OTL logfile created on: 20-May-11 10:04:02 AM - Run 3 OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Brian\My Documents\Downloads Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00003009 | Country: Zimbabwe | Language: ENW | Date Format: dd-MMM-yy 3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 75.00% Memory free 9.00 Gb Paging File | 8.00 Gb Available in Paging File | 93.00% Paging File free Paging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 74.55 Gb Total Space | 19.65 Gb Free Space | 26.36% Space Free | Partition Type: NTFS Drive E: | 931.51 Gb Total Space | 889.34 Gb Free Space | 95.47% Space Free | Partition Type: NTFS Computer Name: SELF-HCG3WZX0LB | User Name: Brian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-05-18 11:28:57 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Brian\My Documents\Downloads\OTL.exe PRC - [2011-01-21 16:40:06 | 000,025,464 | ---- | M] (Uniblue Systems Limited) -- E:\Program Files\SpeedUpMyPC\spmonitor.exe PRC - [2011-01-11 20:16:58 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- E:\programme files e\bin\jqs.exe PRC - [2011-01-07 01:22:54 | 002,747,744 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgtray.exe PRC - [2011-01-07 01:22:44 | 001,084,256 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgnsx.exe PRC - [2011-01-06 15:23:20 | 000,737,872 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe PRC - [2011-01-06 15:23:18 | 006,128,720 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe PRC - [2010-12-05 16:26:40 | 000,654,176 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgrsx.exe PRC - [2010-12-05 16:26:12 | 000,650,592 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgchsvx.exe PRC - [2010-11-08 14:38:30 | 006,393,984 | ---- | M] (Prevx) -- C:\Program Files\Prevx\prevx.exe PRC - [2010-10-27 19:17:52 | 000,207,424 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe PRC - [2010-10-22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG10\avgwdsvc.exe PRC - [2010-06-28 22:37:24 | 002,322,501 | ---- | M] (Informer Technologies, Inc.) -- C:\Program Files\Software Informer\softinfo.exe PRC - [2010-06-14 15:07:14 | 000,615,936 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe PRC - [2010-06-07 13:51:24 | 000,138,752 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe PRC - [2010-05-14 10:32:30 | 001,479,680 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe PRC - [2010-03-18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe PRC - [2010-01-27 09:40:58 | 000,323,584 | ---- | M] (Eastman Kodak Company) -- C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe PRC - [2009-10-27 10:15:02 | 000,120,832 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe PRC - [2008-12-20 07:50:34 | 002,656,528 | ---- | M] () -- C:\Program Files\Logitech\QuickCam\Quickcam.exe PRC - [2008-12-20 07:46:58 | 000,558,864 | ---- | M] () -- C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe PRC - [2008-12-16 21:59:50 | 000,150,040 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe PRC - [2008-04-14 02:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-05-15 20:31:48 | 000,200,704 | ---- | M] (S3 Graphics Co., Ltd.) -- C:\WINDOWS\system32\S3Trayp.exe PRC - [2007-03-21 12:42:40 | 000,532,480 | ---- | M] () -- C:\Program Files\Middleware\CmSkype.exe PRC - [2006-10-22 23:29:48 | 000,014,456 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32Info.exe PRC - [2006-09-22 02:36:18 | 000,053,248 | ---- | M] (S3 Graphics, Inc.) -- C:\WINDOWS\system32\VTTimer.exe PRC - [2006-02-24 20:58:14 | 000,868,352 | R--- | M] (Sony Ericsson Mobile Communications AB) -- C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe PRC - [2005-10-27 01:17:24 | 000,159,744 | R--- | M] (Sony Ericsson Mobile Communications AB) -- C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe PRC - [2005-08-10 16:54:34 | 000,385,024 | R--- | M] (Teleca Software Solutions) -- C:\Program Files\Common Files\Teleca Shared\Generic.exe PRC - [2005-06-09 01:45:04 | 000,278,528 | ---- | M] (Teleca Software Solutions AB) -- C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-05-18 11:28:57 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Brian\My Documents\Downloads\OTL.exe MOD - [2010-08-23 18:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011-03-15 22:27:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc) SRV - [2011-03-15 15:56:18 | 000,249,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort) SRV - [2011-01-11 20:16:58 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) [Auto | Running] -- E:\programme files e\bin\jqs.exe -- (JavaQuickStarterService) SRV - [2011-01-06 15:23:18 | 006,128,720 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent) SRV - [2010-11-08 14:38:30 | 006,393,984 | ---- | M] (Prevx) [Auto | Running] -- C:\Program Files\Prevx\prevx.exe -- (CSIScanner) SRV - [2010-10-22 04:58:18 | 000,265,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG10\avgwdsvc.exe -- (avgwd) SRV - [2010-06-14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-03-18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2008-12-16 21:59:50 | 000,150,040 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv) SRV - [2007-08-09 09:27:52 | 000,073,728 | ---- | M] (HP) [Auto | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2010-12-18 10:42:42 | 000,026,096 | ---- | M] (Prevx) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pxkbf.sys -- (pxkbf) DRV - [2010-12-08 04:12:38 | 000,251,728 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2010-11-12 13:19:38 | 000,299,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2010-11-08 14:38:31 | 000,076,440 | ---- | M] (Prevx) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\pxrts.sys -- (pxrts) DRV - [2010-11-08 14:38:31 | 000,032,008 | ---- | M] (Prevx) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\pxscan.sys -- (pxscan) DRV - [2010-09-13 15:27:24 | 000,025,680 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH) DRV - [2010-09-07 03:48:56 | 000,034,384 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2010-09-07 03:48:50 | 000,026,064 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86) DRV - [2010-08-19 20:42:38 | 000,030,288 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter) DRV - [2010-08-19 20:42:36 | 000,123,472 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver) DRV - [2010-08-19 20:42:34 | 000,026,192 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AVGIDSShim.sys -- (AVGIDSShim) DRV - [2010-02-26 14:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2010-02-26 14:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2010-02-26 14:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2010-02-26 14:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2010-02-26 14:21:22 | 000,137,344 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys -- (nmwcdnsu) DRV - [2008-12-17 08:01:20 | 000,041,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta) DRV - [2008-12-17 08:00:12 | 000,768,024 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lvrs.sys -- (LVRS) DRV - [2008-12-17 07:53:44 | 002,686,104 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LV302V32.SYS -- (PID_PEPI) Logitech QuickCam IM(PID_PEPI) DRV - [2008-12-17 07:53:22 | 000,013,848 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lv302af.sys -- (pepifilter) DRV - [2008-12-16 21:58:54 | 000,025,624 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys -- (LVPr2Mon) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2007-08-24 19:45:22 | 000,101,120 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2007-06-15 02:41:58 | 004,429,312 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2007-06-04 21:05:58 | 000,714,240 | ---- | M] (S3 Graphics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\S3gIGPm.sys -- (S3GIGP) DRV - [2007-03-29 21:36:00 | 000,009,216 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\videX32.sys -- (videX32) DRV - [2007-03-27 01:26:00 | 000,052,224 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\ViPrt.sys -- (ViPrt) DRV - [2007-03-27 01:26:00 | 000,016,896 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\ViBus.sys -- (ViBus) DRV - [2006-02-21 02:59:36 | 000,083,344 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w810obex.sys -- (w810obex) DRV - [2006-02-21 02:59:34 | 000,094,064 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w810mdm.sys -- (w810mdm) DRV - [2006-02-21 02:59:34 | 000,085,408 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w810mgmt.sys -- (w810mgmt) Sony Ericsson W810 USB WMC Device Management Drivers (WDM) DRV - [2006-02-21 02:59:32 | 000,008,336 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w810mdfl.sys -- (w810mdfl) DRV - [2006-02-21 02:59:28 | 000,058,288 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w810bus.sys -- (w810bus) Sony Ericsson W810 Driver driver (WDM) DRV - [2005-03-16 08:23:54 | 000,013,696 | R--- | M] (BIOSTAR Group) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\BIOS.sys -- (BIOS) DRV - [2004-08-04 07:31:32 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rtl8139.sys -- (rtl8139) Realtek RTL8139(A/B/C) DRV - [2003-07-02 14:42:00 | 000,027,904 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\viaagp1.sys -- (viaagp1) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.bw/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Yahoo! Search" FF - prefs.js..browser.search.selectedEngine: "Yahoo! Search" FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG10\Firefox\ [2011-01-08 16:24:12 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\jqs@sun.com: E:\programme files e\lib\deploy\jqs\ff [2011-01-11 20:16:58 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG10\Firefox4\ [2011-03-30 09:17:24 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009-11-08 09:25:49 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 2.0.0.