OTL logfile created on: 11/12/2010 6:33:41 PM - Run 3 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Internet\Download Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 1,023.00 Mb Total Physical Memory | 229.00 Mb Available Physical Memory | 22.00% Memory free 4.00 Gb Paging File | 3.00 Gb Available in Paging File | 76.00% Paging File free Paging file location(s): C:\pagefile.sys 0 0F:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 111.72 Gb Total Space | 62.29 Gb Free Space | 55.76% Space Free | Partition Type: NTFS Drive F: | 114.49 Gb Total Space | 7.22 Gb Free Space | 6.30% Space Free | Partition Type: NTFS Computer Name: MARK | User Name: MF | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2010/11/06 10:43:41 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Internet\Download\OTL.exe PRC - [2010/10/28 05:05:16 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe PRC - [2010/10/28 05:05:14 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2010/09/22 11:00:58 | 001,793,568 | ---- | M] (Soluto) -- C:\Program Files\Soluto\Soluto.exe PRC - [2010/09/22 11:00:58 | 000,330,784 | ---- | M] (Soluto) -- C:\Program Files\Soluto\SolutoService.exe PRC - [2010/09/21 10:33:36 | 000,083,440 | ---- | M] (Google) -- C:\Documents and Settings\MF\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe PRC - [2010/09/20 18:25:06 | 003,117,200 | R--- | M] (Carbonite, Inc. (www.carbonite.com)) -- C:\Program Files\Carbonite\Carbonite Backup\CarboniteService.exe PRC - [2010/07/20 20:24:38 | 002,434,568 | ---- | M] (Check Point Software Technologies LTD) -- C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe PRC - [2010/07/20 20:22:56 | 001,038,848 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe PRC - [2010/06/15 06:09:48 | 000,493,032 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe PRC - [2010/06/15 06:09:44 | 000,730,600 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\ForceField.exe PRC - [2010/06/10 20:03:08 | 000,144,176 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe PRC - [2010/05/11 10:51:52 | 001,287,120 | ---- | M] (PC Tools) -- F:\Program Files\Spyware Doctor\pctsTray.exe PRC - [2010/03/15 10:50:36 | 001,142,224 | ---- | M] (PC Tools) -- F:\Program Files\Spyware Doctor\pctsSvc.exe PRC - [2010/03/11 10:09:22 | 000,366,840 | ---- | M] (PC Tools) -- F:\Program Files\Spyware Doctor\pctsAuxs.exe PRC - [2010/02/26 00:10:20 | 021,979,992 | ---- | M] () -- C:\Documents and Settings\MF\Application Data\Dropbox\bin\Dropbox.exe PRC - [2010/01/22 07:56:24 | 000,112,592 | ---- | M] (Threat Expert Ltd.) -- F:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe PRC - [2009/09/10 10:15:42 | 000,870,672 | ---- | M] (SonicWALL, Inc.) -- C:\Program Files\Zone Labs\ZoneAlarm\MailFrontier\mantispm.exe PRC - [2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008/01/23 18:36:25 | 001,251,720 | ---- | M] () -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe PRC - [2005/12/12 14:02:24 | 000,176,193 | ---- | M] (American Power Conversion Corporation) -- C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2010/11/06 10:43:41 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Internet\Download\OTL.exe MOD - [2010/08/23 11:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll MOD - [2010/06/15 06:09:52 | 000,640,488 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll MOD - [2010/06/15 06:09:44 | 000,562,664 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\AK\icsak.dll MOD - [2010/02/26 06:16:18 | 000,154,160 | ---- | M] (PC Tools) -- F:\Program Files\Spyware Doctor\smum32.dll MOD - [2009/10/30 09:18:16 | 000,147,024 | ---- | M] (PC Tools) -- F:\Program Files\Spyware Doctor\PCTGMhk.dll MOD - [2009/09/10 10:15:48 | 000,013,072 | ---- | M] () -- C:\Program Files\Zone Labs\ZoneAlarm\MailFrontier\MlfHook.dll MOD - [2009/07/12 01:12:06 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll MOD - [2009/07/12 01:09:20 | 000,554,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc) SRV - File not found [On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV - File not found [Auto | Stopped] -- C:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service) SRV - [2010/10/27 17:21:08 | 000,029,504 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\uxtuneup.dll -- (UxTuneUp) SRV - [2010/10/12 10:08:06 | 000,724,152 | ---- | M] (iolo technologies, LLC) [On_Demand | Stopped] -- C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe -- (ioloSystemService) SRV - [2010/10/12 10:08:06 | 000,724,152 | ---- | M] (iolo technologies, LLC) [On_Demand | Stopped] -- C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe -- (ioloFileInfoList) SRV - [2010/09/22 11:00:58 | 000,330,784 | ---- | M] (Soluto) [Auto | Running] -- C:\Program Files\Soluto\SolutoService.exe -- (SolutoService) SRV - [2010/09/20 18:25:06 | 003,117,200 | R--- | M] (Carbonite, Inc. (www.carbonite.com)) [Auto | Running] -- C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe -- (CarboniteService) SRV - [2010/07/20 20:24:38 | 002,434,568 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] -- C:\WINDOWS\System32\ZoneLabs\vsmon.exe -- (vsmon) SRV - [2010/06/25 12:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental) SRV - [2010/06/15 06:09:48 | 000,493,032 | ---- | M] (Check Point Software Technologies) [Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe -- (IswSvc) SRV - [2010/06/10 20:03:08 | 000,144,176 | ---- | M] (Apple Inc.) [On_Demand | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device) SRV - [2010/05/17 12:11:40 | 000,229,376 | ---- | M] (Puran Software) [Disabled | Stopped] -- C:\WINDOWS\System32\PuranDefragS.exe -- (PuranDefrag) SRV - [2010/03/15 10:50:36 | 001,142,224 | ---- | M] (PC Tools) [Auto | Running] -- F:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService) SRV - [2010/03/11 10:09:22 | 000,366,840 | ---- | M] (PC Tools) [Auto | Running] -- F:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService) SRV - [2010/01/22 07:56:24 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto | Running] -- F:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service) SRV - [2009/11/13 06:31:14 | 000,092,008 | ---- | M] (TomTom) [On_Demand | Stopped] -- F:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService) SRV - [2009/09/25 22:32:18 | 000,189,736 | ---- | M] (Seagate Technology LLC) [On_Demand | Stopped] -- F:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe -- (FreeAgentGoNext Service) SRV - [2009/09/23 15:37:30 | 000,051,168 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R) SRV - [2009/08/24 20:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) [On_Demand | Stopped] -- f:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe -- (DfSdkS) SRV - [2008/05/21 17:25:30 | 000,012,800 | ---- | M] (Pure Networks, Inc.) [On_Demand | Stopped] -- C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe -- (nmraapache) SRV - [2008/05/16 06:11:44 | 000,648,504 | ---- | M] (Pure Networks, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe -- (nmservice) SRV - [2008/01/23 18:36:25 | 001,251,720 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC) SRV - [2007/08/23 15:35:30 | 000,243,064 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler) SRV - [2007/08/23 15:35:22 | 003,192,184 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate) SRV - [2007/06/05 12:20:32 | 000,177,704 | ---- | M] () [Disabled | Stopped] -- C:\WINDOWS\SYSTEM32\PSIService.exe -- (ProtexisLicensing) SRV - [2007/03/12 17:30:14 | 000,517,768 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifSvc.exe -- (LiveUpdate Notice Service) SRV - [2006/08/30 09:49:04 | 000,122,880 | ---- | M] (EMC Corporation) [On_Demand | Stopped] -- C:\Program Files\Retrospect\Retrospect 7.5\rthlpsvc.exe -- (Retrospect Helper) SRV - [2005/12/12 14:02:24 | 000,176,193 | ---- | M] (American Power Conversion Corporation) [Auto | Running] -- C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe -- (APC UPS Service) SRV - [2004/11/22 16:04:14 | 001,273,856 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe -- (Norton Ghost) SRV - [2002/05/03 12:29:42 | 001,118,208 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\NMSSvc.Exe -- (NMSSvc) Intel(R) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\WINDRVR.SYS -- (WinDriver) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\SymIM.sys -- (SymIMMP) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\SymIM.sys -- (SymIM) DRV - File not found [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\ZoneLabs\srescan.sys -- (srescan) DRV - File not found [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\mtk.sys -- (MTK) DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\wATV03nt.sys -- (iAimTV2) DRV - [2010/09/22 10:52:54 | 000,183,240 | ---- | M] (Soluto LTD.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\PCGenFAM.sys -- (PCGenFAM) DRV - [2010/06/25 12:07:14 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\npf.sys -- (NPF) DRV - [2010/06/15 06:09:40 | 000,035,568 | ---- | M] (Check Point Software Technologies) [Kernel | On_Demand | Running] -- C:\Program Files\CheckPoint\ZAForceField\AK\icsak.sys -- (icsak) DRV - [2010/06/15 06:09:40 | 000,026,352 | ---- | M] (Check Point Software Technologies) [Kernel | Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL) DRV - [2010/06/09 18:16:12 | 000,528,128 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\vsdatant.sys -- (vsdatant) DRV - [2010/03/29 09:06:14 | 000,218,592 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\PCTCore.sys -- (PCTCore) DRV - [2010/03/09 23:00:06 | 000,006,656 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\iPodDrv.sys -- (iPodDrv) DRV - [2009/10/12 17:15:30 | 000,317,072 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\klif.sys -- (TSP) DRV - [2009/10/12 17:15:30 | 000,317,072 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\klif.sys -- (KLIF) DRV - [2009/10/12 17:15:26 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\kl1.sys -- (kl1) DRV - [2009/07/17 07:23:00 | 000,476,544 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\Dr71WU.sys -- (RT73) DRV - [2008/05/16 06:10:32 | 000,023,992 | ---- | M] (Pure Networks, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\pnarp.sys -- (pnarp) DRV - [2008/05/16 06:10:30 | 000,025,272 | ---- | M] (Pure Networks, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\purendis.sys -- (purendis) DRV - [2008/04/13 13:46:20 | 000,048,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\61883.sys -- (61883) DRV - [2008/04/13 13:46:20 | 000,038,912 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\avc.sys -- (Avc) DRV - [2008/04/13 13:46:09 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\msdv.sys -- (MSDV) DRV - [2008/04/13 13:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\gameenum.sys -- (gameenum) DRV - [2008/04/13 13:36:39 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\amdagp.sys -- (amdagp) DRV - [2008/04/13 13:36:39 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\sisagp.sys -- (sisagp) DRV - [2008/04/07 18:04:34 | 000,008,413 | ---- | M] (RealNetworks, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\mcstrm.sys -- (MCSTRM) DRV - [2008/01/18 04:00:00 | 000,385,072 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\eengine\eectrl.sys -- (eeCtrl) DRV - [2008/01/04 20:34:36 | 000,023,920 | ---- | M] (Webroot Software Inc (www.webroot.com)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\sskbfd.sys -- (SSKBFD) DRV - [2006/07/16 15:38:27 | 000,241,280 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\cdudf_xp.sys -- (cdudf_xp) DRV - [2006/07/16 15:38:27 | 000,206,464 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\udfreadr_xp.sys -- (UdfReadr_xp) DRV - [2006/07/16 15:38:27 | 000,144,250 | ---- | M] (Roxio) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\pwd_2K.sys -- (pwd_2k) DRV - [2006/07/16 15:38:27 | 000,030,662 | ---- | M] (Roxio) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\Mmc_2k.sys -- (mmc_2K) DRV - [2006/07/16 15:38:27 | 000,025,930 | ---- | M] (Roxio) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\Dvd_2k.sys -- (dvd_2K) DRV - [2006/04/13 21:44:57 | 000,010,344 | ---- | M] (Symantec Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\symlcbrd.sys -- (symlcbrd) DRV - [2006/03/22 10:37:50 | 000,017,408 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wdfwhid.sys -- (WD_FireWire_HID) DRV - [2006/01/24 11:38:40 | 000,078,720 | R--- | M] (Netgear Inc. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\FA311XP.SYS -- (RTL8023xp) DRV - [2005/11/03 02:00:00 | 000,002,560 | ---- | M] (Sonic Solutions) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdralw2k.sys -- (Cdralw2k) DRV - [2005/11/03 02:00:00 | 000,002,432 | ---- | M] (Sonic Solutions) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\cdr4_xp.sys -- (Cdr4_xp) DRV - [2005/07/01 09:15:06 | 000,025,344 | R--- | M] (Iomega) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\IABFilt.sys -- (IABFilt) DRV - [2005/01/27 03:22:00 | 000,088,016 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\drvmcdb.sys -- (drvmcdb) DRV - [2004/11/22 16:08:54 | 000,046,800 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\PQIMount.sys -- (PQIMount) DRV - [2004/11/22 15:51:58 | 000,138,801 | ---- | M] (StorageCraft) [File_System | Boot | Running] -- C:\WINDOWS\System32\drivers\PQV2i.sys -- (PQV2i) DRV - [2004/08/03 21:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C) DRV - [2004/08/03 21:29:56 | 001,897,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\nv4_mini.sys -- (nv) DRV - [2004/08/03 21:29:50 | 000,019,455 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wvchntxx.sys -- (iAimFP4) DRV - [2004/08/03 21:29:48 | 000,012,063 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wsiintxx.sys -- (iAimFP3) DRV - [2004/08/03 21:29:46 | 000,023,615 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wch7xxnt.sys -- (iAimTV4) DRV - [2004/08/03 21:29:44 | 000,033,599 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\watv04nt.sys -- (iAimTV3) DRV - [2004/08/03 21:29:44 | 000,019,551 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\watv02nt.sys -- (iAimTV1) DRV - [2004/08/03 21:29:42 | 000,029,311 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\watv01nt.sys -- (iAimTV0) DRV - [2004/08/03 21:29:38 | 000,161,020 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\i81xnt5.sys -- (i81x) DRV - [2004/08/03 21:29:38 | 000,012,415 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wadv01nt.sys -- (iAimFP0) DRV - [2004/08/03 21:29:38 | 000,012,127 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wadv02nt.sys -- (iAimFP1) DRV - [2004/08/03 21:29:38 | 000,011,775 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\wadv05nt.sys -- (iAimFP2) DRV - [2004/03/05 16:09:02 | 000,003,904 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\CheckIt\Diagnostics\MAPMEM.SYS -- (MAPMEM) DRV - [2004/03/05 16:09:00 | 000,003,744 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\CheckIt\Diagnostics\BCMNTIO.SYS -- (BCMNTIO) DRV - [2003/12/12 09:50:04 | 000,647,680 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\ati2mtag.sys -- (ati2mtag) DRV - [2003/04/14 16:00:40 | 000,032,512 | ---- | M] (Cypress Semiconductor) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\MXOFX.SYS -- (MXOFX) USB Storage Adapter FX (MXO) DRV - [2003/03/19 17:08:38 | 000,016,509 | ---- | M] (Palm, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\PalmUSBD.sys -- (PalmUSBD) DRV - [2002/12/14 11:42:16 | 000,008,552 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\asctrm.sys -- (ASCTRM) DRV - [2002/11/08 09:50:00 | 000,070,238 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\LMouFlt2.Sys -- (LMouFlt2) DRV - [2002/11/08 09:50:00 | 000,023,838 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\LHidFlt2.Sys -- (LHidFlt2) DRV - [2002/10/11 10:29:00 | 000,207,936 | ---- | M] (Dell Computer Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\AtlsVid.sys -- (EMATCORE) DRV - [2002/10/11 10:29:00 | 000,025,600 | ---- | M] (Dell Computer Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\AtlsAud.sys -- (AtlsAud) DRV - [2002/09/27 19:56:50 | 000,009,856 | R--- | M] (Padus, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\pfc.sys -- (pfc) DRV - [2002/08/30 17:29:02 | 001,293,440 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\P16X.sys -- (P16X) Creative SB Live! Series (WDM) DRV - [2002/08/20 16:28:54 | 000,170,499 | ---- | M] (Conexant Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\HSFHWBS2.sys -- (HSFHWBS2) DRV - [2002/08/20 16:28:18 | 001,175,536 | ---- | M] (Conexant Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\HSF_DP.sys -- (HSF_DP) DRV - [2002/08/20 16:22:06 | 000,604,240 | ---- | M] (Conexant Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\HSF_CNXT.sys -- (winachsf) DRV - [2002/08/14 09:00:00 | 000,004,112 | ---- | M] (Eisenworld, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\AloPar.sys -- (AloPar) DRV - [2002/07/19 11:22:08 | 000,017,153 | ---- | M] (Dell Computer Corporation) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\omci.sys -- (omci) DRV - [2002/05/03 12:30:08 | 000,009,868 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\NMSCFG.SYS -- (NMSCFG) DRV - [2001/08/17 15:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\sparrow.sys -- (Sparrow) DRV - [2001/08/17 15:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\sym_u3.sys -- (sym_u3) DRV - [2001/08/17 15:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\sym_hi.sys -- (sym_hi) DRV - [2001/08/17 15:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\symc8xx.sys -- (symc8xx) DRV - [2001/08/17 15:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\symc810.sys -- (symc810) DRV - [2001/08/17 14:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\ultra.sys -- (ultra) DRV - [2001/08/17 14:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\ql12160.sys -- (ql12160) DRV - [2001/08/17 14:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\ql1080.sys -- (ql1080) DRV - [2001/08/17 14:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\ql1280.sys -- (ql1280) DRV - [2001/08/17 14:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\dac2w2k.sys -- (dac2w2k) DRV - [2001/08/17 14:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\mraid35x.sys -- (mraid35x) DRV - [2001/08/17 14:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\asc.sys -- (asc) DRV - [2001/08/17 14:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\asc3550.sys -- (asc3550) DRV - [2001/08/17 14:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\aliide.sys -- (AliIde) DRV - [2001/08/17 14:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\DRIVERS\cmdide.sys -- (CmdIde) DRV - [2001/08/17 13:11:06 | 000,066,591 | ---- | M] (3Com Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\EL90XBC5.SYS -- (EL90XBC) DRV - [1999/12/17 02:00:00 | 000,006,752 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\SYSTEM32\PFMODNT.SYS -- (PfModNT) DRV - [1999/09/10 07:06:00 | 000,025,244 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\aspi32.sys -- (Aspi32) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "" FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.defaulturl: "http://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=" FF - prefs.js..browser.search.order.1: "" FF - prefs.js..browser.search.selectedEngine: "Wikipedia (en)" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://cm.my.yahoo.com/|http://us.mg2.mail.yahoo.com/dc/launch?action=folderview&YY=529868507&YY=98826&box=Inbox&YN=1|https://mail.google.com/mail/#inbox|http://www.drudgereport.com/|http://my.ebay.com/ws/eBayISAPI.dll?MyeBay|http://notepad.mail.yahoo.com/" FF - prefs.js..extensions.enabledItems: {22119944-ED35-4ab1-910B-E619EA06A115}:6.10.1 FF - prefs.js..extensions.enabledItems: {6e84150a-d526-41f1-a480-a67d3fed910d}:1.4.5.1 FF - prefs.js..extensions.enabledItems: {53A03D43-5363-4669-8190-99061B2DEBA5}:1.3.7 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=mcafee&p=" FF - user.js..browser.search.openintab: false FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2008/11/14 10:47:50 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker [2010/11/12 12:42:41 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{22119944-ED35-4ab1-910B-E619EA06A115}: C:\Program Files\Siber Systems\AI RoboForm\Firefox [2007/04/06 11:33:00 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/28 05:05:19 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/10/28 05:05:19 | 000,000,000 | ---D | M] [2009/12/12 16:05:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\MF\Application Data\Mozilla\Extensions [2009/12/12 16:05:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\MF\Application Data\Mozilla\Extensions\home2@tomtom.com [2010/11/12 08:46:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions [2010/08/28 08:02:46 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010/08/28 08:02:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}-trash [2010/09/05 08:26:18 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2010/03/29 05:07:49 | 000,000,000 | ---D | M] (ScrapBook) -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions\{53A03D43-5363-4669-8190-99061B2DEBA5} [2007/10/23 18:30:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions\{6aec4bf7-c16a-4e5c-a65a-114a57157969} [2010/01/26 06:11:34 | 000,000,000 | ---D | M] (IE