OTL logfile created on: 6/15/2011 12:51:30 PM - Run 
OTLPE by OldTimer - Version 3.1.46.0     Folder = X:\Programs\OTLPE
64bit-Windows Vista (TM) Home Premium Service Pack 2 (Version = 6.0.6002) - Type = System
Internet Explorer (Version = 8.0.6001.19048)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 89.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97.65 Gb Total Space | 4.39 Gb Free Space | 4.49% Space Free | Partition Type: NTFS
Drive D: | 232.88 Gb Total Space | 8.11 Gb Free Space | 3.48% Space Free | Partition Type: NTFS
Drive E: | 6.67 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 7.47 Gb Total Space | 4.02 Gb Free Space | 53.72% Space Free | Partition Type: FAT32
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2010/03/08 09:47:06 | 006,245,744 | ---- | M] (Wacom Technology, Corp.) [Auto] -- C:\Windows\System32\Wacom_Tablet.exe -- (TabletServiceWacom)
SRV:[b]64bit:[/b] - [2009/10/14 09:31:44 | 000,116,224 | ---- | M] (WDC) [Auto] -- C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe -- (WDDMService)
SRV:[b]64bit:[/b] - [2008/01/20 22:47:32 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2011/06/07 01:30:29 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011/03/28 10:15:04 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011/03/28 10:14:56 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/10/08 16:03:25 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/03/18 07:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/02/19 07:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010/01/15 08:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand] -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/06/16 04:58:08 | 000,020,480 | ---- | M] (Memeo) [Auto] -- C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe -- (WDSmartWareBackgroundService)
SRV - [2009/03/30 00:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/01/26 10:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto] -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService)
SRV - [2007/05/31 12:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007/05/31 12:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2011/04/01 11:07:25 | 000,116,568 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV:[b]64bit:[/b] - [2011/04/01 11:07:25 | 000,083,120 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV:[b]64bit:[/b] - [2011/02/18 11:36:58 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2010/01/24 08:32:24 | 000,018,216 | ---- | M] (Wacom Technology) [Kernel | On_Demand] -- C:\Windows\System32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV:[b]64bit:[/b] - [2009/12/11 17:32:32 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2009/09/30 20:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\WpdUsb.sys -- (WpdUsb)
DRV:[b]64bit:[/b] - [2009/09/21 09:29:22 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand] -- C:\Windows\System32\drivers\wacomvhid.sys -- (wacomvhid)
DRV:[b]64bit:[/b] - [2009/04/11 01:43:06 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\usb8023x.sys -- (usb_rndisx)
DRV:[b]64bit:[/b] - [2009/02/13 07:02:52 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand] -- C:\Windows\System32\drivers\wdcsam64.sys -- (WDC_SAM)
DRV:[b]64bit:[/b] - [2008/01/20 22:47:25 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2007/02/16 04:12:36 | 000,012,848 | ---- | M] (Wacom Technology) [Kernel | On_Demand] -- C:\Windows\System32\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV:[b]64bit:[/b] - [2007/02/15 13:04:00 | 001,330,688 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\vm30xx64.sys -- (VM30xx64) Vimicro USB PC Camera (ZC0301)
DRV:[b]64bit:[/b] - [2006/10/31 18:23:42 | 000,015,680 | ---- | M] () [Kernel | On_Demand] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)
DRV:[b]64bit:[/b] - [2006/10/03 21:45:36 | 000,273,408 | ---- | M] (Marvell) [Kernel | On_Demand] -- C:\Windows\System32\drivers\yk60x64.sys -- (yukonx64)
DRV:[b]64bit:[/b] - [2006/09/18 17:36:24 | 000,000,308 | ---- | M] () [File_System | On_Demand] -- C:\Windows\System32\wbem\ntfs.mof -- (Ntfs)
