OTL logfile created on: 21/09/2012 17:51:41 - Run 1
OTL by OldTimer - Version 3.2.65.1     Folder = C:\Documents and Settings\Andi1\My Documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
 
1.99 Gb Total Physical Memory | 1.42 Gb Available Physical Memory | 71.10% Memory free
2.04 Gb Paging File | 1.65 Gb Available in Paging File | 81.13% Paging File free
Paging file location(s): C:\pagefile.sys 200 200 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.1 | %ProgramFiles% = C:\Program Files
Drive C: | 74.53 Gb Total Space | 5.64 Gb Free Space | 7.57% Space Free | Partition Type: NTFS
Drive E: | 1.86 Gb Total Space | 0.00 Gb Free Space | 0.03% Space Free | Partition Type: FAT32
Drive F: | 298.09 Gb Total Space | 0.01 Gb Free Space | 0.00% Space Free | Partition Type: NTFS
 
Computer Name: HOME-A87A50FF95 | User Name: Andi1 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012/09/21 17:38:08 | 000,600,576 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Andi1\My Documents\Downloads\OTL.exe
PRC - [2012/09/19 18:40:57 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
PRC - [2012/07/24 02:16:35 | 001,437,544 | ---- | M] (RockMelt, Inc.) -- C:\Documents and Settings\Andi1\Local Settings\Application Data\RockMelt\Application\rockmelt.exe
PRC - [2008/04/14 13:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS.1\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012/07/24 02:16:35 | 000,499,048 | ---- | M] () -- C:\Documents and Settings\Andi1\Local Settings\Application Data\RockMelt\Application\0.16.91.483\ppgooglenaclpluginchrome.dll
MOD - [2012/07/24 02:16:28 | 000,122,744 | ---- | M] () -- C:\Documents and Settings\Andi1\Local Settings\Application Data\RockMelt\Application\0.16.91.483\avutil-51.dll
MOD - [2012/07/24 02:16:27 | 001,099,128 | ---- | M] () -- C:\Documents and Settings\Andi1\Local Settings\Application Data\RockMelt\Application\0.16.91.483\avcodec-53.dll
MOD - [2012/07/24 02:16:27 | 000,190,328 | ---- | M] () -- C:\Documents and Settings\Andi1\Local Settings\Application Data\RockMelt\Application\0.16.91.483\avformat-53.dll
MOD - [2012/07/24 02:16:26 | 009,465,032 | ---- | M] () -- C:\Documents and Settings\Andi1\Local Settings\Application Data\RockMelt\Application\0.16.91.483\plugins\npswf32.dll
MOD - [2012/06/18 16:24:30 | 000,260,096 | ---- | M] () -- C:\Program Files\Notepad++\NppShell_05.dll
MOD - [2007/03/01 14:16:56 | 000,128,512 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2012/09/19 18:40:57 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2012/09/08 10:40:25 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/08/23 19:08:07 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS.1\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/04/22 13:51:04 | 000,720,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011/02/02 10:56:36 | 002,413,704 | ---- | M] (mobile concepts GmbH) [On_Demand | Stopped] -- C:\Program Files\S.A.D\CyberGhost VPN\CGVPNCliService.exe -- (CGVPNCliSrvc)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2012/09/19 18:40:53 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2012/09/19 18:40:53 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2012/06/26 13:33:07 | 000,023,456 | ---- | M] (Phoenix Technologies) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.1\system32\drivers\DrvAgent32.sys -- (DrvAgent32)
DRV - [2012/04/19 23:23:01 | 000,040,776 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.1\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2010/02/25 16:51:02 | 000,025,216 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\WINDOWS.1\system32\drivers\tap0901.sys -- (tap0901)
DRV - [2006/09/28 21:49:00 | 000,113,664 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.1\system32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2005/11/01 09:13:00 | 000,372,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS.1\system32\drivers\CBG54.sys -- (CBBCM43)
DRV - [2005/10/16 08:00:00 | 000,012,928 | ---- | M] (Bo Brantén) [Kernel | System | Running] -- C:\WINDOWS.1\System32\drivers\filedisk.sys -- (FileDisk)
DRV - [2005/05/03 16:09:28 | 001,033,728 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS.1\system32\drivers\HSF_DPV.SYS -- (HSF_DPV)