View) -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions\{6e84150a-d526-41f1-a480-a67d3fed910d} [2010/01/26 06:11:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions\{6e84150a-d526-41f1-a480-a67d3fed910d}-trash [2009/06/04 05:23:15 | 000,000,000 | ---D | M] (IE Tab) -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9} [2009/10/30 05:12:05 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2008/09/11 05:15:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\extensions\notebook@google.com [2008/06/20 21:43:42 | 000,001,712 | ---- | M] () -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\searchplugins\ask.xml [2008/06/20 21:43:41 | 000,001,712 | ---- | M] () -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\searchplugins\jeeves.xml [2007/03/10 11:39:21 | 000,002,386 | ---- | M] () -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\searchplugins\siteadvisor.xml [2008/06/20 21:43:44 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\searchplugins\webster.xml [2008/06/20 21:43:46 | 000,001,108 | ---- | M] () -- C:\Documents and Settings\MF\Application Data\Mozilla\Firefox\Profiles\dgmgepia.default\searchplugins\wikipedia.xml [2010/11/12 08:46:19 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions [2009/04/02 20:25:01 | 000,002,236 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\askcom.xml [2010/05/31 13:36:43 | 000,002,024 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\McSiteAdvisor.xml O1 HOSTS File: ([2010/11/07 13:42:40 | 000,000,098 | ---- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll (TechSmith Corporation) O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - F:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O2 - BHO: (AtBHOObj Class) - {3392BD0A-A851-4AA4-86E0-4651006F9EA8} - C:\Program Files\Common Files\Atomica Shared\agtbho.dll (Atomica Corporation) O2 - BHO: (PodcastBHO Class) - {65134FDF-F8A5-4B3D-91D9-CDF273CFD578} - C:\Program Files\Common Files\doubleTwist\IEPodcastPlugin.dll (doubleTwist Corporation) O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.) O2 - BHO: (ZoneAlarm Toolbar Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Program Files\Google\GoogleToolbar2.dll (Google Inc.) O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar2.dll (Google Inc.) O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - F:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O3 - HKLM\..\Toolbar: (&RoboForm) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.) O3 - HKLM\..\Toolbar: (SnagIt) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll (TechSmith Corporation) O3 - HKLM\..\Toolbar: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O3 - HKCU\..\Toolbar\ShellBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar2.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar2.dll (Google Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - F:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (&RoboForm) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies) O4 - HKLM..\Run: [ISTray] F:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools) O4 - HKLM..\Run: [ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD) O4 - Startup: C:\Documents and Settings\MF\Start Menu\Programs\Startup\Dropbox.lnk = C:\Documents and Settings\MF\Application Data\Dropbox\bin\Dropbox.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = _ [binary data] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O8 - Extra context menu item: Add to EverNote - C:\Program Files\EverNote\EverNote\enbar.dll (EverNote Corporation) O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Customize Menu - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html () O8 - Extra context menu item: Fill Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html () O8 - Extra context menu item: RoboForm Toolbar - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html () O8 - Extra context menu item: Save Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html () O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - F:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - F:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html () O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html () O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html () O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html () O9 - Extra Button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html () O9 - Extra 'Tools' menuitem : RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html () O9 - Extra Button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O15 - HKCU\..Trusted Domains: ([]msn in My Computer) O15 - HKCU\..Trusted Domains: chase.com ([]https in Trusted sites) O15 - HKCU\..Trusted Domains: localhost ([]* in Local intranet) O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} http://support.dell.com/systemprofiler/SysPro.CAB (SysProWmi Class) O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/templates/ieawsdc.cab (Microsoft Office Template and Media Control) O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab (LSSupCtl Class) O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab (Symantec AntiVirus scanner) O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab (YInstStarter Class) O16 - DPF: {34F12AFD-E9B5-492A-85D2-40FA4535BE83} http://www.symantec.com/techsupp/activedata/nprdtinf.cab (AxProdInfoCtl