.exe

----------------------\\ Search..

----------------------\\ ROOTKIT !!



1 - "C:\Rooter$\Rooter_1.txt" - 02/06/2009|13:34

----------------------\\ Scan completed at 13:34







OTL:
OTL logfile created on: 02/06/2009 13:35:36 - Run 1
OTL by OldTimer - Version 2.1.1.0 Folder = C:\Users\Aden\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 100.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 450.68 Gb Total Space | 386.83 Gb Free Space | 85.83% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 9.56 Gb Free Space | 63.72% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ADENS-DAW
Current User Name: Aden
Logged in as Administrator.

Current Boot Mode: SafeMode with Networking
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\Windows\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\system32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\Users\Aden\Desktop\OTL.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (AERTFilters [Auto | Stopped]) -- C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
SRV - (aspnet_state [On_Demand | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (Ati External Event Utility [Auto | Stopped]) -- C:\Windows\system32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (DockLoginService [Auto | Stopped]) -- C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV - (ehRecvr [On_Demand | Stopped]) -- C:\Windows\ehome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [On_Demand | Stopped]) -- C:\Windows\ehome\ehsched.exe (Microsoft Corporation)
SRV - (ehstart [Auto | Stopped]) -- C:\Windows\ehome\ehstart.dll (Microsoft Corporation)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) -- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (GoToAssist [On_Demand | Stopped]) -- C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (idsvc [Unknown | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing [Disabled | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (SeaPort [Auto | Stopped]) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (sprtsvc_DellSupportCenter [Auto | Stopped]) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (stllssvr [On_Demand | Stopped]) -- C:\Program Files\Common Files\SureThing Shared\stllssvr.exe (MicroVision Development, Inc.)
SRV - (WinDefend [Auto | Running]) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) -- C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (adp94xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (adpahci [Disabled | Stopped]) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (adpu160m [Disabled | Stopped]) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (adpu320 [Disabled | Stopped]) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (aic78xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (aliide [Disabled | Stopped]) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (arc [Disabled | Stopped]) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (arcsas [Disabled | Stopped]) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (atikmdag [On_Demand | Stopped]) -- C:\Windows\system32\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV - (BrFiltLo [On_Demand | Stopped]) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp [On_Demand | Stopped]) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (Brserid [Disabled | Stopped]) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrSerWdm [Disabled | Stopped]) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm [Disabled | Stopped]) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer [On_Demand | Stopped]) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (cmdide [Disabled | Stopped]) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (e1express [On_Demand | Stopped]) -- C:\Windows\system32\DRIVERS\e1e6032.sys (Intel Corporation)
DRV - (E1G60 [On_Demand | Stopped]) -- C:\Windows\system32\DRIVERS\E1G60I32.sys (Intel Corporation)
DRV - (elxstor [Disabled | Stopped]) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (HpCISSs [Disabled | Stopped]) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (iaStor [Disabled | Stopped]) -- C:\Windows\system32\drivers\iastor.sys (Intel Corporation)
DRV - (iaStorV [Disabled | Stopped]) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (iirsp [Disabled | Stopped]) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (IntcAzAudAddService [On_Demand | Stopped]) -- C:\Windows\system32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (iteatapi [Disabled | Stopped]) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (iteraid [Disabled | Stopped]) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (LSI_FC [Disabled | Stopped]) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (LSI_SAS [Disabled | Stopped]) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (LSI_SCSI [Disabled | Stopped]) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (megasas [Disabled | Stopped]) -- C:\Windows\system32\drivers\megasas.sys (LSI Corporation)
DRV - (MegaSR [Disabled | Stopped]) -- C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.)
DRV - (Mraid35x [Disabled | Stopped]) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (nfrd960 [Disabled | Stopped]) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (ntrigdigi [Disabled | Stopped]) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (nvraid [Disabled | Stopped]) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nvstor [Disabled | Stopped]) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (PCD5SRVC{3F6A8B78-EC003E00-05040104} [On_Demand | Stopped]) -- C:\Program Files\Dell Support Center\HWDiag\bin\pcd5srvc.pkms (PC-Doctor, Inc.)
DRV - (PxHelp20 [Boot | Running]) -- C:\Windows\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (ql2300 [Disabled | Stopped]) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (ql40xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (R300 [On_Demand | Stopped]) -- C:\Windows\system32\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV - (RTL8169 [On_Demand | Running]) -- C:\Windows\system32\DRIVERS\Rtlh86.sys (Realtek Corporation )
DRV - (secdrv [Auto | Stopped]) -- C:\Windows\System32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (SiSRaid4 [Disabled | Stopped]) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (Symc8xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_hi [Disabled | Stopped]) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Sym_u3 [Disabled | Stopped]) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (uliahci [Disabled | Stopped]) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (UlSata [Disabled | Stopped]) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (ulsata2 [Disabled | Stopped]) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (USB_RNDIS [On_Demand | Running]) -- C:\Windows\system32\DRIVERS\usb8023.sys (Microsoft Corporation)
DRV - (viaide [Disabled | Stopped]) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (vsmraid [Disabled | Stopped]) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co...=en&source=iglk
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.google.co...uk/webhp?hl=en"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.10
FF - prefs.js..extensions.enabledItems: {9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}:3.63
FF - prefs.js..extensions.enabledItems: {07b2a769-ed19-4483-87ce-c643914c81bb}:3.0.0.34

FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/05/29 20:17:29 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/05/29 20:17:29 | 00,000,000 | ---D | M]

[2009/05/29 02:40:56 | 00,000,000 | ---D | M] -- C:\Users\Aden\AppData\Roaming\mozilla\Extensions
[2009/05/29 02:40:56 | 00,000,000 | ---D | M] -- C:\Users\Aden\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/06/01 13:46:56 | 00,000,000 | ---D | M] -- C:\Users\Aden\AppData\Roaming\mozilla\Firefox\Profiles\kd8gzyho.default\extensions
[2009/05/29 02:43:04 | 00,000,000 | ---D | M] -- C:\Users\Aden\AppData\Roaming\mozilla\Firefox\Profiles\kd8gzyho.default\extensions\{07b2a769-ed19-4483-87ce-c643914c81bb}
[2009/05/29 02:45:30 | 00,000,000 | ---D | M] -- C:\Users\Aden\AppData\Roaming\mozilla\Firefox\Profiles\kd8gzyho.default\extensions\{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}
[2009/05/29 13:19:22 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009/05/29 02:40:39 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/05/29 13:19:22 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009/04/24 07:00:58 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/04/24 07:00:58 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2008/01/04 16:36:50 | 00,001,538 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2006/07/05 19:47:38 | 00,002,193 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2008/01/04 16:36:50 | 00,000,947 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2008/03/08 10:35:22 | 00,001,534 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2008/09/22 20:14:04 | 00,000,759 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2008/04/16 05:08:20 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2008/03/28 19:11:14 | 00,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2008/01/04 16:36:50 | 00,000,831 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: (761 bytes) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - Reg Error: Key error. File not found
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "c:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Dell DataSafe Online] "C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe" /m ()
O4 - HKLM..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter (SupportSoft, Inc.)
O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime (Apple Inc.)
O4 - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide (Microsoft Corporation)
O4 - HKCU..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (Microsoft Corporation)
O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (Microsoft Corporation)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent (Malwarebytes Corporation)
O4 - Startup: C:\Users\Aden\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [@%SystemRoot%\system32\nlasvc.dll,-1000] - C:\Windows\system32\NLAapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [@%SystemRoot%\system32\napinsp.dll,-1000] - C:\Windows\system32\napinsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [@%SystemRoot%\system32\pnrpnsp.dll,-1000] - C:\Windows\system32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [@%SystemRoot%\system32\pnrpnsp.dll,-1001] - C:\Windows\system32\pnrpnsp.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_13)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\GoToAssist: DllName - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 00,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - * [2009/06/02 13:34:36 | 00,000,000 | R--D | M]

