OTL logfile created on: 10/20/2011 4:58:36 PM - Run 3
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Asus\Downloads
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
4.00 Gb Total Physical Memory | 2.37 Gb Available Physical Memory | 59.19% Memory free
8.17 Gb Paging File | 6.48 Gb Available in Paging File | 79.40% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 222.15 Gb Total Space | 55.79 Gb Free Space | 25.11% Space Free | Partition Type: NTFS
 
Computer Name: ASUS-PC | User Name: Asus | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - File not found -- 
PRC - [2011/10/19 17:11:28 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Asus\Downloads\OTL (1).exe
PRC - [2011/07/09 22:11:29 | 000,273,544 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
PRC - [2011/02/28 18:44:14 | 000,391,432 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\BingBar.exe
PRC - [2011/02/28 18:44:14 | 000,259,336 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\BingApp.exe
PRC - [2011/02/25 10:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2011/01/12 16:41:42 | 000,810,144 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
PRC - [2008/09/02 19:11:04 | 008,105,984 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
PRC - [2008/08/29 17:06:16 | 000,223,800 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
PRC - [2008/08/13 23:00:16 | 000,158,264 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
PRC - [2008/08/13 23:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2008/08/13 22:59:56 | 000,301,624 | ---- | M] () -- C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
PRC - [2008/08/13 22:59:52 | 000,100,920 | ---- | M] () -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2008/08/13 18:21:56 | 002,482,176 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2008/06/24 21:01:08 | 000,159,744 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
PRC - [2008/06/18 00:10:34 | 000,424,504 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe
PRC - [2008/06/18 00:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
PRC - [2007/08/08 02:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2011/09/30 09:12:40 | 000,412,728 | ---- | M] () -- C:\Users\Asus\AppData\Local\Google\Chrome\Application\14.0.835.202\ppGoogleNaClPluginChrome.dll
MOD - [2011/09/30 09:12:39 | 003,696,184 | ---- | M] () -- C:\Users\Asus\AppData\Local\Google\Chrome\Application\14.0.835.202\pdf.dll
MOD - [2011/09/30 09:11:13 | 000,142,568 | ---- | M] () -- C:\Users\Asus\AppData\Local\Google\Chrome\Application\14.0.835.202\avutil-51.dll
MOD - [2011/09/30 09:11:12 | 000,253,320 | ---- | M] () -- C:\Users\Asus\AppData\Local\Google\Chrome\Application\14.0.835.202\avformat-53.dll
MOD - [2011/09/30 09:11:10 | 002,403,240 | ---- | M] () -- C:\Users\Asus\AppData\Local\Google\Chrome\Application\14.0.835.202\avcodec-53.dll
MOD - [2011/09/29 14:06:57 | 008,587,936 | ---- | M] () -- C:\Users\Asus\AppData\Local\Google\Chrome\Application\14.0.835.202\gcswf32.dll
MOD - [2011/09/29 14:06:57 | 008,587,936 | ---- | M] () -- C:\Users\Asus\AppData\Local\Google\Chrome\APPLIC~1\140835~1.202\gcswf32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2011/01/12 16:44:02 | 000,042,360 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV:[b]64bit:[/b] - [2011/01/12 16:41:42 | 000,810,144 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe -- (ekrn)
SRV:[b]64bit:[/b] - [2010/09/22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:[b]64bit:[/b] - [2008/01/21 04:40:39 | 000,031,248 | ---- | M] (Syntek America Inc.) [Auto | Running] -- C:\Windows\SysNative\StkCSrv.exe -- (StkSSrv)
SRV:[b]64bit:[/b] - [2007/08/08 02:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV:[b]64bit:[/b] - [2007/08/03 14:24:54 | 000,125,496 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr)
SRV - [2011/02/28 18:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [Disabled | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 10:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/03/31 16:51:13 | 000,316,664 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009/03/29 22:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/08/13 22:59:52 | 000,100,920 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2011/05/10 08:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2010/12/21 15:04:06 | 000,170,640 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\DRIVERS\eamonm.sys -- (eamonm)
DRV:[b]64bit:[/b] - [2010/12/21 15:04:06 | 000,141,264 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\ehdrv.sys -- (ehdrv)
DRV:[b]64bit:[/b] - [2010/12/21 13:47:38 | 000,125,296 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\epfwwfpr.sys -- (epfwwfpr)
DRV:[b]64bit:[/b] - [2010/09/23 00:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\fssfltr.sys -- (fssfltr)
