OTL logfile created on: 5/27/2012 8:08:09 PM - Run 8
OTL by OldTimer - Version 3.2.43.0     Folder = C:\Documents and Settings\mangesww\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
1.12 Gb Total Physical Memory | 0.54 Gb Available Physical Memory | 48.24% Memory free
2.67 Gb Paging File | 2.16 Gb Available in Paging File | 80.69% Paging File free
Paging file location(s): C:\pagefile.sys 1716 3432 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 175.20 Gb Free Space | 75.23% Space Free | Partition Type: NTFS
Drive E: | 979.97 Mb Total Space | 68.51 Mb Free Space | 6.99% Space Free | Partition Type: FAT32
Drive F: | 931.48 Gb Total Space | 904.26 Gb Free Space | 97.08% Space Free | Partition Type: NTFS
Drive G: | 186.26 Gb Total Space | 55.05 Gb Free Space | 29.56% Space Free | Partition Type: FAT32
 
Computer Name: JTMLAPTOP | User Name: mangesww | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012/05/14 19:19:24 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\mangesww\Desktop\OTL.com
PRC - [2012/05/02 06:39:16 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
PRC - [2012/05/02 06:39:12 | 003,905,920 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
PRC - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/04/04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2011/08/05 12:29:56 | 000,057,056 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Zune\ZuneBusEnum.exe
PRC - [2008/04/13 20:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006/06/29 12:12:34 | 000,376,832 | ---- | M] (Dell Inc.) -- C:\Program Files\Dell\QuickSet\NicConfigSvc.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012/05/27 20:03:36 | 000,052,736 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
MOD - [2012/05/27 20:03:35 | 000,065,024 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
MOD - [2012/05/02 07:07:46 | 000,117,760 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
MOD - [2012/05/02 07:07:45 | 000,052,224 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
MOD - [2012/02/20 21:29:04 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012/02/20 21:28:42 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2009/11/05 08:39:40 | 000,087,552 | ---- | M] () -- C:\WINDOWS\system32\cpwmon2k.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012/05/02 06:39:16 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2012/04/20 21:19:00 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/02/29 08:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011/08/05 12:30:02 | 000,444,640 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Zune\ZuneWlanCfgSvc.exe -- (ZuneWlanCfgSvc)
SRV - [2011/08/05 12:30:02 | 000,268,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Zune\WMZuneComm.exe -- (WMZuneComm)
SRV - [2011/08/05 12:29:56 | 006,363,872 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Zune\ZuneNss.exe -- (ZuneNetworkSvc)
SRV - [2011/08/05 12:29:56 | 000,057,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Zune\ZuneBusEnum.exe -- (ZuneBusEnum)
SRV - [2011/08/02 21:37:50 | 000,400,368 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Roxio\RoxioNow Player\RNowSvc.exe -- (RoxioNow Service)
SRV - [2011/06/27 23:15:44 | 000,258,048 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Franson\GpsGate 2.0\GpsGateService.exe -- (Franson GpsGate 2.0)
SRV - [2006/06/29 12:12:34 | 000,376,832 | ---- | M] (Dell Inc.) [Auto | Running] -- C:\Program Files\Dell\QuickSet\NicConfigSvc.exe -- (NICCONFIGSVC)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\UIUSys.sys -- (UIUSys)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\rt2870.sys -- (rt2870)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\rcvpn.sys -- (rcvpn)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012/05/02 06:39:04 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2012/05/02 06:39:03 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2012/05/01 17:15:18 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\utk0otc2.sys -- (utk0otc2)
DRV - [2012/04/04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011/06/02 11:08:34 | 000,011,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\SystemRequirementsLab\cpudrv.sys -- (cpudrv)
DRV - [2011/03/25 09:54:31 | 000,117,752 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2010/07/12 14:49:18 | 000,060,104 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2010/07/12 14:48:56 | 000,073,032 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2010/05/06 17:35:04 | 000,829,152 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AE1000XP.sys -- (AE1000)
DRV - [2009/12/30 10:20:56 | 000,027,064 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\revoflt.sys -- (Revoflt)
DRV - [2009/02/24 18:42:14 | 000,116,736 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mcdbus.sys -- (mcdbus)
DRV - [2007/07/09 18:40:52 | 000,128,144 | R--- | M] (Deterministic Networks, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dne2000.sys -- (DNE)
DRV - [2007/03/16 18:10:56 | 000,604,928 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2006/07/21 10:48:10 | 000,035,107 | ---- | M] (Winternals) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VDiskBus.sys -- (vdiskbus)
DRV - [2006/05/10 15:00:16 | 000,156,160 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2006/05/05 19:21:00 | 000,004,608 | ---- | M] (NVIDIA Corporation.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\nvport.sys -- (nvport)
DRV - [2006/04/03 22:00:56 | 000,014,949 | ---- | M] (franson.biz) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\bizVSerialNT.sys -- (bizVSerial)
DRV - [2006/03/29 08:49:26 | 000,009,856 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2005/08/12 17:50:46 | 000,016,128 | ---- | M] (Dell Inc) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\APPDRV.SYS -- (APPDRV)
DRV - [2005/05/03 15:09:28 | 001,033,728 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_DPV.SYS -- (HSF_DPV)
DRV - [2005/05/03 15:08:50 | 000,208,384 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSFHWICH.sys -- (HSFHWICH)