========== Files/Folders - Created Within 30 Days ==========

[2009/06/02 13:34:36 | 00,501,760 | ---- | C] (OldTimer Tools) -- C:\Users\Aden\Desktop\OTL.exe
[2009/06/02 13:34:02 | 00,000,000 | ---D | C] -- C:\Rooter$
[2009/06/02 13:33:54 | 00,267,612 | ---- | C] () -- C:\Users\Aden\Desktop\Rooter.exe
[2009/06/02 13:18:35 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\Malwarebytes
[2009/06/02 13:18:34 | 00,000,820 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/06/02 13:18:32 | 00,040,160 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/06/02 13:18:31 | 00,019,096 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2009/06/02 13:18:31 | 00,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2009/06/02 13:18:31 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009/06/02 13:18:02 | 03,371,376 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Aden\Desktop\mbam-setup.exe
[2009/06/02 13:17:41 | 00,000,000 | ---D | C] -- C:\Windows\ERDNT
[2009/06/02 13:17:16 | 00,000,735 | ---- | C] () -- C:\Users\Aden\Desktop\NTREGOPT.lnk
[2009/06/02 13:17:16 | 00,000,716 | ---- | C] () -- C:\Users\Aden\Desktop\ERUNT.lnk
[2009/06/02 13:17:16 | 00,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2009/06/02 13:16:49 | 00,791,393 | ---- | C] (Lars Hederer ) -- C:\Users\Aden\Desktop\erunt_setup.exe
[2009/06/02 13:08:42 | 00,021,504 | ---- | C] (Doug Knox) -- C:\Users\Aden\Desktop\SysRestorePoint.exe
[2009/06/02 12:11:29 | 00,000,000 | ---D | C] -- C:\ATI
[2009/06/01 01:40:46 | 00,002,473 | ---- | C] () -- C:\Users\Aden\Desktop\Word Processor.lnk
[2009/05/31 21:22:36 | 00,000,322 | ---- | C] () -- C:\Users\Aden\Documents\Gateway Info.rtf
[2009/05/31 16:37:52 | 03,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
[2009/05/31 16:24:42 | 00,523,322 | ---- | C] () -- C:\Users\Aden\Documents\C4 June 03 Solutions.pdf
[2009/05/31 16:24:28 | 00,184,808 | ---- | C] () -- C:\Users\Aden\Documents\C4 June 03.pdf
[2009/05/31 14:08:26 | 00,000,000 | ---D | C] -- C:\Program Files\PC Drivers HeadQuarters
[2009/05/31 13:59:35 | 00,000,000 | -HSD | C] -- C:\Config.Msi
[2009/05/31 13:23:11 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009/05/30 20:13:55 | 00,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2009/05/29 20:17:08 | 00,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2009/05/29 20:17:08 | 00,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2009/05/29 20:16:43 | 00,000,000 | ---D | C] -- C:\ProgramData\Apple
[2009/05/29 20:16:43 | 00,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2009/05/29 17:12:45 | 00,000,000 | ---D | C] -- C:\Users\Aden\Documents\Lyrics
[2009/05/29 17:12:31 | 00,001,066 | ---- | C] () -- C:\Users\Aden\Documents\LfL.rtf
[2009/05/29 17:12:22 | 00,000,165 | ---- | C] () -- C:\Users\Aden\Documents\A&Lcode.rtf
[2009/05/29 17:12:09 | 00,002,089 | ---- | C] () -- C:\Users\Aden\Documents\Walking Times.rtf
[2009/05/29 17:11:58 | 00,003,944 | ---- | C] () -- C:\Users\Aden\Documents\List of Bands to Check Out.rtf
[2009/05/29 17:11:58 | 00,000,206 | ---- | C] () -- C:\Users\Aden\Documents\RpdShare.rtf
[2009/05/29 16:23:03 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\GetRightToGo
[2009/05/29 15:58:29 | 01,686,016 | ---- | C] (Clever Components) -- C:\Windows\System32\clinetsuitex6.ocx
[2009/05/29 15:58:29 | 00,662,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSCOMCT2.OCX
[2009/05/29 15:58:29 | 00,427,864 | ---- | C] (Xceed Software Inc (450) 442-2626 [email protected] www.xceedsoft.com) -- C:\Windows\System32\XceedZip.dll
[2009/05/29 15:58:28 | 01,071,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSCOMCTL.OCX
[2009/05/29 15:39:36 | 00,000,000 | ---D | C] -- C:\Windows\System32\logs
[2009/05/29 15:39:32 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\MSSoap
[2009/05/29 15:37:54 | 00,000,000 | ---D | C] -- C:\Windows\System32\URTTEMP
[2009/05/29 15:37:27 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\BitDefender
[2009/05/29 14:56:50 | 00,000,754 | ---- | C] () -- C:\Users\Aden\Desktop\Audacity.lnk
[2009/05/29 14:56:49 | 00,000,000 | ---D | C] -- C:\Program Files\Audacity
[2009/05/29 14:44:00 | 00,000,000 | ---D | C] -- C:\Program Files\Lame for Audacity
[2009/05/29 14:42:37 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\Audacity
[2009/05/29 14:12:06 | 00,000,000 | ---D | C] -- C:\ProgramData\Downloaded Installations
[2009/05/29 14:08:35 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\WinRAR
[2009/05/29 14:08:07 | 00,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2009/05/29 12:48:44 | 00,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2009/05/29 12:48:22 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\uTorrent
[2009/05/29 02:40:43 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\Mozilla
[2009/05/29 02:40:41 | 00,001,726 | ---- | C] () -- C:\Users\Public\Desktop\Firefox.lnk
[2009/05/29 02:40:38 | 00,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2009/05/29 01:19:46 | 00,000,000 | ---D | C] -- C:\ProgramData\Last.fm
[2009/05/29 01:19:25 | 00,000,000 | ---D | C] -- C:\Program Files\Last.fm
[2009/05/29 01:04:29 | 10,622,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmp.dll
[2009/05/29 01:04:29 | 00,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
[2009/05/29 01:04:28 | 08,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2009/05/29 01:04:28 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
[2009/05/29 01:04:28 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
[2009/05/29 01:04:25 | 03,600,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2009/05/29 01:04:24 | 03,548,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2009/05/29 01:04:24 | 00,551,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcss.dll
[2009/05/29 01:04:23 | 00,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe
[2009/05/29 01:04:23 | 00,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdohlp.dll
[2009/05/29 01:04:23 | 00,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
[2009/05/29 01:04:23 | 00,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasads.dll
[2009/05/29 01:04:23 | 00,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasdatastore.dll
[2009/05/29 01:04:23 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll
[2009/05/29 01:04:22 | 00,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iashost.exe
[2009/05/29 01:04:20 | 00,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
[2009/05/29 01:04:18 | 00,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
[2009/05/29 01:04:14 | 01,255,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2009/05/29 01:04:14 | 00,888,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
[2009/05/29 01:04:14 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
[2009/05/29 01:04:13 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amxread.dll
[2009/05/29 01:04:13 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apilogen.dll
[2009/05/29 01:04:07 | 00,562,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtcprx.dll
[2009/05/29 01:04:07 | 00,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xolehlp.dll
[2009/05/29 01:04:03 | 03,580,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
[2009/05/29 01:04:02 | 06,068,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
[2009/05/29 01:04:01 | 01,166,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
[2009/05/29 01:04:01 | 00,827,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
[2009/05/29 01:04:01 | 00,458,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2009/05/29 01:04:01 | 00,389,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2009/05/29 01:04:01 | 00,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
[2009/05/29 01:04:01 | 00,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2009/05/29 01:04:01 | 00,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\occache.dll
[2009/05/29 01:04:01 | 00,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2009/05/29 01:04:00 | 01,383,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2009/05/29 01:04:00 | 00,671,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2009/05/29 01:04:00 | 00,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2009/05/29 01:04:00 | 00,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieencode.dll
[2009/05/29 01:04:00 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2009/05/29 01:03:57 | 00,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll
[2009/05/29 01:03:57 | 00,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wersvc.dll
[2009/05/29 00:56:44 | 01,809,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuaueng.dll
[2009/05/29 00:56:44 | 01,524,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2009/05/29 00:56:44 | 00,051,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuauclt.exe
[2009/05/29 00:56:44 | 00,043,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2009/05/29 00:56:31 | 00,561,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2009/05/29 00:56:31 | 00,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2009/05/29 00:56:31 | 00,034,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2009/05/29 00:56:25 | 00,162,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2009/05/29 00:56:25 | 00,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2009/05/28 20:44:50 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\Template
[2009/05/28 20:44:49 | 00,001,090 | ---- | C] () -- C:\Users\Aden\AppData\Roaming\wklnhst.dat
[2009/05/28 19:17:54 | 00,000,000 | ---D | C] -- C:\Program Files\Belkin
[2009/05/28 19:17:38 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\InstallShield
[2009/05/28 18:55:17 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\DivX
[2009/05/28 18:54:45 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Drivers Headquarters
