OTL logfile created on: 3/31/2012 5:02:57 PM - Run 1 OTL by OldTimer - Version 3.2.39.2 Folder = C:\Users\Weberbra\Downloads Professional (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.43 Gb Total Physical Memory | 1.95 Gb Available Physical Memory | 56.92% Memory free 6.85 Gb Paging File | 5.36 Gb Available in Paging File | 78.21% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 148.95 Gb Total Space | 36.85 Gb Free Space | 24.74% Space Free | Partition Type: NTFS Computer Name: DSCV-145 | User Name: weberbra | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012/03/31 16:56:27 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Users\Weberbra\Downloads\OTL.exe PRC - [2012/03/26 22:28:45 | 001,224,176 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe PRC - [2012/03/06 19:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2012/03/06 19:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2012/03/06 19:15:13 | 000,134,920 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\afwServ.exe PRC - [2012/01/03 09:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011/10/05 09:23:52 | 000,477,696 | ---- | M] (Mediafour Corporation) -- C:\Program Files\Mediafour\MacDrive 9\MacDrive.exe PRC - [2011/09/23 12:46:24 | 000,160,768 | ---- | M] (Mediafour Corporation) -- C:\Program Files\Mediafour\MacDrive 9\MacDrive9Service.exe PRC - [2011/06/15 16:16:48 | 000,997,920 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe PRC - [2011/04/27 16:39:26 | 000,208,944 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe PRC - [2011/04/27 16:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe PRC - [2011/02/26 01:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2011/02/18 12:47:12 | 000,079,192 | ---- | M] (Research In Motion Limited) -- C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe PRC - [2011/01/04 11:23:14 | 000,086,016 | ---- | M] () -- C:\Program Files\LANDesk\LDClient\Antivirus\kavehost.exe PRC - [2010/10/21 14:59:58 | 000,385,024 | ---- | M] (LANDesk Software, Inc. and its affiliates.) -- C:\Program Files\LANDesk\LDClient\SoftMon.exe PRC - [2010/10/18 04:56:08 | 001,157,632 | ---- | M] (LANDesk Software, Inc. and its affiliates.) -- C:\Program Files\LANDesk\LDClient\issuser.exe PRC - [2010/10/14 20:57:06 | 000,205,312 | ---- | M] (LANDesk Software, Inc. and its affiliates.) -- C:\Program Files\LANDesk\LDClient\policy.client.invoker.exe PRC - [2010/10/12 05:17:44 | 000,874,496 | ---- | M] (LANDesk Software, Inc. and its affiliates.) -- C:\Program Files\LANDesk\LDClient\Antivirus\LDAV.exe PRC - [2010/10/11 05:23:14 | 000,563,576 | ---- | M] (LANDesk Software, Inc. and its affiliates.) -- C:\Program Files\LANDesk\LDClient\Antivirus\AVService.exe PRC - [2010/10/08 05:05:36 | 000,189,952 | ---- | M] (LANDesk Software, Inc. and its affiliates.) -- C:\Program Files\LANDesk\LDClient\LocalSch.EXE PRC - [2010/10/07 05:11:32 | 000,178,688 | ---- | M] (LANDesk Software, Inc. and its affiliates.) -- C:\Program Files\LANDesk\LDClient\tmcsvc.exe PRC - [2010/09/29 04:59:52 | 000,331,776 | ---- | M] (LANDesk Software, Inc. and its affiliates.) -- C:\Program Files\LANDesk\LDClient\rcgui.exe PRC - [2010/09/15 05:13:16 | 000,066,048 | ---- | M] (LANDesk Software, Inc. and its affiliates.) -- C:\Program Files\LANDesk\LDClient\tracksvc.exe PRC - [2010/09/09 09:49:04 | 000,123,904 | ---- | M] (LANDesk Software, Inc. and its affiliates.) -- C:\Program Files\LANDesk\LDClient\issclipexec.exe PRC - [2010/04/20 06:48:02 | 000,017,920 | ---- | M] (Avocent Corporation ) -- C:\Program Files\LANDesk\LDClient\LocalWakeUp.exe PRC - [2010/02/09 16:13:28 | 000,030,504 | ---- | M] (SMART Technologies) -- C:\Program Files\SMART Technologies\Classroom Teacher\ResponseHardwareService.exe PRC - [2010/01/29 11:38:56 | 003,372,328 | ---- | M] (SMART Technologies) -- C:\Program Files\SMART Technologies\Classroom Teacher\SMARTBoardService.exe PRC - [2010/01/10 12:01:26 | 000,060,928 | ---- | M] () -- C:\Program Files\STMicroelectronics\AccelerometerP11\InstallFilterService.exe PRC - [2010/01/05 13:44:20 | 001,053,992 | ---- | M] (SMART Technologies ULC) -- C:\Program Files\SMART Technologies\Classroom Teacher\SMARTSNMPAgent.exe PRC - [2009/07/13 21:14:15 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Users\Weberbra\Documents\task.exe PRC - [2008/11/09 16:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe PRC - [2007/08/31 06:13:00 | 000,032,825 | -H-- | M] (LANDesk Software Ltd.) -- C:\Windows\System32\cba\pds.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012/03/26 22:28:43 | 000,444,400 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.142\ppgooglenaclpluginchrome.dll MOD - [2012/03/26 22:28:42 | 003,915,248 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.142\pdf.dll MOD - [2012/03/26 22:27:17 | 000,122,880 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.142\avutil-51.dll MOD - [2012/03/26 22:27:16 | 000,220,672 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.142\avformat-53.dll MOD - [2012/03/26 22:27:14 | 001,747,456 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.142\avcodec-53.dll MOD - [2012/03/26 21:37:41 | 008,747,168 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\18.0.1025.142\gcswf32.dll MOD - [2011/06/24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2011/06/24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2011/05/28 22:04:56 | 000,140,288 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll MOD - [2010/07/15 05:00:22 | 000,186,880 | ---- | M] () -- C:\Program Files\LANDesk\LDClient\httprequest.dll MOD - [2009/12/16 02:27:02 | 000,425,984 | ---- | M] () -- C:\Program Files\SMART Technologies\Classroom Teacher\ZipArchive.dll MOD - [2009/11/23 14:20:54 | 000,043,008 | ---- | M] () -- C:\Program Files\LANDesk\LDClient\rollinglog.dll MOD - [2008/02/27 08:09:18 | 001,536,000 | ---- | M] () -- C:\Program Files\SMART Technologies\Classroom Teacher\QtCore4.dll MOD - [2008/02/19 12:37:32 | 000,561,152 | ---- | M] () -- C:\Program Files\SMART Technologies\Classroom Teacher\QtNetwork4.dll MOD - [2008/02/19 12:36:06 | 006,230,016 | ---- | M] () -- C:\Program Files\SMART Technologies\Classroom Teacher\QtGui4.