DRV - [2005/05/03 16:08:50 | 000,208,384 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS.1\system32\drivers\HSFHWICH.sys -- (HSFHWICH)
DRV - [2005/05/03 16:08:44 | 000,705,408 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS.1\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2005/03/10 16:56:06 | 000,273,168 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS.1\system32\drivers\STAC97.sys -- (STAC97)
DRV - [2004/03/24 16:12:44 | 000,004,272 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS.1\system32\drivers\bvrp_pci.sys -- (bvrp_pci)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{087a7792-10bb-455d-bd55-427d589addf5}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=YNxdm005YYie&ptnrS=YNxdm005YYie&si=COfD0vmttbACFRJc4QodgQQk6Q&ptb=51D422F5-C4AC-4FB5-9A25-BC8FEF36A6E3&ind=2012060516&n=77ed9b64&psa=&st=sb&searchfor={searchTerms}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=110808&tt=201208_mnt_n_3512_2&babsrc=HP_ss&mntrId=b464208400000000000000ff028ea5c2
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9A 2A 38 FA 4C 10 CD 01  [binary data]
IE - HKCU\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {F3E3F7A1-EFD9-4845-A74C-6A7604BB8BF5}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0994D64D-60FD-4095-86F8-8FF9F252BABE}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110808&tt=201208_mnt_n_3512_2&babsrc=SP_ss&mntrId=b464208400000000000000ff028ea5c2
IE - HKCU\..\SearchScopes\{F3E3F7A1-EFD9-4845-A74C-6A7604BB8BF5}: "URL" = http://uk.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=685749&p={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = socks=
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..keyword.URL: "http://uk.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=685749&p="
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=685749"
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS.1\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS.1\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin:  File not found
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin:  File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.4.53: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.4.53: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.4.53: C:\Documents and Settings\All Users.WINDOWS.1\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.4.53: C:\Documents and Settings\All Users.WINDOWS.1\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.4.53: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@us-w1.rockmelt.com/RockMelt Update;version=8: C:\Documents and Settings\Andi1\Local Settings\Application Data\RockMelt\Update\1.2.189.1\npRockMeltOneClick8.dll (RockMelt Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/09/08 10:40:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/09/08 10:39:33 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{9764bb84-7272-11dd-8eb6-20d155d89557}: C:\Documents and Settings\Andi1\Application Data\hideip_firefox_plugin\ [2012/08/15 17:30:34 | 000,000,000 | ---D | M]
 
[2012/06/09 15:42:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andi1\Application Data\Mozilla\Extensions
[2012/06/09 15:42:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andi1\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2012/08/27 10:24:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andi1\Application Data\Mozilla\Firefox\Profiles\e Backup\USER-6EBD657312\History\Level2\C\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\rvzm2iwc.default\extensions
[2012/08/27 10:24:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andi1\Application Data\Mozilla\Firefox\Profiles\e Backup\USER-6EBD657312\History\Level2\C\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\rvzm2iwc.default\extensions\staged
[2012/08/27 10:24:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andi1\Application Data\Mozilla\Firefox\Profiles\u57mo21q.default\extensions
[2012/07/20 20:36:38 | 000,000,000 | ---D | M] (Lavasoft Search Plugin) -- C:\Documents and Settings\Andi1\Application Data\Mozilla\Firefox\Profiles\u57mo21q.default\extensions\jid1-yZwVFzbsyfMrqQ@jetpack
[2012/08/27 10:24:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andi1\Application Data\Mozilla\Firefox\Profiles\u57mo21q.default\extensions\staged