[2009/05/28 18:54:21 | 00,000,000 | ---D | C] -- C:\Program Files\DivX
[2009/05/28 18:54:16 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\DivX Shared
[2009/05/28 18:18:23 | 00,000,448 | ---- | C] () -- C:\Windows\tasks\Driver Robot.job
[2009/05/28 17:56:12 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\Macromedia
[2009/05/28 17:56:12 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\Adobe
[2009/05/28 17:45:40 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\ATI
[2009/05/28 17:45:40 | 00,000,000 | ---D | C] -- C:\ProgramData\ATI
[2009/05/28 17:44:57 | 00,000,402 | -HS- | C] () -- C:\Users\Aden\Documents\desktop.ini
[2009/05/28 17:44:57 | 00,000,282 | -HS- | C] () -- C:\Users\Aden\Desktop\desktop.ini
[2009/05/28 17:44:57 | 00,000,174 | -HS- | C] () -- C:\Users\Aden\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
[2009/05/28 17:44:45 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\Identities
[2009/05/28 17:41:21 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\Dell
[2009/05/28 17:41:17 | 00,001,815 | ---- | C] () -- C:\Users\Aden\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2009/05/28 17:41:13 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\LocalLow
[2009/05/28 17:41:10 | 00,000,000 | --SD | C] -- C:\Users\Aden\AppData\Roaming\Microsoft
[2009/05/28 17:41:10 | 00,000,000 | -HSD | C] -- C:\Users\Aden\Documents\My Videos
[2009/05/28 17:41:10 | 00,000,000 | -HSD | C] -- C:\Users\Aden\Documents\My Pictures
[2009/05/28 17:41:10 | 00,000,000 | -HSD | C] -- C:\Users\Aden\Documents\My Music
[2009/05/28 17:41:10 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming\Media Center Programs
[2009/05/28 17:41:10 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Roaming
[2009/05/28 17:41:10 | 00,000,000 | ---D | C] -- C:\Users\Aden\AppData\Local
[2009/05/28 17:37:27 | 00,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Videos
[2009/05/28 17:37:27 | 00,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Pictures
[2009/05/28 17:37:27 | 00,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Music
[2009/05/28 17:37:27 | 00,000,000 | -HSD | C] -- C:\ProgramData\Templates
[2009/05/28 17:37:27 | 00,000,000 | -HSD | C] -- C:\ProgramData\Start Menu
[2009/05/28 17:37:27 | 00,000,000 | -HSD | C] -- C:\ProgramData\Favorites
[2009/05/28 17:37:27 | 00,000,000 | -HSD | C] -- C:\ProgramData\Documents
[2009/05/28 17:37:27 | 00,000,000 | -HSD | C] -- C:\ProgramData\Desktop
[2009/05/28 17:37:27 | 00,000,000 | -HSD | C] -- C:\ProgramData\Application Data
[2009/05/28 17:37:27 | 00,000,000 | -HSD | C] -- C:\Documents and Settings
[2009/05/22 23:17:57 | 00,004,761 | RH-- | C] () -- C:\dell.sdr
[2009/05/22 23:17:45 | 03,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2009/05/22 23:17:45 | 00,323,584 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\atipdlxx.dll
[2009/05/22 23:17:45 | 00,262,144 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\Oemdspif.dll
[2009/05/22 23:17:45 | 00,168,883 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2009/05/22 23:17:45 | 00,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2009/05/22 23:17:45 | 00,090,112 | ---- | C] () -- C:\Windows\System32\atibrtmon.exe
[2009/05/22 23:17:45 | 00,081,920 | ---- | C] () -- C:\Windows\System32\ATIODE.exe
[2009/05/22 23:17:45 | 00,052,400 | ---- | C] () -- C:\Windows\System32\drivers\ativvpxx.vp
[2009/05/22 23:17:45 | 00,043,520 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\ati2edxx.dll
[2009/05/22 23:17:45 | 00,040,960 | ---- | C] () -- C:\Windows\System32\ATIODCLI.exe
[2009/05/22 23:17:45 | 00,012,610 | ---- | C] () -- C:\Windows\atiogl.xml
[2009/05/22 23:17:45 | 00,002,096 | ---- | C] () -- C:\Windows\System32\drivers\ativpkxx.vp
[2009/05/22 23:17:45 | 00,002,096 | ---- | C] () -- C:\Windows\System32\drivers\ativokxx.vp
[2009/05/22 23:17:45 | 00,002,096 | ---- | C] () -- C:\Windows\System32\drivers\ativdkxx.vp
[2009/05/22 23:17:31 | 00,138,240 | ---- | C] (Realtek Corporation ) -- C:\Windows\System32\drivers\Rtlh86.sys
[2009/05/22 23:17:31 | 00,010,240 | ---- | C] (Realtek Semiconductor Corporation ) -- C:\Windows\System32\RtNicProp32.dll
[2009/05/22 23:17:21 | 00,339,968 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2009/05/22 23:17:21 | 00,135,168 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2009/05/22 23:16:08 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hidserv.dll
[2009/05/22 23:16:08 | 00,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
[2009/05/22 23:15:51 | 00,466,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
[2009/05/22 23:15:32 | 01,191,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
[2009/05/22 23:14:55 | 00,468,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\newdev.dll
[2009/05/22 23:14:55 | 00,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\newdev.exe
[2009/05/22 23:14:37 | 00,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrrun.dll
[2009/05/22 23:14:37 | 00,155,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscript.exe
[2009/05/22 23:14:37 | 00,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
[2009/05/22 23:14:36 | 00,512,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2009/05/22 23:14:36 | 00,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2009/05/22 23:14:36 | 00,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrobj.dll
[2009/05/22 23:14:36 | 00,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshom.ocx
[2009/05/22 23:14:36 | 00,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshext.dll
[2009/05/22 23:14:12 | 01,582,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2009/05/22 23:14:12 | 00,439,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe
[2009/05/22 23:14:12 | 00,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchFilterHost.exe
[2009/05/22 23:14:12 | 00,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssitlb.dll
[2009/05/22 23:14:12 | 00,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msstrc.dll
[2009/05/22 23:14:12 | 00,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll
[2009/05/22 23:14:11 | 01,418,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2009/05/22 23:14:11 | 00,670,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2009/05/22 23:14:11 | 00,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2009/05/22 23:14:11 | 00,203,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2009/05/22 23:14:11 | 00,184,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchProtocolHost.exe
[2009/05/22 23:14:11 | 00,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\propdefs.dll
[2009/05/22 23:14:11 | 00,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2009/05/22 23:14:11 | 00,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscb.dll
[2009/05/22 23:14:11 | 00,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsepno.dll
[2009/05/22 23:14:11 | 00,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshooks.dll
[2009/05/22 23:14:10 | 11,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex
[2009/05/22 23:14:10 | 06,103,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chtbrkr.dll
[2009/05/22 23:14:10 | 01,671,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chsbrkr.dll
[2009/05/22 23:14:10 | 00,754,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll
[2009/05/22 23:14:10 | 00,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\thawbrkr.dll
[2009/05/22 23:14:10 | 00,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
[2009/05/22 23:14:10 | 00,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll
[2009/05/22 23:14:10 | 00,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\offfilt.dll
[2009/05/22 23:14:10 | 00,143,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\korwbrkr.dll
[2009/05/22 23:14:10 | 00,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlhtml.dll
[2009/05/22 23:14:10 | 00,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009/05/22 23:14:10 | 00,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xmlfilter.dll
[2009/05/22 23:14:10 | 00,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll
[2009/05/22 23:14:10 | 00,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtffilt.dll
[2009/05/22 23:14:10 | 00,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009/05/22 23:13:45 | 00,625,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgkrnl.sys
[2009/05/22 23:13:45 | 00,565,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\emdmgmt.dll
[2009/05/22 23:13:45 | 00,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nwifi.sys
[2009/05/22 23:13:45 | 00,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dataclen.dll
[2009/05/22 23:13:45 | 00,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2009/05/22 23:13:12 | 01,645,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\connect.dll
[2009/05/22 23:12:55 | 00,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
[2009/05/22 23:12:39 | 02,927,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2009/05/22 23:12:15 | 11,580,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
[2009/05/22 23:11:47 | 00,738,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcomm.dll
[2009/05/22 23:11:32 | 00,269,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\es.dll
[2009/05/22 23:10:48 | 00,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2009/05/22 23:10:11 | 00,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2009/05/22 23:10:11 | 00,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2009/05/22 23:10:11 | 00,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2009/05/22 23:10:11 | 00,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2009/05/22 23:10:11 | 00,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2009/05/22 23:10:11 | 00,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2009/05/22 23:10:11 | 00,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2009/05/22 23:09:45 | 00,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IPSECSVC.DLL