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012/03/06 19:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2012/03/06 19:15:13 | 000,134,920 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall) SRV - [2012/01/03 09:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011/09/23 12:46:24 | 000,160,768 | ---- | M] (Mediafour Corporation) [Auto | Running] -- C:\Program Files\Mediafour\MacDrive 9\MacDrive9Service.exe -- (MacDrive9Service) SRV - [2011/04/27 16:39:26 | 000,208,944 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv) SRV - [2011/04/27 16:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc) SRV - [2010/10/21 14:59:58 | 000,385,024 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Running] -- C:\Program Files\LANDesk\LDClient\SoftMon.exe -- (Softmon) LANDesk(R) SRV - [2010/10/18 04:56:08 | 001,157,632 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Running] -- C:\Program Files\LANDesk\LDClient\issuser.exe -- (ISSUSER) SRV - [2010/10/15 07:41:22 | 000,147,456 | ---- | M] (Avocent Corporation) [Auto | Stopped] -- C:\Program Files\LANDesk\Shared Files\residentAgent.exe -- (CBA8) LANDesk(R) SRV - [2010/10/14 20:57:06 | 000,205,312 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Running] -- C:\Program Files\LANDesk\LDClient\policy.client.invoker.exe -- (LANDesk Policy Invoker) SRV - [2010/10/11 05:23:14 | 000,563,576 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Running] -- C:\Program Files\LANDesk\LDClient\Antivirus\AVService.exe -- (LDAVService) LANDesk(R) SRV - [2010/10/08 05:05:36 | 000,189,952 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Running] -- C:\Program Files\LANDesk\LDClient\LocalSch.EXE -- (Intel Local Scheduler Service) SRV - [2010/10/07 05:11:32 | 000,178,688 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Running] -- C:\Program Files\LANDesk\LDClient\tmcsvc.exe -- (LANDesk Targeted Multicast) SRV - [2010/09/15 05:13:50 | 000,143,360 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Stopped] -- C:\Program Files\LANDesk\LDClient\ProcTriggerSvc.exe -- (ProcTrigger) LANDesk(R) SRV - [2010/09/15 05:13:16 | 000,066,048 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Running] -- C:\Program Files\LANDesk\LDClient\tracksvc.exe -- (tracksvc) LANDesk(R) SRV - [2010/06/21 10:01:20 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2010/02/09 16:13:28 | 000,030,504 | ---- | M] (SMART Technologies) [Auto | Running] -- C:\Program Files\SMART Technologies\Classroom Teacher\ResponseHardwareService.exe -- (Response Hardware) SRV - [2010/01/15 08:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2010/01/10 12:01:26 | 000,060,928 | ---- | M] () [Auto | Running] -- C:\Program Files\STMicroelectronics\AccelerometerP11\InstallFilterService.exe -- (InstallFilterService) SRV - [2009/07/13 21:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc) SRV - [2009/07/13 21:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/07/13 21:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2008/11/09 16:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService) SRV - [2007/08/31 06:13:00 | 000,032,825 | -H-- | M] (LANDesk Software Ltd.) [Auto | Running] -- C:\Windows\System32\cba\pds.exe -- (Intel PDS) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | System | Stopped] -- C:\Windows\system32\drivers\ocxjpekd.sys -- (ocxjpekd) DRV - [2012/03/06 19:04:25 | 000,112,984 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswFW.sys -- (aswFW) DRV - [2012/03/06 19:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2012/03/06 19:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP) DRV - [2012/03/06 19:03:23 | 000,196,440 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis2.sys -- (aswNdis2) DRV - [2012/03/06 19:02:43 | 000,024,408 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd) DRV - [2012/03/06 19:02:14 | 000,044,376 | -H-- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr) DRV - [2012/03/06 19:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2012/03/06 19:01:48 | 000,057,688 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2012/03/06 19:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2012/03/06 18:44:51 | 000,012,112 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis.sys -- (aswNdis) DRV - [2011/10/03 17:52:12 | 000,238,768 | -H-- | M] (Mediafour Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\MDFSYSNT.SYS -- (MDFSYSNT) DRV - [2011/05/09 12:37:10 | 000,029,864 | -H-- | M] (Mediafour Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\MDPMGRNT.SYS -- (MDPMGRNT) DRV - [2011/05/06 10:19:36 | 000,057,800 | -H-- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\CBDisk.sys -- (CBDisk) DRV - [2011/04/27 16:25:24 | 000,065,024 | -H-- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv) DRV - [2011/04/18 14:18:50 | 000,043,392 | -H-- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\MpNWMon.sys -- (MpNWMon) DRV - [2011/01/04 11:23:14 | 000,311,824 | -H-- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF) DRV - [2010/06/30 05:32:42 | 000,014,848 | -H-- | M] (Avocent Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\cismbios.sys -- (CISMBIOS) DRV - [2010/05/12 20:17:00 | 000,255,096 | -H-- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2010/01/18 07:56:26 | 000,042,672 | -H-- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Accelern.sys -- (Acceler) DRV - [2010/01/18 07:56:26 | 000,017,072 | -H-- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\stdfltn.sys -- (stdflt) DRV - [2009/12/16 02:46:34 | 000,095,456 | -H-- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\slabser.sys -- (slabser) DRV - [2009/12/16 02:46:34 | 000,060,960 | -H-- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\slabbus.sys -- (slabbus) DRV - [2009/12/15 20:47:00 | 000,013,440 | -H-- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\STI2303X.sys -- (STI2303X) DRV - [2009/12/15 20:46:58 | 000,014,120 | -H-- | M] (SMART Technologies ULC) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SMARTVHidMini2000x86.sys -- (SMARTVHidMini2000x86) DRV - [2009/12/15 20:46:54 | 000,013,440 | -H-- | M] (SMART Technologies ULC) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SMARTVTabletPCx86.sys -- (SMARTVTabletPCx86) DRV - [2009/12/15 20:46:54 | 000,011,048 | -H-- | M] (SMART Technologies ULC) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SMARTMouseFilterx86.sys -- (SMARTMouseFilterx86) DRV - [2009/12/10 09:36:54 | 000,214,696 | -H-- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1k6232.sys -- (e1kexpress) Intel(R) DRV - [2009/11/23 13:01:12 | 000,014,336 | -H-- | M] (Avocent Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ldblank.sys -- (ldblank) DRV - [2009/11/23 13:01:12 | 000,006,144 | -H-- | M] (Avocent Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mirrorflt.sys -- (mirrorflt) DRV - [2009/11/23 13:01:12 | 000,005,120 | -H-- | M] (Avocent Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ldmirror.sys -- (ldmirror) DRV - [2009/11/03 16:40:42 | 000,033,832 | -H-- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\cvusbdrv.sys -- (cvusbdrv) DRV - [2009/09/15 05:34:10 | 005,977,216 | -H-- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5x32.sys -- (NETw5x32) Intel(R) DRV - [2009/07/13 21:19:10 | 000,175,824 | -H-- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2009/07/13 21:19:10 | 000,040,896 | -H-- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2009/07/13 21:19:10 | 000,028,224 | -H-- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2009/07/13 19:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009/07/13 19:28:47 | 000,005,632 | -H-- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2009/07/13 19:28:45 | 000,017,920 | -H-- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2009/06/23 12:49:00 | 000,040,832 | -H-- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HECI.sys -- (HECI) Intel(R) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.osceola.k12.fl.us IE - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.osceola.k12.fl.us IE - HKU\S-1-5-21-915298515-3849532854-280385832-277468\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) IE - HKU\S-1-5-21-915298515-3849532854-280385832-277468\..\SearchScopes,DefaultScope = {F31C141B-22F0-4281-ABDF-98B8D11B3370} IE - HKU\S-1-5-21-915298515-3849532854-280385832-277468\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-915298515-3849532854-280385832-277468\..\SearchScopes\{F31C141B-22F0-4281-ABDF-98B8D11B3370}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=1I7ADRA_enUS445 IE - HKU\S-1-5-21-915298515-3849532854-280385832-277468\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-915298515-3849532854-280385832-277468\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.osceola.k12.fl.us;10.*.*.*;172.16.*.*;127.*.*.*;localhost;*.local; IE - HKU\S-1-5-21-915298515-3849532854-280385832-277468\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = apha-ironport:80 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.osceola.k12.fl.us/" FF - prefs.js..network.proxy.ftp: "apha-ironport" FF - prefs.js..network.proxy.ftp_port: 80 FF - prefs.js..network.proxy.http: "apha-ironport" FF - prefs.js..network.proxy.http_port: 80 FF - prefs.js..network.proxy.no_proxies_on: "*.osceola.k12.fl.us,10.*.*.*,172.16.*.*,127.*.*.*,localhost,*.local,localhost,127.0.0.1" FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.socks: "apha-ironport" FF - prefs.js..network.proxy.socks_port: 80 FF - prefs.js..network.proxy.ssl: "apha-ironport" FF - prefs.js..network.proxy.ssl_port: 80 FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll () FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Weberbra\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\crossriderapp1950@crossrider.com: C:\Users\Weberbra\AppData\Local\RewardsArcadeSuite\1950\Firefox [2012/02/11 18:10:13 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/02/13 02:04:54 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/03/31 09:52:58 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/22 12:51:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/02/22 09:48:13 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/02/13 02:04:54 | 000,000,000 | ---D | M] [2011/08/16 18:25:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Weberbra\AppData\Roaming\mozilla\Extensions [2012/02/22 23:23:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012/02/22 12:51:33 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011/10/03 06:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011/09/07 16:15:32 | 001,605,120 | ---- | M] (Library Video Company) -- C:\Program Files\mozilla firefox\plugins\npSAFARIMontagePlayer.dll [2012/02/22 12:51:30 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2012/02/22 12:51:30 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.142\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.142\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\18.0.1025.142\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll CHR - plugin: SAFARI Montage Player (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npSAFARIMontagePlayer.dll CHR - plugin: RIM Handheld Application Loader (Enabled) = C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Unity Player (Enabled) = C:\Users\Weberbra\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - Extension: avast! WebRep = C:\Users\Weberbra\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\ CHR - Extension: RewardsArcade Suite = C:\Users\Weberbra\AppData\Local\Google\Chrome\User Data\Default\Extensions\ielefkgbofdpglioecfjcbikholflklb\1.17.28_0\ Hosts file not found O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) O2 - BHO: (CIEDownload Object) - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files\SMART Technologies\Classroom Teacher\NotebookPlugin.dll (SMART Technologies ULC.) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.) O2 - BHO: (RewardsArcadeSuite) - {B6EF6C45-5E8D-4c3b-B580-A5073261A381} - C:\Program Files\RewardsArcadeSuite\RewardsArcadeSuite.dll (215 Apps) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4 - HKLM..\Run: [Apoint] \DellTPad\Apoint.exe File not found O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [LANDesk Antivirus] C:\Program Files\LANDesk\LDCLient\antivirus\LDav.exe (LANDesk Software, Inc. and its affiliates.) O4 - HKLM..\Run: [MacDrive 9 application] C:\Program Files\Mediafour\MacDrive 9\MacDrive.exe (Mediafour Corporation) O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [RIMBBLaunchAgent.exe] C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited) O4 - HKLM..\Run: [SMART Board Service] C:\Program Files\SMART Technologies\Classroom Teacher\SMARTBoardService.exe (SMART Technologies) O4 - HKLM..\Run: [SMART SNMP Agent] C:\Program Files\SMART Technologies\Classroom Teacher\SMARTSNMPAgent.exe (SMART Technologies ULC) O4 - HKU\S-1-5-19..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found O4 - HKU\S-1-5-20..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found O4 - HKU\S-1-5-21-915298515-3849532854-280385832-277468..\Run: [Sticky-Notes] C:\Program Files\Sticky-Notes\stickynotes.exe File not found O4 - HKU\S-1-5-21-915298515-3849532854-280385832-277468..\Run: [Task Menu] C:\Users\Weberbra\Documents\task.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 181 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\__avast! sandbox\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\__avast! sandbox\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\__avast! sandbox\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\Software\Policies\Microsoft\Internet Explorer\Main present O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetConnectDisconnect = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoManageMyComputerVerb = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSecurityTab = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoComputersNearMe = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuNetworkPlaces = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceStartMenuLogOff = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Intellimenus = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesRecycleBin = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWebServices = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoOnlinePrintsWizard = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowCpl = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleStartMenu = 1 O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 2 = Automatic Updates O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 3 = Folder Options O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 4 = Game Controllers O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 5 = nusrmgr.cpl O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 6 = Security Center (Microsoft Corporation) O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 7 = System O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 8 = User Accounts (Microsoft Corporation) O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowCpl: 9 = Users and Passwords O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 1 = 2005052807_1162828816.swf O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 2 = aim.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 3 = aol.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 4 = Bill Cosby Fun Game.swf O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 5 = desktopclock.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 6 = gaim-1.5.0.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 7 = GamesGames.com O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 8 = limewire.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 9 = LineRider ZaDa.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 10 = migwiz.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 11 = msimn.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 12 = msmsgs.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 14 = n_v14.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 15 = netscape.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 16 = sand_4.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 17 = sand-4-20060322.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 18 = snes9x.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 19 = sol.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 20 = starship.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 21 = ultiman.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 22 = whidepro.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 23 = whidepro-setup.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 24 = whpro.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 25 = www.veoh.com O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 26 = ypager.exe O7 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 27 = zsnesw.exe O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O15 - HKLM\..Trusted Domains: k12.fl.us ([odms.osceola] http in Trusted sites) O15 - HKLM\..Trusted Domains: k12.fl.us ([odms.osceola] https in Trusted sites) O15 - HKLM\..Trusted Domains: k12.fl.us ([odmsrs.osceola] http in Trusted sites) O15 - HKLM\..Trusted Domains: k12.fl.us ([odmsrs.osceola] https in Trusted sites) O15 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\..Trusted Domains: k12.fl.us ([odms.osceola] http in Trusted sites) O15 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\..Trusted Domains: k12.fl.us ([odms.osceola] https in Trusted sites) O15 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\..Trusted