DRV:[b]64bit:[/b] - [2010/08/12 22:57:55 | 000,019,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hitmanpro35.sys -- (hitmanpro35)
DRV:[b]64bit:[/b] - [2009/09/30 18:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:[b]64bit:[/b] - [2009/05/18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2009/04/10 23:03:32 | 000,111,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2009/01/20 06:49:48 | 000,195,584 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169)
DRV:[b]64bit:[/b] - [2008/10/15 21:17:17 | 000,406,040 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2008/09/05 14:20:19 | 000,058,912 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2008/08/28 09:57:23 | 004,745,216 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\NETw5v64.sys -- (NETw5v64) Intel(R)
DRV:[b]64bit:[/b] - [2008/06/24 15:50:00 | 000,065,024 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\rimmpx64.sys -- (rimmptsk)
DRV:[b]64bit:[/b] - [2008/06/03 00:41:49 | 000,017,464 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\kbfiltr.sys -- (kbfiltr)
DRV:[b]64bit:[/b] - [2008/05/06 16:06:00 | 000,014,464 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wdcsam64.sys -- (WDC_SAM)
DRV:[b]64bit:[/b] - [2008/03/05 02:12:25 | 001,611,152 | ---- | M] (Syntek) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\StkCMini.sys -- (StkCMini)
DRV:[b]64bit:[/b] - [2008/01/20 20:47:25 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\serscan.sys -- (StillCam)
DRV:[b]64bit:[/b] - [2007/12/18 19:57:12 | 000,059,392 | ---- | M] (ITE Tech. Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\itecir.sys -- (itecir)
DRV:[b]64bit:[/b] - [2007/12/06 04:12:55 | 000,320,048 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2007/08/02 22:26:47 | 000,017,464 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys -- (ghaio)
DRV:[b]64bit:[/b] - [2007/07/27 21:45:52 | 000,057,856 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\rixdpx64.sys -- (rismxdp)
DRV:[b]64bit:[/b] - [2007/07/26 22:33:54 | 000,055,296 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\rimspx64.sys -- (rimsptsk)
DRV:[b]64bit:[/b] - [2007/07/24 13:11:32 | 000,014,904 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
DRV:[b]64bit:[/b] - [2006/10/27 07:01:07 | 000,013,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\ATK64AMD.sys -- (MTsensor)
DRV:[b]64bit:[/b] - [2006/10/03 19:45:36 | 000,273,408 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\yk60x64.sys -- (yukonx64)
DRV - [2006/12/17 18:23:04 | 000,005,248 | ---- | M] (ACE CAD Enterprise Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\DigimHID.SYS -- (DigimHID)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/ig"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {08FCC151-8678-4544-A9F3-45D230F4EB89}:1.9.1
FF - prefs.js..network.proxy.type: 4
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player:  File not found
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.652: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.652: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player:  File not found
FF - HKCU\Software\MozillaPlugins\@octoshape.com/Octoshape Streaming Services,version=1.0: C:\Users\Asus\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll (Octoshape ApS)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Asus\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Asus\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
 
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\PROGRAM FILES\ESET\ESET NOD32 ANTIVIRUS\MOZILLA THUNDERBIRD [2011/03/25 21:55:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{08FCC151-8678-4544-A9F3-45D230F4EB89}: C:\Users\Asus\AppData\Local\{08FCC151-8678-4544-A9F3-45D230F4EB89}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011/07/06 02:30:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011/10/16 18:36:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/10/01 18:52:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/08/17 15:13:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011/03/25 21:55:04 | 000,000,000 | ---D | M]
 
[2011/08/11 17:07:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Asus\AppData\Roaming\mozilla\Extensions
[2010/06/24 11:51:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Asus\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011/08/11 17:07:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Asus\AppData\Roaming\mozilla\Extensions\{718e30fb-e89b-41dd-9da7-e25a45638b28}
[2009/06/02 22:14:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Asus\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2011/03/22 22:56:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Asus\AppData\Roaming\mozilla\Firefox\Profiles\a3onr9d9.default\extensions