[2012/06/28 10:45:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Andi1\Application Data\Mozilla\Firefox\Profiles\w1brkpyf.default\extensions
[2012/04/20 21:21:03 | 000,000,000 | ---D | M] (Yontoo) -- C:\Documents and Settings\Andi1\Application Data\Mozilla\Firefox\Profiles\w1brkpyf.default\extensions\plugin@yontoo.com
[2012/09/08 10:38:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/09/08 10:38:59 | 000,000,000 | ---D | M] (z) -- C:\Program Files\Mozilla Firefox\extensions\{09e919b6-de6b-dcc5-0cec-af7892008378}
[2012/09/08 10:38:59 | 000,000,000 | ---D | M] (z) -- C:\Program Files\Mozilla Firefox\extensions\{f8ccc2fc-f08c-d0f8-150b-e4cfb609b074}
[2012/09/08 10:38:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com
[2012/09/08 10:40:25 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/04/01 22:36:14 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009/08/03 15:07:42 | 000,373,104 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\npOGAPlugin.dll
[2012/05/30 08:02:38 | 000,129,144 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2012/01/01 14:28:50 | 000,001,538 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2012/04/30 17:08:24 | 000,003,741 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/08/27 10:24:29 | 000,002,362 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012/08/25 03:00:22 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/01/01 14:28:50 | 000,000,947 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2012/01/01 14:28:50 | 000,001,180 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2011/03/30 11:31:13 | 000,002,046 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrchddr.xml
[2011/03/23 13:24:21 | 000,005,529 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\SearchquWebSearch.xml
[2011/06/25 23:08:08 | 000,002,497 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml
[2012/01/04 21:37:09 | 000,002,515 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
[2012/08/25 03:00:22 | 000,002,253 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
[2012/01/01 14:28:50 | 000,001,135 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
 
O1 HOSTS File: ([2008/04/14 13:00:00 | 000,000,734 | ---- | M]) - C:\WINDOWS.1\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {09900DE8-1DCA-443F-9243-26FF581438AF} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (uTorrentControl2 Toolbar) - {687578B9-7132-4A7A-80E4-30EE31099E03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
O4 - HKCU..\Run: [RockMelt Update] C:\Documents and Settings\Andi1\Local Settings\Application Data\RockMelt\Update\RockMeltUpdate.exe (RockMelt Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: Nosecuritytab = 1
O8 - Extra context menu item: &Search - http://tbedits.happinessinfusion.com/one-toolbaredits/menusearch.jhtml?s=207742738&p=0Fxdm005YYie&si=CJGgvu-b4LACFUUe4QodJ2JTzw&a=87191145-97A1-4374-B16B-B1FE50FCDA63&n=2012062315 File not found
O16 - DPF: {173D9E48-B527-4AA0-A929-30B446002AA8} http://riddlerspub.dyndns.tv:443/DVRemoteAx.cab (DVRemoteControl Class)
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab (Symantec AntiVirus scanner)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab (Symantec RuFSI Utility Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} http://support.dell.com/systemprofiler/DellSystemLite.CAB (DellSystemLite.Scanner)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.101.160.5 89.101.160.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9E699E78-BE19-4E4D-BCC7-E75BE93DA1A6}: DhcpNameServer = 89.101.160.5 89.101.160.4
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS.1\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS.1\system32\userinit.exe) - C:\WINDOWS.1\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Andi1\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Andi1\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/04/08 21:32:53 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2011/04/02 21:48:05 | 000,000,062 | RHS- | M] () - F:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012/09/21 14:10:27 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Andi1\Recent
[2012/09/19 10:03:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\Application Data\SUPERAntiSpyware.com