Domains: k12.fl.us ([odmsrs.osceola] http in Trusted sites) O15 - HKU\S-1-5-21-915298515-3849532854-280385832-277468\..Trusted Domains: k12.fl.us ([odmsrs.osceola] https in Trusted sites) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 65.32.5.111 65.32.5.112 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = sdoc.osceola.k12.fl.us O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{67F49ABE-34C8-4227-84F0-6FB60693E0A5}: DhcpNameServer = 65.32.5.111 65.32.5.112 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 17:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (lsdelete) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found CREATERESTOREPOINT Error creating restore point. [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/03/31 16:44:02 | 000,000,000 | ---D | C] -- C:\Users\Weberbra\Desktop\RK_Quarantine [2012/03/31 09:53:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Internet Security [2012/03/31 09:53:57 | 000,020,696 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys [2012/03/31 09:53:56 | 000,337,880 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys [2012/03/31 09:53:51 | 000,112,984 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFW.sys [2012/03/31 09:53:23 | 000,196,440 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswNdis2.sys [2012/03/31 09:53:23 | 000,044,376 | -H-- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys [2012/03/31 09:53:22 | 000,053,848 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys [2012/03/31 09:53:22 | 000,024,408 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswKbd.sys [2012/03/31 09:53:21 | 000,612,184 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys [2012/03/31 09:53:20 | 000,057,688 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys [2012/03/31 09:52:51 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Sidebar [2012/03/31 09:52:50 | 000,012,112 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswNdis.sys [2012/03/31 09:52:49 | 000,201,352 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe [2012/03/31 09:52:49 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr [2012/03/31 09:52:35 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software [2012/03/31 09:52:35 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software [2012/03/30 14:25:21 | 000,000,000 | ---D | C] -- C:\Users\Weberbra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SMART HDD [2012/03/23 10:52:21 | 000,000,000 | ---D | C] -- C:\Users\Weberbra\Desktop\Teacher Resources [2012/03/19 15:26:21 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee [2012/03/19 15:26:20 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee Security Scan [2012/03/19 15:26:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus [2012/03/19 15:26:15 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee Security Scan [2012/03/17 22:16:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012/03/17 22:16:14 | 000,020,464 | -H-- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2012/03/17 22:16:14 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2012/03/13 23:38:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2012/03/13 23:37:24 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2012/03/13 23:37:23 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2 C:\Users\Weberbra\Desktop\*.tmp files -> C:\Users\Weberbra\Desktop\*.tmp -> ] [1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/03/31 16:36:00 | 000,000,900 | -H-- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/03/31 16:36:00 | 000,000,896 | -H-- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/03/31 16:07:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012/03/31 14:48:29 | 2760,245,248 | -HS- | M] () -- C:\hiberfil.sys [2012/03/31 14:47:30 | 000,016,304 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/03/31 14:47:30 | 000,016,304 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/03/31 09:53:58 | 000,001,998 | ---- | M] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk [2012/03/31 09:48:32 | 000,000,208 | ---- | M] () -- C:\ProgramData\-AgUJuOvsR2Z1k5r [2012/03/31 09:48:32 | 000,000,000 | ---- | M] () -- C:\ProgramData\-AgUJuOvsR2Z1k5 [2012/03/30 16:02:09 | 000,001,467 | ---- | M] () -- C:\Users\Weberbra\Desktop\Password Reset.lnk [2012/03/30 16:02:09 | 000,000,132 | ---- | M] () -- C:\Users\Weberbra\Desktop\Gradebook.url [2012/03/30 16:00:00 | 000,001,548 | ---- | M] () -- C:\Users\Public\Desktop\ePatLauncher.lnk [2012/03/30 14:25:21 | 000,000,671 | ---- | M] () -- C:\Users\Weberbra\Application Data\Microsoft\Internet Explorer\Quick Launch\SMART_HDD.lnk [2012/03/30 14:25:20 | 000,000,256 | ---- | M] () -- C:\ProgramData\AgUJuOvsR2Z1k5 [2012/03/30 13:39:22 | 000,006,372 | -H-- | M] () -- C:\Windows\System32\ldcpu.data [2012/03/30 13:38:34 | 000,000,138 | ---- | M] () -- C:\Users\Public\Desktop\Orbit Students.url [2012/03/30 13:38:34 | 000,000,129 | ---- | M] () -- C:\Users\Public\Desktop\Orbit Teachers.url [2012/03/30 13:18:55 | 000,626,278 | -H-- | M] () -- C:\Windows\System32\perfh009.dat [2012/03/30 13:18:55 | 000,107,522 | -H-- | M] () -- C:\Windows\System32\perfc009.dat [2012/03/29 20:38:04 | 000,002,290 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2012/03/26 22:01:10 | 000,046,814 | ---- | M] () -- C:\Users\Weberbra\Desktop\11-i-want-fame-test.pdf [2012/03/26 22:00:39 | 000,773,057 | ---- | M] () -- C:\Users\Weberbra\Desktop\11-i-want-fame-exercises.pdf [2012/03/26 17:53:44 | 000,279,377 | ---- | M] () -- C:\Users\Weberbra\Desktop\Gr7_Rdg_Answers.pdf [2012/03/26 17:53:23 | 000,453,512 | ---- | M] () -- C:\Users\Weberbra\Desktop\Gr7_Rdg_sample.pdf [2012/03/19 15:26:16 | 000,001,888 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk [2012/03/19 15:26:16 | 000,001,886 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2012/03/18 14:14:57 | 025,124,238 | ---- | M] () -- C:\Users\Weberbra\Desktop\Fun_Spring_Break_2012.wmv [2012/03/17 22:16:15 