OTL logfile created on: 4/30/2011 10:52:02 PM - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\Ecristy\Desktop
Windows Vista Home Basic Edition  (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 70.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 288.04 Gb Total Space | 79.19 Gb Free Space | 27.49% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 4.45 Gb Free Space | 44.46% Space Free | Partition Type: NTFS
Drive G: | 3.73 Gb Total Space | 2.65 Gb Free Space | 71.09% Space Free | Partition Type: FAT32
 
Computer Name: ECRISTY-PC | User Name: Ecristy | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011/04/30 22:42:46 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Ecristy\Desktop\OTL.exe
PRC - [2010/09/07 09:12:02 | 002,838,912 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2008/10/28 23:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2006/11/02 02:45:54 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WerFault.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011/04/30 22:42:46 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Ecristy\Desktop\OTL.exe
MOD - [2006/11/02 02:38:57 | 001,648,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] --  -- (stllssvr)
SRV - [2011/04/24 14:56:40 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/09/20 16:45:58 | 004,767,600 | ---- | M] (Wacom Technology, Corp.) [Auto | Stopped] -- C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe -- (TabletServiceWacom)
SRV - [2010/09/07 09:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/09/07 09:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/09/07 09:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/02/19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/09/27 16:48:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2008/02/15 09:36:06 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/10/11 07:49:46 | 000,076,016 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\DellAutomatedPCTuneUp\brkrsvc.exe -- (DellAMBrokerService)
SRV - [2007/05/25 09:38:46 | 000,112,176 | ---- | M] (SingleClick Systems) [Auto | Stopped] -- C:\Program Files\Dell Network Assistant\hnm_svc.exe -- (hnmsvc)
SRV - [2006/11/02 21:40:12 | 000,174,656 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010/12/20 19:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2010/09/15 12:36:06 | 000,016,240 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2010/09/07 08:52:25 | 000,046,672 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010/09/07 08:52:03 | 000,165,584 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010/09/07 08:47:46 | 000,023,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010/09/07 08:47:30 | 000,050,768 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2010/09/07 08:47:07 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009/09/27 16:12:21 | 009,509,832 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009/09/21 15:29:22 | 000,014,120 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2008/06/19 01:02:47 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2008/01/20 00:07:58 | 000,033,292 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2007/08/23 16:29:10 | 000,005,376 | --S- | M] (Gteko Ltd.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\datunidr.sys -- (datunidr)
DRV - [2007/06/20 23:09:08 | 000,228,224 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel(R)
DRV - [2007/03/11 12:12:00 | 000,256,000 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WUSB54GCx86.sys -- (netr73)
DRV - [2007/02/16 11:12:36 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV - [2007/02/08 06:45:00 | 000,029,184 | ---- | M] (Thesycon GmbH, Germany) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ActionReplayDS.sys -- (ActionReplayDS)
DRV - [2006/12/18 17:01:20 | 000,012,672 | ---- | M] (SingleClick Systems) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\packet.sys -- (Packet)
DRV - [2006/11/02 00:36:43 | 002,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2006/11/02 00:30:52 | 000,467,456 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2006/10/05 14:07:28 | 000,004,736 | ---- | M] (Gteko Ltd.) [Kernel | On_Demand | Stopped] -- C:\Program Files\DellAutomatedPCTuneUp\GTAction\triggers\PTproct.sys -- (PTproct)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client=dell-usuk&channel=us-smb&ibd=2080215
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client=dell-usuk&channel=us-smb&ibd=2080215
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "google.com"