[2012/09/19 10:03:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\SUPERAntiSpyware.com
[2012/09/19 10:03:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.1\Start Menu\Programs\SUPERAntiSpyware
[2012/09/13 22:04:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\Start Menu\Programs\Glarysoft
[2012/09/13 17:47:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\Auto Traffic Monopoly
[2012/09/12 18:57:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\plrpack
[2012/09/11 22:22:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\Paul Prissick
[2012/09/11 22:20:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\Mass Traffic Leak
[2012/09/11 18:42:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\Application Data\Avira
[2012/09/11 18:40:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\Avira
[2012/09/08 10:38:51 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2012/09/07 15:32:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINDOWS.1\Start Menu\Programs\SOFTplus GSiteCrawler
[2012/09/07 15:32:51 | 000,874,248 | ---- | C] (Xceed Software Inc        (450) 442-2626        support@xceedsoft.com        www.xceedsoft.com) -- C:\WINDOWS.1\System32\SmartUI2.ocx
[2012/09/07 15:32:51 | 000,327,680 | ---- | C] (Dart Communications) -- C:\WINDOWS.1\System32\DartZip.dll
[2012/09/07 15:32:51 | 000,276,352 | ---- | C] (Xceed Software Inc        (450) 442-2626        support@xceedsoft.com        www.xceedsoft.com) -- C:\WINDOWS.1\System32\XceedSco.dll
[2012/09/07 15:32:51 | 000,221,184 | ---- | C] (Dart Communications) -- C:\WINDOWS.1\System32\DartSock.dll
[2012/09/07 15:32:51 | 000,196,608 | ---- | C] (Dart Communications) -- C:\WINDOWS.1\System32\DartSecureFtp.dll
[2012/09/07 15:32:51 | 000,196,608 | ---- | C] (Dart Communications) -- C:\WINDOWS.1\System32\DartSecure2.dll
[2012/09/07 15:32:51 | 000,196,608 | ---- | C] (Dart Communications) -- C:\WINDOWS.1\System32\DartFtp.dll
[2012/09/07 15:32:51 | 000,155,648 | ---- | C] (Dart Communications) -- C:\WINDOWS.1\System32\DartCertificate.dll
[2012/09/07 15:32:51 | 000,122,880 | ---- | C] (R.M. de Boer Software) -- C:\WINDOWS.1\System32\ActiveWizard.ocx
[2012/09/07 15:32:51 | 000,111,552 | ---- | C] (ComponentOne LLC) -- C:\WINDOWS.1\System32\XARRAYDB.OCX
[2012/09/07 15:32:51 | 000,086,504 | ---- | C] (APEX Software Corporation) -- C:\WINDOWS.1\System32\XARRAY32.OCX
[2012/09/07 15:32:50 | 000,832,448 | ---- | C] (APEX Software Corporation) -- C:\WINDOWS.1\System32\TDBG6.OCX
[2012/09/07 15:32:50 | 000,316,344 | ---- | C] (Apex Software Corporation) -- C:\WINDOWS.1\System32\TDBGPP.DLL
[2012/09/07 15:32:50 | 000,000,000 | ---D | C] -- C:\Program Files\SOFTplus
[2012/09/06 21:21:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\Application Data\FB2
[2012/09/06 21:21:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\Start Menu\Programs\FB Creator
[2012/09/06 21:21:13 | 000,000,000 | ---D | C] -- C:\Program Files\FB Creator
[2012/09/06 09:22:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\4K Master Plan
[2012/09/04 17:49:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\Matts Gifts
[2012/08/31 11:36:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\Fast Cash Hurricane
[2012/08/30 20:02:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\The AdSense Dragon
[2012/08/29 20:05:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\Affiliate Money Machine Report(3)
[2012/08/28 21:13:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\Info Publishing Masterplan
[2012/08/28 19:05:52 | 000,000,000 | ---D | C] -- C:\Program Files\Citrix
[2012/08/28 16:56:17 | 000,000,000 | -H-D | C] -- C:\WINDOWS.1\PIF
[2012/08/27 10:24:11 | 000,000,000 | ---D | C] -- C:\Program Files\FLVPlayer
[2012/08/27 10:24:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\Start Menu\Programs\FLV Player
[2012/08/27 10:00:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\Restraunt
[2012/08/24 20:57:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\Application Data\X-Chat 2
[2012/08/24 20:57:23 | 000,000,000 | ---D | C] -- C:\Program Files\xchat
[2012/08/24 20:57:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\Start Menu\Programs\XChat
[2012/08/24 20:46:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Andi1\My Documents\My Sites & Hosting