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012/03/17 22:09:35 | 001,008,141 | ---- | M] () -- C:\Users\Weberbra\Desktop\iExplore.exe [2012/03/13 23:38:00 | 000,001,753 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2012/03/06 19:15:19 | 000,041,184 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr [2012/03/06 19:15:14 | 000,201,352 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe [2012/03/06 19:04:25 | 000,112,984 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswFW.sys [2012/03/06 19:03:51 | 000,612,184 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys [2012/03/06 19:03:38 | 000,337,880 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys [2012/03/06 19:03:23 | 000,196,440 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswNdis2.sys [2012/03/06 19:02:43 | 000,024,408 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswKbd.sys [2012/03/06 19:02:14 | 000,044,376 | -H-- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys [2012/03/06 19:01:53 | 000,053,848 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys [2012/03/06 19:01:48 | 000,057,688 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys [2012/03/06 19:01:30 | 000,020,696 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys [2012/03/06 18:44:51 | 000,012,112 | ---- | M] (ALWIL Software) -- C:\Windows\System32\drivers\aswNdis.sys [2012/03/05 22:45:15 | 004,625,586 | ---- | M] () -- C:\Users\Weberbra\Desktop\On_the_Town_(1949)_-_You're_Awful.mp3 [2012/03/02 10:38:18 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2 C:\Users\Weberbra\Desktop\*.tmp files -> C:\Users\Weberbra\Desktop\*.tmp -> ] [1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/03/31 16:47:52 | 000,002,693 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft Office Word 2007.lnk [2012/03/31 16:47:52 | 000,002,655 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft Office Excel 2007.lnk [2012/03/31 16:47:52 | 000,002,645 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft Office PowerPoint 2007.lnk [2012/03/31 16:47:52 | 000,002,290 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2012/03/31 16:47:52 | 000,002,169 | ---- | C] () -- C:\Users\Public\Desktop\SMART Notebook 10.lnk [2012/03/31 16:47:52 | 000,002,125 | ---- | C] () -- C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk [2012/03/31 16:47:52 | 000,002,025 | ---- | C] () -- C:\Users\Public\Desktop\Image Mate.lnk [2012/03/31 16:47:52 | 000,001,998 | ---- | C] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk [2012/03/31 16:47:52 | 000,001,888 | ---- | C] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk [2012/03/31 16:47:52 | 000,001,864 | ---- | C] () -- C:\Users\Public\Desktop\Sticky-Notes.lnk [2012/03/31 16:47:52 | 000,001,815 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2012/03/31 16:47:52 | 000,001,768 | ---- | C] () -- C:\Users\Public\Desktop\FirstClass.lnk [2012/03/31 16:47:52 | 000,001,753 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2012/03/31 16:47:52 | 000,001,714 | ---- | C] () -- C:\Users\Public\Desktop\Photo Story 3 for Windows.lnk [2012/03/31 16:47:52 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk [2012/03/31 16:47:52 | 000,001,273 | ---- | C] () -- C:\Users\Public\Desktop\HP Solution Center.lnk [2012/03/31 16:47:52 | 000,001,210 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk [2012/03/31 16:47:52 | 000,001,178 | ---- | C] () -- C:\Users\Public\Desktop\PowerTerms.lnk [2012/03/31 16:47:52 | 000,001,119 | ---- | C] () -- C:\Users\Public\Desktop\Shop for HP Supplies.lnk [2012/03/31 16:47:52 | 000,001,096 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012/03/31 16:47:52 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012/03/31 16:47:52 | 000,000,125 | ---- | C] () -- C:\Users\Public\Desktop\Installs FC Server.url [2012/03/31 16:47:51 | 000,002,222 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SMART Board Tools.lnk [2012/03/31 16:47:51 | 000,002,202 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Desktop Menu.lnk [2012/03/31 16:47:51 | 000,002,069 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2012/03/31 16:47:51 | 000,001,886 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2012/03/31 16:47:50 | 000,001,897 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk [2012/03/31 16:47:50 | 000,001,714 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Story 3 for Windows.lnk [2012/03/31 16:47:50 | 000,001,108 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2012/03/31 16:47:50 | 000,001,028 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR Registration.lnk [2012/03/31 16:47:49 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2012/03/31 16:47:49 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2012/03/31 09:48:32 | 000,000,208 | ---- | C] () -- C:\ProgramData\-AgUJuOvsR2Z1k5r [2012/03/31 09:48:31 | 000,000,000 | ---- | C] () -- C:\ProgramData\-AgUJuOvsR2Z1k5 [2012/03/30 16:00:54 | 000,001,515 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk [2012/03/30 14:25:21 | 000,000,671 | ---- | C] () -- C:\Users\Weberbra\Application Data\Microsoft\Internet Explorer\Quick Launch\SMART_HDD.lnk [2012/03/30 14:25:19 | 000,000,256 | ---- | C] () -- C:\ProgramData\AgUJuOvsR2Z1k5 [2012/03/30 13:38:34 | 000,000,138 | ---- | C] () -- C:\Users\Public\Desktop\Orbit Students.url [2012/03/30 13:38:34 | 000,000,129 | ---- | C] () -- C:\Users\Public\Desktop\Orbit Teachers.url [2012/03/30 13:38:13 | 000,001,548 | ---- | C] () -- C:\Users\Public\Desktop\ePatLauncher.lnk [2012/03/26 22:01:10 | 000,046,814 | ---- | C] () -- C:\Users\Weberbra\Desktop\11-i-want-fame-test.pdf [2012/03/26 22:00:39 | 000,773,057 | ---- | C] () -- C:\Users\Weberbra\Desktop\11-i-want-fame-exercises.pdf [2012/03/26 17:53:44 | 000,279,377 | ---- | C] () -- C:\Users\Weberbra\Desktop\Gr7_Rdg_Answers.pdf [2012/03/26 17:53:23 | 000,453,512 | ---- | C] () -- C:\Users\Weberbra\Desktop\Gr7_Rdg_sample.pdf [2012/03/18 14:14:57 | 