FF - prefs.js..extensions.enabledItems: web@veoh.com:1.4
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: {3d7eb24f-2740-49df-8937-200b1cc08f8a}:1.5.14.2
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 51152
FF - prefs.js..network.proxy.type: 4
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{6E19037A-12E3-4295-8915-ED48BC341614}: C:\Program Files\RelevantKnowledge
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/25 04:00:41 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/03/25 04:00:40 | 000,000,000 | ---D | M]
 
[2011/03/25 04:00:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ecristy\AppData\Roaming\Mozilla\Extensions
[2011/04/14 23:59:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ecristy\AppData\Roaming\Mozilla\Firefox\Profiles\b1avgx15.default\extensions
[2011/03/25 04:10:17 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Ecristy\AppData\Roaming\Mozilla\Firefox\Profiles\b1avgx15.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/03/25 19:47:56 | 000,000,000 | ---D | M] (Flashblock) -- C:\Users\Ecristy\AppData\Roaming\Mozilla\Firefox\Profiles\b1avgx15.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2011/03/25 19:17:13 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Ecristy\AppData\Roaming\Mozilla\Firefox\Profiles\b1avgx15.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011/03/25 04:33:34 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Ecristy\AppData\Roaming\Mozilla\Firefox\Profiles\b1avgx15.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011/03/25 04:00:40 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/03/25 04:35:50 | 000,000,000 | ---D | M] (The Browser Highlighter) -- C:\Program Files\Mozilla Firefox\extensions\browserhighlighter@ebay.com
[2008/10/02 12:58:00 | 000,000,000 | ---D | M] (Veoh Web Player Video Finder) -- C:\PROGRAM FILES\VEOH NETWORKS\VEOHWEBPLAYER\FFVIDEOFINDER
[2008/01/22 23:20:30 | 000,491,520 | ---- | M] (BitComet) -- C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
 
Hosts file not found
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (ATLAS Toolbar) - {3C6301ED-0F78-4AF2-8150-D9C052361A8E} - C:\Program Files\ATLAS V14\ATLIECP.DLL (FUJITSU LIMITED)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -  File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} -  File not found
O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (ATLAS Toolbar) - {3C6301ED-0F78-4AF2-8150-D9C052361A8E} - C:\Program Files\ATLAS V14\ATLIECP.DLL (FUJITSU LIMITED)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} -  File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} -  File not found
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [ISUSScheduler]  File not found
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [MSConfig] C:\Windows\System32\msconfig.exe (Microsoft Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil10n_Plugin.exe (Adobe Systems, Inc.)
O8 - Extra context menu item: &Translate with ATLAS - C:\Program Files\ATLAS V14\atlscript.html ()
O8 - Extra context menu item: ATLAS Translation &Editor - C:\Program Files\ATLAS V14\AtlscriptEdit.html ()
O9 - Extra Button: ATLAS Translation - {B7707A72-4355-11D4-82BD-00000EBBEF8D} - C:\Program Files\ATLAS V14\atlscript.html ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Ecristy\AppData\Roaming\ACD Systems\ACDSee\ACD Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Users\Ecristy\AppData\Roaming\ACD Systems\ACDSee\ACD Wallpaper.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 14:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{0361f604-e32e-11dc-8407-001d09847d6b}\Shell - "" = AutoRun
O33 - MountPoints2\{0361f604-e32e-11dc-8407-001d09847d6b}\Shell\AutoRun\command - "" = G:\LaunchU3.exe
O33 - MountPoints2\{43b4ec25-0936-11e0-9e8d-001d09847d6b}\Shell\AutoRun\command - "" = Setup.exe
O33 - MountPoints2\{4dcf11b5-90bd-11dd-85dc-001d09847d6b}\Shell\AutoRun\command - "" = G:\wd_windows_tools\setup.exe
O33 - MountPoints2\{67246a36-141c-11de-a134-001d09847d6b}\Shell\Auto\command - "" = Start.exe
O33 - MountPoints2\{67246a36-141c-11de-a134-001d09847d6b}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe
O33 - MountPoints2\{6ed0d415-25ab-11e0-a2cd-001d09847d6b}\Shell\AutoRun\command - "" = H:\SecureII\Windows\SecureII.exe
O33 - MountPoints2\{a89d5780-e527-11df-a7aa-001d09847d6b}\Shell\AutoRun\command - "" = J:\wd_windows_tools\WDEULA.exe
O33 - MountPoints2\{bc2488d1-7c27-11de-ba5a-001d09847d6b}\Shell\Auto\command - "" = Start.exe
