Thanks so much for a response.
My computer has started freezing on me again. Here is the OTListit:
OTListIt logfile created on: 19/01/2009 8:01:30 AM - Run
OTListIt2 by OldTimer - Version 1.0.3.0 Folder = C:\Users\Sandra\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy
1.99 Gb Total Physical Memory | 0.96 Gb Available Physical Memory | 48.03% Memory free
4.00 Gb Paging File | 2.88 Gb Available in Paging File | 71.94% Paging File free
Paging file location(s): ?:\pagefile.sys;
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 137.36 Gb Total Space | 68.80 Gb Free Space | 50.09% Space Free | Partition Type: NTFS
Drive D: | 11.69 Gb Total Space | 2.09 Gb Free Space | 17.88% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: SANDRA-PC
Current User Name: Sandra
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On
========== Processes (SafeList) ========== C:\Windows\System32\wininit.exe (Microsoft Corporation)
C:\Windows\System32\lsm.exe (Microsoft Corporation)
C:\Windows\System32\SLsvc.exe (Microsoft Corporation)
C:\Windows\System32\dwm.exe (Microsoft Corporation)
C:\Windows\System32\taskeng.exe (Microsoft Corporation)
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple, Inc.)
C:\Program Files\COGECO Security Services\Anti-Virus\fsgk32st.exe (F-Secure Corporation)
C:\Program Files\COGECO Security Services\Common\FSMA32.EXE (F-Secure Corporation)
C:\Program Files\COGECO Security Services\Anti-Virus\fsgk32.exe (F-Secure Corp.)
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
C:\Program Files\COGECO Security Services\Common\FSMB32.EXE (F-Secure Corporation)
C:\Program Files\iWin Games\iWinGamesInstaller.exe (iWin Inc.)
C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
C:\Windows\System32\igfxtray.exe (Intel Corporation)
C:\Windows\System32\hkcmd.exe (Intel Corporation)
C:\Program Files\CyberLink\Shared Files\RichVideo.exe ()
C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.)
C:\Windows\System32\SearchIndexer.exe (Microsoft Corporation)
C:\Program Files\COGECO Security Services\Common\FCH32.EXE (F-Secure Corporation)
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
C:\Program Files\COGECO Security Services\Anti-Virus\fsqh.exe (F-Secure Corporation)
C:\Program Files\COGECO Security Services\Common\FAMEH32.EXE (F-Secure Corporation)
C:\Program Files\COGECO Security Services\FSPC\fspc.exe (F-Secure Corporation)
C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
C:\Program Files\COGECO Security Services\Common\FSM32.EXE (F-Secure Corporation)
C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
C:\Program Files\Brownie\BrStsWnd.exe (brother)
C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe (Hewlett-Packard)
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company)
C:\Program Files\COGECO Security Services\FSGUI\fsguidll.exe (F-Secure Corporation)
C:\Windows\System32\drivers\XAudio.exe (Conexant Systems, Inc.)
C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe (Hewlett-Packard Development Company, L.P.)
C:\Windows\ehome\ehtray.exe (Microsoft Corporation)
C:\Windows\ehome\ehmsas.exe (Microsoft Corporation)
C:\Program Files\Brownie\BRNIPMON.exe (Brother Industries, Ltd.)
C:\Program Files\DAEMON Tools Pro\DTProAgent.exe (DT Soft Ltd.)
C:\Program Files\COGECO Security Services\Anti-Virus\fssm32.exe (F-Secure Corp.)
C:\Program Files\COGECO Security Services\FSAUA\program\fsaua.exe (F-Secure Corporation)
C:\Program Files\COGECO Security Services\FWES\program\fsdfwd.exe (F-Secure Corporation)
C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
C:\Program Files\Apoint2K\ApMsgFwd.exe (Alps Electric Co., Ltd.)
C:\Program Files\Apoint2K\ApntEx.exe (Alps Electric Co., Ltd.)
C:\Windows\System32\mobsync.exe (Microsoft Corporation)
C:\ProgramData\iWin Games\DesktopAlerts\DesktopAlerts.exe (iWin Inc.)
C:\Program Files\COGECO Security Services\FSAUA\program\fsus.exe (F-Secure Corporation)
C:\Windows\System32\taskeng.exe (Microsoft Corporation)
C:\Program Files\COGECO Security Services\Anti-Virus\fsav32.exe (F-Secure Corporation)
C:\Program Files\Internet Explorer\ieuser.exe (Microsoft Corporation)
C:\Windows\System32\conime.exe (Microsoft Corporation)
c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe (Hewlett-Packard)
C:\Windows\System32\igfxsrvc.exe (Intel Corporation)
C:\Users\Sandra\Desktop\OTListIt2.exe (OldTimer Tools)
========== (O23) Win32 Services (SafeList) ========== (ACDaemon [Auto | Running]) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
(Apple Mobile Device [Auto | Running]) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple, Inc.)
(Bonjour Service [Auto | Stopped]) -- C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
(CertPropSvc [Unknown | Stopped]) -- C:\Windows\System32\certprop.dll (Microsoft Corporation)
(clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
(Com4Qlb [On_Demand | Stopped]) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe (Hewlett-Packard Development Company, L.P.)