[2010/04/28 07:23:39 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Asus\AppData\Roaming\mozilla\Firefox\Profiles\a3onr9d9.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/11/02 08:43:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Asus\AppData\Roaming\mozilla\Sunbird\Profiles\0ocvi8sf.default\extensions
[2009/11/22 11:16:51 | 000,002,172 | ---- | M] () -- C:\Users\Asus\AppData\Roaming\Mozilla\Firefox\Profiles\a3onr9d9.default\searchplugins\bing.xml
[2011/03/23 17:28:40 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/07/14 10:55:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
File not found (No name found) -- C:\USERS\ASUS\APPDATA\LOCAL\{08FCC151-8678-4544-A9F3-45D230F4EB89}
[2011/10/01 18:52:12 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2009/11/06 10:37:19 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npCouponPrinter.dll
[2010/04/12 17:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2009/11/06 10:37:20 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npMozCouponPrinter.dll
[2010/01/01 02:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Asus\AppData\Local\Google\Chrome\Application\14.0.835.202\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java(TM) Platform SE 6 U20 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In (32-bit)  (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit)  (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Asus\AppData\Local\Google\Chrome\Application\14.0.835.202\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Asus\AppData\Local\Google\Chrome\Application\14.0.835.202\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager  (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npCouponPrinter.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager  (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npMozCouponPrinter.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: Octoshape Streaming Services (Enabled) = C:\Users\Asus\AppData\Roaming\Mozilla\plugins\npoctoshape.dll
CHR - plugin: Octoshape Streaming Services (Enabled) = C:\Users\Asus\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1101262-0-npoctoshape.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Asus\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.4_0\
CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo\u003E = C:\Users\Asus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0\
 
O1 HOSTS File: ([2011/10/20 16:52:23 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2:[b]64bit:[/b] - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O4:[b]64bit:[/b] - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [WorldTime2006] C:\Program Files (x86)\AnyTime Organizer Premier\WorldTime.exe /reg File not found
O4 - Startup: C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\palmOne Registration.lnk = C:\Program Files (x86)\palmOne\register.exe (palmOne/Leader Technologies)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.116.2.50 24.116.2.34
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B9954A12-2F89-46BC-B07F-CE3C633A7D1C}: DhcpNameServer = 24.116.2.50 24.116.2.34
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Asus\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Asus\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{67198d42-17fa-11de-93f4-00248c0f95c4}\Shell - "" = AutoRun
O33 - MountPoints2\{67198d42-17fa-11de-93f4-00248c0f95c4}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/10/20 16:52:20 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/10/18 20:10:03 | 000,000,000 | ---D | C] -- C:\Users\Asus\Desktop\Virus stuff
[2011/10/18 20:04:06 | 000,000,000 | ---D | C] -- C:\_OTM
[2011/10/18 20:01:19 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011/10/18 20:00:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2011/10/18 20:00:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ERUNT
[2011/10/18 19:47:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2011/10/17 20:38:21 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011/10/17 20:34:28 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011/10/17 18:11:18 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/10/17 18:10:28 | 000,000,000 | --SD | C] -- C:\32788R22FWJFW
[2011/10/16 19:19:47 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{8BC682D5-BBAB-4AAD-8ACE-1DA13078C880}
[2011/10/16 19:19:32 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{94A849E1-7EAD-4011-A778-CB8C499EBAC7}
[2011/10/16 16:28:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware(51)
[2011/10/16 12:28:06 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{89BE7966-638F-4C38-A1A8-260191E01B6E}
[2011/10/16 12:27:43 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{BA5E55DE-FDD9-4055-9C07-6752BF4B6DC4}
[2011/10/15 20:24:19 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{8395BE3A-53A4-41B0-AB45-2B746D6CAB9F}