DRV - [2007/02/15 13:04:00 | 001,330,688 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand] -- C:\Windows\SysWOW64\drivers\vm30xx64.sys -- (VM30xx64) Vimicro USB PC Camera (ZC0301)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\robert_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\robert_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKU\robert_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\robert_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 30 0F 65 7F 52 E0 CA 01  [binary data]
IE - HKU\robert_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\robert_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\robert_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
 
 
[2011/03/13 06:41:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/08/12 07:40:25 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/05/11 10:49:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/08/16 18:41:02 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/10/28 03:37:42 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/03/13 06:41:45 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/04/02 11:45:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\distribution\extensions
[2011/04/02 11:45:02 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010/01/01 04:00:00 | 000,135,168 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2011/02/02 16:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/01/13 18:46:00 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
[2010/01/01 04:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml
 
O1 HOSTS File: ([2010/04/30 08:56:09 | 000,001,798 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1				activate.adobe.com
O1 - Hosts: 127.0.0.1				practivate.adobe.com
O1 - Hosts: 127.0.0.1				ereg.adobe.com
O1 - Hosts: 127.0.0.1				activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1				wip3.adobe.com
O1 - Hosts: 127.0.0.1				3dns-3.adobe.com
O1 - Hosts: 127.0.0.1				3dns-2.adobe.com
O1 - Hosts: 127.0.0.1				adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1				adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1				adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1				ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1				activate-sea.adobe.com
O1 - Hosts: 127.0.0.1				wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1				activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1                               adobe.activate.com
O1 - Hosts: 127.0.0.1                               adobeereg.com                        
O1 - Hosts: 127.0.0.1                               www.adobeereg.com                    
O1 - Hosts: 127.0.0.1                               wwis-dubc1-vip60.adobe.com           
O1 - Hosts: 127.0.0.1                               125.252.224.90                       
O1 - Hosts: 127.0.0.1                               125.252.224.91
O1 - Hosts: 127.0.0.1                               hl2rcv.adobe.com
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdcBase.exe (Microsoft Corporation)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [VM30xSnap]  File not found
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKU\LocalService_ON_C..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\LocalService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\NetworkService_ON_C..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\NetworkService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\robert_ON_C..\Run: [{48BBEF2A-349A-CBE1-2655-D58E246F51DC}] C:\Users\robert\AppData\Roaming\Amhez\iqile.exe ()
O4 - HKU\robert_ON_C..\Run: [AdobeBridge]  File not found
O4 - HKU\robert_ON_C..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\robert_ON_C..\Run: [fklogger.exe]  File not found
O4 - HKU\robert_ON_C..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKU\robert_ON_C..\Run: [RTHDBPL]  File not found
O4 - HKU\robert_ON_C..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKU\robert_ON_C..\Run: [tsmon.exe] C:\Program Files\Windows Journal\AVP\Files\tsmon.exe ()
O4 - HKU\robert_ON_C..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10q_Plugin.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Users\robert\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O7 - HKU\robert_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13:[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKU\robert_ON_C Winlogon: Shell - (C:\Users\robert\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K7HE0326\about[1].exe) - C:\Users\robert\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K7HE0326\about[1].exe (cp)