[1 C:\WINDOWS.1\*.tmp files -> C:\WINDOWS.1\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012/09/21 17:15:00 | 000,000,998 | ---- | M] () -- C:\WINDOWS.1\tasks\RockMeltUpdateTaskUserS-1-5-21-57989841-1035525444-1547161642-1004UA.job
[2012/09/21 17:09:02 | 000,000,426 | -H-- | M] () -- C:\WINDOWS.1\tasks\User_Feed_Synchronization-{F5AD2A39-88E3-43F1-A65C-F224B0F26D1B}.job
[2012/09/21 17:04:25 | 000,009,830 | ---- | M] () -- C:\Documents and Settings\Andi1\Desktop\exefix.reg
[2012/09/21 17:01:02 | 000,000,362 | ---- | M] () -- C:\WINDOWS.1\tasks\WpsUpdateTask_Andi1.job
[2012/09/21 16:12:28 | 000,000,312 | ---- | M] () -- C:\WINDOWS.1\tasks\GlaryInitialize.job
[2012/09/21 16:12:17 | 000,002,048 | --S- | M] () -- C:\WINDOWS.1\bootstat.dat
[2012/09/21 10:15:00 | 000,000,946 | ---- | M] () -- C:\WINDOWS.1\tasks\RockMeltUpdateTaskUserS-1-5-21-57989841-1035525444-1547161642-1004Core.job
[2012/09/20 21:02:33 | 001,934,053 | ---- | M] () -- C:\Documents and Settings\Andi1\Desktop\SEO-CookBook.pdf
[2012/09/20 20:52:48 | 001,625,432 | ---- | M] () -- C:\Documents and Settings\Andi1\Desktop\FacebookCashSecrets.pdf
[2012/09/20 19:01:36 | 000,095,232 | ---- | M] () -- C:\Documents and Settings\Andi1\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/20 18:46:45 | 000,000,000 | -H-- | M] () -- C:\WINDOWS.1\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
[2012/09/20 16:09:04 | 000,000,215 | ---- | M] () -- C:\boot.ini
[2012/09/20 14:14:52 | 000,000,754 | ---- | M] () -- C:\Documents and Settings\Andi1\Desktop\Glary Utilities.lnk
[2012/09/19 10:03:09 | 000,001,699 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS.1\Desktop\SUPERAntiSpyware Free Edition.lnk
[2012/09/19 09:57:00 | 000,000,330 | -H-- | M] () -- C:\WINDOWS.1\tasks\MP Scheduled Scan.job
[2012/09/18 15:32:21 | 000,002,206 | ---- | M] () -- C:\WINDOWS.1\System32\wpa.dbl
[2012/09/13 19:17:38 | 002,501,014 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\The Product Launch Formula Blueprint.pdf
[2012/09/13 18:01:22 | 004,624,205 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\5_Step_Method_For_Making_10K.pdf
[2012/09/13 17:47:49 | 000,000,773 | ---- | M] () -- C:\Documents and Settings\All Users.WINDOWS.1\Desktop\Auto Traffic Monopoly.lnk
[2012/09/12 10:05:48 | 000,348,447 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\RealMethod.pdf
[2012/08/30 22:01:30 | 042,042,231 | ---- | M] () -- C:\Youtube-acai-berry.flv
[2012/08/29 16:56:38 | 000,000,755 | ---- | M] () -- C:\Documents and Settings\Andi1\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012/08/28 22:03:08 | 000,161,927 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\millionaire-mind-in-turbulent-times.pdf
[2012/08/28 19:45:09 | 000,558,809 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\tuisnetprofitsv1.01b.pdf
[2012/08/28 19:01:38 | 000,867,304 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\the-worth-of-web-magazine-no-3.pdf
[2012/08/27 16:47:27 | 003,966,842 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\SocialTrafficInstigator.pdf
[2012/08/27 15:39:25 | 000,078,234 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\Traffic Sites.pdf
[2012/08/27 15:20:39 | 005,813,361 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\sixfigureaffiliateblogging.pdf
[2012/08/27 12:16:51 | 001,020,351 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\Introduction to Lead Generation HubSpot.pdf
[2012/08/27 10:24:51 | 000,002,182 | ---- | M] () -- C:\user.js
[1 C:\WINDOWS.1\*.tmp files -> C:\WINDOWS.1\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012/09/21 17:05:49 | 000,000,426 | -H-- | C] () -- C:\WINDOWS.1\tasks\User_Feed_Synchronization-{F5AD2A39-88E3-43F1-A65C-F224B0F26D1B}.job
[2012/09/21 17:04:23 | 000,009,830 | ---- | C] () -- C:\Documents and Settings\Andi1\Desktop\exefix.reg
[2012/09/21 10:10:19 | 000,000,998 | ---- | C] () -- C:\WINDOWS.1\tasks\RockMeltUpdateTaskUserS-1-5-21-57989841-1035525444-1547161642-1004UA.job
[2012/09/21 10:10:18 | 000,000,946 | ---- | C] () -- C:\WINDOWS.1\tasks\RockMeltUpdateTaskUserS-1-5-21-57989841-1035525444-1547161642-1004Core.job
[2012/09/20 21:02:33 | 001,934,053 | ---- | C] () -- C:\Documents and Settings\Andi1\Desktop\SEO-CookBook.pdf