[2011/10/15 20:23:56 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{FEC7E815-0706-4A82-A243-1F4163CA98D3}
[2011/10/12 20:28:33 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{D7E4BECA-C574-40F8-9741-7859825A42F1}
[2011/10/12 20:28:20 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{75B7314A-7A1B-46F2-8CBF-BB21736CB421}
[2011/10/10 07:11:24 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{7A4AC503-F8AF-413E-BCB5-E18699ED67EF}
[2011/10/10 07:10:57 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{818F5073-43B7-4859-AB5E-8C106710A6CF}
[2011/10/09 17:22:41 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{259A2397-C7BB-4CD2-B739-2D495E4B7660}
[2011/10/09 17:22:18 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{91AB0C84-BC25-4048-9C78-C8F0D8F47FE7}
[2011/10/08 09:19:54 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{9892C122-BD14-49FE-A6EF-EFDACF7D5349}
[2011/10/08 09:19:52 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{7395634D-7245-4991-A285-D9A9E5A9BB42}
[2011/10/07 11:28:56 | 000,000,000 | ---D | C] -- C:\Users\Asus\Documents\Health and Fitness
[2011/10/07 11:27:20 | 000,000,000 | ---D | C] -- C:\Users\Asus\Documents\ISCA Conferences and Info
[2011/10/06 16:44:48 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{162CB08F-761B-4952-B8C5-A4A85A4C8D12}
[2011/10/06 16:44:47 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{A29699E5-99E8-42E0-B502-CED636567E0D}
[2011/10/04 21:52:24 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{CAB68855-473D-41BB-AD83-D0B4472BA524}
[2011/10/04 21:52:02 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{A61BB1C9-F4B8-41C5-9AD3-99199F12ECD2}
[2011/10/03 22:48:20 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{842A2E9E-79BB-46AC-8DC0-7936FDDA5A1D}
[2011/10/03 22:47:57 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{D2F4D628-3E96-4956-BB78-3DC0AFEB0D1C}
[2011/10/03 22:31:20 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2011/10/02 11:09:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\18 Wheels of Steel American Long Haul
[2011/10/02 11:09:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\18 Wheels of Steel American Long Haul
[2011/10/02 10:03:05 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{C73AEB77-608D-479E-A9C0-ECC78B9CA670}
[2011/10/02 10:02:42 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{0B88B5ED-4139-4043-A342-A80A7EF271CF}
[2011/10/01 21:13:16 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2011/10/01 19:43:05 | 000,000,000 | ---D | C] -- C:\Users\Asus\Documents\18 WoS American Long Haul
[2011/10/01 19:24:42 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{C3805DC3-8ACD-49B6-86BF-1C6AE23E76A9}
[2011/10/01 19:24:19 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{F1C49FD2-931F-4807-8BB1-E7EF32ECAD0C}
[2011/09/30 22:37:18 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{4C16B993-1BB0-4843-B62F-6A0F04A6BD2F}
[2011/09/30 22:36:55 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{D03EA835-63DC-4029-938D-F15FC35BBE4A}
[2011/09/28 17:56:10 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{CAFEF3F2-E7CD-4D88-BF87-26F8FC64B9D7}
[2011/09/28 17:55:47 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{BC36DBD1-7474-4B3E-A08D-C363543C34D8}
[2011/09/27 23:00:22 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{396BD949-1672-4D91-B427-05EA8C0BA99A}
[2011/09/27 23:00:00 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{E96FEA20-CC1D-410C-AAB1-1FC5B7FA959C}
[2011/09/26 18:49:40 | 000,000,000 | ---D | C] -- C:\ProgramData\HotSync
[2011/09/26 18:49:19 | 000,000,000 | ---D | C] -- C:\Users\Asus\{13ab9cba-69ae-4ab8-b2fd-31894ac6e795}
[2011/09/26 18:48:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\palmOne
[2011/09/26 18:46:28 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{3156FBA1-35E9-4811-8CE9-486A5B2E5A76}
[2011/09/26 18:46:04 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{21349F3F-30B4-44B9-AFB9-8925049208C7}
[2011/09/26 18:45:26 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Roaming\HotSync
[2011/09/25 17:48:27 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{E47D9BEA-81D7-433D-9D92-F1C7C3F7C519}
[2011/09/25 17:48:16 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{23E1E314-9BEE-4856-91AC-44E0A392DAA9}
[2011/09/25 15:06:05 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{6D36242F-0CFF-4F55-8CFC-F0A24D160214}
[2011/09/25 15:05:42 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{F490AD18-FBAB-4D46-B818-078A6FBB8004}
[2011/09/24 22:49:27 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{D96CA3D5-BD35-4C36-A2F8-F1B580B84F58}
[2011/09/24 22:49:04 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{E1013190-F5B8-45FF-BEC5-617F4158F85F}
[2011/09/23 22:28:10 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{EC0B5822-B29D-4550-B349-9A6119574537}