025,124,238 | ---- | C] () -- C:\Users\Weberbra\Desktop\Fun_Spring_Break_2012.wmv [2012/03/17 22:09:31 | 001,008,141 | ---- | C] () -- C:\Users\Weberbra\Desktop\iExplore.exe [2012/03/08 16:06:10 | 000,010,240 | -H-- | C] () -- C:\Windows\System32\lsdelete.exe [2012/03/08 11:12:45 | 000,001,467 | ---- | C] () -- C:\Users\Weberbra\Desktop\Password Reset.lnk [2012/03/05 22:45:13 | 004,625,586 | ---- | C] () -- C:\Users\Weberbra\Desktop\On_the_Town_(1949)_-_You're_Awful.mp3 [2012/03/02 10:38:18 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2012/02/13 02:01:11 | 000,164,646 | -H-- | C] () -- C:\Windows\hpoins29.dat [2012/02/13 02:01:11 | 000,000,457 | -H-- | C] () -- C:\Windows\hpomdl29.dat [2011/10/26 13:20:43 | 000,194,348 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat [2011/09/22 12:08:25 | 000,006,144 | -H-- | C] () -- C:\Users\Weberbra\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/08/01 13:44:59 | 000,006,372 | -H-- | C] () -- C:\Windows\System32\ldcpu.data [2011/08/01 13:42:42 | 000,082,432 | -H-- | C] () -- C:\Windows\System32\ldcred.dll [2011/08/01 13:42:41 | 000,239,618 | -H-- | C] () -- C:\Windows\System32\compname.exe [2011/08/01 13:18:22 | 000,051,537 | R-S- | C] () -- C:\ProgramData\ntuser.pol [2011/06/15 07:07:49 | 000,002,528 | -H-- | C] () -- C:\Windows\FCIC.INI [2011/02/11 19:10:52 | 000,127,868 | -H-- | C] () -- C:\Windows\System32\igcompkrng575.bin [2011/02/11 19:10:52 | 000,104,796 | -H-- | C] () -- C:\Windows\System32\igfcg575m.bin [2011/02/11 19:10:50 | 000,874,048 | -H-- | C] () -- C:\Windows\System32\igkrng575.bin [2011/02/11 18:40:40 | 000,004,096 | -H-- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2010/06/28 08:49:56 | 000,165,376 | -H-- | C] () -- C:\Windows\System32\unrar.dll [2010/06/28 08:49:56 | 000,000,038 | -H-- | C] () -- C:\Windows\avisplitter.ini [2010/06/28 08:49:55 | 000,790,528 | -H-- | C] () -- C:\Windows\System32\xvidcore.dll [2010/06/28 08:49:55 | 000,134,144 | -H-- | C] () -- C:\Windows\System32\xvidvfw.dll [2010/06/28 08:49:55 | 000,108,032 | -H-- | C] () -- C:\Windows\System32\ff_vfw.dll [color=#E56717]========== LOP Check ==========[/color] [2010/06/28 07:46:02 | 000,000,000 | ---D | M] -- C:\Users\0583432\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\0583432\AppData\Roaming\SMART Technologies Inc [2011/12/14 15:15:50 | 000,000,000 | ---D | M] -- C:\Users\0584731\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\0584731\AppData\Roaming\SMART Technologies Inc [2011/12/14 14:36:42 | 000,000,000 | ---D | M] -- C:\Users\0588034\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\0588034\AppData\Roaming\SMART Technologies Inc [2010/06/28 07:46:02 | 000,000,000 | ---D | M] -- C:\Users\0614109\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\0614109\AppData\Roaming\SMART Technologies Inc [2011/12/13 16:06:13 | 000,000,000 | ---D | M] -- C:\Users\0698018\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\0698018\AppData\Roaming\SMART Technologies Inc [2010/06/28 07:46:02 | 000,000,000 | ---D | M] -- C:\Users\acunag\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\acunag\AppData\Roaming\SMART Technologies Inc [2010/06/28 07:46:02 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\SMART Technologies Inc [2010/06/28 07:46:02 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\SMART Technologies Inc [2010/06/28 07:46:02 | 000,000,000 | ---D | M] -- C:\Users\fonsecaa\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\fonsecaa\AppData\Roaming\SMART Technologies Inc [2010/06/28 07:46:02 | 000,000,000 | ---D | M] -- C:\Users\gosst\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\gosst\AppData\Roaming\SMART Technologies Inc [2010/06/28 07:46:02 | 000,000,000 | ---D | M] -- C:\Users\Siteadmin\AppData\Roaming\SMART Technologies [2012/01/28 19:44:45 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\.minecraft [2011/11/18 13:36:29 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\65828F5D [2012/03/31 14:46:18 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\AA935 [2011/11/22 11:33:35 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\mNttx00cS1bDoGa [2011/11/22 11:33:45 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\QG55aQH6dK7fLgX [2011/12/07 19:32:01 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\Research In Motion [2011/11/22 11:33:34 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\rK8ffL9hTqjUeIr [2011/08/27 20:40:48 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\Rovio [2011/08/16 15:01:40 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\SMART Technologies [2011/06/10 23:28:08 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\SMART Technologies Inc [2011/09/10 21:49:01 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\Unity [2011/11/22 11:33:45 | 000,000,000 | ---D | M] -- C:\Users\Weberbra\AppData\Roaming\wjYYCekIVzONx0c [2012/02/27 09:04:26 | 000,032,536 | -H-- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color] [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color] [2011/02/26 01:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe [2009/07/13 21:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe [2011/02/26 01:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe [2009/10/31 01:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe [2011/02/26 01:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\explorer.exe [2011/02/26 01:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe [2011/01/16 15:55:21 | 000,255,488 | ---- | M] () MD5=3C33B26F2F7FA61D882515F2D6078691 -- C:\Users\Weberbra\AppData\Local\Temp\RarSFX0\procs\explorer.exe [2011/01/16 15:55:21 | 000,255,488 | ---- | M] () MD5=3C33B26F2F7FA61D882515F2D6078691 -- C:\Users\Weberbra\AppData\Local\Temp\RarSFX1\procs\explorer.exe [2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe [2009/08/03 01:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe [2005/08/16 01:54:58 | 000,001,536 | ---- | M] () MD5=ABC6379205DE2618851C4FCBF72112EB -- C:\Users\Weberbra\AppData\Local\Temp\RarSFX0\h\explorer.exe [2005/08/16 01:54:58 | 000,001,536 | ---- | M] () MD5=ABC6379205DE2618851C4FCBF72112EB -- C:\Users\Weberbra\AppData\Local\Temp\RarSFX1\h\explorer.exe [2009/08/03 01:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe [2009/10/31 02:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe [color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color] [2009/07/13 21:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe [2009/07/13 21:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe [2012/01/31 13:13:46 | 000,182,856 | ---- | M] () MD5=9F37B15F56C3D248CD299D34BCB2CEFA -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe [color=#A23BEC]< MD5 for: USERINIT.EXE >[/color] [2009/07/13 21:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe [2009/07/13 21:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe [2009/05/26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\Weberbra\AppData\Local\Temp\RarSFX0\userinit.exe [2009/05/26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\Weberbra\AppData\Local\Temp\RarSFX1\userinit.exe [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2009/10/28 02:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe [2009/10/28 02:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe [2009/10/28 01:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe [2009/07/13 21:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe [2012/01/31 13:13:46 | 000,182,856 | ---- | M] () MD5=9F37B15F56C3D248CD299D34BCB2CEFA -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe [2009/05/26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\Weberbra\AppData\Local\Temp\RarSFX0\winlogon.exe [2009/05/26 18:47:22 | 000,031,232 | ---- | M] (NirSoft) MD5=AC6094297CD882B8626466CDEB64F19F -- C:\Users\Weberbra\AppData\Local\Temp\RarSFX1\winlogon.exe [color=#A23BEC]< C:\Windows\assembly\tmp\U\*.* /s >[/color] [color=#A23BEC]< %Temp%\smtmp\1\*.* >[/color] [2009/07/14 00:46:35 | 000,001,282 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\1\Default Programs.lnk [2009/07/14 00:46:35 | 000,000,442 | -HS- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\1\desktop.ini [2012/02/13 02:03:34 | 000,001,279 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\1\HP Solution Center.lnk [2011/06/10 23:48:06 | 000,002,615 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\1\New Microsoft Office Document.lnk [2011/06/10 23:48:06 | 000,002,625 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\1\Open Microsoft Office Document.lnk [2009/07/14 00:37:43 | 000,001,266 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\1\Windows Update.lnk [color=#A23BEC]< %Temp%\smtmp\2\*.* >[/color] [color=#A23BEC]< %Temp%\smtmp\3\*.* >[/color] [color=#A23BEC]< %Temp%\smtmp\4\*.* >[/color] [2012/03/31 09:53:58 | 000,001,998 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\avast! Internet Security.lnk [2009/07/14 00:41:57 | 000,000,174 | -HS- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\desktop.ini [2012/03/30 12:15:17 | 000,001,548 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\ePatLauncher.lnk [2011/06/15 07:07:51 | 000,001,768 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\FirstClass.lnk [2012/03/29 20:38:04 | 000,002,290 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Google Chrome.lnk [2012/02/13 02:05:49 | 000,002,125 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\HP Photosmart Essential 3.5.lnk [2012/02/13 02:03:34 | 000,001,273 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\HP Solution Center.lnk [2011/06/15 07:09:57 | 000,002,025 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Image Mate.lnk [2011/06/15 07:08:08 | 000,000,125 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Installs FC Server.url [2012/03/13 23:38:00 | 000,001,753 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\iTunes.lnk [2012/03/17 22:16:15 | 000,001,071 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Malwarebytes Anti-Malware.lnk [2012/03/19 15:26:16 | 000,001,888 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\McAfee Security Scan Plus.lnk [2011/06/10 23:49:56 | 000,002,655 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Microsoft Office Excel 2007.lnk [2011/06/10 23:49:52 | 000,002,645 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Microsoft Office PowerPoint 2007.lnk [2011/06/10 23:49:47 | 000,002,693 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Microsoft Office Word 2007.lnk [2011/08/16 18:24:49 | 000,001,096 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Mozilla Firefox.lnk [2011/08/15 12:55:37 | 000,000,132 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Orbit Students.url [2011/08/15 12:55:37 | 000,000,123 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Orbit Teachers.url [2011/06/10 23:24:47 | 000,001,714 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Photo Story 3 for Windows.lnk [2011/06/10 23:25:39 | 000,001,178 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\PowerTerms.lnk [2011/11/09 23:03:40 | 000,001,815 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\QuickTime Player.lnk [2012/02/13 02:05:11 | 000,001,119 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Shop for HP Supplies.lnk [2011/06/10 23:28:04 | 000,002,169 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\SMART Notebook 10.lnk [2012/02/21 23:55:25 | 000,001,864 | ---- | M] () -- C:\Users\Weberbra\AppData\Local\Temp\smtmp\4\Sticky-Notes.lnk [color=#A23BEC]< type c:\diskreport.txt /c >[/color] Microsoft DiskPart version 6.1.7600 Copyright (C) 1999-2008 Microsoft Corporation. On computer: DSCV-145 Volume ### Ltr Label Fs Type Size Status Info ---------- --- ----------- ----- ---------- ------- --------- -------- Volume 0 D DVD-ROM 0 B No Media Volume 1 System Rese NTFS Partition 100 MB Healthy System Volume 2 C NTFS Partition 148 GB Healthy Boot < End of report >