:OTL [2012/06/15 12:34:52 | 000,000,000 | ---D | M] (StartNow Toolbar) -- C:\Users\Bill Goodwin\AppData\Roaming\mozilla\Firefox\Profiles\u8wobhi3.default\extensions\{5911488E-9D1E-40ec-8CBB-06B231CC153F} O2 - BHO: (ShopAtHome.com Toolbar) - {66516A07-F617-488A-90CF-4E690CFB3C5F} - C:\Program Files\ShopAtHome\tbcore3U.dll (ShopAtHome.com) O2 - BHO: (StartNow Toolbar Helper) - {6E13D095-45C3-4271-9475-F3B48227DD9F} - Reg Error: Value error. File not found O3 - HKLM\..\Toolbar: (ShopAtHome.com Toolbar) - {311B58DC-A4DC-4B04-B1B5-60299AD3D803} - C:\Program Files\ShopAtHome\tbcore3U.dll (ShopAtHome.com) O4 - HKLM..\Run: [StartNowToolbarHelper] "C:\Program Files\StartNow Toolbar\ToolbarHelper.exe" File not found [2012/06/15 11:56:04 | 000,000,256 | ---- | M] () -- C:\ProgramData\q8RRcfj9kUuqoa [2012/06/15 11:53:32 | 000,000,152 | ---- | M] () -- C:\ProgramData\-q8RRcfj9kUuqoar [2012/06/15 11:53:32 | 000,000,000 | ---- | M] () -- C:\ProgramData\-q8RRcfj9kUuqoa [2012/04/25 00:06:38 | 000,000,256 | ---- | C] () -- C:\ProgramData\aY23Q1prxIaMvd [2012/04/24 23:33:37 | 000,000,256 | ---- | C] () -- C:\ProgramData\oZfzC8N9siEkS3 @Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:548AE60C @Alternate Data Stream - 96 bytes -> C:\ProgramData\TEMP:C07A6A6B @Alternate Data Stream - 95 bytes -> C:\ProgramData\TEMP:19F08842 @Alternate Data Stream - 94 bytes -> C:\ProgramData\TEMP:64EEA19D @Alternate Data Stream - 94 bytes -> C:\ProgramData\TEMP:506E1E25 @Alternate Data Stream - 228 bytes -> C:\ProgramData\TEMP:ADE67221 @Alternate Data Stream - 149 bytes -> C:\ProgramData\TEMP:123A86B5 @Alternate Data Stream - 148 bytes -> C:\ProgramData\TEMP:70E897B5 @Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:9E76E7F3 @Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:E14FA16F @Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:DC21D414 @Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:91FFEC32 @Alternate Data Stream - 144 bytes -> C:\ProgramData\TEMP:F8F070C2 @Alternate Data Stream - 144 bytes -> C:\ProgramData\TEMP:1B7E2022 @Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:EDC744FB @Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:E7B4296D @Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:9F38BF31 @Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:2495D97A @Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:C72A744C @Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:71004506 @Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:D2593961 @Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:89C28CF6 @Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:80F63EC3 @Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:7E082023 @Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:61B54B15 @Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:0EC7A545 @Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:71612023 @Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:596E2371 @Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:A3B8F70C @Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:870649A4 @Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:5B09C4D9 @Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:32A82570 @Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:FED25C29 @Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:DE9AC04F @Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:7FCB9D0D @Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:341C1FBD @Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:13EF4AF6 @Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:737160C1 @Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:6F0B6A5A @Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:F84B8DB5 @Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:EA10407C @Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:E895790F @Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:6017A808 @Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:0E22C5DB @Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:E027789A @Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:4C528C86 @Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:3D186293 @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:EF5B3572 @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:D055FC10 @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:B4980368 @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:A167A0BB @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:700B9342 @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:5FA4CB99 @Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:7FD903D7 @Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:177313FB @Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:1181620C @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:DB77E2C4 @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:C10635F6 @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:710F4DBF @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:6444B424 @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:5BC73C48 @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:48977386 @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:36FFA2FB @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:E732B44B @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:DD04902E @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:B8384DB6 @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:7B52659E @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:6B05AF40 @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:5FFC2819 @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:260575F1 @Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:0E684AC9 @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:EEB25EAE @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:E80802C7 @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:D8F9D810 @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:A02025CE @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:89CF6F9C @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:5025C6E4 @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:3D36932D @Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:FC2D0F32 @Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:6FD219F5 @Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:225CD7D5 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:F45F3031 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:F1DEA771 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:A58B27C9 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:97C4F81F @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:5EF1AD34 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:48FEA089 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:3FD496E1 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:19F494DE @Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:8FA72FF8 @Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:8DF68137 @Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:59C113EC @Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:26FBC1F9 @Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:22313216 @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:E945C214 @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:D1D597D0 @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:CEF2A14E @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:C5E2BAEE @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:425759C6 @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:0D278FB5 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:D48500F8 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:C22674B6 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:A6CDBCAC @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:6425A235 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:55F44B88 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:53DF59D1 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:405D842B @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:3B812EE0 @Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:0FA1EAA7 @Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:8999FD56 @Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:6AF67671 @Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:523B97A0 @Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:237E4B91 @Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:CC4C59B4 @Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:BF2E2F0E @Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:996104FC @Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:7A0EFE63 @Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:2B1EA607 @Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:F33C37D5 @Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:38B32B54 @Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:08D8BB20 @Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:98DFF516 @Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:68EF6203 @Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:5345C8F6 @Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:B18C4339 @Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:0F0A5896 @Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:E91ADC66 @Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:24FECE50 @Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:7AA6FC81 @Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:55818279 @Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:43301D1D @Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:EC0A74A1 @Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:CB16385F @Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:B1FBBD09 @Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:C8E82994 @Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:BF07EA98 @Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:B845F669 @Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:E32966C0 @Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:C9FD258B @Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:598E0FFA @Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:55E1514E @Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:551BED5F @Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:F14D1F80 @Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:DFC3B090 @Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:B7843388 @Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:D31BE97C @Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:9DF07E8F @Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:569CEE83 @Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:4FE30352 @Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:3E06C78F @Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:D226A81A @Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:561B1D2B @Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:D0668210 @Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:92A815D8 @Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:69AF9D20 @Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:614F17D3 @Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:3C282BEA @Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:9C012695 @Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:7CEDF9F3 @Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:FDDD8917 @Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:D507B5A8 @Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:61AF2B29 @Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:28CDD861 @Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:E51234A9 @Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:A296A63F @Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:52641FBE @Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:31106FCB @Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:2E49D185 @Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:1C6CB897 @Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:FB97DB91 @Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:CF61CE5A @Alternate Data Stream - 100 bytes -> C:\ProgramData\TEMP:5E9B629B :Commands [CREATERESTOREPOINT] [REBOOT]