[2009/05/22 23:09:32 | 00,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv.sys
[2009/05/22 23:08:28 | 00,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
[2009/05/22 23:07:09 | 02,033,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2009/05/22 23:07:03 | 00,885,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
[2009/05/22 23:07:03 | 00,009,127 | ---- | C] () -- C:\Windows\System32\RacUR.xml
[2009/05/22 23:07:03 | 00,000,153 | ---- | C] () -- C:\Windows\System32\RacUREx.xml
[2009/05/22 23:06:55 | 01,314,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2009/05/22 23:06:45 | 00,425,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
[2009/05/22 23:06:44 | 00,712,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
[2009/05/22 23:06:44 | 00,347,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2009/05/22 23:06:14 | 12,240,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0007.dll
[2009/05/22 23:06:14 | 02,644,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0009.dll
[2009/05/22 23:06:14 | 00,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
[2009/05/22 23:05:15 | 00,443,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32spl.dll
[2009/05/22 23:05:10 | 00,891,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpip.sys
[2009/05/22 23:05:09 | 00,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pacer.sys
[2009/05/22 23:05:09 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pacerprf.dll
[2009/05/22 23:04:55 | 00,988,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2009/05/22 23:04:55 | 00,927,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2009/05/22 23:04:55 | 00,615,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
[2009/05/22 23:04:55 | 00,378,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2009/05/22 23:04:55 | 00,318,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2009/05/22 23:04:55 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
[2009/05/22 23:04:55 | 00,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
[2009/05/22 23:04:55 | 00,019,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kd1394.dll
[2009/05/22 23:04:55 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srdelayed.exe
[2009/05/22 23:04:55 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd106n.dll
[2009/05/22 23:04:05 | 00,212,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb10.sys
[2009/05/22 23:04:00 | 01,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
[2009/05/22 23:03:54 | 02,868,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2009/05/22 23:03:54 | 02,386,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2009/05/22 23:03:54 | 00,996,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
[2009/05/22 23:03:54 | 00,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
[2009/05/22 23:03:46 | 00,268,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
[2009/05/22 23:03:42 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2009/05/22 23:03:41 | 04,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2009/05/22 23:03:41 | 01,695,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2009/05/22 23:03:28 | 00,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
[2009/05/22 23:03:17 | 00,260,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasmans.dll
[2009/05/22 23:03:14 | 00,408,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msinfo32.exe
[2009/05/22 23:03:11 | 00,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2009/05/22 23:03:11 | 00,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbhub.sys
[2009/05/22 23:03:11 | 00,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbccgp.sys
[2009/05/22 23:03:11 | 00,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbehci.sys
[2009/05/22 23:03:11 | 00,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbuhci.sys
[2009/05/22 23:03:11 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hcrstco.dll
[2009/05/22 23:03:11 | 00,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hccoin.dll
[2009/05/22 23:03:11 | 00,005,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2009/05/22 23:03:05 | 00,246,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys
[2009/05/22 23:02:56 | 00,784,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
[2009/05/22 23:02:53 | 00,223,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2009/05/22 23:02:47 | 00,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
[2009/05/22 23:02:44 | 01,312,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMALFXGFXDSP.dll
[2009/05/22 23:02:44 | 00,338,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SysFxUI.dll
[2009/05/22 23:02:44 | 00,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
[2009/05/22 23:02:44 | 00,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
[2009/05/22 23:02:44 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmkaud.sys
[2009/05/22 23:02:28 | 00,000,000 | ---D | C] -- C:\Windows\Users
[2009/05/22 23:00:07 | 00,004,761 | ---- | C] () -- C:\Windows\System32\drivers\1028_Dell_INS_545.mrk
[2009/05/22 22:58:13 | 00,000,000 | ---D | C] -- C:\Windows\System32\oem
[2009/05/22 22:58:12 | 00,000,000 | ---D | C] -- C:\Drivers
[2009/05/22 22:58:12 | 00,000,000 | ---D | C] -- C:\DELL
[2009/05/22 15:24:11 | 00,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
[2009/05/22 15:24:10 | 00,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2009/05/22 15:23:43 | 00,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009/05/22 15:23:26 | 00,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2009/05/22 15:23:26 | 00,000,000 | ---D | C] -- C:\Program Files\Realtek
[2009/05/22 15:22:08 | 00,000,000 | -HSD | C] -- C:\System Volume Information
[2009/05/22 13:56:12 | 00,000,000 | ---D | C] -- C:\ProgramData\Dell
[2009/05/22 13:55:08 | 00,000,000 | ---D | C] -- C:\Program Files\Dell
[2009/05/22 13:54:22 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2009/05/22 13:53:55 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2009/05/22 13:53:03 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2009/05/22 13:51:53 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2009/05/22 13:51:44 | 00,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2009/05/22 13:51:38 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Live SkyDrive
[2009/05/22 13:51:23 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Live
[2009/05/22 13:51:11 | 00,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2009/05/22 13:50:24 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
[2009/05/22 13:50:13 | 00,000,000 | ---D | C] -- C:\ProgramData\SupportSoft
[2009/05/22 13:50:09 | 00,000,000 | ---D | C] -- C:\ProgramData\PCDr
[2009/05/22 13:50:09 | 00,000,000 | ---D | C] -- C:\ProgramData\PC-Doctor
[2009/05/22 13:49:58 | 00,000,000 | ---D | C] -- C:\Program Files\Dell Support Center
[2009/05/22 13:49:43 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\supportsoft
[2009/05/22 13:48:51 | 00,000,000 | ---D | C] -- C:\Program Files\Dell DataSafe Online
[2009/05/22 13:44:58 | 00,000,000 | ---D | C] -- C:\Program Files\Citrix
[2009/05/22 13:44:55 | 00,000,000 | ---D | C] -- C:\ProgramData\Uninstall
[2009/05/22 13:44:53 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\SureThing Shared
[2009/05/22 13:43:55 | 00,000,000 | ---D | C] -- C:\ProgramData\Sonic
[2009/05/22 13:43:51 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\PX Storage Engine
[2009/05/22 13:43:50 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Sonic Shared
[2009/05/22 13:43:10 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Roxio Shared
[2009/05/22 13:42:54 | 00,000,000 | ---D | C] -- C:\ProgramData\InstallShield
[2009/05/22 13:42:51 | 00,000,000 | ---D | C] -- C:\Program Files\Roxio
[2009/05/22 13:42:21 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2009/05/22 13:41:51 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2009/05/22 13:40:51 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR
[2009/05/22 13:40:18 | 00,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2009/05/22 13:40:16 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2009/05/22 13:40:16 | 00,000,000 | ---D | C] -- C:\Program Files\Adobe
[2009/05/22 13:38:19 | 00,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2009/05/22 13:37:46 | 00,000,000 | ---D | C] -- C:\Intel
[2009/05/22 13:37:44 | 00,000,000 | ---D | C] -- C:\Program Files\Intel
[2009/05/22 13:37:41 | 00,000,000 | ---D | C] -- C:\Program Files\Dell Inc
[2009/05/22 13:36:37 | 00,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2009/05/22 13:36:35 | 00,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2009/05/22 13:36:25 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2009/05/22 13:35:33 | 00,000,000 | ---D | C] -- C:\Program Files\Java
[2009/05/22 13:34:46 | 00,000,000 | -HSD | C] -- C:\Windows\Installer
[2009/05/22 13:34:21 | 00,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2009/05/22 13:31:30 | 55,574,528 | ---- | C] () -- C:\Windows\ocsetup_install_OEMHelpCustomization.etl
[2009/05/22 13:31:30 | 00,262,144 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.perf
[2009/05/22 13:31:30 | 00,065,536 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.dpx
[2009/05/22 13:30:14 | 00,529,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndis.sys
[2006/11/02 13:35:32 | 00,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 11:23:31 | 00,000,219 | ---- | C] () -- C:\Windows\system.ini
[2006/11/02 11:23:31 | 00,000,144 | ---- | C] () -- C:\Windows\win.ini
[2006/11/02 08:40:29 | 00,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini

========== Files - Modified Within 30 Days ==========

[2009/06/02 13:34:36 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Users\Aden\Desktop\OTL.exe
[2009/06/02 13:33:54 | 00,267,612 | ---- | M] () -- C:\Users\Aden\Desktop\Rooter.exe
[2009/06/02 13:29:40 | 00,713,602 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2009/06/02 13:29:40 | 00,612,046 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2009/06/02 13:29:40 | 00,112,988 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2009/06/02 13:25:28 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009/06/02 13:23:35 | 00,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/06/02 13:23:35 | 00,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/06/02 13:23:34 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2009/06/02 13:18:34 | 00,000,820 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/06/02 13:18:13 | 03,371,376 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Aden\Desktop\mbam-setup.exe
[2009/06/02 13:17:16 | 00,000,735 | ---- | M] () -- C:\Users\Aden\Desktop\NTREGOPT.lnk
[2009/06/02 13:17:16 | 00,000,716 | ---- | M] () -- C:\Users\Aden\Desktop\ERUNT.lnk
[2009/06/02 13:16:55 | 00,791,393 | ---- | M] (Lars Hederer ) -- C:\Users\Aden\Desktop\erunt_setup.exe
[2009/06/02 13:16:06 | 00,021,504 | ---- | M] (Doug Knox) -- C:\Users\Aden\Desktop\SysRestorePoint.exe
[2009/06/01 13:50:06 | 00,002,473 | ---- | M] () -- C:\Users\Aden\Desktop\Word Processor.lnk
[2009/05/31 21:22:36 | 00,000,322 | ---- | M] () -- C:\Users\Aden\Documents\Gateway Info.rtf
[2009/05/31 19:39:42 | 00,002,089 | ---- | M] () -- C:\Users\Aden\Documents\Walking Times.rtf
[2009/05/31 16:24:44 | 00,523,322 | ---- | M] () -- C:\Users\Aden\Documents\C4 June 03 Solutions.pdf
[2009/05/31 16:24:28 | 00,184,808 | ---- | M] () -- C:\Users\Aden\Documents\C4 June 03.pdf
[2009/05/30 02:47:00 | 00,000,448 | ---- | M] () -- C:\Windows\tasks\Driver Robot.job
[2009/05/29 17:21:13 | 00,001,090 | ---- | M] () -- C:\Users\Aden\AppData\Roaming\wklnhst.dat
[2009/05/29 14:56:50 | 00,000,754 | ---- | M] () -- C:\Users\Aden\Desktop\Audacity.lnk
[2009/05/29 02:40:41 | 00,001,726 | ---- | M] () -- C:\Users\Public\Desktop\Firefox.lnk
[2009/05/28 17:44:57 | 00,000,402 | -HS- | M] () -- C:\Users\Aden\Documents\desktop.ini
[2009/05/28 17:44:57 | 00,000,282 | -HS- | M] () -- C:\Users\Aden\Desktop\desktop.ini
[2009/05/28 17:44:57 | 00,000,174 | -HS- | M] () -- C:\Users\Aden\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
[2009/05/28 17:41:17 | 00,001,815 | ---- | M] () -- C:\Users\Aden\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2009/05/28 17:32:08 | 00,047,092 | ---- | M] () -- C:\Windows\System32\license.rtf
[2009/05/26 13:20:08 | 00,040,160 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/05/26 13:19:56 | 00,019,096 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2009/05/25 17:35:30 | 00,001,066 | ---- | M] () -- C:\Users\Aden\Documents\LfL.rtf
[2009/05/22 23:17:57 | 00,004,761 | RH-- | M] () -- C:\dell.sdr
[2009/05/22 23:16:08 | 00,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hidserv.dll
[2009/05/22 23:16:08 | 00,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
[2009/05/22 23:15:51 | 00,466,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
[2009/05/22 23:15:32 | 01,191,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
[2009/05/22 23:14:55 | 00,468,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\newdev.dll
[2009/05/22 23:14:55 | 00,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\newdev.exe
[2009/05/22 23:14:37 | 00,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrrun.dll
[2009/05/22 23:14:37 | 00,155,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscript.exe
[2009/05/22 23:14:37 | 00,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
[2009/05/22 23:14:36 | 00,512,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2009/05/22 23:14:36 | 00,430,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2009/05/22 23:14:36 | 00,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrobj.dll
[2009/05/22 23:14:36 | 00,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshom.ocx
[2009/05/22 23:14:36 | 00,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshext.dll
[2009/05/22 23:14:12 | 01,582,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2009/05/22 23:14:12 | 00,439,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe
[2009/05/22 23:14:12 | 00,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchFilterHost.exe
[2009/05/22 23:14:12 | 00,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssitlb.dll
[2009/05/22 23:14:12 | 00,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msstrc.dll
[2009/05/22 23:14:12 | 00,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll
[2009/05/22 23:14:11 | 01,418,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2009/05/22 23:14:11 | 00,670,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2009/05/22 23:14:11 | 00,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2009/05/22 23:14:11 | 00,203,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2009/05/22 23:14:11 | 00,184,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchProtocolHost.exe
[2009/05/22 23:14:11 | 00,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\propdefs.dll
[2009/05/22 23:14:11 | 00,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2009/05/22 23:14:11 | 00,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscb.dll
[2009/05/22 23:14:11 | 00,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsepno.dll
[2009/05/22 23:14:11 | 00,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshooks.dll
[2009/05/22 23:14:10 | 11,967,524 | ---- | M] () -- C:\Windows\System32\korwbrkr.lex
[2009/05/22 23:14:10 | 06,103,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chtbrkr.dll
[2009/05/22 23:14:10 | 01,671,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chsbrkr.dll
[2009/05/22 23:14:10 | 00,754,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll
[2009/05/22 23:14:10 | 00,313,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\thawbrkr.dll
[2009/05/22 23:14:10 | 00,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
[2009/05/22 23:14:10 | 00,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshsq.dll
[2009/05/22 23:14:10 | 00,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\offfilt.dll
[2009/05/22 23:14:10 | 00,143,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\korwbrkr.dll
[2009/05/22 23:14:10 | 00,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlhtml.dll
[2009/05/22 23:14:10 | 00,106,605 | ---- | M] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009/05/22 23:14:10 | 00,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmlfilter.dll
[2009/05/22 23:14:10 | 00,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll
[2009/05/22 23:14:10 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtffilt.dll
[2009/05/22 23:14:10 | 00,018,904 | ---- | M] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009/05/22 23:13:45 | 00,625,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgkrnl.sys
[2009/05/22 23:13:45 | 00,565,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\emdmgmt.dll
[2009/05/22 23:13:45 | 00,148,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nwifi.sys
[2009/05/22 23:13:45 | 00,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dataclen.dll
[2009/05/22 23:13:45 | 00,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2009/05/22 23:13:12 | 01,645,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\connect.dll
[2009/05/22 23:12:55 | 00,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
[2009/05/22 23:12:39 | 02,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2009/05/22 23:12:15 | 11,580,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