DRV - [2005/05/03 15:08:44 | 000,705,408 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2004/11/15 15:37:52 | 000,264,440 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\stac97.sys -- (STAC97) Audio Driver (WDM)
DRV - [2004/02/04 11:27:56 | 000,049,536 | ---- | M] (Texas Instruments Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tiehdusb.sys -- (TIEHDUSB)
DRV - [2003/12/17 15:30:46 | 000,017,005 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\ASPI32.SYS -- (Aspi32)
DRV - [2003/07/21 13:01:06 | 000,032,400 | ---- | M] (Winternals, SysInternals) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tdimsys.sys -- (TDIMSYS)
DRV - [2003/01/23 16:37:50 | 000,017,217 | ---- | M] (Dell Computer Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\omci.sys -- (omci)
DRV - [2002/12/24 19:52:00 | 000,059,520 | ---- | M] (REDC) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\Rmedia.sys -- (rmedia)
DRV - [2002/04/11 17:43:44 | 000,016,194 | ---- | M] (AMBIT Microsystems Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\AWINDIS5.SYS -- (AWINDIS5)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C0 48 30 8F 48 EC C9 01  [binary data]
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.selectedEngine: "Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/05/10 16:11:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2012/05/10 16:13:15 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\mangesww\Application Data\Mozilla\Extensions
[2012/05/16 15:06:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\mangesww\Application Data\Mozilla\Firefox\Profiles\44bv88th.default\extensions
[2012/05/10 16:20:03 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\mangesww\Application Data\Mozilla\Firefox\Profiles\44bv88th.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2012/05/10 16:20:02 | 000,000,000 | ---D | M] (Ghostery) -- C:\Documents and Settings\mangesww\Application Data\Mozilla\Firefox\Profiles\44bv88th.default\extensions\firefox@ghostery.com
[2012/05/10 16:25:53 | 000,000,000 | ---D | M] (Form History Control) -- C:\Documents and Settings\mangesww\Application Data\Mozilla\Firefox\Profiles\44bv88th.default\extensions\formhistory@yahoo.com
[2012/05/10 16:11:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/05/10 16:25:53 | 000,242,709 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MANGESWW\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\44BV88TH.DEFAULT\EXTENSIONS\{582195F5-92E7-40A0-A127-DB71295901D7}.XPI
[2012/05/10 16:20:03 | 000,634,964 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MANGESWW\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\44BV88TH.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012/05/10 16:19:55 | 000,047,822 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MANGESWW\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\44BV88TH.DEFAULT\EXTENSIONS\BROWSERPROTECT@BROWSERPROTECT.COM.XPI
[2012/05/10 16:19:55 | 000,021,992 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MANGESWW\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\44BV88TH.DEFAULT\EXTENSIONS\CACHE@STATUS.ORG.XPI
[2012/05/10 16:20:02 | 000,147,186 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MANGESWW\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\44BV88TH.DEFAULT\EXTENSIONS\REQUESTPOLICY@REQUESTPOLICY.COM.XPI
[2012/04/20 21:19:34 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
 
O1 HOSTS File: ([2012/05/04 18:58:31 | 000,437,615 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 127.0.0.1	00hq.com
O1 - Hosts: 127.0.0.1	010402.com
O1 - Hosts: 127.0.0.1	www.032439.com
O1 - Hosts: 127.0.0.1	032439.com
O1 - Hosts: 127.0.0.1	www.0scan.com
O1 - Hosts: 127.0.0.1	0scan.com
O1 - Hosts: 127.0.0.1	1000gratisproben.com
O1 - Hosts: 127.0.0.1	www.1000gratisproben.com
O1 - Hosts: 127.0.0.1	1001namen.com
O1 - Hosts: 127.0.0.1	www.1001namen.com
O1 - Hosts: 127.0.0.1	100888290cs.com
O1 - Hosts: 127.0.0.1	www.100888290cs.com
O1 - Hosts: 127.0.0.1	www.100sexlinks.com
O1 - Hosts: 127.0.0.1	100sexlinks.com
O1 - Hosts: 127.0.0.1	10sek.com
O1 - Hosts: 127.0.0.1	www.10sek.com
O1 - Hosts: 127.0.0.1	www.1-2005-search.com
O1 - Hosts: 127.0.0.1	1-2005-search.com
O1 - Hosts: 15053 more lines...
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O3 - HKLM\..\Toolbar: (SnagIt) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll (TechSmith Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {724D43A0-0D85-11D4-9908-00400523E39A} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [SBAutoUpdate] C:\Program Files\SpywareBlaster\sbautoupdate.exe ()
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - Startup: C:\Documents and Settings\mangesww\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowLegacyWebView = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: AllowUnhashedWebView = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - Reg Error: Key error. File not found
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} http://support.dell.com/systemprofiler/SysPro.CAB (SysProWmi Class)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1242707181735 (WUWebControl Class)
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455}  (ExentInf Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1242707248220 (MUWebControl Class)
O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab (DLC Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{097E9B33-3BD9-4D62-BB01-F14AF0B39F32}: DhcpNameServer = 10.10.10.4
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\klogon: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/05/15 07:02:53 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010/12/01 21:53:56 | 000,000,029 | R--- | M] () - F:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2012/05/22 23:46:42 | 000,000,528 | ---- | M] () - G:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2007/11/15 13:15:02 | 000,001,114 | ---- | M] () - G:\AUTOEXEC.BAT.bck -- [ FAT32 ]
O32 - AutoRun File - [2012/05/22 22:19:26 | 000,001,690 | ---- | M] () - G:\AUTOEXEC.BAk22.txt -- [ FAT32 ]