(DFSR [On_Demand | Stopped]) -- C:\Windows\System32\dfsr.exe (Microsoft Corporation)
(DPS [Unknown | Running]) -- C:\Windows\System32\dps.dll (Microsoft Corporation)
(ehRecvr [On_Demand | Stopped]) -- C:\Windows\ehome\ehrecvr.exe (Microsoft Corporation)
(ehSched [On_Demand | Stopped]) -- C:\Windows\ehome\ehsched.exe (Microsoft Corporation)
(F-Secure Gatekeeper Handler Starter [Auto | Running]) -- C:\Program Files\COGECO Security Services\Anti-Virus\fsgk32st.exe (F-Secure Corporation)
(FontCache3.0.0.0 [On_Demand | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
(FSAUA [On_Demand | Running]) -- C:\Program Files\COGECO Security Services\FSAUA\program\fsaua.exe (F-Secure Corporation)
(FSDFWD [On_Demand | Running]) -- C:\Program Files\COGECO Security Services\FWES\program\fsdfwd.exe (F-Secure Corporation)
(FSMA [Auto | Running]) -- C:\Program Files\COGECO Security Services\Common\FSMA32.EXE (F-Secure Corporation)
(GameConsoleService [On_Demand | Stopped]) -- C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
(gpsvc [Unknown | Running]) -- C:\Windows\System32\gpsvc.dll (Microsoft Corporation)
(HP Health Check Service [Auto | Running]) -- c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe (Hewlett-Packard)
(hpqwmiex [Auto | Running]) -- C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe (Hewlett-Packard Development Company, L.P.)
(IAANTMON [Auto | Running]) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
(IDriverT [On_Demand | Stopped]) -- C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
(idsvc [Unknown | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
(iPod Service [On_Demand | Running]) -- C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
(iWinGamesInstaller [Auto | Running]) -- C:\Program Files\iWin Games\iWinGamesInstaller.exe (iWin Inc.)
(LightScribeService [Auto | Running]) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
(NetTcpPortSharing [Disabled | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
(odserv [On_Demand | Stopped]) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
(ose [On_Demand | Stopped]) -- C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)
(RichVideo [Auto | Running]) -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe ()
(SCardSvr [Unknown | Stopped]) -- C:\Windows\System32\SCardSvr.dll (Microsoft Corporation)
(SCPolicySvc [Unknown | Stopped]) -- C:\Windows\System32\certprop.dll (Microsoft Corporation)
(slsvc [Auto | Running]) -- C:\Windows\System32\SLsvc.exe (Microsoft Corporation)
(SNMPTRAP [On_Demand | Stopped]) -- C:\Windows\System32\snmptrap.exe (Microsoft Corporation)
(TrustedInstaller [Unknown | Stopped]) -- C:\Windows\servicing\TrustedInstaller.exe (Microsoft Corporation)
(UI0Detect [On_Demand | Stopped]) -- C:\Windows\System32\UI0Detect.exe (Microsoft Corporation)
(vds [On_Demand | Stopped]) -- C:\Windows\System32\vds.exe (Microsoft Corporation)
(WdiServiceHost [Unknown | Stopped]) -- C:\Windows\System32\wdi.dll (Microsoft Corporation)
(WdiSystemHost [Unknown | Running]) -- C:\Windows\System32\wdi.dll (Microsoft Corporation)
(WMPNetworkSvc [On_Demand | Stopped]) -- C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
(WSearch [Auto | Running]) -- C:\Windows\System32\SearchIndexer.exe (Microsoft Corporation)
(XAudioService [Auto | Running]) -- C:\Windows\System32\drivers\XAudio.exe (Conexant Systems, Inc.)
========== Driver Services (SafeList) ========== (adp94xx [Disabled | Stopped]) -- C:\Windows\System32\drivers\adp94xx.sys (Adaptec, Inc.)
(adpahci [Disabled | Stopped]) -- C:\Windows\System32\drivers\adpahci.sys (Adaptec, Inc.)
(adpu160m [Disabled | Stopped]) -- C:\Windows\System32\drivers\adpu160m.sys (Adaptec, Inc.)
(adpu320 [Disabled | Stopped]) -- C:\Windows\System32\drivers\adpu320.sys (Adaptec, Inc.)
(aic78xx [Disabled | Stopped]) -- C:\Windows\System32\drivers\djsvs.sys (Adaptec, Inc.)
(aliide [Disabled | Stopped]) -- C:\Windows\System32\drivers\aliide.sys (Acer Laboratories Inc.)
(amdagp [On_Demand | Stopped]) -- C:\Windows\System32\drivers\AMDAGP.SYS (Microsoft Corporation)
(amdide [Disabled | Stopped]) -- C:\Windows\System32\drivers\amdide.sys (Microsoft Corporation)
(AmdK7 [Disabled | Stopped]) -- C:\Windows\System32\drivers\amdk7.sys (Microsoft Corporation)
(AmdK8 [Disabled | Stopped]) -- C:\Windows\System32\drivers\amdk8.sys (Microsoft Corporation)
(ApfiltrService [On_Demand | Running]) -- C:\Windows\System32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
(arc [Disabled | Stopped]) -- C:\Windows\System32\drivers\arc.sys (Adaptec, Inc.)
(arcsas [Disabled | Stopped]) -- C:\Windows\System32\drivers\arcsas.sys (Adaptec, Inc.)
(BCM43XV [On_Demand | Stopped]) -- C:\Windows\System32\drivers\BCMWL6.SYS (Broadcom Corporation)
(bowser [On_Demand | Running]) -- C:\Windows\System32\drivers\bowser.sys (Microsoft Corporation)
(BrFiltLo [On_Demand | Stopped]) -- C:\Windows\System32\drivers\BrFiltLo.sys (Brother Industries, Ltd.)