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-05-02 09:33:02 | 000,000,000 | ---D | M] [2010-07-14 14:46:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Brian\Application Data\Mozilla\Firefox\Profiles\2n8acstb.default\extensions [2009-12-06 21:36:56 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Brian\Application Data\Mozilla\Firefox\Profiles\2n8acstb.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-03-06 20:35:34 | 000,000,000 | ---D | M] (Microsoft Default Manager) -- C:\Documents and Settings\Brian\Application Data\Mozilla\Firefox\Profiles\2n8acstb.default\extensions\DefaultManager@Microsoft [2011-05-07 19:48:53 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-01-15 14:56:22 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2011-01-11 20:17:20 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2007-12-09 04:06:41 | 000,000,000 | ---D | M] (Talkback) -- C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org File not found (No name found) -- C:\PROGRAM FILES\AVG\AVG8\FIREFOX File not found (No name found) -- C:\PROGRAM FILES\AVG\AVG8\TOOLBAR\FIREFOX\AVG@IGEARED [2007-07-26 21:32:55 | 000,066,408 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\jar50.dll [2007-07-26 21:32:56 | 000,054,112 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\jsd3250.dll [2007-07-26 21:32:57 | 000,034,688 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\myspell.dll [2007-07-26 21:32:57 | 000,046,456 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\spellchk.dll [2007-07-26 21:32:58 | 000,171,880 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\xpinstal.dll [2009-11-06 18:37:19 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll [2011-01-11 20:16:58 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll [2009-11-06 18:37:20 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npMozCouponPrinter.dll O1 HOSTS File: ([2011-05-20 09:53:03 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (SafeOnline BHO) - {69D72956-317C-44bd-B369-8E44D4EF9801} - C:\WINDOWS\system32\PxSecure.dll (Prevx) O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll () O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\programme files e\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\programme files e\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.) O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [CmSkyped8c8] C:\Program Files\Middleware\CmSkype.exe () O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\QuickCam\Quickcam.exe () O4 - HKLM..\Run: [S3Trayp] C:\WINDOWS\System32\S3Trayp.exe (S3 Graphics Co., Ltd.) O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe (Sony Ericsson Mobile Communications AB) O4 - HKLM..\Run: [VTTimer] C:\WINDOWS\System32\VTTimer.exe (S3 Graphics, Inc.) O4 - HKCU..\Run: [fsm] File not found O4 - HKCU..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia) O4 - HKCU..\Run: [Software Informer] C:\Program Files\Software Informer\softinfo.exe (Informer Technologies, Inc.) O4 - HKCU..\Run: [uTorrent] C:\Documents and Settings\All Users\Documents\utorrent.exe (BitTorrent, Inc.) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe (Eastman Kodak Company) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Download all with Free Download Manager - C:\Program Files\Free Download Manager\dlall.htm () O8 - Extra context menu item: Download selected with Free Download Manager - C:\Program Files\Free Download Manager\dlselected.htm () O8 - Extra context menu item: Download video with Free Download Manager - C:\Program Files\Free Download Manager\dlfvideo.htm () O8 - Extra context menu item: Download with Free Download Manager - C:\Program Files\Free Download Manager\dllink.htm () O9 - Extra Button: Launch Cooliris - {3437D640-C91A-458f-89F5-B9095EA4C28B} - File not found O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1 O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files\Google\GOOGLE~2\GOEC62~1.DLL () O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files\Google\GOOGLE~2\GOEC62~1.DLL () O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Documents and Settings\Brian\My Documents\My Pictures\Picasa\Backgrounds\picasabackground-1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Brian\My Documents\My Pictures\Picasa\Backgrounds\picasabackground-1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007-12-09 03:01:09 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{1d4b3079-9ed5-11df-bf30-0013f7a7c2b5}\Shell - "" = AutoRun O33 - MountPoints2\{1d4b3079-9ed5-11df-bf30-0013f7a7c2b5}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{1d4b3079-9ed5-11df-bf30-0013f7a7c2b5}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a O33 - MountPoints2\{4aea4a30-3773-11e0-804d-00e04d3f1002}\Shell - "" = AutoRun O33 - MountPoints2\{4aea4a30-3773-11e0-804d-00e04d3f1002}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{4aea4a30-3773-11e0-804d-00e04d3f1002}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{4aea4a31-3773-11e0-804d-00e04d3f1002}\Shell - "" = AutoRun O33 - MountPoints2\{4aea4a31-3773-11e0-804d-00e04d3f1002}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{4aea4a31-3773-11e0-804d-00e04d3f1002}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{5703bec9-bd5f-11de-bd60-00e04d3f1002}\Shell\AutoRun\command - "" = F:\explorer.exe O33 - MountPoints2\{7bcff97c-a701-11df-bf47-0013f7a7c2b5}\Shell - "" = AutoRun O33 - MountPoints2\{7bcff97c-a701-11df-bf47-0013f7a7c2b5}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{7bcff97c-a701-11df-bf47-0013f7a7c2b5}\Shell\AutoRun\command - "" = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.) O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-05-20 09:40:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brian\My Documents\zimcamp 2011 [2011-05-19 16:51:21 | 000,000,000 | ---D | C] -- C:\_OTL [2011-05-14 16:58:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Nelson Thornes [2011-05-14 15:06:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brian\Start Menu\Programs\HiJackThis [2011-05-14 15:06:04 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2011-05-10 13:40:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brian\Application Data\Image Zone Express [2011-05-02 09:33:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office [2011-05-02 09:32:48 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2011-05-02 09:32:45 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2011-05-02 09:32:44 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft ActiveSync [2011-05-02 09:21:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brian\Local Settings\Application Data\Microsoft Help [2011-05-02 09:21:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft Help [2011-05-01 19:05:55 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue [2011-05-01 07:55:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brian\Application Data\Uniblue [2011-05-01 07:55:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Uniblue [2011-04-30 08:22:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brian\Start Menu\Programs\Easy Radio [2011-04-30 08:22:08 | 000,556,544 | ---- | C] (Guangming Software) -- C:\WINDOWS\System32\AudioCtl.dll [2011-04-30 08:22:05 | 000,000,000 | ---D | C] -- C:\Program Files\Easy Radio Free Version [2011-04-21 10:35:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brian\Application Data\WinRAR [2011-04-21 10:34:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR [2011-04-21 10:34:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Brian\Start Menu\Programs\WinRAR [2011-04-21 10:34:10 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [1 C:\Documents and Settings\All Users\Documents\*.tmp files -> C:\Documents and Settings\All Users\Documents\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-05-20 10:01:13 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-05-20 09:59:27 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-05-20 09:59:24 | 000,000,240 | ---- | M] () -- C:\WINDOWS\tasks\SpeedUpMyPC.job [2011-05-20 09:59:06 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-05-20 09:55:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-05-20 09:53:03 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts [2011-05-20 09:32:00 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1715567821-1645522239-725345543-1003UA.job [2011-05-20 09:20:00 | 000,000,986 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1715567821-1645522239-725345543-1004UA.job [2011-05-20 08:10:55 | 115,418,001 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm [2011-05-19 20:32:00 | 000,000,926 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1715567821-1645522239-725345543-1003Core.job [2011-05-19 16:49:06 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{E688D773-9D2D-443A-9A4D-D628DFB4F26F}.job [2011-05-19 16:20:00 | 000,000,934 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1715567821-1645522239-725345543-1004Core.job [2011-05-17 17:08:05 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\Brian\Desktop\HiJackThis.lnk [2011-05-17 16:49:41 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk [2011-05-11 16:23:54 | 000,029,696 | ---- | M] () -- C:\Documents and Settings\Brian\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-05-10 13:54:41 | 000,662,753 | ---- | M] () -- C:\Documents and Settings\Brian\My Documents\Scan.jpg [2011-05-09 17:19:37 | 000,002,137 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk [2011-05-03 08:09:39 | 000,195,368 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-05-01 19:05:59 | 000,000,757 | ---- | M] () -- C:\Documents and Settings\Brian\Application Data\Microsoft\Internet Explorer\Quick Launch\SystemTweaker.lnk [2011-05-01 07:55:06 | 000,000,619 | ---- | M] () -- C:\Documents and Settings\Brian\Application Data\Microsoft\Internet Explorer\Quick Launch\SpeedUpMyPC.lnk [2011-04-30 10:48:25 | 119,408,758 | ---- | M] () -- C:\Track1.mp3 [2011-04-30 08:22:14 | 000,000,715 | ---- | M] () -- C:\Documents and Settings\Brian\Desktop\Easy Radio.lnk [1 C:\Documents and Settings\All Users\Documents\*.tmp files -> C:\Documents and Settings\All Users\Documents\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-05-14 15:06:05 | 000,002,447 | ---- | C] () -- C:\Documents and Settings\Brian\Desktop\HiJackThis.lnk [2011-05-10 13:54:40 | 000,662,753 | ---- | C] () -- C:\Documents and Settings\Brian\My Documents\Scan.jpg [2011-05-01 19:05:59 | 000,000,757 | ---- | C] () -- C:\Documents and Settings\Brian\Application Data\Microsoft\Internet Explorer\Quick Launch\SystemTweaker.lnk [2011-05-01 07:55:14 | 000,000,240 | ---- | C] () -- C:\WINDOWS\tasks\SpeedUpMyPC.job [2011-05-01 07:55:06 | 000,000,619 | ---- | C] () -- C:\Documents and Settings\Brian\Application Data\Microsoft\Internet Explorer\Quick Launch\SpeedUpMyPC.lnk [2011-04-30 08:22:14 | 000,000,715 | ---- | C] () -- C:\Documents and Settings\Brian\Desktop\Easy Radio.lnk [2010-08-01 20:56:20 | 000,000,032 | ---- | C] () -- C:\WINDOWS\wininit.ini [2010-03-10 16:06:34 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI [2008-12-25 19:24:58 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2008-12-16 21:58:54 | 000,025,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys [2008-12-16 21:50:56 | 000,013,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\iKeyLgFT.dll [2008-11-05 13:50:31 | 000,001,172 | ---- | C] () -- C:\WINDOWS\mozver.dat [2008-10-18 11:33:00 | 000,081,110 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini [2008-10-11 11:16:32 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2008-08-09 08:09:53 | 000,000,221 | ---- | C] () -- C:\WINDOWS\HP_RedboxHprblog_HPSU.ini [2008-07-18 16:45:31 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Away Kit 08_09.ini [2008-06-22 18:13:49 | 000,039,132 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat [2008-02-22 17:02:28 | 000,000,978 | ---- | C] () -- C:\WINDOWS\eReg.dat [2008-02-07 02:01:44 | 000,000,065 | ---- | C] () -- C:\WINDOWS\LOGO.INI [2008-01-29 07:53:29 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2008-01-23 06:48:05 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat [2008-01-20 06:18:53 | 000,001,786 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache [2007-12-11 07:12:02 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\ezsid.dat [2007-12-10 07:11:37 | 000,029,696 | ---- | C] () -- C:\Documents and Settings\Brian\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007-12-09 06:10:20 | 000,080,839 | ---- | C] () -- C:\WINDOWS\hpfins05.dat [2007-12-09 06:10:20 | 000,001,350 | ---- | C] () -- C:\WINDOWS\hpfmdl05.dat [2007-12-09 06:10:06 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\hpzids01.dll [2007-12-09 04:06:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2007-12-09 03:58:17 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007-12-09 03:19:47 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2007-12-09 03:12:36 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\vuins32.dll [2007-12-09 03:04:21 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2007-12-09 02:57:48 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2007-12-08 18:48:44 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2007-12-08 18:47:44 | 000,195,368 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2007-01-25 10:52:36 