[2012/09/20 20:52:48 | 001,625,432 | ---- | C] () -- C:\Documents and Settings\Andi1\Desktop\FacebookCashSecrets.pdf
[2012/09/20 20:01:07 | 000,000,362 | ---- | C] () -- C:\WINDOWS.1\tasks\WpsUpdateTask_Andi1.job
[2012/09/20 18:46:45 | 000,000,000 | -H-- | C] () -- C:\WINDOWS.1\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
[2012/09/20 14:14:52 | 000,000,754 | ---- | C] () -- C:\Documents and Settings\Andi1\Desktop\Glary Utilities.lnk
[2012/09/19 10:03:09 | 000,001,699 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS.1\Desktop\SUPERAntiSpyware Free Edition.lnk
[2012/09/13 19:17:30 | 002,501,014 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\The Product Launch Formula Blueprint.pdf
[2012/09/13 18:01:22 | 004,624,205 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\5_Step_Method_For_Making_10K.pdf
[2012/09/13 17:47:49 | 000,000,773 | ---- | C] () -- C:\Documents and Settings\All Users.WINDOWS.1\Desktop\Auto Traffic Monopoly.lnk
[2012/09/12 18:57:14 | 000,169,871 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\The Internet Marketing Uncut Launch Diary.pdf
[2012/09/12 16:10:51 | 000,000,312 | ---- | C] () -- C:\WINDOWS.1\tasks\GlaryInitialize.job
[2012/09/12 10:05:48 | 000,348,447 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\RealMethod.pdf
[2012/09/01 10:24:39 | 000,093,963 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\masspassintro.pdf
[2012/08/30 21:58:14 | 042,042,231 | ---- | C] () -- C:\Youtube-acai-berry.flv
[2012/08/29 19:20:20 | 000,395,422 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\report.pdf
[2012/08/28 22:03:06 | 000,161,927 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\millionaire-mind-in-turbulent-times.pdf
[2012/08/28 19:45:09 | 000,558,809 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\tuisnetprofitsv1.01b.pdf
[2012/08/28 19:01:38 | 000,867,304 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\the-worth-of-web-magazine-no-3.pdf
[2012/08/27 16:47:25 | 003,966,842 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\SocialTrafficInstigator.pdf
[2012/08/27 15:39:24 | 000,078,234 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\Traffic Sites.pdf
[2012/08/27 15:20:38 | 005,813,361 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\sixfigureaffiliateblogging.pdf
[2012/08/27 12:16:51 | 001,020,351 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\Introduction to Lead Generation HubSpot.pdf
[2012/08/26 14:38:10 | 002,079,389 | ---- | C] () -- C:\Documents and Settings\Andi1\My Documents\CashForQuestions.pdf
[2012/06/09 15:44:20 | 000,451,978 | ---- | C] () -- C:\Documents and Settings\Andi1\.linkassistant.properties
[2012/06/04 22:07:09 | 000,000,135 | ---- | C] () -- C:\WINDOWS.1\ANS2000.INI
[2012/06/04 22:07:09 | 000,000,020 | -H-- | C] () -- C:\WINDOWS.1\akebook.ini
[2012/06/04 22:07:09 | 000,000,004 | -H-- | C] () -- C:\WINDOWS.1\a3kebook.ini
[2012/05/09 20:36:06 | 000,000,246 | ---- | C] () -- C:\WINDOWS.1\ContentComposer.ini
[2012/05/09 20:35:49 | 000,000,087 | ---- | C] () -- C:\WINDOWS.1\ccseinst.ini
[2012/04/30 12:31:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS.1\cdplayer.ini
[2012/04/25 20:27:53 | 000,075,107 | ---- | C] () -- C:\WINDOWS.1\System32\156f83f8.exe
[2012/04/19 00:41:05 | 000,181,404 | ---- | C] () -- C:\Documents and Settings\Andi1\Local Settings\Application Data\census.cache
[2012/04/19 00:40:57 | 000,210,768 | ---- | C] () -- C:\Documents and Settings\Andi1\Local Settings\Application Data\ars.cache
[2012/04/19 00:12:18 | 000,000,036 | ---- | C] () -- C:\Documents and Settings\Andi1\Local Settings\Application Data\housecall.guid.cache
[2012/04/18 09:04:02 | 000,000,110 | ---- | C] () -- C:\WINDOWS.1\wininit.ini
[2012/04/11 18:34:18 | 000,060,304 | ---- | C] () -- C:\Documents and Settings\Andi1\g2mdlhlpx.exe
[2012/04/02 22:22:14 | 000,004,272 | R--- | C] () -- C:\WINDOWS.1\System32\drivers\bvrp_pci.sys
[2012/04/02 19:41:49 | 000,000,304 | ---- | C] () -- C:\Documents and Settings\Andi1\Application Data\wklnhst.dat
[2012/03/19 14:28:10 | 000,000,664 | ---- | C] () -- C:\WINDOWS.1\System32\d3d9caps.dat
[2012/02/27 13:57:37 | 000,003,072 | ---- | C] () -- C:\WINDOWS.1\System32\iacenc.dll
[2012/02/22 22:25:48 | 000,095,232 | ---- | C] () -- C:\Documents and Settings\Andi1\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/02/22 00:46:34 | 000,002,048 | --S- | C] () -- C:\WINDOWS.1\bootstat.dat