(BrFiltUp [On_Demand | Stopped]) -- C:\Windows\System32\drivers\BrFiltUp.sys (Brother Industries, Ltd.)
(Brserid [Disabled | Stopped]) -- C:\Windows\System32\drivers\BrSerId.sys (Brother Industries Ltd.)
(BrSerWdm [Disabled | Stopped]) -- C:\Windows\System32\drivers\BrSerWdm.sys (Brother Industries Ltd.)
(BrUsbMdm [Disabled | Stopped]) -- C:\Windows\System32\drivers\BrUsbMdm.sys (Brother Industries Ltd.)
(BrUsbSer [On_Demand | Stopped]) -- C:\Windows\System32\drivers\BrUsbSer.sys (Brother Industries Ltd.)
(BTHMODEM [Disabled | Stopped]) -- C:\Windows\System32\drivers\bthmodem.sys (Microsoft Corporation)
(circlass [Disabled | Stopped]) -- C:\Windows\System32\drivers\circlass.sys (Microsoft Corporation)
(CLFS [Unknown | Running]) -- C:\Windows\System32\clfs.sys (Microsoft Corporation)
(cmdide [Disabled | Stopped]) -- C:\Windows\System32\drivers\cmdide.sys (CMD Technology, Inc.)
(CnxtHdAudService [On_Demand | Running]) -- C:\Windows\System32\drivers\CHDRT32.sys (Conexant Systems Inc.)
(crcdisk [Boot | Running]) -- C:\Windows\System32\drivers\crcdisk.sys (Microsoft Corporation)
(Crusoe [Disabled | Stopped]) -- C:\Windows\System32\drivers\crusoe.sys (Microsoft Corporation)
(DfsC [System | Running]) -- C:\Windows\System32\drivers\dfsc.sys (Microsoft Corporation)
(DXGKrnl [On_Demand | Running]) -- C:\Windows\System32\drivers\dxgkrnl.sys (Microsoft Corporation)
(E100B [On_Demand | Stopped]) -- C:\Windows\System32\drivers\e100b325.sys (Intel Corporation)
(E1G60 [On_Demand | Stopped]) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
(Ecache [Boot | Running]) -- C:\Windows\System32\drivers\ecache.sys (Microsoft Corporation)
(elxstor [Disabled | Stopped]) -- C:\Windows\System32\drivers\elxstor.sys (Emulex)
(exfat [On_Demand | Stopped]) -- C:\Windows\System32\drivers\exfat.sys (Microsoft Corporation)
(F-Secure Filter [Disabled | Stopped]) -- C:\Program Files\COGECO Security Services\Anti-Virus\win2k\fsfilter.sys ()
(F-Secure Gatekeeper [On_Demand | Running]) -- C:\Program Files\COGECO Security Services\Anti-Virus\minifilter\fsgk.sys ()
(F-Secure HIPS [System | Running]) -- C:\Program Files\COGECO Security Services\HIPS\fshs.sys ()
(F-Secure Recognizer [Disabled | Stopped]) -- C:\Program Files\COGECO Security Services\Anti-Virus\win2k\fsrec.sys ()
(FileInfo [Boot | Running]) -- C:\Windows\System32\drivers\fileinfo.sys (Microsoft Corporation)
(Filetrace [On_Demand | Stopped]) -- C:\Windows\System32\drivers\filetrace.sys (Microsoft Corporation)
(FSES [System | Running]) -- C:\Windows\System32\drivers\fses.sys ()
(FSFW [System | Running]) -- C:\Windows\System32\drivers\fsdfw.sys (F-Secure Corporation)
(fsvista [System | Running]) -- C:\Program Files\COGECO Security Services\Anti-Virus\minifilter\fsvista.sys ()
(gagp30kx [On_Demand | Stopped]) -- C:\Windows\System32\drivers\GAGP30KX.SYS (Microsoft Corporation)
(GEARAspiWDM [On_Demand | Running]) -- C:\Windows\System32\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
(HBtnKey [On_Demand | Running]) -- C:\Windows\System32\drivers\CPQBttn.sys (Hewlett-Packard Development Company, L.P.)
(HdAudAddService [On_Demand | Stopped]) -- C:\Windows\System32\drivers\CHDART.sys (Conexant Systems Inc.)
(HDAudBus [On_Demand | Running]) -- C:\Windows\System32\drivers\hdaudbus.sys (Microsoft Corporation)
(HidBth [Disabled | Stopped]) -- C:\Windows\System32\drivers\hidbth.sys (Microsoft Corporation)
(HidIr [Disabled | Stopped]) -- C:\Windows\System32\drivers\hidir.sys (Microsoft Corporation)
(HpCISSs [Disabled | Stopped]) -- C:\Windows\System32\drivers\HpCISSs.sys (Hewlett-Packard Company)
(HpqKbFiltr [On_Demand | Running]) -- C:\Windows\System32\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)
(HSFHWAZL [On_Demand | Stopped]) -- C:\Windows\System32\drivers\VSTAZL3.SYS (Conexant Systems, Inc.)
(HSF_DPV [On_Demand | Running]) -- C:\Windows\System32\drivers\HSX_DPV.sys (Conexant Systems, Inc.)