O33 - MountPoints2\{bc2488d1-7c27-11de-ba5a-001d09847d6b}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe
O33 - MountPoints2\{e0a424b3-eb2d-11dc-af41-001d09847d6b}\Shell\AutoRun\command - "" = bi
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O35 - HKCU\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/04/30 22:51:56 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Ecristy\Desktop\OTL.exe
[2011/04/28 21:45:15 | 000,000,000 | ---D | C] -- C:\Users\Ecristy\Documents\Adobe Scripts
[2011/04/25 00:22:58 | 000,000,000 | ---D | C] -- C:\Users\Ecristy\Desktop\mdkpck
[2011/04/24 14:56:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Rosetta Stone
[2011/04/20 22:05:38 | 000,000,000 | ---D | C] -- C:\Program Files\ScummVM
[2011/04/13 18:52:29 | 000,000,000 | ---D | C] -- C:\Users\Ecristy\Desktop\Legend of Zelda, The - The Minish Cap
[2011/04/07 20:35:27 | 000,000,000 | ---D | C] -- C:\Users\Ecristy\Desktop\momo
[2011/04/04 05:04:17 | 000,000,000 | ---D | C] -- C:\Users\Ecristy\Desktop\My Projects
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/04/30 22:55:45 | 000,626,678 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/04/30 22:55:45 | 000,109,824 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/04/30 22:44:23 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/04/30 22:44:02 | 000,009,160 | ---- | M] () -- C:\Users\Ecristy\AppData\Local\d3d9caps.dat
[2011/04/30 22:42:46 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Ecristy\Desktop\OTL.exe
[2011/04/30 22:22:26 | 000,401,108 | ---- | M] () -- C:\Users\Ecristy\Desktop\rustbfix.exe
[2011/04/30 22:03:46 | 156,216,848 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011/04/30 14:30:10 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/04/30 14:30:10 | 000,003,456 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/04/29 17:57:00 | 000,162,058 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011/04/27 16:21:57 | 000,162,058 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011/04/27 12:05:40 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2011/04/26 21:21:51 | 000,077,824 | ---- | M] () -- C:\Users\Ecristy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/20 22:14:41 | 000,000,296 | ---- | M] () -- C:\Windows\scummvm.ini
[2011/04/09 23:32:22 | 000,005,394 | -HS- | M] () -- C:\Users\Ecristy\AppData\Local\ir806823nm0e02u0748c4iw4onj73w34x6m56pw625
[2011/04/09 23:32:22 | 000,005,394 | -HS- | M] () -- C:\ProgramData\ir806823nm0e02u0748c4iw4onj73w34x6m56pw625
[2011/04/09 23:31:18 | 000,015,802 | ---- | M] () -- C:\Users\Ecristy\AppData\Roaming\9998.D5C
[2011/04/01 10:11:56 | 000,012,441 | ---- | M] () -- C:\Users\Ecristy\195080-suemura-2945x4209-e18f4281.jpg
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/04/30 22:24:04 | 000,401,108 | ---- | C] () -- C:\Users\Ecristy\Desktop\rustbfix.exe
[2011/04/20 22:05:40 | 000,000,296 | ---- | C] () -- C:\Windows\scummvm.ini
[2011/04/09 23:31:26 | 000,005,394 | -HS- | C] () -- C:\Users\Ecristy\AppData\Local\ir806823nm0e02u0748c4iw4onj73w34x6m56pw625
[2011/04/09 23:31:26 | 000,005,394 | -HS- | C] () -- C:\ProgramData\ir806823nm0e02u0748c4iw4onj73w34x6m56pw625
[2011/04/01 10:09:58 | 000,012,441 | ---- | C] () -- C:\Users\Ecristy\195080-suemura-2945x4209-e18f4281.jpg
[2010/12/15 01:04:37 | 000,000,000 | ---- | C] () -- C:\Windows\FlipBook.INI
[2010/12/08 01:22:46 | 000,015,802 | ---- | C] () -- C:\Users\Ecristy\AppData\Roaming\9998.D5C
[2010/10/01 18:24:52 | 000,162,058 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2010/10/01 18:24:52 | 000,162,058 | ---- | C] () -- C:\ProgramData\nvModes.001
[2010/09/22 23:50:03 | 000,000,600 | ---- | C] () -- C:\Users\Ecristy\AppData\Local\PUTTY.RND
[2010/09/01 21:12:17 | 000,000,256 | -H-- | C] () -- C:\Windows\System32\LTAW14FN.BIN
[2010/09/01 21:12:17 | 000,000,256 | -H-- | C] () -- C:\Windows\System32\FJLTAFOU.BIN
[2010/07/09 23:54:04 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2010/07/09 23:54:03 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010/07/09 23:54:01 | 000,790,528 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010/07/09 23:54:01 | 000,134,144 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010/07/09 23:54:00 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2009/08/03 00:21:54 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2009/08/03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2009/08/03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2009/08/03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2009/08/03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2009/08/03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2009/08/03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2009/08/03 00:21:54 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2009/08/03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2009/08/03 00:21:52 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2009/04/24 21:15:29 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/03/30 23:10:56 | 000,395,776 | ---- | C] () -- C:\Windows\System32\libmplayer.dll