O33 - MountPoints2\{0da6c771-a371-11e1-8c37-001143cca6f5}\Shell - "" = AutoRun
O33 - MountPoints2\{0da6c771-a371-11e1-8c37-001143cca6f5}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{0da6c771-a371-11e1-8c37-001143cca6f5}\Shell\AutoRun\command - "" = E:\autorunner.exe "start.html"
O33 - MountPoints2\{71825cd1-93c2-11e1-8bed-001143cca6f5}\Shell - "" = AutoRun
O33 - MountPoints2\{71825cd1-93c2-11e1-8bed-001143cca6f5}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{71825cd1-93c2-11e1-8bed-001143cca6f5}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\autorunner.exe "start.html"
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012/05/27 20:07:32 | 000,595,456 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\mangesww\Desktop\OTL.com
[2012/05/21 14:41:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\My Documents\SnagIt Catalog
[2012/05/19 21:18:36 | 000,000,000 | ---D | C] -- C:\EasyBoot
[2012/05/19 01:06:39 | 000,847,872 | ---- | C] (Western Digital) -- C:\Documents and Settings\mangesww\Desktop\WinDlg.exe
[2012/05/19 01:06:38 | 000,573,763 | ---- | C] (Western Digital Corporation                                 ) -- C:\Documents and Settings\mangesww\Desktop\setup.exe
[2012/05/19 01:06:37 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\mangesww\Desktop\OTL.scr
[2012/05/15 17:48:31 | 000,000,000 | ---D | C] -- C:\5f346dba1ffd8af3ae1e893af7492a8c
[2012/05/15 16:53:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\EasyBoot
[2012/05/15 16:53:49 | 000,000,000 | ---D | C] -- C:\EasyBoot1
[2012/05/15 16:27:44 | 000,000,000 | ---D | C] -- C:\e058ac5473a2b28cf6
[2012/05/15 16:01:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\InstallShield
[2012/05/15 13:38:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Application Data\Stylus Studio
[2012/05/10 16:12:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Local Settings\Application Data\Mozilla
[2012/05/10 16:12:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Application Data\Mozilla
[2012/05/10 16:11:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Mozilla
[2012/05/10 16:11:41 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012/05/10 16:10:59 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012/05/10 15:40:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Start Menu\Programs\MagicDisc
[2012/05/10 15:40:16 | 000,116,736 | ---- | C] (MagicISO, Inc.) -- C:\WINDOWS\System32\drivers\mcdbus.sys
[2012/05/10 15:40:15 | 000,000,000 | ---D | C] -- C:\Program Files\MagicDisc
[2012/05/10 15:37:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Local Settings\Application Data\VS Revo Group
[2012/05/10 15:34:52 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\mangesww\IECompatCache
[2012/05/10 15:08:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Application Data\Malwarebytes
[2012/05/09 13:53:42 | 000,017,280 | ---- | C] (American Megatrends Inc.) -- C:\WINDOWS\System32\dllcache\mraid35x.sys
[2012/05/09 13:52:26 | 000,164,586 | ---- | C] (Madge Networks Ltd) -- C:\WINDOWS\System32\dllcache\mdgndis5.sys
[2012/05/09 13:51:48 | 000,797,500 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltsmt.sys
[2012/05/09 13:51:44 | 000,802,683 | ---- | C] (Lucent Technologies) -- C:\WINDOWS\System32\dllcache\ltsm.sys
[2012/05/09 13:51:42 | 000,420,992 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2012/05/09 13:51:38 | 000,576,746 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2012/05/09 13:51:37 | 000,606,684 | ---- | C] (LT) -- C:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2012/05/09 13:51:34 | 000,727,786 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\ltck000c.sys
[2012/05/09 13:51:15 | 000,070,730 | ---- | C] (Linksys Group, Inc.) -- C:\WINDOWS\System32\dllcache\lne100tx.sys
[2012/05/09 13:51:11 | 000,020,573 | ---- | C] (The Linksts Group ) -- C:\WINDOWS\System32\dllcache\lne100.sys
[2012/05/09 13:51:07 | 000,025,065 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\lmndis3.sys
[2012/05/09 13:51:03 | 000,015,744 | ---- | C] (Litronic Industries) -- C:\WINDOWS\System32\dllcache\lit220p.sys
[2012/05/09 13:50:57 | 000,026,442 | ---- | C] (SMSC) -- C:\WINDOWS\System32\dllcache\lanepic5.sys
[2012/05/09 13:50:52 | 000,019,016 | ---- | C] (Kingston Technology Company                                                             ) -- C:\WINDOWS\System32\dllcache\ktc111.sys
[2012/05/09 13:49:02 | 000,023,552 | ---- | C] (MKNet Corporation) -- C:\WINDOWS\System32\dllcache\irmk7.sys
[2012/05/09 13:47:26 | 000,372,824 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\iconf32.dll
[2012/05/09 13:43:33 | 000,068,608 | ---- | C] (Avisioin) -- C:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2012/05/09 13:43:20 | 000,126,976 | ---- | C] (Hewlett Packard) -- C:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2012/05/09 13:42:33 | 000,028,288 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\grserial.sys
[2012/05/09 13:42:30 | 000,082,304 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\grclass.sys
[2012/05/09 13:42:26 | 000,017,408 | ---- | C] (Gemplus) -- C:\WINDOWS\System32\dllcache\gpr400.sys
[2012/05/09 13:42:00 | 000,454,912 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fxusbase.sys
[2012/05/09 13:41:42 | 000,455,296 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fusbbase.sys
[2012/05/09 13:41:39 | 000,455,680 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fus2base.sys
[2012/05/09 13:41:25 | 000,442,240 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpnpbase.sys
[2012/05/09 13:41:22 | 000,441,728 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpcmbase.sys
[2012/05/09 13:41:19 | 000,444,416 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\fpcibase.sys
[2012/05/09 13:41:18 | 000,034,173 | ---- | C] (Marconi Communications, Inc.) -- C:\WINDOWS\System32\dllcache\forehe.sys
[2012/05/09 13:40:49 | 000,024,618 | ---- | C] (NETGEAR) -- C:\WINDOWS\System32\dllcache\fa410nd5.sys