(HSXHWAZL [On_Demand | Running]) -- C:\Windows\System32\drivers\HSXHWAZL.sys (Conexant Systems, Inc.)
(ialm [On_Demand | Stopped]) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
(iaStor [Boot | Running]) -- C:\Windows\System32\drivers\iaStor.sys (Intel Corporation)
(iaStorV [Disabled | Stopped]) -- C:\Windows\System32\drivers\iaStorV.sys (Intel Corporation)
(igfx [On_Demand | Running]) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
(iirsp [Disabled | Stopped]) -- C:\Windows\System32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
(IPMIDRV [Disabled | Stopped]) -- C:\Windows\System32\drivers\IPMIDrv.sys (Microsoft Corporation)
(iScsiPrt [On_Demand | Running]) -- C:\Windows\System32\drivers\msiscsi.sys (Microsoft Corporation)
(iteatapi [Disabled | Stopped]) -- C:\Windows\System32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
(iteraid [Disabled | Stopped]) -- C:\Windows\System32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
(kbdhid [System | Running]) -- C:\Windows\System32\drivers\kbdhid.sys (Microsoft Corporation)
(lltdio [Auto | Running]) -- C:\Windows\System32\drivers\lltdio.sys (Microsoft Corporation)
(LSI_FC [Disabled | Stopped]) -- C:\Windows\System32\drivers\lsi_fc.sys (LSI Logic)
(LSI_SAS [Disabled | Stopped]) -- C:\Windows\System32\drivers\lsi_sas.sys (LSI Logic)
(LSI_SCSI [Disabled | Stopped]) -- C:\Windows\System32\drivers\lsi_scsi.sys (LSI Logic)
(luafv [Auto | Running]) -- C:\Windows\System32\drivers\luafv.sys (Microsoft Corporation)
(MBAMSwissArmy [On_Demand | Stopped]) -- C:\Windows\System32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
(mdmxsdk [Auto | Running]) -- C:\Windows\System32\drivers\mdmxsdk.sys (Conexant)
(megasas [Disabled | Stopped]) -- C:\Windows\System32\drivers\megasas.sys (LSI Logic Corporation)
(monitor [On_Demand | Running]) -- C:\Windows\System32\drivers\monitor.sys (Microsoft Corporation)
(mpio [Disabled | Stopped]) -- C:\Windows\System32\drivers\mpio.sys (Microsoft Corporation)
(mpsdrv [On_Demand | Running]) -- C:\Windows\System32\drivers\mpsdrv.sys (Microsoft Corporation)
(Mraid35x [Disabled | Stopped]) -- C:\Windows\System32\drivers\Mraid35x.sys (LSI Logic Corporation)
(mrxsmb10 [On_Demand | Running]) -- C:\Windows\System32\drivers\mrxsmb10.sys (Microsoft Corporation)
(mrxsmb20 [On_Demand | Running]) -- C:\Windows\System32\drivers\mrxsmb20.sys (Microsoft Corporation)
(msahci [Boot | Running]) -- C:\Windows\System32\drivers\msahci.sys (Microsoft Corporation)
(msdsm [Disabled | Stopped]) -- C:\Windows\System32\drivers\msdsm.sys (Microsoft Corporation)
(msisadrv [Boot | Running]) -- C:\Windows\System32\drivers\msisadrv.sys (Microsoft Corporation)
(MsRPC [On_Demand | Stopped]) -- C:\Windows\System32\drivers\msrpc.sys (Microsoft Corporation)
(NativeWifiP [On_Demand | Running]) -- C:\Windows\System32\drivers\nwifi.sys (Microsoft Corporation)
(NETw3v32 [On_Demand | Stopped]) -- C:\Windows\System32\drivers\NETw3v32.sys (Intel® Corporation)
(NETw4v32 [On_Demand | Running]) -- C:\Windows\System32\drivers\NETw4v32.sys (Intel Corporation)
(nfrd960 [Disabled | Stopped]) -- C:\Windows\System32\drivers\nfrd960.sys (IBM Corporation)
(nsiproxy [System | Running]) -- C:\Windows\System32\drivers\nsiproxy.sys (Microsoft Corporation)
(ntrigdigi [Disabled | Stopped]) -- C:\Windows\System32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
(nvraid [Disabled | Stopped]) -- C:\Windows\System32\drivers\nvraid.sys (NVIDIA Corporation)
(nvstor [Disabled | Stopped]) -- C:\Windows\System32\drivers\nvstor.sys (NVIDIA Corporation)
(nv_agp [On_Demand | Stopped]) -- C:\Windows\System32\drivers\NV_AGP.SYS (Microsoft Corporation)
(PEAUTH [Auto | Running]) -- C:\Windows\System32\drivers\PEAuth.sys (Microsoft Corporation)
(PSched [System | Running]) -- C:\Windows\System32\drivers\pacer.sys (Microsoft Corporation)
(ql2300 [Disabled | Stopped]) -- C:\Windows\System32\drivers\ql2300.sys (QLogic Corporation)
(ql40xx [Disabled | Stopped]) -- C:\Windows\System32\drivers\ql40xx.sys (QLogic Corporation)
(QWAVEdrv [On_Demand | Stopped]) -- C:\Windows\System32\drivers\qwavedrv.sys (Microsoft Corporation)
(RasSstp [On_Demand | Running]) -- C:\Windows\System32\drivers\rassstp.sys (Microsoft Corporation)
(RDPENCDD [System | Running]) -- C:\Windows\System32\drivers\RDPENCDD.sys (Microsoft Corporation)
(rspndr [Auto | Running]) -- C:\Windows\System32\drivers\rspndr.sys (Microsoft Corporation)
(RTL8023xp [On_Demand | Running]) -- C:\Windows\System32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation )
(RTSTOR [On_Demand | Running]) -- C:\Windows\System32\drivers\RTSTOR.sys (Realtek Semiconductor Corp.)