[2009/03/30 23:10:56 | 000,262,144 | ---- | C] () -- C:\Windows\System32\TomsMoComp_ff.dll
[2009/03/30 23:10:56 | 000,112,640 | ---- | C] () -- C:\Windows\System32\libmpeg2_ff.dll
[2009/03/30 23:10:55 | 002,255,360 | ---- | C] () -- C:\Windows\System32\libavcodec.dll
[2009/03/16 23:47:13 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009/03/16 23:05:06 | 000,000,022 | ---- | C] () -- C:\Windows\pspvc_path.ini
[2009/01/26 23:32:49 | 000,000,094 | ---- | C] () -- C:\Users\Ecristy\AppData\Local\fusioncache.dat
[2008/09/22 21:56:25 | 000,127,767 | ---- | C] () -- C:\Windows\hpgins24.dat.temp
[2008/09/22 21:56:25 | 000,000,308 | ---- | C] () -- C:\Windows\hpgmdl24.dat.temp
[2008/09/22 20:42:08 | 000,127,762 | ---- | C] () -- C:\Windows\hpgins24.dat
[2008/09/22 20:42:08 | 000,000,308 | ---- | C] () -- C:\Windows\hpgmdl24.dat
[2008/08/22 23:32:45 | 000,921,600 | ---- | C] () -- C:\Windows\System32\vorbisenc.dll
[2008/08/22 23:32:45 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll
[2008/08/22 23:32:45 | 000,188,416 | ---- | C] () -- C:\Windows\System32\vorbis.dll
[2008/08/22 23:32:45 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ogg.dll
[2008/07/25 22:55:06 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2008/05/12 18:53:16 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008/05/12 18:50:08 | 000,831,488 | ---- | C] () -- C:\Windows\System32\divx_xx0a.dll
[2008/05/12 18:49:02 | 000,012,288 | ---- | C] () -- C:\Windows\System32\DivXWMPExtType.dll
[2008/04/18 23:11:21 | 000,022,328 | ---- | C] () -- C:\Users\Ecristy\AppData\Roaming\PnkBstrK.sys
[2008/03/23 14:51:51 | 000,000,120 | ---- | C] () -- C:\Windows\wininit.ini
[2008/03/07 11:30:02 | 000,000,952 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys
[2008/03/07 11:30:02 | 000,000,088 | RHS- | C] () -- C:\Windows\System32\B23C669194.sys
[2008/02/25 23:50:03 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2008/02/25 22:09:41 | 000,001,361 | ---- | C] () -- C:\Windows\System32\WLAN.INI
[2008/02/24 16:23:54 | 000,009,160 | ---- | C] () -- C:\Users\Ecristy\AppData\Local\d3d9caps.dat
[2008/02/23 13:54:00 | 000,077,824 | ---- | C] () -- C:\Users\Ecristy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/02/15 09:41:57 | 001,238,832 | ---- | C] () -- C:\Windows\System32\igmedkrn.dll
[2008/02/15 09:41:57 | 000,147,456 | ---- | C] () -- C:\Windows\System32\igfxCoIn_v1322.dll
[2008/02/15 09:41:57 | 000,104,636 | ---- | C] () -- C:\Windows\System32\igmedcompkrn.dll
[2008/02/15 09:41:56 | 000,249,856 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll
[2008/02/15 01:58:58 | 000,000,859 | ---- | C] () -- C:\Windows\{0240BDFB-2995-4A3F-8C96-18D41282B716}_WiseFW.ini
[2006/11/10 15:02:53 | 000,000,000 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2006/11/02 21:40:12 | 000,174,656 | ---- | C] () -- C:\Windows\System32\PSIService.exe
[2006/11/02 05:53:49 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 05:44:53 | 003,834,248 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 03:33:01 | 000,626,678 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 03:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 03:33:01 | 000,109,824 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 03:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 03:25:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2006/11/02 03:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 01:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 01:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 00:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 00:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006/11/02 00:22:43 | 000,099,999 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2006/11/02 00:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2006/03/18 06:16:04 | 000,540,178 | ---- | C] () -- C:\Windows\System32\x264vfw.dll
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:62E2D794

< End of report >