Class) O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} http://office.microsoft.com/officeupdate/content/opuc.cab (Office Update Installation Engine) O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} http://upload.facebook.com/controls/FacebookPhotoUploader.cab (Facebook Photo Uploader Control) O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab (Symantec RuFSI Utility Class) O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1279477281796 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} http://ftp.us.dell.com/fixes/PROFILER.CAB (DmiReader Class) O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} http://toad8.inkfrog.com/super/images/ImageUploader3.cab (Aurigma Image Uploader 3.0 Control) O16 - DPF: {A8658086-E6AC-4957-BC8E-8D54A7E8A790} http://www.microsoft.com/security/controls/GDI/0/GDIChk.CAB (GDIChk Object) O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab (Symantec RuFSI Registry Information Class) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} http://pccheckup.dellfix.com/rel/36/install/gtdownde.cab (Dell PC Checkup Installer Control) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 208.67.222.222 208.67.220.220 O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Pure Networks, Inc.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Program Files\Soluto\soluto.exe /userinit) - C:\Program Files\Soluto\soluto.exe (Soluto) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll () O24 - Desktop WallPaper: C:\WINDOWS\Santa Fe Stucco.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Santa Fe Stucco.bmp O27 - HKLM IFEO\gbtray.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software) O27 - HKLM IFEO\googleearth.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software) O27 - HKLM IFEO\pqibrowser.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software) O27 - HKLM IFEO\softwareupdate.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software) O27 - HKLM IFEO\tomtomhome.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software) O27 - HKLM IFEO\unins000.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software) O27 - HKLM IFEO\uninstall tomtom home.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software) O27 - HKLM IFEO\uninstall.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software) O27 - HKLM IFEO\v2iconsole_.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software) O27 - HKLM IFEO\wo6.exe: Debugger - "C:\Program Files\TuneUp Utilities 2011\TUAutoReactivator32.exe" (TuneUp Software) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2002/09/03 14:36:02 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.01 -- [ NTFS ] O32 - AutoRun File - [2002/12/22 21:01:04 | 000,000,430 | ---- | M] () - C:\AUTOEXEC.02 -- [ NTFS ] O32 - AutoRun File - [2002/12/22 21:01:03 | 000,000,430 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/11/12 09:30:22 | 000,221,184 | ---- | C] (Puran Software) -- C:\WINDOWS\System32\PuranDC.exe [2010/11/12 09:30:22 | 000,212,992 | ---- | C] (Puran Software) -- C:\WINDOWS\System32\PuranDefrag.dll [2010/11/12 09:30:21 | 000,229,376 | ---- | C] (Puran Software) -- C:\WINDOWS\System32\PuranDefragS.exe [2010/11/12 09:30:21 | 000,107,008 | ---- | C] (Puran Software) -- C:\WINDOWS\System32\PuranDefragBT.exe [2010/11/12 09:30:20 | 001,110,016 | ---- | C] (Puran Software) -- C:\WINDOWS\System32\PuranFD.exe [2010/11/07 13:42:17 | 000,000,000 | ---D | C] -- C:\_OTL [2010/10/29 16:43:54 | 000,031,552 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TURegOpt.exe [2010/10/29 16:43:40 | 000,029,504 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll [2010/10/29 16:40:12 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2011 [2010/10/29 15:55:29 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\Application Data\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2010/10/25 19:03:36 | 000,000,000 | ---D | C] -- C:\Program Files\Carbonite [2010/10/25 19:03:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Carbonite [2010/10/23 10:29:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\MF\My Documents\DVDVideoSoft [2010/10/23 10:28:07 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft [2002/12/14 11:27:47 | 000,065,536 | ---- | C] ( ) -- C:\WINDOWS\System32\A3d.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/11/12 18:42:07 | 000,004,212 | -H-- | M] () -- C:\WINDOWS\System32\zllictbl.dat [2010/11/12 18:27:47 | 000,000,144 | ---- | M] () -- C:\WINDOWS\System32\pdfl.dat [2010/11/12 18:22:38 | 000,000,236 | ---- | M] () -- C:\WINDOWS\tasks\OGALogon.job [2010/11/12 18:22:00 | 000,002,048 | --S- | M] () -- C:\WINDOWS\BOOTSTAT.DAT [2010/11/12 18:21:56 | 1072,742,400 | -HS- | M] () -- C:\hiberfil.sys [2010/11/12 12:26:24 | 000,001,170 | ---- | M] () -- C:\WINDOWS\System32\WPA.DBL [2010/11/12 09:30:23 | 000,000,604 | ---- | M] () -- C:\Documents and Settings\MF\Desktop\Puran Defrag.lnk [2010/11/07 13:42:40 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\ETC\Hosts [2010/11/07 11:53:00 | 000,003,546 | -H-- | M] () -- C:\Documents and Settings\MF\My Documents\Picasa.ini [2010/11/07 07:56:17 | 000,441,124 | ---- | M] () -- C:\WINDOWS\System32\PERFH009.DAT [2010/11/07 07:56:16 | 000,071,060 | ---- | M] () -- C:\WINDOWS\System32\PERFC009.DAT [2010/11/06 14:08:49 | 000,000,036 | ---- | M] () -- C:\WINDOWS\iltwain.ini [2010/10/31 13:29:09 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\MF\My