(sbp2port [Disabled | Stopped]) -- C:\Windows\System32\drivers\sbp2port.sys (Microsoft Corporation)
(secdrv [Auto | Running]) -- C:\Windows\System32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
(sermouse [Disabled | Stopped]) -- C:\Windows\System32\drivers\sermouse.sys (Microsoft Corporation)
(sffdisk [Disabled | Stopped]) -- C:\Windows\System32\drivers\sffdisk.sys (Microsoft Corporation)
(sffp_mmc [On_Demand | Stopped]) -- C:\Windows\System32\drivers\sffp_mmc.sys (Microsoft Corporation)
(sffp_sd [On_Demand | Stopped]) -- C:\Windows\System32\drivers\sffp_sd.sys (Microsoft Corporation)
(sisagp [On_Demand | Stopped]) -- C:\Windows\System32\drivers\SISAGP.SYS (Microsoft Corporation)
(SiSRaid2 [Disabled | Stopped]) -- C:\Windows\System32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
(SiSRaid4 [Disabled | Stopped]) -- C:\Windows\System32\drivers\sisraid4.sys (Silicon Integrated Systems)
(Smb [System | Running]) -- C:\Windows\System32\drivers\smb.sys (Microsoft Corporation)
(spldr [Boot | Running]) -- C:\Windows\System32\drivers\spldr.sys (Microsoft Corporation)
(sptd [Boot | Running]) -- C:\Windows\System32\drivers\sptd.sys ()
(srv2 [On_Demand | Running]) -- C:\Windows\System32\drivers\srv2.sys (Microsoft Corporation)
(srvnet [On_Demand | Running]) -- C:\Windows\System32\drivers\srvnet.sys (Microsoft Corporation)
(Symc8xx [Disabled | Stopped]) -- C:\Windows\System32\drivers\symc8xx.sys (LSI Logic)
(Sym_hi [Disabled | Stopped]) -- C:\Windows\System32\drivers\sym_hi.sys (LSI Logic)
(Sym_u3 [Disabled | Stopped]) -- C:\Windows\System32\drivers\sym_u3.sys (LSI Logic)
(tcpipreg [Auto | Running]) -- C:\Windows\System32\drivers\tcpipreg.sys (Microsoft Corporation)
(tdx [System | Running]) -- C:\Windows\System32\drivers\tdx.sys (Microsoft Corporation)
(tssecsrv [On_Demand | Stopped]) -- C:\Windows\System32\drivers\tssecsrv.sys (Microsoft Corporation)
(tunmp [On_Demand | Running]) -- C:\Windows\System32\drivers\TUNMP.SYS (Microsoft Corporation)
(tunnel [On_Demand | Running]) -- C:\Windows\System32\drivers\tunnel.sys (Microsoft Corporation)
(uagp35 [On_Demand | Stopped]) -- C:\Windows\System32\drivers\UAGP35.SYS (Microsoft Corporation)
(uliagpkx [On_Demand | Stopped]) -- C:\Windows\System32\drivers\ULIAGPKX.SYS (Microsoft Corporation)
(uliahci [Disabled | Stopped]) -- C:\Windows\System32\drivers\uliahci.sys (ULi Electronics Inc.)
(UlSata [Disabled | Stopped]) -- C:\Windows\System32\drivers\ulsata.sys (Promise Technology, Inc.)
(ulsata2 [Disabled | Stopped]) -- C:\Windows\System32\drivers\ulsata2.sys (Promise Technology, Inc.)
(umbus [On_Demand | Running]) -- C:\Windows\System32\drivers\umbus.sys (Microsoft Corporation)
(USBAAPL [On_Demand | Stopped]) -- C:\Windows\System32\drivers\usbaapl.sys (Apple, Inc.)
(usbcir [Disabled | Stopped]) -- C:\Windows\System32\drivers\usbcir.sys (Microsoft Corporation)
(usbvideo [On_Demand | Running]) -- C:\Windows\System32\drivers\usbvideo.sys (Microsoft Corporation)
(vga [On_Demand | Stopped]) -- C:\Windows\System32\drivers\vgapnp.sys (Microsoft Corporation)
(ViaC7 [Disabled | Stopped]) -- C:\Windows\System32\drivers\viac7.sys (Microsoft Corporation)
(viaide [Disabled | Stopped]) -- C:\Windows\System32\drivers\viaide.sys (VIA Technologies, Inc.)
(volmgr [Boot | Running]) -- C:\Windows\System32\drivers\volmgr.sys (Microsoft Corporation)
(volmgrx [Boot | Running]) -- C:\Windows\System32\drivers\volmgrx.sys (Microsoft Corporation)
(vsmraid [Disabled | Stopped]) -- C:\Windows\System32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
(WacomPen [Disabled | Stopped]) -- C:\Windows\System32\drivers\wacompen.sys (Microsoft Corporation)
(Wd [Disabled | Stopped]) -- C:\Windows\System32\drivers\wd.sys (Microsoft Corporation)
(Wdf01000 [Boot | Running]) -- C:\Windows\System32\drivers\Wdf01000.sys (Microsoft Corporation)
(winachsf [On_Demand | Running]) -- C:\Windows\System32\drivers\HSX_CNXT.sys (Conexant Systems, Inc.)