[2012/05/09 13:40:43 | 000,011,850 | ---- | C] (FUJITSU LIMITED) -- C:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2012/05/09 13:40:41 | 000,012,362 | ---- | C] (FUJITSU LIMITED) -- C:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2012/05/09 13:38:19 | 000,334,208 | ---- | C] (Yamaha Corp.) -- C:\WINDOWS\System32\dllcache\ds1wdm.sys
[2012/05/09 13:38:07 | 000,028,062 | ---- | C] (National Semiconductor Coproration) -- C:\WINDOWS\System32\dllcache\dp83820.sys
[2012/05/09 13:37:51 | 000,029,696 | ---- | C] (CNet Technology, Inc.                                                    ) -- C:\WINDOWS\System32\dllcache\dm9pci5.sys
[2012/05/09 13:37:49 | 000,026,698 | ---- | C] (D-Link Corporation) -- C:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2012/05/09 13:37:47 | 000,952,007 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\diwan.sys
[2012/05/09 13:37:41 | 000,236,060 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\ditrace.exe
[2012/05/09 13:37:39 | 000,038,985 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvsu.dll
[2012/05/09 13:37:37 | 000,031,305 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvpp.dll
[2012/05/09 13:37:35 | 000,006,729 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\disrvci.dll
[2012/05/09 13:37:32 | 000,091,305 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\dimaint.sys
[2012/05/09 13:37:03 | 000,024,649 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\dfe650d.sys
[2012/05/09 13:37:01 | 000,024,648 | ---- | C] (D-Link) -- C:\WINDOWS\System32\dllcache\dfe650.sys
[2012/05/09 13:36:55 | 000,020,928 | ---- | C] (Digital Networks, LLC) -- C:\WINDOWS\System32\dllcache\defpa.sys
[2012/05/09 13:36:15 | 000,048,640 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwrwdm.sys
[2012/05/09 13:36:13 | 000,093,952 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcwdm.sys
[2012/05/09 13:36:12 | 000,111,872 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcspud.sys
[2012/05/09 13:36:10 | 000,003,584 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2012/05/09 13:36:09 | 000,072,832 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbwdm.sys
[2012/05/09 13:36:07 | 000,003,072 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbmidi.sys
[2012/05/09 13:36:06 | 000,003,072 | ---- | C] (Crystal Semiconductor Corp.) -- C:\WINDOWS\System32\dllcache\cwbase.sys
[2012/05/09 13:36:03 | 000,249,856 | ---- | C] (Comtrol® Corporation) -- C:\WINDOWS\System32\dllcache\ctmasetp.dll
[2012/05/09 13:35:51 | 000,216,064 | ---- | C] (COMPAQ Inc.) -- C:\WINDOWS\System32\dllcache\cpscan.dll
[2012/05/09 13:35:17 | 000,020,736 | ---- | C] (OMNIKEY AG) -- C:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2012/05/09 13:35:01 | 000,980,034 | ---- | C] (Xircom) -- C:\WINDOWS\System32\dllcache\cicap.sys
[2012/05/09 13:34:37 | 000,049,182 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\cem56n5.sys
[2012/05/09 13:34:36 | 000,022,044 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\cem33n5.sys
[2012/05/09 13:34:35 | 000,027,164 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\ce3n5.sys
[2012/05/09 13:34:35 | 000,022,044 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\cem28n5.sys
[2012/05/09 13:34:34 | 000,021,530 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\ce2n5.sys
[2012/05/09 13:34:28 | 000,714,698 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2012/05/09 13:34:27 | 000,046,108 | ---- | C] (Xircom, Inc.) -- C:\WINDOWS\System32\dllcache\cben5.sys
[2012/05/09 13:34:26 | 000,039,680 | ---- | C] (Silicom Ltd.) -- C:\WINDOWS\System32\dllcache\cb325.sys
[2012/05/09 13:34:25 | 000,037,916 | ---- | C] (Fast Ethernet Controller Provider) -- C:\WINDOWS\System32\dllcache\cb102.sys
[2012/05/09 13:34:21 | 000,032,256 | ---- | C] (Eicon Technology Corporation) -- C:\WINDOWS\System32\dllcache\diapi2NT.dll
[2012/05/09 13:34:20 | 000,164,923 | ---- | C] (Eicon Technology) -- C:\WINDOWS\System32\dllcache\diapi2.sys
[2012/05/09 13:33:25 | 000,031,529 | ---- | C] (BreezeCOM) -- C:\WINDOWS\System32\dllcache\brzwlan.sys
[2012/05/09 13:33:24 | 000,011,008 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brusbmdm.sys
[2012/05/09 13:33:24 | 000,010,368 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brusbscn.sys
[2012/05/09 13:33:23 | 000,060,416 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brserwdm.sys
[2012/05/09 13:33:22 | 000,009,728 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brserif.dll
[2012/05/09 13:33:21 | 000,005,120 | ---- | C] (Brother Industries,Ltd.) -- C:\WINDOWS\System32\dllcache\brscnrsm.dll
[2012/05/09 13:33:19 | 000,039,552 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brparwdm.sys
[2012/05/09 13:33:19 | 000,003,168 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brparimg.sys
[2012/05/09 13:33:15 | 000,041,472 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brmfusb.dll
[2012/05/09 13:33:14 | 000,032,256 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2012/05/09 13:33:14 | 000,029,696 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brmflpt.dll
[2012/05/09 13:33:11 | 000,015,360 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brmfbidi.dll
[2012/05/09 13:33:10 | 000,003,968 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brfiltup.sys
[2012/05/09 13:33:09 | 000,012,160 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brfiltlo.sys
[2012/05/09 13:33:09 | 000,002,944 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brfilt.sys
[2012/05/09 13:33:08 | 000,012,800 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brevif.dll
[2012/05/09 13:33:07 | 000,019,456 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\dllcache\brbidiif.dll
[2012/05/09 13:33:07 | 000,009,728 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\dllcache\brcoinst.dll
[2012/05/09 13:32:55 | 000,871,388 | ---- | C] (BCM) -- C:\WINDOWS\System32\dllcache\bcmdm.sys
[2012/05/09 13:32:47 | 000,036,128 | ---- | C] (3Dfx Interactive, Inc.) -- C:\WINDOWS\System32\dllcache\banshee.sys
[2012/05/09 13:32:46 | 000,342,336 | ---- | C] (3Dfx Interactive, Inc.) -- C:\WINDOWS\System32\dllcache\banshee.dll
[2012/05/09 13:32:45 | 000,089,952 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\b1cbase.sys