[2011/09/23 22:27:47 | 000,000,000 | ---D | C] -- C:\Users\Asus\AppData\Local\{C0669106-AABA-4273-94B4-579727F13311}
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/10/20 16:55:40 | 000,134,408 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011/10/20 16:55:40 | 000,134,408 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011/10/20 16:55:26 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2011/10/20 16:55:11 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/10/20 16:55:10 | 000,003,616 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/10/20 16:55:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/10/20 16:52:23 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts
[2011/10/20 16:48:32 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-232308359-316472038-1358654997-1000UA.job
[2011/10/19 22:48:01 | 000,000,852 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-232308359-316472038-1358654997-1000Core.job
[2011/10/18 20:00:57 | 000,000,770 | ---- | M] () -- C:\Users\Asus\Desktop\NTREGOPT.lnk
[2011/10/18 20:00:57 | 000,000,751 | ---- | M] () -- C:\Users\Asus\Desktop\ERUNT.lnk
[2011/10/18 19:47:53 | 000,000,732 | ---- | M] () -- C:\Users\Asus\AppData\Local\d3d9caps64.dat
[2011/10/17 21:15:48 | 000,301,976 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011/10/17 20:54:27 | 000,000,129 | ---- | M] () -- C:\Windows\SysNative\MRT.INI
[2011/10/17 20:40:33 | 000,818,170 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/10/17 20:40:33 | 000,672,792 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/10/17 20:40:33 | 000,132,182 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/10/17 20:34:28 | 000,041,272 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011/10/17 18:46:25 | 000,000,955 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/10/17 17:58:29 | 613,710,514 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011/10/13 20:22:41 | 000,000,986 | ---- | M] () -- C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\palmOne Registration.lnk
[2011/10/12 18:44:25 | 000,000,832 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2011/10/02 11:09:42 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\18 Wheels of Steel American Long Haul.lnk
[2011/10/01 21:14:49 | 000,002,006 | ---- | M] () -- C:\Users\Asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/09/26 18:49:41 | 000,001,745 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HotSync Manager.lnk
[2011/09/26 18:48:48 | 000,001,651 | ---- | M] () -- C:\Users\Public\Desktop\Palm Desktop.lnk
[2011/09/26 18:45:26 | 000,000,094 | ---- | M] () -- C:\Windows\family.ini
[2011/09/26 16:51:57 | 000,171,008 | ---- | M] () -- C:\Users\Asus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/10/18 20:00:57 | 000,000,770 | ---- | C] () -- C:\Users\Asus\Desktop\NTREGOPT.lnk
[2011/10/18 20:00:57 | 000,000,751 | ---- | C] () -- C:\Users\Asus\Desktop\ERUNT.lnk
[2011/10/17 18:46:25 | 000,000,955 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/10/16 17:53:36 | 000,000,732 | ---- | C] () -- C:\Users\Asus\AppData\Local\d3d9caps64.dat
[2011/10/02 11:09:42 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\18 Wheels of Steel American Long Haul.lnk
[2011/10/01 21:13:31 | 000,002,006 | ---- | C] () -- C:\Users\Asus\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/10/01 21:11:56 | 000,000,904 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-232308359-316472038-1358654997-1000UA.job
[2011/10/01 21:11:56 | 000,000,852 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-232308359-316472038-1358654997-1000Core.job
[2011/09/26 18:52:32 | 000,000,986 | ---- | C] () -- C:\Users\Asus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\palmOne Registration.lnk
[2011/09/26 18:49:41 | 000,001,745 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HotSync Manager.lnk
[2011/09/26 18:48:48 | 000,001,651 | ---- | C] () -- C:\Users\Public\Desktop\Palm Desktop.lnk
[2011/08/16 23:57:39 | 000,000,080 | RHS- | C] () -- C:\Windows\SysWow64\10C8299AD0.dll
[2011/08/11 19:15:07 | 000,000,000 | ---- | C] () -- C:\Windows\QuickInstall.INI
[2011/05/15 15:43:44 | 000,709,456 | ---- | C] () -- C:\Windows\is-BCSAJ.exe
[2010/12/11 19:23:38 | 000,000,532 | ---- | C] () -- C:\Windows\hpomdl46.dat.temp
[2010/08/14 07:49:22 | 000,000,680 | ---- | C] () -- C:\Users\Asus\AppData\Local\d3d9caps.dat
[2010/03/24 19:28:42 | 000,000,599 | ---- | C] () -- C:\Windows\eReg.dat
[2010/02/15 14:25:02 | 000,024,226 | ---- | C] () -- C:\Users\Asus\AppData\Roaming\UserTile.png
[2010/01/24 13:39:31 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\fsacars.ini
[2009/12/03 16:02:53 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2009/12/03 16:02:36 | 000,033,797 | ---- | C] () -- C:\Windows\SysWow64\hlp.dat