(WmiAcpi [On_Demand | Running]) -- C:\Windows\System32\drivers\wmiacpi.sys (Microsoft Corporation)
(ws2ifsl [Disabled | Stopped]) -- C:\Windows\System32\drivers\ws2ifsl.sys (Microsoft Corporation)
(XAudio [Auto | Running]) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
========== Standard Registry (All) ========== ========== Internet Explorer ========== HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://ie.redirect.h...a...o&pf=laptopHKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft....k/?LinkId=54896HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.microsoft...p...ER}&ar=homeHKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://ie.search.msn...st/srchcust.htmHKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://ie.search.msn...st/srchasst.htm HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft....k/?LinkId=54896HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.ca/HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache =
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
O1 HOSTS File: (761 bytes) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - Reg Error: Key does not exist or could not be opened. File not found
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Reg Error: Key does not exist or could not be opened. File not found
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [BrStsWnd] C:\Program Files\Brownie\BrstsWnd.exe Autorun (brother)
O4 - HKLM..\Run: [F-Secure Manager] "C:\Program Files\COGECO Security Services\Common\FSM32.EXE" /splash (F-Secure Corporation)
O4 - HKLM..\Run: [F-Secure TNB] "C:\Program Files\COGECO Security Services\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW (F-Secure Corporation)
O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe (Hewlett-Packard)
O4 - HKLM..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" (Intel Corporation)
O4 - HKLM..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" (Apple Inc.)
O4 - HKLM..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto (Microsoft Corporation)
O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime (Apple Inc.)
O4 - HKLM..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0" (CyberLink Corp.)
O4 - HKLM..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide (Microsoft Corporation)
O4 - HKCU..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" (DT Soft Ltd.)
O4 - HKCU..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe (Microsoft Corporation)
O4 - HKCU..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun (Hewlett-Packard)
O4 - HKCU..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (Hewlett-Packard Company)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\COGECO Security Services\FSPC\fspcmsie.dll (F-Secure Corporation)
O9 - Extra 'Tools' menuitem : Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\COGECO Security Services\FSPC\fspcmsie.dll (F-Secure Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: 127.0.0.1 (http in Local intranet | )
O16 - DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2}
http://design-concep...yerAX_Win32.cab (20-20 3D Viewer)
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10}
http://cdn.scan.onec...S/wlscctrl2.cab (Windows Live OneCare safety scanner control)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.ma...r/ultrashim.cab (Reg Error: Key does not exist or could not be opened.)
O18 - Protocol\Handler: - about - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler: - cdl - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler: - dvd - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler: - file - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler: - ftp - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler: - http - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler: - http\0x00000001 - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler: - http\oledb - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler: - https - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler: - https\0x00000001 - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler: - https\oledb - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler: - ipp - No CLSID value found
O18 - Protocol\Handler: - ipp\0x00000001 - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler: - its - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler: - javascript - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler: - local - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler: - mailto - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler: - mhtml - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler: - mk - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler: - msdaipp - No CLSID value found
O18 - Protocol\Handler: - msdaipp\0x00000001 - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler: - msdaipp\oledb - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler: - ms-help - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler: - ms-its - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler: - ms-itss - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler: - res - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler: - tv - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler: - vbscript - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Filter: - application/octet-stream - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter: - application/x-complus - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter: - application/x-msdownload - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter: - deflate - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter: - gzip - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - See sections below for AppInitDlls and Winlogon settings
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}C:\Windows\System32\webcheck.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: (Component Categories cache daemon) - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\System32\browseui.dll (Microsoft Corporation)