[2012/05/09 13:32:44 | 000,036,992 | ---- | C] (Aztech Systems Ltd) -- C:\WINDOWS\System32\dllcache\aztw2320.sys
[2012/05/09 13:32:42 | 000,037,568 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\avmwan.sys
[2012/05/09 13:32:41 | 000,144,384 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\avmenum.dll
[2012/05/09 13:32:40 | 000,087,552 | ---- | C] (AVM GmbH) -- C:\WINDOWS\System32\dllcache\avmcoxp.dll
[2012/05/09 13:32:00 | 000,097,354 | ---- | C] (Bay Networks, Inc.) -- C:\WINDOWS\System32\dllcache\aspndis3.sys
[2012/05/09 13:31:47 | 000,016,969 | ---- | C] (AmbiCom, Inc.) -- C:\WINDOWS\System32\dllcache\amb8002.sys
[2012/05/09 13:31:28 | 000,046,112 | ---- | C] (Adaptec, Inc ) -- C:\WINDOWS\System32\dllcache\adptsf50.sys
[2012/05/09 13:31:20 | 000,010,880 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\admjoy.sys
[2012/05/09 13:31:19 | 000,747,392 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\adm8830.sys
[2012/05/09 13:31:19 | 000,553,984 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\adm8820.sys
[2012/05/09 13:31:18 | 000,584,448 | ---- | C] (Aureal, Inc.) -- C:\WINDOWS\System32\dllcache\adm8810.sys
[2012/05/09 13:31:13 | 000,061,440 | ---- | C] (Color Flatbed Scanner) -- C:\WINDOWS\System32\dllcache\acerscad.dll
[2012/05/09 13:31:08 | 000,462,848 | ---- | C] (Aureal Inc.) -- C:\WINDOWS\System32\dllcache\a3dapi.dll
[2012/05/09 13:31:08 | 000,098,304 | ---- | C] (Aureal Semiconductor) -- C:\WINDOWS\System32\dllcache\a3d.dll
[2012/05/09 13:31:05 | 000,148,352 | ---- | C] (3dfx Interactive, Inc.) -- C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2012/05/09 13:31:04 | 000,689,216 | ---- | C] (3dfx Interactive, Inc.) -- C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2012/05/09 13:31:03 | 000,762,780 | ---- | C] (3Com, Inc.) -- C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2012/05/08 07:14:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Application Data\Roxio
[2012/05/08 03:53:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\UltraISO
[2012/05/08 03:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\UltraISO
[2012/05/08 03:53:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\My Documents\My ISO Files
[2012/05/08 03:53:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\EZB Systems
[2012/05/08 03:22:17 | 000,000,000 | ---D | C] -- C:\MT2012
[2012/05/08 03:15:50 | 000,000,000 | ---D | C] -- C:\HIRENS
[2012/05/08 02:59:20 | 000,000,000 | ---D | C] -- C:\DOSXPSTP
[2012/05/08 00:08:05 | 000,000,000 | ---D | C] -- C:\W98SETUP
[2012/05/07 22:00:58 | 000,000,000 | ---D | C] -- C:\GHSETUP
[2012/05/07 21:23:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Application Data\ImgBurn
[2012/05/07 21:00:06 | 000,000,000 | ---D | C] -- C:\Program Files\ImgBurn
[2012/05/07 21:00:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\ImgBurn
[2012/05/07 19:50:07 | 000,000,000 | ---D | C] -- C:\XPSETUP
[2012/05/07 18:59:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Start Menu\Programs\MagicISO
[2012/05/07 18:59:19 | 000,000,000 | ---D | C] -- C:\Program Files\MagicISO
[2012/05/07 17:23:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Application Data\SUPERAntiSpyware.com
[2012/05/07 17:08:31 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\mangesww\Recent
[2012/05/07 16:52:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Application Data\U3
[2012/05/07 14:39:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\mangesww\Application Data\Apple Computer
[2012/05/06 05:34:50 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012/05/06 01:14:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Stylus Studio
[2012/05/05 23:29:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SecTaskMan
[2012/05/05 23:27:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2012/05/05 22:33:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Stylus Studio 2010 XML Enterprise
[2012/05/05 22:29:26 | 000,000,000 | ---D | C] -- C:\Program Files\Stylus Studio 2010 XML Enterprise Suite
[2012/05/03 15:58:27 | 000,000,000 | ---D | C] -- C:\DDS LOG generator
[2012/05/03 15:54:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2012/05/03 15:49:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\ERUNT
[2012/05/03 15:49:51 | 000,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2012/05/03 15:33:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Revo Uninstaller Pro
[2012/05/03 15:33:52 | 000,027,064 | ---- | C] (VS Revo Group) -- C:\WINDOWS\System32\drivers\revoflt.sys
[2012/05/03 15:33:48 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2012/05/02 18:00:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Security Task Manager
[2012/05/02 18:00:40 | 000,000,000 | ---D | C] -- C:\Program Files\Security Task Manager
[2012/05/02 04:36:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2012/05/02 04:35:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware
[2012/05/02 04:35:08 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2012/05/02 02:14:24 | 000,000,000 | ---D | C] -- C:\Rachel Pic on Pat
[2012/05/02 02:13:06 | 000,000,000 | ---D | C] -- C:\Findings fo ME
[2012/05/01 04:27:49 | 000,000,000 | ---D | C] -- C:\SENTECH Resume 2010
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012/05/27 20:03:35 | 000,000,428 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{486BC23B-4E53-4ED4-9302-3A71D984B0FC}.job
[2012/05/27 20:01:44 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/05/27 20:00:53 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/05/25 17:02:17 | 000,000,656 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\Shortcut to Temp.lnk
[2012/05/25 16:58:04 | 000,000,708 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Shortcut to procexp.exe.lnk
[2012/05/25 16:57:58 | 000,000,708 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\Shortcut to procexp.exe.lnk
[2012/05/21 21:53:40 | 000,000,731 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\AUTOEXEC.BAT
[2012/05/21 14:48:55 | 000,006,044 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\SENTECHlogo-0000.pdf