[2012/02/22 00:35:09 | 000,021,640 | ---- | C] () -- C:\WINDOWS.1\System32\emptyregdb.dat
[2012/02/22 00:32:56 | 000,001,793 | ---- | C] () -- C:\WINDOWS.1\System32\fxsperf.ini
[2012/02/21 08:20:41 | 000,004,249 | ---- | C] () -- C:\WINDOWS.1\ODBCINST.INI
[2012/02/21 08:18:07 | 000,192,976 | ---- | C] () -- C:\WINDOWS.1\System32\FNTCACHE.DAT
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2012/04/01 22:21:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Local Settings\Application Data\Microsoft\Silverlight\is\4cnd3w5a.qow\jlxztwqi.35a\1\l
[2011/06/07 22:14:00 | 000,049,951 | ---- | M] () -- C:\Documents and Settings\Andi1\My Documents\Downloads\Cash In A Flash\ANOTHER BONUS!\WSO Squeezepages\Weight Loss #2\Weight Loss #2\Ecover\3d ecover\L.jpg
[2012/03/05 20:21:05 | 000,000,227 | RHS- | M] () -- C:\WINDOWS.1\assembly\Desktop.ini
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012/05/20 15:30:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\A-PDF
[2012/04/25 20:23:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\Babylon
[2012/03/05 19:47:37 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\Common Files
[2012/03/03 22:58:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\C__Documents and Settings_Andi1_My Documents_Downloads_Crack_SmartHideIP.exe
[2012/06/04 14:15:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\ErrorEND
[2012/04/30 12:30:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\FreeRIP
[2012/07/20 21:02:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\GFI Software
[2012/04/15 02:46:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\Guard.Mail.Ru
[2012/03/24 16:19:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\IBUpdaterService
[2012/03/09 14:07:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\InstallMate
[2012/04/01 09:32:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\IObit
[2012/06/19 21:54:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\Kingsoft
[2012/08/15 23:13:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\Nokia
[2012/05/27 12:55:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\NokiaInstallerCache
[2012/06/30 12:50:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\ParetoLogic
[2012/03/05 20:23:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\PC Drivers HeadQuarters
[2012/05/10 13:31:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\PC Suite
[2012/03/03 23:01:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\SmartHideIP
[2012/06/13 13:23:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\SpeedyPC Software
[2012/04/20 21:55:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\Tarma Installer
[2012/08/29 22:48:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\TEMP
[2012/08/20 22:30:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\TuneUp Software
[2012/08/20 22:28:12 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012/04/01 13:46:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS.1\Application Data\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
[2012/07/20 21:01:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Ad-Aware Antivirus
[2012/03/03 16:25:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Affilorama
[2012/05/01 13:24:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Article Marketing Robot
[2012/02/22 20:02:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\ASR
[2012/07/01 19:52:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Auto Traffic Monopoly
[2012/04/05 19:01:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Avant Downloader
[2012/04/25 20:23:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Babylon
[2012/03/03 22:58:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\C__Documents and Settings_Andi1_My Documents_Downloads_Crack_SmartHideIP.exe
[2012/07/13 21:35:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\DailyFitnessCenter_53
[2012/05/01 10:58:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Digital_Paper_Products,_I
[2012/03/05 16:22:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\DriverCure
[2012/02/29 19:51:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\DRPSu
[2012/03/03 22:31:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\DVRemote