[2009/05/22 23:11:47 | 00,738,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcomm.dll
[2009/05/22 23:11:32 | 00,269,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\es.dll
[2009/05/22 23:10:48 | 00,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2009/05/22 23:10:11 | 00,428,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2009/05/22 23:10:11 | 00,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2009/05/22 23:10:11 | 00,217,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2009/05/22 23:10:11 | 00,177,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2009/05/22 23:10:11 | 00,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2009/05/22 23:10:11 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2009/05/22 23:10:11 | 00,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2009/05/22 23:09:45 | 00,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPSECSVC.DLL
[2009/05/22 23:09:32 | 00,288,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv.sys
[2009/05/22 23:08:28 | 00,303,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
[2009/05/22 23:07:09 | 02,033,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2009/05/22 23:07:03 | 00,885,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
[2009/05/22 23:07:03 | 00,009,127 | ---- | M] () -- C:\Windows\System32\RacUR.xml
[2009/05/22 23:07:03 | 00,000,153 | ---- | M] () -- C:\Windows\System32\RacUREx.xml
[2009/05/22 23:06:55 | 01,314,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2009/05/22 23:06:45 | 00,425,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
[2009/05/22 23:06:44 | 00,712,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
[2009/05/22 23:06:44 | 00,347,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2009/05/22 23:06:14 | 12,240,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0007.dll
[2009/05/22 23:06:14 | 02,644,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0009.dll
[2009/05/22 23:06:14 | 00,801,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
[2009/05/22 23:05:15 | 00,443,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32spl.dll
[2009/05/22 23:05:10 | 00,891,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpip.sys
[2009/05/22 23:05:09 | 00,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pacer.sys
[2009/05/22 23:05:09 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pacerprf.dll
[2009/05/22 23:04:55 | 00,988,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2009/05/22 23:04:55 | 00,927,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2009/05/22 23:04:55 | 00,615,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
[2009/05/22 23:04:55 | 00,378,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2009/05/22 23:04:55 | 00,318,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2009/05/22 23:04:55 | 00,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
[2009/05/22 23:04:55 | 00,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
[2009/05/22 23:04:55 | 00,019,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kd1394.dll
[2009/05/22 23:04:55 | 00,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srdelayed.exe
[2009/05/22 23:04:55 | 00,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd106n.dll
[2009/05/22 23:04:05 | 00,212,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb10.sys
[2009/05/22 23:04:00 | 01,334,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
[2009/05/22 23:03:54 | 02,868,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2009/05/22 23:03:54 | 02,386,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2009/05/22 23:03:54 | 00,996,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
[2009/05/22 23:03:54 | 00,094,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
[2009/05/22 23:03:46 | 00,268,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
[2009/05/22 23:03:42 | 00,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2009/05/22 23:03:41 | 04,240,384 | ---- | M] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2009/05/22 23:03:41 | 01,695,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2009/05/22 23:03:28 | 00,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
[2009/05/22 23:03:24 | 00,265,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpi.sys
[2009/05/22 23:03:24 | 00,026,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\battc.sys
[2009/05/22 23:03:24 | 00,018,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\compbatt.sys
[2009/05/22 23:03:24 | 00,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wmiacpi.sys
[2009/05/22 23:03:24 | 00,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\errdev.sys
[2009/05/22 23:03:17 | 00,260,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasmans.dll
[2009/05/22 23:03:14 | 00,408,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msinfo32.exe
[2009/05/22 23:03:11 | 00,225,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2009/05/22 23:03:11 | 00,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbhub.sys
[2009/05/22 23:03:11 | 00,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbccgp.sys
[2009/05/22 23:03:11 | 00,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbehci.sys
[2009/05/22 23:03:11 | 00,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbuhci.sys
[2009/05/22 23:03:11 | 00,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hcrstco.dll
[2009/05/22 23:03:11 | 00,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hccoin.dll
[2009/05/22 23:03:11 | 00,005,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2009/05/22 23:03:05 | 00,246,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys
[2009/05/22 23:02:56 | 00,784,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
[2009/05/22 23:02:53 | 00,223,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2009/05/22 23:02:49 | 00,028,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msahci.sys
[2009/05/22 23:02:49 | 00,021,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\atapi.sys
[2009/05/22 23:02:47 | 00,320,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
[2009/05/22 23:02:43 | 01,312,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMALFXGFXDSP.dll
[2009/05/22 23:02:43 | 00,338,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SysFxUI.dll
[2009/05/22 23:02:43 | 00,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
[2009/05/22 23:02:43 | 00,130,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
[2009/05/22 23:02:43 | 00,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmkaud.sys
[2009/05/22 23:02:28 | 00,177,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\halmacpi.dll
[2009/05/22 23:02:28 | 00,177,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hal.dll
[2009/05/22 23:02:28 | 00,141,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\halacpi.dll
[2009/05/22 23:00:07 | 00,004,761 | ---- | M] () -- C:\Windows\System32\drivers\1028_Dell_INS_545.mrk
[2009/05/22 22:59:13 | 00,060,224 | ---- | M] () -- C:\Windows\System32\tcpmon.ini
[2009/05/22 15:24:11 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
[2009/05/22 15:23:43 | 00,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2009/05/22 14:05:47 | 00,271,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/05/22 13:34:20 | 55,574,528 | ---- | M] () -- C:\Windows\ocsetup_install_OEMHelpCustomization.etl
[2009/05/22 13:34:17 | 00,262,144 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.perf
[2009/05/22 13:34:17 | 00,065,536 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.dpx
[2009/05/17 18:59:54 | 00,003,944 | ---- | M] () -- C:\Users\Aden\Documents\List of Bands to Check Out.rtf
[2009/05/07 00:16:30 | 24,699,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mrt.exe
< End of report >