[2009/12/03 16:02:04 | 000,107,612 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009/12/03 16:01:18 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/11/06 00:29:45 | 000,744,188 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009/11/05 23:34:46 | 000,000,106 | ---- | C] () -- C:\Users\Asus\AppData\Roaming\wklnhst.dat
[2009/11/03 17:45:22 | 000,128,884 | ---- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2009/11/02 18:28:21 | 000,000,094 | ---- | C] () -- C:\Windows\family.ini
[2009/09/29 19:36:08 | 000,000,061 | -HS- | C] () -- C:\Windows\cnerolf.dat
[2009/06/11 15:21:49 | 000,000,061 | -HS- | C] () -- C:\Windows\cnerolf.bin
[2009/05/31 18:21:21 | 000,000,336 | ---- | C] () -- C:\Windows\game.ini
[2009/04/19 18:41:14 | 000,000,171 | ---- | C] () -- C:\Windows\QUICKEN.INI
[2009/04/03 19:20:36 | 000,171,008 | ---- | C] () -- C:\Users\Asus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/31 21:29:07 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009/03/31 20:32:59 | 000,000,083 | ---- | C] () -- C:\Users\Asus\AppData\Local\X-Plane Installer.prf
[2009/03/23 16:55:56 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009/03/23 14:37:37 | 000,002,039 | ---- | C] () -- C:\Users\Asus\AppData\Roaming\install.dat
[2009/03/23 14:34:09 | 000,134,408 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009/01/16 19:07:16 | 000,134,408 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009/01/16 17:48:10 | 000,018,904 | ---- | C] () -- C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2008/09/19 05:41:00 | 000,000,010 | ---- | C] () -- C:\Windows\SysWow64\ABLKSR.ini
[2008/06/12 19:23:13 | 000,080,400 | ---- | C] () -- C:\Windows\StkUnist.exe
[2008/01/20 20:50:05 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2006/11/02 09:37:05 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 06:37:14 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2006/11/02 06:24:17 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 06:18:17 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2006/11/02 03:47:54 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2000/01/28 00:00:00 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\wrkgadm.exe
[2000/01/28 00:00:00 | 000,012,288 | ---- | C] () -- C:\Windows\SysWow64\HLINKPRX.DLL
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2009/03/31 19:11:29 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\2K Sports
[2009/04/04 11:45:18 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Absolute
[2009/11/01 00:45:58 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Amazon
[2010/12/07 18:39:24 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\AVG
[2010/12/02 21:48:36 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\AVG10
[2011/05/13 19:10:57 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Digiarty
[2011/08/11 17:56:08 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Efficient Calendar Free
[2009/09/06 11:35:17 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\ESET
[2011/05/13 20:50:14 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\HandBrake
[2011/09/26 18:45:26 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\HotSync
[2011/08/16 23:59:10 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Individual Software
[2011/07/15 17:05:24 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\IrfanView
[2009/04/01 18:45:52 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Leadertech
[2010/09/28 14:32:39 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\LimeWire
[2010/12/02 20:52:55 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\MSA
[2011/03/10 21:11:45 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Octoshape
[2010/02/15 14:25:02 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\PeerNetworking
[2009/03/31 20:21:20 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Premiere
[2010/12/09 17:50:09 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Registry Mechanic
[2010/09/19 21:48:48 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\SecondLife
[2010/04/16 17:06:35 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\SystemRequirementsLab
[2011/07/13 02:44:13 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Template
[2010/06/24 11:51:28 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Thunderbird
[2009/11/02 19:24:52 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Trondent Development Corp
[2011/08/17 00:07:30 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Utech Computer Solutions
[2010/11/01 23:36:03 | 000,000,000 | ---D | M] -- C:\Users\Asus\AppData\Roaming\Windows Live Writer
[2011/10/20 16:54:10 | 000,032,628 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\Temp:0B4227B4
@Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:DFC5A2B2
@Alternate Data Stream - 104 bytes -> C:\ProgramData\Temp:D1B5B4F1

< End of report >