[2012/05/20 12:35:09 | 000,001,091 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\RAMdrive.BAT
[2012/05/19 04:39:07 | 000,001,327 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\ghsetup.ibb
[2012/05/19 03:45:13 | 001,474,560 | ---- | M] () -- C:\BootWinPE.ima
[2012/05/18 23:52:23 | 000,000,596 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\Shortcut to ISCalculatorV5_1.htm.lnk
[2012/05/18 23:52:23 | 000,000,537 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\Shortcut to setup.exe.lnk
[2012/05/16 18:51:33 | 000,018,188 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\smart.htm
[2012/05/16 18:51:33 | 000,015,704 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\help.htm
[2012/05/16 18:51:33 | 000,001,920 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\wdclogo.gif
[2012/05/16 15:33:05 | 000,923,401 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\WinDlg_124.zip
[2012/05/16 15:26:52 | 002,207,744 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\Diag504fCD.iso
[2012/05/15 17:28:17 | 029,229,056 | ---- | M] () -- C:\3590F75ABA9E485486C100C1A9D4FF06EYNLJWWIDMTMLZLI
[2012/05/15 17:03:30 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\UltraISO.lnk
[2012/05/15 16:53:52 | 000,000,522 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\EasyBoot.lnk
[2012/05/15 14:37:24 | 289,734,656 | ---- | M] () -- C:\3590F75ABA9E485486C100C1A9D4FF06XCMVKXPUAXWKFYBP
[2012/05/15 14:17:17 | 000,000,328 | ---- | M] () -- C:\WINDOWS\tasks\Spybot - Search & Destroy Updater -  Scheduled Task.job
[2012/05/15 14:17:14 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2012/05/15 14:17:09 | 000,000,516 | ---- | M] () -- C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task d1305b5f-bfb8-40ba-b513-ce519ce9379c.job
[2012/05/14 19:19:24 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\mangesww\Desktop\OTL.com
[2012/05/14 19:18:26 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\mangesww\Desktop\OTL.scr
[2012/05/10 16:43:25 | 000,001,881 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\Browser Protect.lnk
[2012/05/10 16:11:51 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012/05/10 16:11:51 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\Mozilla Firefox.lnk
[2012/05/10 15:43:37 | 000,000,157 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\Freeware MagicISO Virtual CD-DVD-ROM(MagicDisc) Overview.url
[2012/05/10 15:40:28 | 000,000,652 | ---- | M] () -- C:\Documents and Settings\mangesww\Start Menu\Programs\Startup\MagicDisc.lnk
[2012/05/10 15:40:28 | 000,000,640 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\MagicDisc.lnk
[2012/05/08 06:02:45 | 001,474,560 | ---- | M] () -- C:\Bootwin98Image.ima
[2012/05/08 05:48:45 | 000,001,337 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\w98tools.ibb
[2012/05/08 05:45:22 | 000,001,333 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\xpbootcd.ibb
[2012/05/08 05:41:46 | 000,001,332 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\hirens.ibb
[2012/05/08 05:34:31 | 000,001,332 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\mt2012.ibb
[2012/05/08 04:06:58 | 001,474,560 | ---- | M] () -- C:\mt2012sect.bif
[2012/05/08 03:59:16 | 001,474,560 | ---- | M] () -- C:\hirensboot.bif
[2012/05/07 21:00:07 | 000,001,546 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk
[2012/05/07 21:00:06 | 000,001,528 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\ImgBurn.lnk
[2012/05/07 20:54:38 | 000,001,330 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\xpsp3.ibb
[2012/05/07 19:01:23 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\WinISO.lnk
[2012/05/07 19:00:55 | 000,001,486 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\MagicISO.lnk
[2012/05/07 19:00:42 | 000,001,486 | ---- | M] () -- C:\Documents and Settings\mangesww\Desktop\MagicISO.lnk
[2012/05/07 17:44:02 | 000,002,073 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Home.lnk
[2012/05/07 17:43:55 | 000,001,744 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\WinZip 14.5.lnk
[2012/05/07 17:16:32 | 000,000,833 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy Protector.lnk
[2012/05/07 17:16:29 | 000,000,822 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Task Manager.lnk
[2012/05/07 17:16:26 | 000,001,576 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\jv16 PowerTools 2011.lnk
[2012/05/07 17:16:23 | 000,000,796 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes Anti-Malware.lnk
[2012/05/07 17:11:30 | 000,000,604 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\ERUNT.lnk
[2012/05/07 17:10:27 | 000,000,925 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2012/05/07 17:10:19 | 000,001,822 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Stylus Studio 2010 XML Enterprise Suite.lnk
[2012/05/07 17:10:11 | 000,001,678 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\SUPERAntiSpyware Professional.lnk
[2012/05/07 17:10:04 | 000,000,903 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Virtual CloneDrive.lnk
[2012/05/07 17:09:53 | 000,000,124 | ---- | M] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Shortcut to Control Panel.lnk
[2012/05/05 23:09:24 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/05/05 23:08:06 | 000,532,600 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/05/05 23:08:06 | 000,099,082 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/05/04 18:58:31 | 000,437,615 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012/05/01 17:15:18 | 000,007,168 | ---- | M] () -- C:\WINDOWS\System32\drivers\utk0otc2.sys
[2012/05/01 08:28:45 | 000,442,760 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20120502-200318.backup
[2012/05/01 02:42:43 | 000,000,512 | ---- | M] () -- C:\win98sect.bin
[2012/05/01 00:26:02 | 000,000,400 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012/05/25 17:02:17 | 000,000,656 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Shortcut to Temp.lnk
[2012/05/25 16:58:04 | 000,000,708 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Shortcut to procexp.exe.lnk