========== HKLM Winlogon Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell" = explorer.exe
>C:\Windows\explorer.exe (Microsoft Corporation)
"UserInit" = C:\Windows\system32\userinit.exe,
>C:\Windows\System32\userinit.exe (Microsoft Corporation)
"VMApplet" = rundll32 shell32,Control_RunDLL "sysdm.cpl"
>C:\Windows\System32\shell32.dll (Microsoft Corporation)
>C:\Windows\System32\sysdm.cpl (Microsoft Corporation)
========== Winlogon Notify Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\]
igfxcui: "DllName" = igfxdev.dll -- C:\Windows\System32\igfxdev.dll (Intel Corporation)
========== HKLM *SecurityProviders* ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders]
"SecurityProviders" = credssp.dll
>C:\Windows\System32\credssp.dll (Microsoft Corporation)
========== LSA *Authentication Packages* ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"Authentication Packages" = msv1_0,
>C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
========== LSA *Security Packages* ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"Security Packages" = kerberos,msv1_0,schannel,wdigest,tspkg,
>C:\Windows\System32\kerberos.dll (Microsoft Corporation)
>C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
>C:\Windows\System32\schannel.dll (Microsoft Corporation)
>C:\Windows\System32\wdigest.dll (Microsoft Corporation)
>C:\Windows\System32\TSpkg.dll (Microsoft Corporation)
========== Safeboot Options ========== "AlternateShell" = cmd.exe
========== CDRom AutoRun Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]
"AutoRun" = 1
========== Autorun Files on Drives ========== autoexec.bat [REM Dummy file for NTVDMPATH=%PATH%;C:\PROGRA~1\COMMON~1\MUVEET~1\030625 | ]
C:\autoexec.bat () -- [ NTFS ]
AUTOMODE [@echo off | IF EXIST C:\ST_RP\MANUALMODE ECHO MANUAL BATCH MODE ALREADY SET ! | IF NOT EXIST C:\ST_RP\MANUALMODE ECHO SET TO MANUAL BATCH EXECUTION ! | IF NOT EXIST C:\ST_RP\MANUALMODE IF EXIST C:\ST_RP\AUTOMODE DEL C:\ST_RP\AUTOMODE /F > NUL | IF NOT EXIST C:\ST_RP\MANUALMODE COPY C:\ST_RP\SET_AUTO_MODE.CMD C:\ST_RP\MANUALMODE > NUL | ECHO. | ]
D:\AUTOMODE () -- [ NTFS ]
========== Files/Folders - Created Within 30 Days ========== [1 C:\Windows\*.tmp files]
[2009/01/18 19:52:27 | 00,419,328 | ---- | C] (OldTimer Tools) -- C:\Users\Sandra\Desktop\OTListIt2.exe
[2009/01/18 09:07:21 | 00,000,000 | ---D | C] -- C:\Windows\System32\20-20 Technologies
[2009/01/14 18:09:16 | 00,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv.sys
[2009/01/13 14:51:32 | 00,000,006 | -HS- | C] () -- C:\Users\Sandra\AppData\Roaming\desktop.ini
[2009/01/13 14:51:32 | 00,000,006 | -HS- | C] () -- C:\Users\Sandra\AppData\Local\desktop.ini
[2009/01/13 14:48:40 | 00,000,000 | ---D | C] -- C:\Users\Sandra\AppData\Local\ArcSoft
[2009/01/13 14:48:12 | 00,000,000 | ---D | C] -- C:\Users\Sandra\Documents\My Print Creations
[2009/01/13 14:47:38 | 00,000,000 | ---D | C] -- C:\ProgramData\ArcSoft
[2009/01/13 14:47:34 | 00,000,000 | ---D | C] -- C:\Users\Sandra\AppData\Roaming\Arcsoft
[2009/01/13 14:46:22 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ArcSoft
[2009/01/13 14:46:22 | 00,000,000 | ---D | C] -- C:\Program Files\ArcSoft
[2009/01/13 14:41:15 | 00,002,028 | ---- | C] () -- C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2009/01/13 14:37:48 | 00,101,605 | ---- | C] () -- C:\Windows\hpqins13.dat.temp
[2009/01/13 14:25:26 | 00,000,000 | ---D | C] -- C:\Users\Sandra\Documents\HP Photosmart Projects
[2009/01/13 08:52:00 | 00,001,874 | ---- | C] () -- C:\Users\Sandra\Desktop\HijackThis.lnk
[2009/01/13 08:51:59 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009/01/13 08:51:33 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Users\Sandra\Desktop\HJTsetup.exe
[2009/01/12 19:05:38 | 00,000,000 | ---D | C] -- C:\Users\Sandra\AppData\Roaming\Malwarebytes
[2009/01/12 19:05:34 | 00,015,504 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2009/01/12 19:05:34 | 00,000,818 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/01/12 19:05:31 | 00,038,496 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/01/12 19:05:30 | 00,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2009/01/12 19:05:29 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009/01/12 18:54:36 | 00,000,000 | ---D | C] -- C:\Users\Sandra\AppData\Local\Adobe
[2009/01/12 16:32:05 | 21,370,22464 | -HS- | C] () -- C:\hiberfil.sys
[2009/01/11 20:01:38 | 00,000,000 | ---D | C] -- C:\Program Files\Windows Live Safety Center
[2009/01/09 10:20:29 | 00,010,752 | ---- | C] () -- C:\Users\Sandra\Documents\PSMIP.wps
[2009/01/09 08:09:08 | 00,430,451 | ---- | C] () -- C:\Users\Sandra\Desktop\sample1.pdf.jpg
[2009/01/08 19:08:31 | 00,050,771 | ---- | C] () -- C:\Users\Sandra\Desktop\cutoutbaby.jpg
[2009/01/08 15:10:22 | 00,343,254 | ---- | C] () -- C:\Users\Sandra\Documents\no to small.bmp
[2009/01/08 14:48:27 | 00,165,831 | ---- | C] () -- C:\Users\Sandra\Desktop\costco_slider_dec_2008_v2.jpg
[2009/01/08 10:22:53 | 00,211,456 | ---- | C] () -- C:\Users\Sandra\Documents\sears name change.wps
[2009/01/06 20:27:42 | 00,000,000 | ---D | C] -- C:\Users\Sandra\Documents\JPGS
[2009/01/06 19:45:43 | 00,000,984 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Photoshop Elements 4.0.lnk
[2009/01/05 16:59:20 | 00,001,887 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 8.lnk
[2009/01/05 16:58:18 | 00,000,000 | ---D | C] -- C:\Program Files\Adobe
[2009/01/05 08:03:51 | 00,212,480 | ---- | C] () -- C:\Users\Sandra\Documents\fax to work.wps
[2009/01/03 14:42:00 | 01,524,471 | ---- | C] () -- C:\Users\Sandra\Desktop\IMG_1079.JPG
[2009/01/02 20:34:43 | 00,000,000 | ---D | C] -- C:\Users\Sandra\Desktop\pic
[2009/01/01 00:17:53 | 00,000,388 | ---- | C] () -- C:\infect.htm
[2009/01/01 00:17:53 | 00,000,182 | ---- | C] () -- C:\error.htm
[2008/12/30 12:12:56 | 01,251,840 | ---- | C] () -- C:\Users\Sandra\Documents\Presentation1.ppt
[2008/12/29 08:40:28 | 00,483,943 | ---- | C] () -- C:\Users\Sandra\Documents\daves passport.pdf
[2008/12/27 19:28:16 | 00,000,000 | ---D | C] -- C:\Users\Sandra\Documents\80s
[2008/12/24 09:22:01 | 00,001,169 | ---- | C] () -- C:\Users\Sandra\Desktop\CaseBook - Shortcut.lnk
[2008/12/24 09:21:27 | 00,000,372 | ---- | C] () -- C:\Users\Sandra\Desktop\Documents - Shortcut.lnk
[2008/12/22 18:20:31 | 00,000,000 | ---D | C] -- C:\Users\Sandra\Documents\CaseBook
[2008/12/22 11:21:14 | 02,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_40.dll
[2008/12/22 11:21:14 | 00,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_40.dll
[2008/12/22 11:21:13 | 04,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll
[2008/12/22 11:21:13 | 00,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_3.dll
[2008/12/22 11:21:13 | 00,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_2.dll
[2008/12/22 11:21:12 | 00,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_3.dll
[2008/12/22 11:21:11 | 00,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_5.dll
[2008/12/22 11:21:10 | 00,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_2.dll
[2008/12/22 11:21:10 | 00,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_1.dll
[2008/12/22 11:21:09 | 03,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_39.dll
[2008/12/22 11:21:09 | 01,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_39.dll
[2008/12/22 11:21:09 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_39.dll
[2008/12/22 11:21:09 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_2.dll
[2008/12/22 11:21:07 | 00,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_1.dll
[2008/12/22 11:21:07 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_1.dll
[2008/12/22 11:21:07 | 00,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_0.dll
[2008/12/22 11:21:06 | 01,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_38.dll
[2008/12/22 11:21:06 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_38.dll
[2008/12/22 11:21:06 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_4.dll
[2008/12/22 11:21:04 | 03,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_38.dll
[2008/12/22 11:21:03 | 00,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_0.dll
[2008/12/22 11:21:03 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_0.dll
[2008/12/22 11:21:03 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_3.dll
[2008/12/22 11:21:02 | 01,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_37.dll
[2008/12/22 11:21:02 | 00,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_37.dll
[2008/12/22 11:21:01 | 03,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_37.dll
[2008/12/22 11:21:00 | 00,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_10.dll
[2008/12/22 11:20:56 | 01,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_36.dll
[2008/12/22 11:20:56 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_36.dll
[2008/12/22 11:20:55 | 03,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_36.dll
[2008/12/22 11:20:52 | 00,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_9.dll
[2008/12/22 11:20:51 | 01,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_35.dll
[2008/12/22 11:20:51 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_35.dll
[2008/12/22 11:20:50 | 03,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_35.dll
[2008/12/22 11:20:49 | 00,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_8.dll
[2008/12/22 11:20:49 | 00,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_2.dll
[2008/12/22 11:20:48 | 01,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_34.dll
[2008/12/22 11:20:48 | 00,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_34.dll
[2008/12/22 11:20:47 | 03,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_34.dll
[2008/12/22 11:20:46 | 00,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_7.dll
[2008/12/22 11:20:46 | 00,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_3.dll
[2008/12/22 11:20:45 | 01,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_33.dll
[2008/12/22 11:20:45 | 00,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_33.dll
[2008/12/22 11:20:44 | 00,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_6.dll
[2008/12/22 11:20:38 | 00,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_5.dll
[2008/12/22 11:20:37 | 00,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10.dll
[2008/12/22 11:20:36 | 03,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
[2008/12/22 11:20:33 | 00,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_4.dll
[2008/12/22 11:20:33 | 00,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_1.dll
[2008/12/22 11:20:31 | 02,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_31.dll
[2008/12/22 11:18:38 | 00,000,000 | -H-D | C] -- C:\Windows\msdownld.tmp
[2008/12/22 11:18:31 | 00,000,000 | ---D | C] -- C:\Windows\System32\directx
[2008/12/21 12:07:47 | 00,142,848 | ---- | C] () -- C:\Users\Sandra\Documents\gift tags2.doc
========== Files - Modified Within 30 Days ========== [1 C:\Windows\*.tmp files]
[2009/01/19 07:44:10 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009/01/19 07:44:09 | 00,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/01/19 07:44:09 | 00,003,296 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/01/18 19:52:31 | 00,419,328 | ---- | M] (OldTimer Tools) -- C:\Users\Sandra\Desktop\OTListIt2.exe
[2009/01/18 19:45:56 | 00,000,526 | ---- | M] () -- C:\Windows\tasks\Scheduled scanning task.job
[2009/01/18 17:16:15 | 00,701,418 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2009/01/18 17:16:15 | 00,607,068 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2009/01/18 17:16:15 | 00,108,836 | ---- | M] () -- C:\Windows\System
This topic is locked
Sign In
Create Account