[2012/09/06 21:22:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\FB2
[2012/03/13 20:05:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\FileZilla
[2012/06/15 08:58:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\FreeAdTraffic
[2012/05/15 19:59:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\genius.net
[2012/09/20 14:14:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\GlarySoft
[2012/08/18 09:40:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Godlike
[2012/04/15 01:38:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Gomez
[2012/07/13 21:35:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\HappinessInfusion_5w
[2012/08/15 17:30:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Hide IP NG
[2012/08/15 17:30:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\hideip_firefox_plugin
[2012/06/02 19:00:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\iBBDemo2
[2012/05/28 20:38:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\IMBuzz Creators
[2012/03/21 22:15:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Internet Warriors
[2012/08/12 08:53:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\IObit
[2012/05/14 23:00:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\JonathanLeger.com
[2012/04/10 22:46:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Ketarin
[2012/07/08 20:51:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Keyword Scout
[2012/06/19 21:55:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Kingsoft
[2012/03/13 20:29:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Notepad++
[2012/03/07 17:38:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Nvu
[2012/02/22 19:26:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\OpenOffice.org
[2012/06/29 21:01:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\ParetoLogic
[2012/05/10 13:35:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\PC Suite
[2012/03/23 15:36:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\PerformerSoft
[2012/03/18 20:56:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\PriceGong
[2012/03/06 18:11:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Product_FR
[2012/04/30 18:28:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\RarUpdate
[2012/04/23 21:05:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\RBotPlus
[2012/04/10 19:10:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\SeoWebEmpire
[2012/03/02 21:58:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\sesniper
[2012/04/30 19:25:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Sick Marketing
[2012/06/14 16:27:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Simple Sudoku
[2012/04/06 13:13:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\SkyMonk
[2012/03/03 23:01:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\SmartHideIP
[2012/03/05 16:22:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\SpeedyPC Software
[2012/02/29 19:32:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\SumatraPDF
[2012/04/25 20:23:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\SystemUpdaterApp
[2012/04/19 12:46:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\temp
[2012/04/02 19:42:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Template
[2012/03/02 22:34:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Traffic Travis v4
[2012/08/20 22:29:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\TuneUp Software
[2012/03/11 14:48:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\ubot
[2012/03/31 20:30:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Uniblue
[2012/06/02 17:29:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\uTorrent
[2012/03/06 11:55:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Wise Registry Cleaner
[2012/03/15 15:15:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\WordFlood
[2012/05/09 20:51:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\Writer's Cafe 2
[2012/08/24 21:01:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\X-Chat 2
[2012/05/03 10:51:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Andi1\Application Data\YourFileDownloader
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users.WINDOWS.1\Application Data\TEMP:65859BC2

< End of report >