OTL Extras:
OTL Extras logfile created on: 02/06/2009 13:35:36 - Run 1
OTL by OldTimer - Version 2.1.1.0 Folder = C:\Users\Aden\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 100.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 450.68 Gb Total Space | 386.83 Gb Free Space | 85.83% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 9.56 Gb Free Space | 63.72% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: ADENS-DAW
Current User Name: Aden
Logged in as Administrator.

Current Boot Mode: SafeMode with Networking
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
Reg Error: Unknown registry data type File not found

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile
"EnableFirewall" = 1
"DisableNotifications" = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall" = 1
"DisableNotifications" = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile
"EnableFirewall" = 1
"DisableNotifications" = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\GloballyOpenPorts\List

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

{59B0C7D9-278A-47F2-BC43-B1CB76C7C2CC} = LPORT=1900 | PROTOCOL=17 | DIR=IN | APP=SVCHOST.EXE | SVC=SSDPSRV |
{A34423F2-4EC2-4328-9EDB-A3CA3FFB0C5B} = LPORT=2869 | PROTOCOL=6 | DIR=IN | APP=SYSTEM |

========== Vista Active Application Exception List ==========

{19FAF1F7-1BA1-4A2D-8D9E-12A22153841C} = DIR=IN | APP=C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSNMSGR.EXE |
{353A9A5E-FC22-48D8-B9A9-CEEA1AC93350} = PROTOCOL=17 | DIR=IN | APP=C:\PROGRAM FILES\UTORRENT\UTORRENT.EXE |
{43B0C4AD-48F2-405A-BFF9-9C3A08E1B272} = DIR=IN | APP=C:\PROGRAM FILES\WINDOWS LIVE\SYNC\WINDOWSLIVESYNC.EXE |
{9BC8DB92-14F8-4C45-95CC-5939A2C732B9} = PROTOCOL=6 | DIR=IN | APP=C:\PROGRAM FILES\UTORRENT\UTORRENT.EXE |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{056E7B58-F436-9614-6CD3-1DFDDD7DA470}" = CCC Help Turkish
"{0626167B-F30A-79EB-9B21-80B83468961A}" = CCC Help Chinese Traditional
"{08D6F386-D362-805B-05D2-79E4AB4F9CB9}" = CCC Help Korean
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{0AAA9C97-74D4-47CE-B089-0B147EF3553C}" = Windows Live Messenger
"{13766F76-6C8C-4E57-A9F3-3212D1C6E0D1}" = Dell DataSafe Online
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2390D4C3-8CC7-2074-ACB9-A22ED2E1D4E9}" = CCC Help Portuguese
"{2555521A-9231-2F05-AEBE-FC1E2A7F825F}" = ccc-utility
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java™ 6 Update 13
"{27C42F0C-9090-97F7-9338-B6BD6DC25BB1}" = CCC Help Japanese
"{2BE84E12-E062-F989-BA16-25D53F343033}" = Skins
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3138EAD3-700B-4A10-B617-B3F8096EE30D}" = Dell Edoc Viewer
"{31CAC150-58B2-F696-D9EB-2FC16C3A8FAA}" = Catalyst Control Center Localization Portuguese
"{34475C54-DA68-DA37-E014-2ADD65AF627F}" = Catalyst Control Center Localization Hungarian
"{3541D8B6-BE96-0E6B-8987-D1CE1FBF848A}" = CCC Help German
"{3A732171-7856-43BD-B828-39B9E2B3E195}" = Catalyst Control Center Localization Spanish
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3C52E7DA-C431-4239-B66B-1BF703D5B194}" = Windows Live Photo Gallery
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{4207500E-1543-47F3-1695-6728E6520903}" = Catalyst Control Center Graphics Full Existing
"{4453BCB7-5327-F8D1-C048-851310A389EF}" = Catalyst Control Center Localization Turkish
"{4A2D8C96-7B4F-A66A-6773-23F7796F9BA2}" = CCC Help Spanish
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}" = Junk Mail filter update
"{621C02EA-AAFF-4026-A903-165D59529A16}" = Driver Detective
"{63C1109E-D977-49ED-BCE3-D00D0BF187D6}" = Windows Live Mail
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6A92E5C5-0578-443D-91F3-92ECE5F2CAE2}" = Windows Live Writer
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{73E8E831-160A-6E74-1AAA-AB698E1986BC}" = CCC Help Hungarian
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{76E29237-CCAB-CD1A-F8A1-6C3CFF002F26}" = Catalyst Control Center Graphics Previews Vista
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{7A33E298-5BEA-7C94-C512-1DF1C977537E}" = Catalyst Control Center Localization Italian
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{853026E0-CD36-1790-7988-194CADDDFB25}" = ccc-core-static
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8D8E6D0B-5A57-9ABD-AEA2-C0052401C5F6}" = Catalyst Control Center Localization Chinese Traditional
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{9422C8EA-B0C6-4197-B8FC-DC797658CA00}" = Windows Live Sign-in Assistant
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95E52415-B952-B013-A2AD-5163896D8B9C}" = Catalyst Control Center Graphics Full New
"{995F1E2E-F542-4310-8E1D-9926F5A279B3}" = Windows Live Toolbar
"{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}" = Windows Live Sync
"{A1E79477-B730-7E48-7EFF-0D1CB3202933}" = Catalyst Control Center Graphics Previews Common
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B25E016C-44C2-856A-98A8-789D1E2B1C56}" = Catalyst Control Center Graphics Light
"{B463BAAF-A379-AAF1-8979-6ED69C25ED37}" = Catalyst Control Center Localization Japanese
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{B6CF1DB0-09E8-0A2E-A510-1F2F8BDE5ECF}" = CCC Help Italian
"{B935C985-A17F-484B-8470-09E4FC27DC26}" = Dell-eBay
"{BC60B681-C3A3-0363-DA09-FA9706ED9680}" = CCC Help Chinese Standard
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BECDD3A4-FEEC-9804-4782-F31A8A842361}" = CCC Help English
"{C022906C-A509-33D1-E42B-FF92F8E7BED4}" = Catalyst Control Center Core Implementation
"{C6CA8874-5F22-4AF0-9BE3-016BF299C536}" = Windows Live Essentials
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D035A6CA-E9DD-4B40-66F8-15842888E447}" = Catalyst Control Center Localization French
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E453921D-30B6-7692-179C-6F6112F18F81}" = Catalyst Control Center Localization Chinese Standard
"{EA853B19-A618-8D18-F4A4-6B96083DC3A3}" = Catalyst Control Center Localization Korean
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{EEBC3795-B846-4B9F-B559-29E07962C2B2}" = Belkin F5D7051
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"{FE46238E-2FB4-C9E1-323D-AD0DA64BED91}" = Catalyst Control Center Localization German
"{FFC59020-35A5-4856-B0FB-23B95D6C2976}" = CCC Help French
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Audacity_is1" = Audacity 1.2.6
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"ERUNT_is1" = ERUNT 1.1j
"GoToAssist" = GoToAssist 8.0.0.514
"HijackThis" = HijackThis 2.0.2
"InstallShield_{621C02EA-AAFF-4026-A903-165D59529A16}" = Driver Detective
"LAME for Audacity_is1" = LAME v3.98.2 for Audacity
"LastFM_is1" = Last.fm 1.5.4.24567
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Mozilla Firefox (3.0.10)" = Mozilla Firefox (3.0.10)
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 31/05/2009 08:54:24 | Computer Name = Adens-DAW | Source = VSS | ID = 8194
Description =