O24 - Desktop WallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: B:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/05/06 08:26:23 | 000,000,309 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
[b]64bit:[/b] O35 - HKLM\..comfile [open] -- "%1" %* File not found
[b]64bit:[/b] O35 - HKLM\..exefile [open] -- "%1" %* File not found
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/06/14 10:13:24 | 000,000,000 | ---D | C] -- C:\Users\robert\AppData\Roaming\Wivi
[2011/06/14 10:13:24 | 000,000,000 | ---D | C] -- C:\Users\robert\AppData\Roaming\Amhez
[2011/06/04 17:46:34 | 000,000,000 | ---D | C] -- C:\Users\robert\AppData\Roaming\OpenOffice.org
[2011/06/04 17:45:31 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
[2011/06/04 17:44:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenOffice.org 3
[2011/06/04 09:47:32 | 000,116,568 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2011/06/03 02:05:23 | 000,000,000 | ---D | C] -- C:\Users\robert\Desktop\Shrimp Temp
[2011/05/30 16:13:09 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/05/30 05:38:10 | 000,000,000 | ---D | C] -- C:\Users\robert\AppData\Roaming\TSS Manager
[2011/05/23 11:35:52 | 001,653,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011/05/23 11:35:52 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011/05/23 11:35:50 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\GameUXLegacyGDFs.dll
[2011/05/23 11:35:50 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2011/05/23 11:35:50 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Apphlpdm.dll
[2011/05/23 11:35:48 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2011/05/23 09:40:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011/05/23 09:39:47 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011/05/23 09:39:40 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2011/05/23 09:39:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2011/05/23 09:37:32 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2011/05/23 09:37:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour
[2011/05/23 08:19:07 | 000,000,000 | ---D | C] -- C:\Users\robert\AppData\Roaming\FKRMonitor
[3 C:\Users\robert\Desktop\*.tmp files -> C:\Users\robert\Desktop\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/06/15 05:16:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/06/15 05:16:23 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/06/15 05:16:20 | 000,003,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/06/15 05:16:19 | 000,003,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/06/15 05:16:12 | 4294,041,600 | -HS- | M] () -- C:\hiberfil.sys
[2011/06/14 17:12:49 | 000,603,516 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/06/14 17:12:49 | 000,103,586 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/06/14 15:35:00 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/06/14 12:40:20 | 000,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{652FDD3C-2199-48AE-8CDB-AE36A5DC8F3E}.job
[2011/06/11 18:35:10 | 002,826,863 | ---- | M] () -- C:\Users\robert\Desktop\kindersachen klein.psd
[2011/06/11 10:20:42 | 000,071,680 | ---- | M] () -- C:\Users\robert\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/06/08 17:07:21 | 000,023,808 | ---- | M] () -- C:\Users\robert\Desktop\our story.jpg
[2011/06/05 04:37:24 | 000,069,826 | ---- | M] () -- C:\Users\robert\Desktop\bryan-schutmaat-530x530.jpg
[2011/06/05 04:28:13 | 000,007,375 | ---- | M] () -- C:\Users\robert\Desktop\EK Alexandra_Balteanu.pdf
[2011/06/05 04:00:07 | 000,001,070 | ---- | M] () -- C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
[2011/06/05 02:29:28 | 005,102,904 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/06/04 17:46:05 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
[2011/06/04 16:22:37 | 000,091,181 | ---- | M] () -- C:\Users\robert\Desktop\Oferta_13037_Corsstiki_Art.pdf
[2011/06/04 09:48:22 | 000,001,419 | ---- | M] () -- C:\Users\robert\Desktop\DivX Movies.lnk
[2011/06/03 17:19:57 | 011,640,494 | ---- | M] () -- C:\Users\robert\Desktop\Arbeitsamt log_bis 18 Juni.psd
[2011/06/03 05:37:37 | 000,005,482 | ---- | M] () -- C:\Users\robert\Desktop\index.html
[2011/05/30 16:13:09 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/05/24 12:56:13 | 011,618,786 | ---- | M] () -- C:\Users\robert\Desktop\Arbeitsamt log_bis 18 Mai.psd
[2011/05/24 05:37:31 | 000,001,030 | ---- | M] () -- C:\Users\robert\Desktop\Photoshop.lnk
[2011/05/23 09:40:04 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[3 C:\Users\robert\Desktop\*.tmp files -> C:\Users\robert\Desktop\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/06/15 04:04:57 | 4294,041,600 | -HS- | C] () -- C:\hiberfil.sys
[2011/06/11 16:16:44 | 002,826,863 | ---- | C] () -- C:\Users\robert\Desktop\kindersachen klein.psd
[2011/06/08 17:07:20 | 000,023,808 | ---- | C] () -- C:\Users\robert\Desktop\our story.jpg
[2011/06/06 13:50:16 | 000,005,482 | ---- | C] () -- C:\Users\robert\Desktop\index.html
[2011/06/05 04:37:19 | 000,069,826 | ---- | C] () -- C:\Users\robert\Desktop\bryan-schutmaat-530x530.jpg
[2011/06/05 04:28:09 | 000,007,375 | ---- | C] () -- C:\Users\robert\Desktop\EK Alexandra_Balteanu.pdf
[2011/06/05 04:00:07 | 000,001,070 | ---- | C] () -- C:\Users\robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
[2011/06/04 16:22:36 | 000,091,181 | ---- | C] () -- C:\Users\robert\Desktop\Oferta_13037_Corsstiki_Art.pdf
[2011/06/04 09:48:22 | 000,001,419 | ---- | C] () -- C:\Users\robert\Desktop\DivX Movies.lnk
[2011/06/03 17:19:53 | 011,640,494 | ---- | C] () -- C:\Users\robert\Desktop\Arbeitsamt log_bis 18 Juni.psd
[2011/05/26 07:36:52 | 000,000,882 | ---- | C] () -- C:\Users\robert\Desktop\Machinarium - Copy.lnk
[2011/05/24 06:07:13 | 011,618,786 | ---- | C] () -- C:\Users\robert\Desktop\Arbeitsamt log_bis 18 Mai.psd
[2011/05/24 05:37:31 | 000,001,030 | ---- | C] () -- C:\Users\robert\Desktop\Photoshop.lnk
[2011/04/17 06:48:36 | 000,000,680 | ---- | C] () -- C:\Users\robert\AppData\Local\d3d9caps.dat
[2010/12/16 14:36:01 | 000,000,000 | ---- | C] () -- C:\Windows\iPlayer.INI
[2010/09/26 10:09:03 | 000,000,132 | ---- | C] () -- C:\Users\robert\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010/09/24 05:11:25 | 000,001,456 | ---- | C] () -- C:\Users\robert\AppData\Local\Adobe Save for Web 12.0 Prefs
[2010/08/09 07:40:10 | 000,000,132 | ---- | C] () -- C:\Users\robert\AppData\Roaming\Adobe BMP Format CS5 Prefs
[2010/03/28 06:36:02 | 000,049,152 | ---- | C] () -- C:\Windows\amcap.exe
[2010/03/28 06:36:00 | 000,138,752 | ---- | C] () -- C:\Windows\VM303Uninst64.exe
[2010/03/28 06:36:00 | 000,073,728 | ---- | C] () -- C:\Windows\VMInstNT.exe
[2010/03/28 06:36:00 | 000,069,632 | ---- | C] () -- C:\Windows\VMInst64.exe
[2010/03/28 06:36:00 | 000,040,960 | ---- | C] () -- C:\Windows\VM303UninstNT.exe
[2010/03/26 03:06:37 | 000,024,576 | ---- | C] () -- C:\Windows\VMPipe.dll
[2010/03/26 03:06:36 | 000,039,776 | ---- | C] () -- C:\Windows\SysWow64\drivers\STREAM.SYS
[2010/03/26 03:06:36 | 000,024,576 | ---- | C] () -- C:\Windows\RunSetup.dll
[2009/11/29 09:15:45 | 000,147,456 | ---- | C] () -- C:\Windows\SysWow64\ssleay32.dll
[2009/11/29 09:15:44 | 000,651,264 | ---- | C] () -- C:\Windows\SysWow64\libeay32.dll
[2009/09/24 04:56:27 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2009/09/24 04:56:07 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009/09/24 04:55:52 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/08/07 14:51:34 | 000,178,430 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009/07/19 15:28:11 | 001,685,752 | ---- | C] () -- C:\Users\robert\AppData\Roaming\698e8de9c79e614b8d6a96b5ce9682e6-i686.cache-2
[2009/06/13 07:08:58 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/03/15 17:39:31 | 000,168,448 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2009/02/19 22:09:11 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2009/02/19 13:53:26 | 000,071,680 | ---- | C] () -- C:\Users\robert\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/02/04 12:46:59 | 000,003,972 | ---- | C] () -- C:\Windows\SysWow64\drivers\PciBus.sys
[2009/02/04 12:24:47 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009/02/04 10:28:35 | 000,000,732 | ---- | C] () -- C:\Users\robert\AppData\Local\d3d9caps64.dat
[2008/06/11 04:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008/06/11 04:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008/06/11 04:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2008/06/11 04:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008/06/11 04:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008/06/11 04:02:34 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2008/06/11 04:02:32 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008/06/11 04:02:32 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2008/06/11 04:02:32 | 000,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2008/06/05 03:58:26 | 000,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2008/01/20 22:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2006/11/02 11:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 11:02:31 | 000,197,632 | ---- | C] () -- C:\Windows\SysWow64\ir32_32.dll
[2006/11/02 08:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2006/11/02 08:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 08:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006/11/02 05:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011/06/14 05:36:13 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\12Voip
[2011/06/14 10:13:24 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\Amhez
[2010/09/27 15:54:44 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\BSplayer
[2009/07/12 13:47:20 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\BSplayer Pro
[2010/09/24 13:07:34 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/03/29 13:38:11 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2009/12/13 06:09:04 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\DAEMON Tools Lite
[2010/06/13 15:06:49 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\Facebook
[2010/11/12 10:30:28 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\FaceGen
[2010/10/21 05:34:40 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\FileZilla
[2011/05/29 07:13:40 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\FKRMonitor
[2009/11/12 18:50:01 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\IrfanView
[2010/10/02 15:15:36 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\NCH Swift Sound
[2011/06/04 17:46:34 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\OpenOffice.org
[2010/07/24 13:10:59 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010/01/14 03:48:45 | 000,000,000 | -HSD | M] -- C:\Users\robert\AppData\Roaming\SystemProc
[2011/05/30 06:02:46 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\TSS Manager
[2009/12/19 15:40:10 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\Western Digital
[2011/06/14 10:14:00 | 000,000,000 | ---D | M] -- C:\Users\robert\AppData\Roaming\Wivi
[2010/01/15 16:37:29 | 000,000,000 | ---D | M] -- C:\ProgramData\2DBoy
[2010/09/25 10:43:12 | 000,000,000 | ---D | M] -- C:\ProgramData\AppData
[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
[2010/06/22 17:59:28 | 000,000,000 | -H-D | M] -- C:\ProgramData\CanonBJ
[2009/12/11 17:31:55 | 000,000,000 | ---D | M] -- C:\ProgramData\DAEMON Tools Lite
[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
[2010/08/06 03:49:55 | 000,000,000 | ---D | M] -- C:\ProgramData\FreePDF
[2010/10/02 15:15:36 | 000,000,000 | ---D | M] -- C:\ProgramData\NCH Swift Sound
[2010/09/25 07:17:48 | 000,000,000 | ---D | M] -- C:\ProgramData\regid.1986-12.com.adobe
[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
[2006/11/02 11:42:17 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
[2009/12/19 15:40:00 | 000,000,000 | ---D | M] -- C:\ProgramData\Western Digital
[2010/12/14 11:58:08 | 000,000,000 | ---D | M] -- C:\ProgramData\WindowsSearch
[2011/04/22 05:12:16 | 000,000,000 | ---D | M] -- C:\ProgramData\Xerox
[2010/01/14 06:19:54 | 000,000,000 | ---D | M] -- C:\ProgramData\{0DD0EEEE-2A7C-411C-9243-1AE62F445FC3}
[2009/07/30 15:04:21 | 000,000,000 | ---D | M] -- C:\ProgramData\{35733029-9859-49C7-8475-1E78E2AAE413}
[2010/04/06 08:43:22 | 000,000,000 | ---D | M] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2009/04/02 05:50:30 | 000,000,000 | ---D | M] -- C:\ProgramData\{CD649BED-8A0E-48BE-B3B6-0F5055BED534}
[2011/06/15 05:16:44 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011/06/14 12:40:20 | 000,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{652FDD3C-2199-48AE-8CDB-AE36A5DC8F3E}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
< End of report >