[2012/05/25 16:57:58 | 000,000,708 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Shortcut to procexp.exe.lnk
[2012/05/21 15:35:47 | 000,000,731 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\AUTOEXEC.BAT
[2012/05/21 14:48:55 | 000,006,044 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\SENTECHlogo-0000.pdf
[2012/05/21 14:42:41 | 000,011,254 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Sentech_Logo.jpg
[2012/05/21 14:41:36 | 000,004,929 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\SENTECHlogo.PNG
[2012/05/20 23:35:41 | 000,000,020 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\RESTART.COM
[2012/05/20 12:14:33 | 000,001,091 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\RAMdrive.BAT
[2012/05/19 04:26:24 | 001,474,560 | ---- | C] () -- C:\BootWinPE.ima
[2012/05/19 01:06:40 | 000,002,548 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Windows 7 USB DVD Download Tool.lnk
[2012/05/19 01:06:40 | 000,001,333 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\xpbootcd.ibb
[2012/05/19 01:06:40 | 000,001,330 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\xpsp3.ibb
[2012/05/19 01:06:40 | 000,000,618 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\WinISO.lnk
[2012/05/19 01:06:39 | 000,923,401 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\WinDlg_124.zip
[2012/05/19 01:06:39 | 000,018,188 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\smart.htm
[2012/05/19 01:06:39 | 000,002,415 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Skype.lnk
[2012/05/19 01:06:39 | 000,001,920 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\wdclogo.gif
[2012/05/19 01:06:39 | 000,001,337 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\w98tools.ibb
[2012/05/19 01:06:39 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\UltraISO.lnk
[2012/05/19 01:06:38 | 000,001,714 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\RoxioNow Player.lnk
[2012/05/19 01:06:38 | 000,001,604 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\QuickTime Player.lnk
[2012/05/19 01:06:38 | 000,000,596 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Shortcut to ISCalculatorV5_1.htm.lnk
[2012/05/19 01:06:38 | 000,000,537 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Shortcut to setup.exe.lnk
[2012/05/19 01:06:37 | 000,702,974 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\ISCalcZipV5_1.exe
[2012/05/19 01:06:37 | 000,001,542 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\iTunes.lnk
[2012/05/19 01:06:37 | 000,001,486 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\MagicISO.lnk
[2012/05/19 01:06:37 | 000,001,332 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\mt2012.ibb
[2012/05/19 01:06:37 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Mozilla Firefox.lnk
[2012/05/19 01:06:37 | 000,000,640 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\MagicDisc.lnk
[2012/05/19 01:06:36 | 002,028,019 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\ISCalculatorV5_1.htm
[2012/05/19 01:06:36 | 000,002,365 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\inSSIDer 2.0.lnk
[2012/05/19 01:06:36 | 000,002,073 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Home.lnk
[2012/05/19 01:06:36 | 000,001,528 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\ImgBurn.lnk
[2012/05/19 01:06:36 | 000,001,332 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\hirens.ibb
[2012/05/19 01:06:35 | 002,207,744 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Diag504fCD.iso
[2012/05/19 01:06:35 | 000,028,672 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\disk32.dll
[2012/05/19 01:06:35 | 000,015,704 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\help.htm
[2012/05/19 01:06:35 | 000,011,264 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\disk16.dll
[2012/05/19 01:06:35 | 000,001,744 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Franson GpsGate 2.6.lnk
[2012/05/19 01:06:35 | 000,001,327 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\ghsetup.ibb
[2012/05/19 01:06:35 | 000,000,665 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\EPSON Scan.lnk
[2012/05/19 01:06:35 | 000,000,522 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\EasyBoot.lnk
[2012/05/19 01:06:35 | 000,000,157 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Freeware MagicISO Virtual CD-DVD-ROM(MagicDisc) Overview.url
[2012/05/19 01:06:34 | 000,001,881 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Browser Protect.lnk
[2012/05/19 01:06:34 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\mangesww\Desktop\Adobe Reader X.lnk
[2012/05/15 17:28:17 | 029,229,056 | ---- | C] () -- C:\3590F75ABA9E485486C100C1A9D4FF06EYNLJWWIDMTMLZLI
[2012/05/15 14:37:24 | 289,734,656 | ---- | C] () -- C:\3590F75ABA9E485486C100C1A9D4FF06XCMVKXPUAXWKFYBP
[2012/05/10 16:43:25 | 000,001,887 | ---- | C] () -- C:\Documents and Settings\mangesww\Start Menu\Programs\Browser Protect.lnk
[2012/05/10 16:11:51 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012/05/10 16:11:50 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2012/05/10 15:40:28 | 000,000,652 | ---- | C] () -- C:\Documents and Settings\mangesww\Start Menu\Programs\Startup\MagicDisc.lnk
[2012/05/09 13:54:01 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2012/05/09 13:43:30 | 000,165,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt53.dll
[2012/05/09 13:43:23 | 000,093,696 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt42.dll
[2012/05/09 13:43:17 | 000,101,376 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt34.dll
[2012/05/09 13:43:11 | 000,089,088 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt33.dll
[2012/05/09 13:43:05 | 000,083,968 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hpgt21.dll
[2012/05/09 13:37:45 | 000,029,768 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divasu.dll
[2012/05/09 13:37:44 | 000,037,962 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divaprop.dll
[2012/05/09 13:37:42 | 000,006,216 | ---- | C] () -- C:\WINDOWS\System32\dllcache\divaci.dll
[2012/05/09 13:32:22 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativxbar.sys
[2012/05/09 13:32:22 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atixbar.sys
[2012/05/09 13:32:21 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativttxx.sys
[2012/05/09 13:32:20 | 000,009,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ativmdcd.sys
[2012/05/09 13:32:19 | 000,017,152 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atitvsnd.sys
[2012/05/09 13:32:19 | 000,017,152 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atitunep.sys
[2012/05/09 13:32:18 | 000,026,880 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atirtsnd.sys
[2012/05/09 13:32:17 | 000,049,920 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atirtcap.sys
[2012/05/09 13:32:16 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atipcxxx.sys
[2012/05/09 13:32:09 | 000,046,464 | ---- | C] () -- C:\WINDOWS\System32\dllcache\atibt829.sys
[2012/05/09 12:19:11 | 000,000,428 | -H-- | C] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{486BC23B-4E53-4ED4-9302-3A71D984B0FC}.job
[2012/05/08 06:02:22 | 001,474,560 | ---- | C] () -- C:\Bootwin98Image.ima
[2012/05/08 05:39:59 | 001,474,560 | ---- | C] () -- C:\hirensboot.bif
[2012/05/08 05:30:23 | 001,474,560 | ---- | C] () -- C:\mt2012sect.bif
[2012/05/08 03:14:14 | 000,000,512 | ---- | C] () -- C:\win98sect.bin
[2012/05/07 21:00:06 | 000,001,546 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk
[2012/05/07 19:49:42 | 000,002,048 | ---- | C] () -- C:\w2ksect.bin
[2012/05/07 19:01:23 | 000,000,618 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\WinISO.lnk
[2012/05/07 19:00:55 | 000,001,486 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\MagicISO.lnk
[2012/05/07 17:44:02 | 000,002,073 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Home.lnk
[2012/05/07 17:43:55 | 000,001,744 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\WinZip 14.5.lnk
[2012/05/07 17:34:00 | 000,000,516 | ---- | C] () -- C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task d1305b5f-bfb8-40ba-b513-ce519ce9379c.job
[2012/05/07 17:16:32 | 000,000,833 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Spy Protector.lnk
[2012/05/07 17:16:29 | 000,000,822 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Security Task Manager.lnk
[2012/05/07 17:16:26 | 000,001,576 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\jv16 PowerTools 2011.lnk
[2012/05/07 17:16:23 | 000,000,796 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes Anti-Malware.lnk
[2012/05/07 17:11:30 | 000,000,604 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\ERUNT.lnk
[2012/05/07 17:10:27 | 000,000,925 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Revo Uninstaller Pro.lnk
[2012/05/07 17:10:19 | 000,001,822 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Stylus Studio 2010 XML Enterprise Suite.lnk
[2012/05/07 17:10:11 | 000,001,678 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\SUPERAntiSpyware Professional.lnk
[2012/05/07 17:10:04 | 000,000,903 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Virtual CloneDrive.lnk
[2012/05/07 17:09:53 | 000,000,124 | ---- | C] () -- C:\Documents and Settings\mangesww\Application Data\Microsoft\Internet Explorer\Quick Launch\Shortcut to Control Panel.lnk
[2012/05/01 17:15:14 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\utk0otc2.sys
[2012/05/01 00:22:40 | 000,000,400 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012/03/17 16:53:54 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/11/14 12:49:14 | 000,065,793 | ---- | C] () -- C:\WINDOWS\System32\esfw7a.bin
[2011/11/03 12:14:28 | 000,000,004 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\QSLLPSVCShare
[2011/11/03 02:24:38 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll
[2011/09/20 14:03:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\HPMProp.INI
[2011/06/27 23:15:46 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\GpsGateComClient.dll
[2011/06/27 23:15:04 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\GateApiXP.dll
[2011/05/24 14:20:05 | 000,014,051 | ---- | C] () -- C:\WINDOWS\System32\RaCoInst.dat
[2011/05/23 21:02:13 | 000,000,040 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\.zreglib
[2011/02/09 20:42:12 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/11/22 13:20:42 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\hpzids01.dll
[2010/07/29 18:18:44 | 000,087,552 | ---- | C] () -- C:\WINDOWS\System32\cpwmon2k.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011/05/24 13:09:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Cisco Systems
[2012/05/10 15:28:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SecTaskMan
[2011/05/23 21:03:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SlySoft
[2012/05/06 01:14:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Stylus Studio
[2012/03/21 03:05:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Tastybytes Software
[2009/08/24 20:53:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TechSmith
[2012/05/27 20:03:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/09/28 23:14:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Winferno
[2010/07/29 17:40:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip
[2011/04/12 20:42:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/08/24 23:04:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2012/05/08 06:16:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mangesww\Application Data\ImgBurn
[2012/05/15 13:43:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\mangesww\Application Data\Stylus Studio
[2012/05/15 14:17:09 | 000,000,516 | ---- | M] () -- C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task d1305b5f-bfb8-40ba-b513-ce519ce9379c.job
[2012/05/27 20:03:35 | 000,000,428 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{486BC23B-4E53-4ED4-9302-3A71D984B0FC}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 46 bytes -> C:\Program Files:༐ÿԳܑlᄦiῼฌķnās᨞.b༑i㽷n 燷
@Alternate Data Stream - 404 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34

< End of report >