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\NMSAccess.exe [2006-10-21 19:59:59 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\Manipulate.dll [2006-09-24 20:53:54 | 000,268,242 | ---- | C] () -- C:\WINDOWS\System32\erdmpg-parse.dll [2006-09-24 20:53:42 | 002,518,779 | ---- | C] () -- C:\WINDOWS\System32\erdmpg-enc.dll [2006-09-24 20:52:04 | 000,030,693 | ---- | C] () -- C:\WINDOWS\System32\erdmpg-int.dll [2005-11-17 19:57:30 | 000,258,560 | ---- | C] () -- C:\WINDOWS\System32\MusicTagsAX.dll [2005-11-06 01:34:50 | 000,145,408 | ---- | C] () -- C:\WINDOWS\System32\Lame.exe [2005-10-15 05:10:24 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\comLyricGetter.dll [2004-02-01 21:21:56 | 000,097,280 | ---- | C] () -- C:\WINDOWS\System32\Uncommon.dll [2003-08-07 22:01:50 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll [2003-01-08 01:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI [2002-08-29 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2002-08-29 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2002-08-29 14:00:00 | 000,441,454 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2002-08-29 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2002-08-29 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2002-08-29 14:00:00 | 000,071,264 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2002-08-29 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2002-08-29 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2002-08-29 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2002-08-29 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2002-08-29 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2002-07-19 18:48:22 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\OggEnc.exe [color=#E56717]========== LOP Check ==========[/color] [2010-12-18 07:27:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10 [2010-12-14 22:40:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9 [2009-03-01 16:50:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BitDefender [2010-12-18 07:26:57 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files [2010-07-14 14:45:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG [2008-08-16 11:16:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Grisoft [2010-09-18 20:54:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations [2011-04-12 09:31:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData [2009-09-08 11:22:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound [2011-05-16 18:23:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite [2011-05-20 09:07:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PrevxCSI [2008-05-04 05:13:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Teleca [2011-05-02 08:20:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP [2008-10-25 07:34:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip [2009-11-08 09:28:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2007-12-14 07:14:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{CFAB4006-0AE0-414D-866A-DCB2C46553CF} [2010-12-18 07:32:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\AVG10 [2011-04-15 10:55:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\EuroTalk [2011-05-02 09:14:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\FileZilla [2011-05-18 12:19:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\Free Download Manager [2007-12-09 04:05:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\Grisoft [2011-05-12 14:12:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\Image Zone Express [2008-12-20 08:04:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\Leadertech [2009-09-13 15:11:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\NCH Swift Sound [2010-09-20 11:27:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\Nokia [2010-09-19 08:07:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\PC Suite [2010-11-28 14:39:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\Skinux [2011-05-20 09:36:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\Software Informer [2008-05-04 05:14:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\Teleca [2011-05-01 19:06:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\Uniblue [2011-04-29 22:01:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Brian\Application Data\uTorrent [2011-05-20 09:59:24 | 000,000,240 | ---- | M] () -- C:\WINDOWS\Tasks\SpeedUpMyPC.job [2011-05-19 16:49:06 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{E688D773-9D2D-443A-9A4D-D628DFB4F26F}.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 217 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4B7BEAFF < End of report >