Documents\Care for Frances Newson by Irma Aduashvili.doc october 2010.doc [2010/10/31 13:22:49 | 000,002,483 | ---- | M] () -- C:\Documents and Settings\MF\Desktop\Microsoft Word.lnk [2010/10/31 13:19:13 | 000,019,968 | ---- | M] () -- C:\Documents and Settings\MF\My Documents\Care for Frances Newson by Nani Mamaiashvili.doc [2010/10/31 13:19:13 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\MF\My Documents\~$re for Frances Newson by Nani Mamaiashvili.doc [2010/10/30 09:48:23 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2010/10/30 09:47:14 | 000,000,966 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2071613338-153420132-3200713473-1005UA.job [2010/10/30 09:47:14 | 000,000,914 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-2071613338-153420132-3200713473-1005Core.job [2010/10/30 09:28:10 | 000,000,122 | ---- | M] () -- C:\WINDOWS\WININIT.INI [2010/10/29 16:43:27 | 000,001,800 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\TuneUp Utilities 2011.lnk [2010/10/29 16:43:27 | 000,001,800 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\TuneUp 1-Click Maintenance.lnk [2010/10/27 17:25:18 | 000,031,552 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TURegOpt.exe [2010/10/27 17:21:08 | 000,029,504 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll [2010/10/25 19:05:30 | 000,001,924 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Carbonite InfoCenter.lnk [2010/10/25 10:19:17 | 000,022,528 | ---- | M] () -- C:\Documents and Settings\MF\My Documents\Trick or Treat.doc story.doc [2010/10/25 10:17:02 | 000,022,528 | ---- | M] () -- C:\Documents and Settings\MF\My Documents\The Apple.doc story.doc [2010/10/24 16:35:01 | 000,022,528 | ---- | M] () -- C:\Documents and Settings\MF\My Documents\The Apple.doc [2010/10/24 07:56:16 | 000,002,292 | ---- | M] () -- C:\Documents and Settings\MF\Desktop\Google Chrome.lnk [2010/10/24 07:56:16 | 000,002,270 | ---- | M] () -- C:\Documents and Settings\MF\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2010/10/23 12:18:37 | 000,000,813 | ---- | M] () -- C:\Documents and Settings\MF\Desktop\System Mechanic.lnk [2010/10/23 10:29:09 | 000,000,945 | ---- | M] () -- C:\Documents and Settings\MF\Desktop\DVDVideoSoft Free Studio.lnk [2010/10/23 09:38:02 | 000,310,784 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/10/23 09:07:39 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/11/12 09:30:22 | 000,000,604 | ---- | C] () -- C:\Documents and Settings\MF\Desktop\Puran Defrag.lnk [2010/11/06 14:12:09 | 000,176,816 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat [2010/10/31 13:29:09 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\MF\My Documents\Care for Frances Newson by Irma Aduashvili.doc october 2010.doc [2010/10/31 13:19:13 | 000,019,968 | ---- | C] () -- C:\Documents and Settings\MF\My Documents\Care for Frances Newson by Nani Mamaiashvili.doc [2010/10/31 13:19:13 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\MF\My Documents\~$re for Frances Newson by Nani Mamaiashvili.doc [2010/10/29 16:43:27 | 000,001,800 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\TuneUp 1-Click Maintenance.lnk [2010/10/29 16:43:26 | 000,001,800 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\TuneUp Utilities 2011.lnk [2010/10/25 19:05:30 | 000,001,924 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Carbonite InfoCenter.lnk [2010/10/25 10:17:02 | 000,022,528 | ---- | C] () -- C:\Documents and Settings\MF\My Documents\The Apple.doc story.doc [2010/10/25 10:16:28 | 000,022,528 | ---- | C] () -- C:\Documents and Settings\MF\My Documents\Trick or Treat.doc story.doc [2010/10/24 16:35:00 | 000,022,528 | ---- | C] () -- C:\Documents and Settings\MF\My Documents\The Apple.doc [2010/10/23 10:29:09 | 000,000,945 | ---- | C] () -- C:\Documents and Settings\MF\Desktop\DVDVideoSoft Free Studio.lnk [2010/08/23 19:09:33 | 000,000,222 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\Microsoft.SqlServer.Compact.351.32.bc [2010/07/24 12:39:07 | 000,767,928 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll [2010/06/25 12:03:12 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll [2010/02/06 10:07:11 | 000,000,146 | ---- | C] () -- C:\WINDOWS\BRVIDEO.INI [2010/02/06 10:07:11 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brmx2001.ini [2010/02/06 10:05:55 | 000,000,426 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2010/02/06 10:05:40 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\brlmw03a.ini [2010/02/06 10:05:35 | 000,009,853 | ---- | C] () -- C:\WINDOWS\HL-2170W.INI [2010/02/06 09:56:58 | 000,000,277 | ---- | C] () -- C:\WINDOWS\Brownie.ini [2009/08/03 14:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll [2008/12/19 11:32:07 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\MF\Application Data\$_hpcst$.hpc [2008/09/30 17:58:16 | 000,000,269 | ---- | C] () -- C:\WINDOWS\SysMech.INI [2008/09/30 16:22:20 | 000,074,703 | ---- | C] () -- C:\WINDOWS\System32\mfc45.dll [2008/07/20 18:10:01 | 000,000,952 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys [2008/02/22 20:22:15 | 000,000,231 | ---- | C] () -- C:\WINDOWS\multiclip.ini [2007/11/10 22:13:31 | 000,006,553 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LUUnInstall.LiveUpdate [2007/03/10 12:50:39 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini [2006/12/10 19:15:36 | 000,000,122 | ---- | C] () -- C:\WINDOWS\WININIT.INI [2006/12/08 20:17:39 | 000,000,022 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini [2006/12/08 20:12:26 | 000,096,768 | ---- | C] () -- C:\WINDOWS\SlantAdj.dll [2006/12/08 20:12:26 | 000,000,072 | ---- | C] () -- C:\WINDOWS\System32\epDPE.ini [2006/12/08 19:42:06 | 000,000,169 | ---- | C] () -- C:\WINDOWS\EPSON CX6600 Installer.ini [2006/11/01 20:59:34 | 000,684,032 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll [2006/09/03 11:47:03 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini [2006/06/23 16:08:51 | 000,001,836 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache [2005/12/10 16:31:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini [2005/11/15 23:38:00 | 000,647,168 | ---- | C] () -- C:\WINDOWS\System32\pqdvdb.dll [2005/10/21 18:08:51 | 000,684,032 | ---- | C] () -- C:\WINDOWS\libeay32.dll [2005/10/21 18:08:51 | 000,155,648 | ---- | C] () -- C:\WINDOWS\ssleay32.dll [2005/06/20 05:48:47 | 000,000,049 | ---- | C] () -- C:\WINDOWS\VistaEmail.ini [2005/06/11 10:15:00 | 000,000,021 | ---- | C] () -- C:\WINDOWS\PI_setup.ini [2005/06/11 09:56:52 | 000,000,204 | ---- | C] () -- C:\WINDOWS\EPSONCX6400.ini [2005/04/30 20:28:22 | 000,205,312 | R--- | C] () -- C:\WINDOWS\PATCHW32.DLL [2005/04/30 20:26:19 | 000,205,312 | R--- | C] () -- C:\WINDOWS\pw32a.dll [2004/12/23 16:57:06 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2004/11/30 04:10:00 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\besched.dll [2004/11/19 22:01:07 | 000,000,125 | ---- | C] () -- C:\Documents and Settings\MF\Local Settings\Application Data\fusioncache.dat [2004/06/24 18:40:53 | 000,000,022 | ---- | C] () -- C:\WINDOWS\kodakpcd.MF.ini [2004/04/25 19:53:31 | 000,000,220 | -HS- | C] () -- C:\WINDOWS\dwin.sys [2004/04/15 19:00:00 | 000,000,054 | ---- | C] () -- C:\WINDOWS\System32\EAL32.INI [2004/03/27 13:18:22 | 000,250,408 | ---- | C] () -- C:\WINDOWS\System32\expat.dll [2003/12/12 09:42:14 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.dll [2003/12/11 18:50:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\QuickInstall.INI [2003/12/03 21:55:05 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\stdsoap2.dll [2003/10/02 01:00:00 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lockout.dll [2003/10/02 01:00:00 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\lockres.dll [2003/09/28 16:57:45 | 000,000,187 | ---- | C] () -- C:\WINDOWS\winres.ini [2003/09/26 18:22:16 | 000,000,767 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2003/09/05 11:22:52 | 000,000,036 | ---- | C] () -- C:\WINDOWS\iltwain.ini [2003/09/05 11:22:51 | 000,000,056 | ---- | C] () -- C:\WINDOWS\Addrfixr.ini [2003/09/05 11:20:15 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\DYMOCFG.DLL [2003/06/24 20:52:18 | 000,000,422 | ---- | C] () -- C:\WINDOWS\cdPlayer.ini [2003/05/31 11:41:40 | 000,000,049 | ---- | C] () -- C:\WINDOWS\accgnat.ini [2003/04/27 17:25:24 | 000,000,024 | ---- | C] () -- C:\WINDOWS\ClipTrakker.INI [2003/04/24 20:22:28 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI [2003/04/24 19:47:25 | 000,000,171 | ---- | C] () -- C:\WINDOWS\EPSON CX5200 Installer.ini [2003/03/01 12:15:17 | 000,345,088 | ---- | C] () -- C:\WINDOWS\System32\ShrLk21.dll [2003/02/09 11:58:31 | 000,069,120 | ---- | C] () -- C:\Documents and Settings\MF\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2003/01/12 17:32:29 | 000,000,244 | ---- | C] () -- C:\WINDOWS\qwimp.ini [2003/01/12 17:31:03 | 000,000,182 | ---- | C] () -- C:\WINDOWS\QUICKEN.INI [2002/12/30 22:33:55 | 000,000,046 | ---- | C] () -- C:\WINDOWS\alohabob.INI [2002/12/22 18:42:16 | 000,000,002 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\DirectCDUserNameE.txt [2002/12/14 11:45:39 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2002/12/14 11:37:09 | 000,000,720 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2002/12/14 11:28:07 | 000,000,231 | ---- | C] () -- C:\WINDOWS\AC3API.INI [2002/12/14 11:27:47 | 000,039,936 | ---- | C] () -- C:\WINDOWS\System32\P16X.dll [2002/12/14 11:27:47 | 000,006,175 | ---- | C] () -- C:\WINDOWS\MIXDEF.INI [2002/12/14 11:27:47 | 000,005,917 | ---- | C] () -- C:\WINDOWS\SBMIXDEF.INI [2002/12/14 11:27:47 | 000,002,092 | ---- | C] () -- C:\WINDOWS\System32\P16X.ini [2002/12/14 11:27:47 | 000,000,026 | ---- | C] () -- C:\WINDOWS\System32\ctzapxx.ini [2002/12/14 11:27:46 | 000,000,064 | ---- | C] () -- C:\WINDOWS\P16x.ini [2002/12/14 11:27:17 | 000,000,245 | ---- | C] () -- C:\WINDOWS\SBWIN.INI [2002/12/14 11:23:24 | 000,000,883 | ---- | C] () -- C:\WINDOWS\orun32.ini [2002/12/14 10:50:20 | 000,000,449 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2002/09/03 14:35:18 | 000,004,518 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2002/07/02 13:35:16 | 000,101,376 | ---- | C] () -- C:\WINDOWS\System32\Welsof32.dll [2002/02/06 10:04:14 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\NMSInst.dll [2002/01/21 16:17:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\PROInst.dll [2002/01/08 15:57:34 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\Jpeg32.dll [2000/09/08 16:53:50 | 000,073,839 | ---- | C] () -- C:\WINDOWS\System32\KodakOneTouch.dll [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 192 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 < End of report >