Error - 31/05/2009 08:59:17 | Computer Name = Adens-DAW | Source = VSS | ID = 8194
Description =

Error - 31/05/2009 09:08:12 | Computer Name = Adens-DAW | Source = VSS | ID = 8194
Description =

Error - 31/05/2009 09:15:01 | Computer Name = Adens-DAW | Source = Application Error | ID = 1000
Description = Faulting application avgtray.exe, version 8.5.0.317, time stamp 0x49df1604,
faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791a7a6, exception
code 0xc0150004, fault offset 0x00009cac, process id 0xfe4, application start time
0x01c9e1f1ccb74f98.

Error - 31/05/2009 09:16:12 | Computer Name = Adens-DAW | Source = WinMgmt | ID = 10
Description =

Error - 31/05/2009 09:58:58 | Computer Name = Adens-DAW | Source = WinMgmt | ID = 10
Description =

Error - 31/05/2009 10:03:54 | Computer Name = Adens-DAW | Source = Application Error | ID = 1000
Description = Faulting application avgtray.exe, version 8.5.0.317, time stamp 0x49df1604,
faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791a7a6, exception
code 0xc0150004, fault offset 0x00009cac, process id 0xc68, application start time
0x01c9e1f89ac320e0.

Error - 31/05/2009 10:09:45 | Computer Name = Adens-DAW | Source = Application Error | ID = 1000
Description = Faulting application setup.exe_CATALYST™ Install Manager, version
3.0.723.0, time stamp 0x49f7ad1d, faulting module ntdll.dll, version 6.0.6001.18000,
time stamp 0x4791a7a6, exception code 0xc0150004, fault offset 0x00009cac, process
id 0x13cc, application start time 0x01c9e1f97325a110.

Error - 31/05/2009 10:10:14 | Computer Name = Adens-DAW | Source = Application Error | ID = 1000
Description = Faulting application setup.exe_CATALYST™ Install Manager, version
3.0.723.0, time stamp 0x49f7ad1d, faulting module ntdll.dll, version 6.0.6001.18000,
time stamp 0x4791a7a6, exception code 0xc0150004, fault offset 0x00009cac, process
id 0x1204, application start time 0x01c9e1f984903f50.

Error - 31/05/2009 11:16:49 | Computer Name = Adens-DAW | Source = Application Error | ID = 1000
Description = Faulting application setup.exe_CATALYST™ Install Manager, version
3.0.723.0, time stamp 0x49f7ad1d, faulting module ntdll.dll, version 6.0.6001.18000,
time stamp 0x4791a7a6, exception code 0xc0150004, fault offset 0x00009cac, process
id 0xf5c, application start time 0x01c9e202d1b53700.

[ System Events ]
Error - 02/06/2009 07:50:51 | Computer Name = Adens-DAW | Source = Service Control Manager | ID = 7001
Description =

Error - 02/06/2009 07:50:51 | Computer Name = Adens-DAW | Source = Service Control Manager | ID = 7026
Description =

Error - 02/06/2009 08:23:34 | Computer Name = Adens-DAW | Source = HTTP | ID = 15016
Description =

Error - 02/06/2009 08:25:50 | Computer Name = Adens-DAW | Source = DCOM | ID = 10005
Description =

Error - 02/06/2009 08:25:57 | Computer Name = Adens-DAW | Source = DCOM | ID = 10005
Description =

Error - 02/06/2009 08:26:00 | Computer Name = Adens-DAW | Source = DCOM | ID = 10005
Description =

Error - 02/06/2009 08:26:00 | Computer Name = Adens-DAW | Source = DCOM | ID = 10005
Description =

Error - 02/06/2009 08:27:02 | Computer Name = Adens-DAW | Source = Service Control Manager | ID = 7001
Description =

Error - 02/06/2009 08:27:02 | Computer Name = Adens-DAW | Source = Service Control Manager | ID = 7026
Description =

Error - 02/06/2009 08:28:31 | Computer Name = Adens-DAW | Source = DCOM | ID = 10005
Description =


< End of report >










These scans had to be made in Safe Mode. I have explained other problems i have had here:
Other Topic

I also did an MBAM scan but no infections were found.

After reading on the internet about similar error issue's, apparently formatting my hard drive might work. But this would uninstall everything, including the operating system, correct? I do have still have the disc with the Operating System, and another titled "Drivers and Utilities" though, in case i need to resort to this.

Also, i realised after posting these logs that this may count as "bumping" my topic. I apolagise, i just wasn't sure if they would fit in the same first post.

Edited by Aden, 02 June 2009 - 10:12 AM.

  • 0

#3
Aden

Aden

    Member

  • Topic Starter
  • Member
  • PipPip
  • 29 posts
I have fixed the problems i had, and am using Avast! in stead of AVG, and i am no longer getting the (0xc0150004) error message. I have also run multiple scans with different online/offline tools and appear to have no infections.

This topic can be deleted now :)

Sorry if i have wasted anybody's time :)

Edited by Aden, 02 June 2009 - 10:13 AM.

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP