Hello Essexboy.
I would like to let you know that it might take me some time to reply, occasionally, as I share a computer with 3 other people.
Microsoft Windows XP Home Edition (5.1.2600) Service Pack 3
A:\ [Removable] (Total:0 Mo/Free:0 Mo)
C:\ [Fixed] - NTFS - (Total:78152 Mo/Free:1598 Mo)
D:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)
E:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)
2009-04-18|14:10
----------------------\\ Processes..
--Locked-- [System Process]
---------- System
---------- \SystemRoot\System32\smss.exe
---------- \??\C:\WINDOWS\system32\csrss.exe
---------- \??\C:\WINDOWS\system32\winlogon.exe
---------- C:\WINDOWS\system32\services.exe
---------- C:\WINDOWS\system32\lsass.exe
---------- C:\WINDOWS\system32\Ati2evxx.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\Program Files\Windows Defender\MsMpEng.exe
---------- C:\WINDOWS\System32\svchost.exe
---------- C:\WINDOWS\system32\svchost.exe
---------- C:\WINDOWS\System32\svchost.exe
---------- C:\WINDOWS\System32\svchost.exe
---------- C:\WINDOWS\system32\spoolsv.exe
---------- C:\WINDOWS\System32\svchost.exe
---------- C:\Program Files\AGI\common\win32\PythonService.exe
---------- C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
---------- C:\Program Files\Java\jre6\bin\jqs.exe
---------- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
---------- C:\Program Files\Linksys\Wireless-B USB Network Adapter\NICServ.exe
---------- C:\Nexon\MapleStory\npkcmsvc.exe
---------- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
---------- C:\WINDOWS\System32\svchost.exe
---------- C:\WINDOWS\system32\UAService7.exe
---------- C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
---------- C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe
---------- C:\PROGRA~1\AVG\AVG8\avgemc.exe
---------- C:\PROGRA~1\AVG\AVG8\avgrsx.exe
---------- C:\PROGRA~1\AVG\AVG8\avgnsx.exe
---------- C:\Program Files\AVG\AVG8\avgcsrvx.exe
---------- C:\WINDOWS\System32\alg.exe
---------- C:\WINDOWS\system32\Ati2evxx.exe
---------- C:\WINDOWS\system32\wbem\wmiprvse.exe
---------- C:\WINDOWS\Explorer.EXE
---------- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
---------- C:\WINDOWS\SOUNDMAN.EXE
---------- C:\Program Files\Windows Defender\MSASCui.exe
---------- C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe
---------- C:\WINDOWS\System32\svchost.exe
---------- C:\PROGRA~1\AVG\AVG8\avgtray.exe
---------- C:\Program Files\Java\jre6\bin\jusched.exe
---------- C:\WINDOWS\system32\ctfmon.exe
---------- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
---------- C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
---------- C:\Program Files\Mozilla Firefox\firefox.exe
---------- C:\WINDOWS\system32\cmd.exe
---------- C:\Rooter$\RK.exe
----------------------\\ Search..
----------------------\\ ROOTKIT !!
----------------------\\ Cracks & Keygens..
C:\DOCUME~1\Chris\My Documents\Cortex.Command.(build.22).cracked-SND.zip
C:\DOCUME~1\Chris\My Documents\Adobe Photoshop CS2 9.0 Final, Keygen & Acitvater\keygen.exe
C:\DOCUME~1\Chris\My Documents\Adobe Photoshop CS2 9.0 Final, Keygen & Acitvater\Photoshop CS2\Setup.exe
C:\DOCUME~1\Chris\My Documents\Adobe Photoshop CS2 9.0 Final, Keygen & Acitvater\Photoshop CS2\Setup.exe.manifest
C:\DOCUME~1\Chris\My Documents\Adobe Photoshop CS2 9.0 Final, Keygen & Acitvater\Photoshop CS2\Adobe DNG Converter\Adobe DNG Converter.exe
C:\DOCUME~1\Chris\My Documents\Adobe Photoshop CS2 9.0 Final, Keygen & Acitvater\Photoshop CS2\Adobe® Photoshop® CS2\instmsia.exe
C:\DOCUME~1\Chris\My Documents\Adobe Photoshop CS2 9.0 Final, Keygen & Acitvater\Photoshop CS2\Adobe® Photoshop® CS2\instmsiw.exe
C:\DOCUME~1\Chris\My Documents\Adobe Photoshop CS2 9.0 Final, Keygen & Acitvater\Photoshop CS2\Adobe® Photoshop® CS2\setup.exe
C:\DOCUME~1\Chris\My Documents\Adobe Photoshop CS2 9.0 Final, Keygen & Acitvater\Photoshop CS2\Goodies\Custom File Info Panels\Sample File Info Panels\CustomPanel_allWidgets.txt
C:\DOCUME~1\Chris\My Documents\Adobe Photoshop CS2 9.0 Final, Keygen & Acitvater\Photoshop CS2\Goodies\Custom File Info Panels\Sample File Info Panels\Description.txt
C:\DOCUME~1\Chris\My Documents\Adobe Photoshop CS2 9.0 Final, Keygen & Acitvater\Photoshop CS2\Patch\Adobe Photoshop CS2.exe
1 - "C:\Rooter$\Rooter_1.txt" - 2009-04-08| 2:25
2 - "C:\Rooter$\Rooter_2.txt" - 2009-04-18|14:11
----------------------\\ Scan completed at 14:11
OTListIt logfile created on: 2009-04-18 2:28:10 PM - Run 1
OTListIt2 by OldTimer - Version 2.0.12.1 Folder = C:\Documents and Settings\Chris\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: yyyy-MM-dd
510.80 Mb Total Physical Memory | 130.79 Mb Available Physical Memory | 25.60% Memory free
1.22 Gb Paging File | 0.74 Gb Available in Paging File | 60.96% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 76.32 Gb Total Space | 9.56 Gb Free Space | 12.53% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: KEVIN-BLXM4BP7P
Current User Name: Chris
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On
========== Processes (SafeList) ========== PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Program Files\AGI\common\win32\PythonService.exe ()
PRC - C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\Linksys\Wireless-B USB Network Adapter\NICServ.exe ()
PRC - C:\Nexon\MapleStory\npkcmsvc.exe (INCA Internet Co., Ltd.)
PRC - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corp.)
PRC - C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.)
PRC - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe (GEMTEKS)
PRC - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe (Linksys)
PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\WINDOWS\system32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\AVG\AVG8\avgemc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG8\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG8\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG8\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
PRC - C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe (AG Interactive)
PRC - C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\system32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\Program Files\Yahoo!\Messenger\Ymsgr_tray.exe (Yahoo! Inc.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
PRC - C:\Documents and Settings\Chris\Desktop\OTListIt2.exe (OldTimer Tools)
========== Win32 Services (SafeList) ========== SRV - (Adobe LM Service [On_Demand | Stopped]) -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe (Adobe Systems)
SRV - (AGWinService [Auto | Running]) -- C:\Program Files\AGI\common\win32\PythonService.exe ()
SRV - (aspnet_state [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (Ati HotKey Poller [Auto | Running]) -- C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (ATI Smart [Auto | Stopped]) -- C:\WINDOWS\system32\ati2sgag.exe ()
SRV - (avg8emc [Auto | Running]) -- C:\Program Files\AVG\AVG8\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg8wd [Auto | Running]) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (helpsvc [Auto | Running]) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (IDriverT [On_Demand | Stopped]) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (idsvc [Unknown | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (JavaQuickStarterService [Auto | Running]) -- C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (LVPrcSrv [Auto | Running]) -- C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (LVSrvLauncher [Auto | Stopped]) -- C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe (Logitech Inc.)
SRV - (NetSvc [On_Demand | Stopped]) -- c:\Program Files\Intel\NCS\Sync\NetSvc.exe (Intel® Corporation)
SRV - (NetTcpPortSharing [Disabled | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (NICSer_WUSB11 [Auto | Running]) -- C:\Program Files\Linksys\Wireless-B USB Network Adapter\NICServ.exe ()
SRV - (npggsvc [On_Demand | Stopped]) -- C:\WINDOWS\system32\GameMon.des (INCA Internet Co., Ltd.)
SRV - (npkcmsvc [Auto | Running]) -- C:\Nexon\MapleStory\npkcmsvc.exe (INCA Internet Co., Ltd.)
SRV - (SeaPort [Auto | Running]) -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corp.)
SRV - (UserAccess7 [Auto | Running]) -- C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.)
SRV - (WinDefend [Auto | Running]) -- C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) -- C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)
SRV - (WUSB54GSv2SVC [Auto | Running]) -- File not found
========== Driver Services (SafeList) ========== DRV - (AegisP [Auto | Running]) -- C:\WINDOWS\system32\DRIVERS\AegisP.sys (Meetinghouse Data Communications)
DRV - (ALCXWDM [On_Demand | Running]) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (ati2mtag [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.)
DRV - (atinrvxx [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\atinrvxx.sys (ATI Technologies Inc.)
DRV - (ATITUNEP [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\atintuxx.sys (ATI Technologies Inc.)
DRV - (ativraxx [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\atinraxx.sys (ATI Technologies Inc.)
DRV - (ATIXSAudio [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\atinxsxx.sys (ATI Technologies Inc.)
DRV - (AvgLdx86 [System | Running]) -- C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86 [System | Running]) -- C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgTdiX [System | Running]) -- C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (DM9102 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\DM9PCI5.SYS (CNet Technology, Inc. )
DRV - (IdeBusDr [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\IdeBusDr.sys (Intel Corporation)
DRV - (IdeChnDr [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\IdeChnDr.sys (Intel Corporation)
DRV - (LVPr2Mon [On_Demand | Running]) -- C:\WINDOWS\system32\Drivers\LVPr2Mon.sys ()
DRV - (LVUSBSta [On_Demand | Stopped]) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys (Logitech Inc.)
DRV - (MVDCODEC [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\atinmdxx.sys (ATI Technologies Inc.)
DRV - (NAL [On_Demand | Stopped]) -- C:\WINDOWS\system32\Drivers\iqvw32.sys (Intel Corporation )
DRV - (npkcrypt [Auto | Running]) -- C:\Nexon\MapleStory\npkcrypt.sys (INCA Internet Co., Ltd.)
DRV - (npkcusb [On_Demand | Stopped]) -- C:\Nexon\MapleStory\npkcusb.sys (INCA Internet Co., Ltd.)
DRV - (pavboot [Boot | Running]) -- C:\WINDOWS\system32\drivers\pavboot.sys (Panda Security, S.L.)
DRV - (PCANDIS5 [On_Demand | Running]) -- C:\WINDOWS\system32\PCANDIS5.SYS (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (PCDCODEC [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\atinpdxx.sys (ATI Technologies Inc.)
DRV - (PID_0928 [On_Demand | Stopped]) -- C:\WINDOWS\system32\DRIVERS\LV561AV.SYS (Logitech Inc.)
DRV - (PRISM_USB [On_Demand | Stopped]) -- C:\WINDOWS\system32\DRIVERS\LSPMUSB.sys (Cisco-Linksys, LLC.)
DRV - (Ptilink [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (Secdrv [Auto | Running]) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (sptd [Boot | Running]) -- C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (USBNET [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\vnetusbr.sys (Cisco-Linksys, LLC.)
DRV - (USBNET_XP [On_Demand | Stopped]) -- C:\WINDOWS\system32\DRIVERS\netusbxp.sys (The LinkSys Group, Inc.)
DRV - (USB_RNDIS [On_Demand | Running]) -- C:\WINDOWS\system32\DRIVERS\usb8023.sys (Microsoft Corporation)
DRV - (GTNDIS5 [On_Demand | Running]) -- C:\WINDOWS\system32\GTNDIS5.SYS (Printing Communications Assoc., Inc. (PCAUSA))
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.google.com/ieIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.comIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.comIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://ie.search.msn...st/srchcust.htmIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch =
http://us.rd.yahoo.c...rch/search.htmlIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://ie.search.msn...st/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft...amp;ar=iesearchIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.nexon.comIE - URLSearchHook: {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\AGI\common\agcutils.dll (TODO: <Company name>)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - prefs.js..browser.search.selectedEngine: "DAEMON Search"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.0
FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.1.8.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF - prefs.js..extensions.enabledItems:
[email protected]:1.0
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.8
FF - prefs.js..keyword.URL: "
http://kwtb.search.i...1bf93043ede&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\
[email protected]: C:\PROGRAM FILES\KIWEE TOOLBAR\2.8.167\FIREFOX [2009-02-08 00:02:16 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\PROGRAM FILES\AVG\AVG8\FIREFOX [2009-02-28 18:29:33 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\
[email protected]: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009-04-07 21:56:31 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.8\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009-03-30 02:18:46 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.8\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009-04-07 21:57:04 | 00,000,000 | ---D | M]
[2008-08-31 04:22:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\mozilla\Extensions
[2008-08-31 04:22:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009-04-17 16:36:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\mozilla\Firefox\Profiles\a4liduld.default\extensions
[2009-03-29 14:08:54 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\mozilla\Firefox\Profiles\a4liduld.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
[2008-05-09 02:23:55 | 00,002,921 | ---- | M] () -- C:\Documents and Settings\Chris\Application Data\Mozilla\FireFox\Profiles\a4liduld.default\searchplugins\daemon-search.xml
[2009-04-17 19:17:06 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009-03-28 20:07:09 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009-04-07 21:57:09 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009-03-28 20:06:43 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009-03-28 20:06:43 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009-03-28 20:07:00 | 00,001,394 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2009-03-28 20:07:00 | 00,002,193 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2009-03-28 20:07:00 | 00,001,534 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2009-03-28 20:07:01 | 00,002,343 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009-03-28 20:07:01 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009-03-28 20:07:01 | 00,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2009-03-28 20:07:01 | 00,000,792 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.xml
O1 HOSTS File: (303704 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123haustiereundmehr.com
O1 - Hosts: 10479 more lines...
O2 - BHO: (FGCatchUrl) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll (www.flashget.com)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - Reg Error: Key error. File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - Reg Error: Key error. File not found
O2 - BHO: (Kiwee Toolbar) - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll (AG Interactive)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Kiwee Toolbar) - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll (AG Interactive)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll (AG Interactive)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Reg Error: Key error. File not found
O4 - HKLM..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay (ATI Technologies Inc.)
O4 - HKLM..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe" (AG Interactive)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide ()
O4 - HKLM..\Run: [NI.UGA6P_0001_N122M2210] "c:\documents and settings\steven\application data\install_en[1].exe" File not found
O4 - HKLM..\Run: [SoundMan] SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide (Microsoft Corporation)
O4 - HKCU..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet (Yahoo! Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Photags AutoDetect.lnk = C:\Program Files\PhoTags Express\Photags AutoDetect.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Wireless-B USB Network Adapter Utility.lnk = C:\Program Files\Linksys\Wireless-B USB Network Adapter\WUSB11Cfg.exe (Cisco-Linksys, LLC.)
O4 - Startup: C:\Documents and Settings\Chris\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm ()
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm ()
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm File not found
O8 - Extra context menu item: Add to Windows &Live Favorites -
http://favorites.liv...m/quickadd.aspx File not found
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe (FlashGet.com)
O9 - Extra 'Tools' menuitem : FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe (FlashGet.com)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 49 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: 48 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}
http://a1540.g.akama...ex/qtplugin.cab (QuickTime Object)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000}
http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134}
http://lads.myspace....ploader1006.cab (MySpace Uploader Control)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537}
http://gfx1.hotmail....es/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C}
http://update.micros...b?1179348625617 (WUWebControl Class)
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A}
http://www.acclaim.c.../acclaim_v5.cab (GameLauncher Control)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://update.micros...b?1179369915578 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.ma...t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {BD08A9D5-0E5C-4F42-99A3-C0CB5E860557}
http://cdn1.acclaimd...lidstateion.cab (CSolidBrowserObj Object)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: CabBuilder
http://kiw.imgag.com...llerControl.cab (Reg Error: Key error.)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\system32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O33 - MountPoints2\{4eae8b82-29ee-11dd-aed5-000c410e2d75}\Shell - "" = AutoRun
O33 - MountPoints2\{4eae8b82-29ee-11dd-aed5-000c410e2d75}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{4eae8b82-29ee-11dd-aed5-000c410e2d75}\Shell\AutoRun\command - "" = E:\Setup.EXE -- File not found
O33 - MountPoints2\{4eae8b82-29ee-11dd-aed5-000c410e2d75}\Shell\verb0\command - "" = C:\WINDOWS\system32\SETUP.EXE -- [2008-04-13 20:12:34 | 00,023,040 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{bd840ffe-0e61-11dc-a7c4-000c410e2d75}\Shell - "" = AutoRun
O33 - MountPoints2\{bd840ffe-0e61-11dc-a7c4-000c410e2d75}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{bd840ffe-0e61-11dc-a7c4-000c410e2d75}\Shell\AutoRun\command - "" = E:\Autorun.exe -- File not found
O33 - MountPoints2\{f803504c-2ac4-11dd-aedf-000c410e2d75}\Shell - "" = AutoRun
O33 - MountPoints2\{f803504c-2ac4-11dd-aedf-000c410e2d75}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{f803504c-2ac4-11dd-aedf-000c410e2d75}\Shell\AutoRun\command - "" = E:\Setup.EXE -- File not found
O33 - MountPoints2\{f803504c-2ac4-11dd-aedf-000c410e2d75}\Shell\verb0\command - "" = C:\WINDOWS\system32\SETUP.EXE -- [2008-04-13 20:12:34 | 00,023,040 | ---- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
========== Files/Folders - Created Within 30 Days ========== [4 C:\WINDOWS\*.tmp files]
[2009-04-18 03:22:38 | 00,000,000 | -HSD | C] -- C:\WINDOWS\ftpcache
[2009-04-18 03:21:46 | 00,001,635 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Marvel™ - Ultimate Alliance.lnk
[2009-04-18 03:21:45 | 00,000,290 | ---- | C] () -- C:\WINDOWS\game.ini
[2009-04-18 03:03:29 | 00,000,000 | ---D | C] -- C:\Program Files\Activision
[2009-04-17 02:45:48 | 00,120,610 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\halolzcom-left4-dead-zoeystartledwitch.gif
[2009-04-15 18:06:46 | 00,284,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pdh.dll
[2009-04-15 18:06:45 | 00,401,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rpcss.dll
[2009-04-15 18:06:43 | 00,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\services.exe
[2009-04-15 18:06:42 | 00,473,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fastprox.dll
[2009-04-15 18:06:40 | 00,227,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiprvse.exe
[2009-04-15 18:06:39 | 00,453,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiprvsd.dll
[2009-04-15 18:06:38 | 00,729,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll
[2009-04-15 18:06:37 | 00,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\advapi32.dll
[2009-04-15 18:06:36 | 00,714,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntdll.dll
[2009-04-15 16:05:09 | 00,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsp4res.dll
[2009-04-15 16:05:05 | 01,203,922 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sysmain.sdb
[2009-04-15 16:05:03 | 00,215,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wordpad.exe
[2009-04-14 03:05:45 | 00,001,590 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Televisoin.rtf
[2009-04-14 03:05:02 | 00,002,227 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Hag Syndrome.rtf
[2009-04-14 03:04:30 | 00,001,022 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\More Mirrors.rtf
[2009-04-14 03:04:16 | 00,000,524 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Branded.rtf
[2009-04-14 03:03:01 | 00,000,699 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\The Cabinet.rtf
[2009-04-14 03:02:45 | 00,000,627 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Memories.rtf
[2009-04-14 03:02:26 | 00,001,062 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\The Moon.rtf
[2009-04-14 03:02:06 | 00,001,641 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\The Train.rtf
[2009-04-14 03:01:26 | 00,001,679 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Childhood.rtf
[2009-04-14 02:59:24 | 00,001,222 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\The Night.rtf
[2009-04-14 02:58:30 | 00,000,719 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\The Note.rtf
[2009-04-14 02:55:05 | 00,009,633 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Jungle.rtf
[2009-04-14 02:52:21 | 00,001,324 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Tug.rtf
[2009-04-14 02:50:51 | 00,000,881 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\It.rtf
[2009-04-14 02:50:12 | 00,001,376 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Time Travel.rtf
[2009-04-14 02:49:28 | 00,001,733 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Mirrors.rtf
[2009-04-14 02:48:03 | 00,001,225 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Fear.rtf
[2009-04-14 02:47:42 | 00,008,984 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Shadow.rtf
[2009-04-14 02:42:30 | 00,004,608 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Witness.rtf
[2009-04-13 03:02:05 | 00,054,445 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\1239606089917.jpg
[2009-04-13 03:02:01 | 00,274,519 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\1239605947783.jpg
[2009-04-13 03:01:57 | 00,113,585 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\1239605878428.jpg
[2009-04-13 03:01:46 | 00,105,103 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\1239605768785.jpg
[2009-04-13 03:01:40 | 00,141,244 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\1239605662412.jpg
[2009-04-13 03:01:33 | 00,102,389 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\1239605565278.jpg
[2009-04-13 03:01:25 | 00,038,123 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\1239605370478.jpg
[2009-04-13 02:56:54 | 00,179,182 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\1239604572887.jpg
[2009-04-13 02:50:09 | 00,020,103 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\1239605368488.jpg
[2009-04-13 01:53:58 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Chris\My Documents\DEViANCE
[2009-04-13 01:37:38 | 00,151,644 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Profiles.rar
[2009-04-13 01:16:16 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\HijackThis.lnk
[2009-04-13 01:16:15 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009-04-13 01:15:58 | 00,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Chris\My Documents\HJTInstall.exe
[2009-04-11 22:18:49 | 00,054,265 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\Penumbra Overture Walkthrough.rtf
[2009-04-11 01:34:52 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Chris\My Documents\Spiderweb Software
[2009-04-11 01:33:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Chris\My Documents\Geneforge 4 Saved Games
[2009-04-11 01:24:13 | 00,000,899 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Geneforge 5 - Overthrow.lnk
[2009-04-11 01:21:08 | 00,000,959 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Geneforge 4.lnk
[2009-04-11 01:20:24 | 00,000,000 | ---D | C] -- C:\Program Files\Spiderweb Software
[2009-04-11 01:19:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Application Data\Downloaded Installations
[2009-04-11 01:19:30 | 00,001,596 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Geneforge 3.lnk
[2009-04-11 01:18:54 | 00,000,000 | ---D | C] -- C:\Program Files\Geneforge 3
[2009-04-11 01:18:28 | 00,001,596 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Geneforge 2.lnk
[2009-04-11 01:17:57 | 00,000,000 | ---D | C] -- C:\Program Files\Geneforge 2
[2009-04-11 01:17:28 | 00,001,564 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Geneforge.lnk
[2009-04-11 01:17:26 | 00,286,720 | ---- | C] (Indigo Rose Corporation) -- C:\WINDOWS\iun504.exe
[2009-04-11 01:16:54 | 00,000,000 | ---D | C] -- C:\Program Files\Geneforge
[2009-04-11 00:24:01 | 00,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2009-04-10 19:59:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Chris\My Documents\Penumbra Overture
[2009-04-08 02:24:08 | 00,000,000 | ---D | C] -- C:\Rooter$
[2009-04-07 23:14:26 | 00,028,544 | ---- | C] (Panda Security, S.L.) -- C:\WINDOWS\System32\drivers\pavboot.sys
[2009-04-07 23:13:59 | 00,000,000 | ---D | C] -- C:\Program Files\Panda Security
[2009-04-07 23:13:44 | 00,175,504 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\activescan2_en.exe
[2009-04-07 23:11:21 | 00,501,760 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Chris\Desktop\OTListIt2.exe
[2009-04-07 23:11:12 | 00,267,612 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Rooter.exe
[2009-04-07 22:27:02 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Application Data\Malwarebytes
[2009-04-07 22:26:50 | 00,015,504 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009-04-07 22:26:50 | 00,000,696 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Malwarebytes' Anti-Malware.lnk
[2009-04-07 22:26:47 | 00,038,496 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009-04-07 22:26:46 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009-04-07 22:26:46 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009-04-07 22:25:20 | 02,967,800 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Chris\My Documents\mbam-setup.exe
[2009-04-07 22:24:25 | 00,000,611 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\NTREGOPT.lnk
[2009-04-07 22:24:25 | 00,000,592 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\ERUNT.lnk
[2009-04-07 22:24:19 | 00,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2009-04-07 22:22:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Chris\My Documents\SysRestorePoint_v13
[2009-04-07 22:22:22 | 00,791,393 | ---- | C] (Lars Hederer ) -- C:\Documents and Settings\Chris\My Documents\erunt_setup.exe
[2009-04-07 22:22:09 | 00,009,334 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\SysRestorePoint_v13.zip
[2009-04-01 02:10:45 | 01,035,756 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\baium7ou4zb.gif
[2009-03-30 02:51:57 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Chris\My Documents\hj-join
[2009-03-29 20:52:02 | 00,094,208 | ---- | C] () -- C:\WINDOWS\System32\GTW32N50.dll
[2009-03-29 20:52:02 | 00,031,930 | ---- | C] () -- C:\WINDOWS\System32\GTNDIS3.VXD
[2009-03-29 20:52:02 | 00,015,872 | ---- | C] (Printing Communications Assoc., Inc. (PCAUSA)) -- C:\WINDOWS\System32\GTNDIS5.sys
[2009-03-29 20:52:02 | 00,007,423 | ---- | C] () -- C:\WINDOWS\System32\WUSB54GSv2.cat
[2009-03-29 20:52:02 | 00,007,419 | ---- | C] () -- C:\WINDOWS\System32\WUSB54GS.cat
[2009-03-29 20:51:57 | 00,651,264 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2009-03-29 20:51:57 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2009-03-29 20:51:51 | 00,000,000 | ---D | C] -- C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor
[2009-03-29 14:18:32 | 00,040,081 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\garakuta.gif
[2009-03-27 15:49:13 | 00,000,649 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\Shortcut to GravityWell.exe.lnk
[2009-03-27 01:45:59 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Chris\Desktop\Sean O'Connor's Windows Games
[2009-03-27 01:45:51 | 00,000,000 | ---D | C] -- C:\Program Files\Sean O'Connor's Windows Games
[2009-03-24 22:59:13 | 00,006,280 | ---- | C] () -- C:\Documents and Settings\Chris\My Documents\jeff.rtf
[2009-03-22 03:10:48 | 00,000,746 | ---- | C] () -- C:\Documents and Settings\Chris\Desktop\ShatteredGalaxy.lnk
[2009-03-22 03:09:40 | 00,000,000 | ---D | C] -- C:\Program Files\KRU
[2009-03-21 10:06:58 | 00,989,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kernel32.dll
[2009-03-20 20:08:39 | 00,001,383 | ---- | C] () -- C:\WINDOWS\System32\WLAN.INI
[2009-02-08 00:01:30 | 00,339,968 | ---- | C] () -- C:\WINDOWS\System32\pythoncom25.dll
[2009-02-08 00:01:30 | 00,114,688 | ---- | C] () -- C:\WINDOWS\System32\pywintypes25.dll
[2008-12-16 21:58:54 | 00,025,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2008-12-16 21:50:56 | 00,013,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\iKeyLgFT.dll
[2008-11-28 21:29:14 | 00,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008-11-28 19:48:47 | 00,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2008-10-27 15:32:00 | 00,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2008-10-27 15:32:00 | 00,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2008-10-27 15:32:00 | 00,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2008-06-24 20:04:33 | 00,000,027 | ---- | C] () -- C:\WINDOWS\ic.ini
[2007-06-20 19:45:26 | 00,593,920 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2007-06-20 19:45:25 | 00,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2007-06-20 19:45:25 | 00,010,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2007-06-20 19:45:25 | 00,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2007-05-29 23:53:23 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2007-05-25 14:24:01 | 00,013,312 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2007-05-25 00:31:27 | 00,000,052 | ---- | C] () -- C:\WINDOWS\GunzLauncher.INI
[2007-05-17 04:44:30 | 00,135,168 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2007-02-03 08:59:04 | 00,081,110 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2002-08-29 08:00:00 | 00,007,214 | ---- | C] () -- C:\WINDOWS\System32\wzznt.dll
[2002-08-29 08:00:00 | 00,000,817 | ---- | C] () -- C:\WINDOWS\win.ini
[2002-08-29 08:00:00 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
========== Files - Modified Within 30 Days ========== [1 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[2009-04-18 14:27:09 | 00,000,330 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2009-04-18 14:26:01 | 00,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009-04-18 14:24:00 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009-04-18 14:23:55 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009-04-18 14:23:51 | 53,567,8976 | -HS- | M] () -- C:\hiberfil.sys
[2009-04-18 11:09:22 | 35,215,767 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2009-04-18 03:21:46 | 00,001,635 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Marvel™ - Ultimate Alliance.lnk
[2009-04-18 03:21:45 | 00,000,290 | ---- | M] () -- C:\WINDOWS\game.ini
[2009-04-18 02:45:02 | 02,642,874 | -H-- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\IconCache.db
[2009-04-17 18:34:55 | 00,434,673 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[2009-04-17 02:45:57 | 00,120,610 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\halolzcom-left4-dead-zoeystartledwitch.gif
[2009-04-16 17:25:42 | 00,100,885 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2009-04-15 22:06:02 | 00,522,770 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009-04-15 22:06:02 | 00,441,954 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009-04-15 22:06:02 | 00,071,512 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009-04-14 03:05:45 | 00,001,590 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Televisoin.rtf
[2009-04-14 03:05:02 | 00,002,227 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Hag Syndrome.rtf
[2009-04-14 03:04:30 | 00,001,022 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\More Mirrors.rtf
[2009-04-14 03:04:23 | 00,000,524 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Branded.rtf
[2009-04-14 03:03:01 | 00,000,699 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\The Cabinet.rtf
[2009-04-14 03:02:45 | 00,000,627 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Memories.rtf
[2009-04-14 03:02:27 | 00,001,062 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\The Moon.rtf
[2009-04-14 03:02:06 | 00,001,641 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\The Train.rtf
[2009-04-14 03:01:26 | 00,001,679 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Childhood.rtf
[2009-04-14 03:01:19 | 00,001,222 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\The Night.rtf
[2009-04-14 02:58:30 | 00,000,719 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\The Note.rtf
[2009-04-14 02:58:24 | 00,009,633 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Jungle.rtf
[2009-04-14 02:52:21 | 00,001,324 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Tug.rtf
[2009-04-14 02:50:51 | 00,000,881 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\It.rtf
[2009-04-14 02:50:12 | 00,001,376 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Time Travel.rtf
[2009-04-14 02:49:28 | 00,001,733 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Mirrors.rtf
[2009-04-14 02:49:21 | 00,001,225 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Fear.rtf
[2009-04-14 02:47:55 | 00,008,984 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Shadow.rtf
[2009-04-14 02:42:30 | 00,004,608 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Witness.rtf
[2009-04-13 03:02:05 | 00,054,445 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1239606089917.jpg
[2009-04-13 03:02:01 | 00,274,519 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1239605947783.jpg
[2009-04-13 03:01:57 | 00,113,585 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1239605878428.jpg
[2009-04-13 03:01:47 | 00,105,103 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1239605768785.jpg
[2009-04-13 03:01:41 | 00,141,244 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1239605662412.jpg
[2009-04-13 03:01:33 | 00,102,389 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1239605565278.jpg
[2009-04-13 03:01:25 | 00,038,123 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1239605370478.jpg
[2009-04-13 02:56:54 | 00,179,182 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1239604572887.jpg
[2009-04-13 02:50:12 | 00,020,103 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\1239605368488.jpg
[2009-04-13 02:45:05 | 00,045,056 | ---- | M] () -- C:\Documents and Settings\Chris\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-04-13 01:37:40 | 00,151,644 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Profiles.rar
[2009-04-13 01:16:16 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\HijackThis.lnk
[2009-04-13 01:16:01 | 00,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Chris\My Documents\HJTInstall.exe
[2009-04-11 22:18:50 | 00,054,265 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\Penumbra Overture Walkthrough.rtf
[2009-04-11 01:24:13 | 00,000,899 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Geneforge 5 - Overthrow.lnk
[2009-04-11 01:21:08 | 00,000,959 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Geneforge 4.lnk
[2009-04-11 01:19:30 | 00,001,596 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Geneforge 3.lnk
[2009-04-11 01:18:31 | 00,286,720 | ---- | M] (Indigo Rose Corporation) -- C:\WINDOWS\iun504.exe
[2009-04-11 01:18:28 | 00,001,596 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Geneforge 2.lnk
[2009-04-11 01:17:28 | 00,001,564 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Geneforge.lnk
[2009-04-11 00:24:01 | 00,000,754 | ---- | M] () -- C:\WINDOWS\WORDPAD.INI
[2009-04-10 19:58:51 | 00,409,600 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2009-04-10 19:58:51 | 00,114,688 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2009-04-07 23:13:47 | 00,175,504 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\activescan2_en.exe
[2009-04-07 23:11:30 | 00,501,760 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Chris\Desktop\OTListIt2.exe
[2009-04-07 23:11:18 | 00,267,612 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Rooter.exe
[2009-04-07 22:26:50 | 00,000,696 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Malwarebytes' Anti-Malware.lnk
[2009-04-07 22:25:37 | 02,967,800 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Chris\My Documents\mbam-setup.exe
[2009-04-07 22:24:25 | 00,000,611 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\NTREGOPT.lnk
[2009-04-07 22:24:25 | 00,000,592 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\ERUNT.lnk
[2009-04-07 22:22:28 | 00,791,393 | ---- | M] (Lars Hederer ) -- C:\Documents and Settings\Chris\My Documents\erunt_setup.exe
[2009-04-07 22:22:10 | 00,009,334 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\SysRestorePoint_v13.zip
[2009-04-06 16:37:43 | 00,303,704 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2009-04-06 15:32:54 | 00,038,496 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009-04-06 15:32:46 | 00,015,504 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009-04-06 10:57:24 | 24,921,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe
[2009-04-01 02:10:50 | 01,035,756 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\baium7ou4zb.gif
[2009-03-29 20:51:26 | 00,001,383 | ---- | M] () -- C:\WINDOWS\System32\WLAN.INI
[2009-03-29 14:18:38 | 00,040,081 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\garakuta.gif
[2009-03-27 15:49:13 | 00,000,649 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\Shortcut to GravityWell.exe.lnk
[2009-03-27 02:58:38 | 01,203,922 | ---- | M] () -- C:\WINDOWS\System32\dllcache\sysmain.sdb
[2009-03-24 22:59:14 | 00,006,280 | ---- | M] () -- C:\Documents and Settings\Chris\My Documents\jeff.rtf
[2009-03-22 03:10:48 | 00,000,746 | ---- | M] () -- C:\Documents and Settings\Chris\Desktop\ShatteredGalaxy.lnk
[2009-03-21 10:06:58 | 00,989,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\kernel32.dll
[2009-03-21 10:06:58 | 00,989,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kernel32.dll
========== LOP Check ========== [2009-04-07 22:26:46 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\All Users\Application Data
[2007-10-17 22:37:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2007-10-19 00:36:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe Systems
[2009-02-08 00:01:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\agi
[2007-12-07 00:32:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple
[2007-12-07 00:33:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Apple Computer
[2009-02-28 19:15:51 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg8
[2009-02-08 00:02:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Kiwee Toolbar
[2009-03-11 11:40:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Logishrd
[2007-05-17 02:39:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Logitech
[2009-04-07 22:26:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009-03-11 10:10:00 | 00,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2009-02-06 23:30:25 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nexon
[2007-06-20 19:45:23 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Real
[2009-04-16 02:58:52 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2007-05-22 02:52:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Trymedia
[2007-05-16 20:02:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2007-05-17 05:05:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
[2007-05-19 04:49:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo!
[2007-05-19 04:59:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2008-11-22 15:29:37 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\YoYoGames
[2009-04-13 01:36:14 | 00,000,000 | RH-D | M] -- C:\Documents and Settings\Chris\Application Data
[2007-10-26 23:53:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Adobe
[2009-02-16 23:35:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\agi
[2007-05-17 19:01:19 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\ATI
[2008-05-09 02:19:31 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\DAEMON Tools
[2007-06-01 01:59:08 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\DivX
[2007-11-15 14:57:03 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\DMCache
[2009-04-11 01:22:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Downloaded Installations
[2008-09-23 17:13:11 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Dreamlords
[2007-06-06 02:36:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\GetRightToGo
[2007-12-13 21:03:47 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Help
[2007-05-17 19:01:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Identities
[2007-10-29 23:03:59 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\IDM
[2007-05-25 04:37:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Lavasoft
[2007-06-02 22:27:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Macromedia
[2009-04-07 22:27:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Malwarebytes
[2007-06-20 20:20:42 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Media Player Classic
[2009-03-11 17:15:32 | 00,000,000 | --SD | M] -- C:\Documents and Settings\Chris\Application Data\Microsoft
[2008-06-17 15:10:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\mIRC
[2008-08-31 04:22:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Mozilla
[2007-08-13 10:07:58 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Nexon
[2007-10-19 00:48:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Opera
[2007-06-23 02:05:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Real
[2008-11-19 04:40:48 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\SecuROM
[2007-06-06 20:07:08 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Sierra
[2008-03-06 00:58:33 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Soldat
[2007-07-15 00:22:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Sun
[2007-06-20 23:22:01 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\vlc
[2007-05-19 11:40:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Chris\Application Data\Yahoo!
[2002-08-29 08:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini
[2009-04-18 14:27:09 | 00,000,330 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job
[2009-04-18 14:24:00 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT
========== Purity Check ========== < End of report >
OTListIt Extras logfile created on: 2009-04-18 2:28:10 PM - Run 1
OTListIt2 by OldTimer - Version 2.0.12.1 Folder = C:\Documents and Settings\Chris\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: yyyy-MM-dd
510.80 Mb Total Physical Memory | 130.79 Mb Available Physical Memory | 25.60% Memory free
1.22 Gb Paging File | 0.74 Gb Available in Paging File | 60.96% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 76.32 Gb Total Space | 9.56 Gb Free Space | 12.53% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: KEVIN-BLXM4BP7P
Current User Name: Chris
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On
========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) File not found
C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call (Microsoft Corporation)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger (Microsoft Corporation)
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
C:\Program Files\FlashGet\flashget.exe:*:Enabled:FlashGet (FlashGet.com)
C:\Nexon\MapleStory\Patcher.exe:*:Enabled:Patcher MFC ?? ???? ()
C:\Nexon\MapleStory\MapleStory.exe:*:Enabled:MapleStory (Wizet)
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Disabled:Yahoo! Messenger (Yahoo! Inc.)
C:\Codemasters\Blade of Darkness\Bin\Blade.exe:*:Enabled:Blade File not found
C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper (Microsoft Corporation)
C:\Downloads\game\aliens_vs_predator\AvP.exe -debug.exe:*:Enabled:AvP.exe -debug File not found
C:\Nexon\OdinMs\OdinMS.exe:*:Enabled:MapleStory File not found
C:\Soldat\Soldat.exe:*:Enabled:Soldat File not found
C:\Program Files\Acclaim\2Moons\launcher.exe:*:Enabled:launcher File not found
C:\Program Files\Acclaim\2Moons\minilauncher.exe:*:Enabled:2moons File not found
C:\Program Files\Acclaim\2Moons\bin\gameguard.des:*:Enabled:gameguard.des File not found
C:\Program Files\Acclaim\2Moons\bin\GameGuard\GameMon.des:*:Enabled:GameMon.des File not found
C:\Program Files\Acclaim\2Moons\bin\dekaron.exe:*:Enabled:dekaron File not found
C:\Program Files\Acclaim\2Moons\bin\dekaron_nsse.exe:*:Enabled:dekaron_nsse File not found
C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC File not found
C:\Program Files\Activision\X-Men Legends 2\XMen2.exe:*:Enabled:XMen2 File not found
C:\Ntreev\Grand Chase\main.exe:*:Enabled:GrandChase ()
C:\Downloads\game\Savage Battle for Newerth\silverback2.exe:*:Enabled:silverback2 File not found
C:\AeriaGames\DOMO\_domopatch.exe:*:Enabled:_domopatch File not found
C:\AeriaGames\DOMO\Main\DOMO.exe:*:Enabled:DOMO File not found
C:\AeriaGames\DOMO\domopatch.exe:*:Enabled:Play Dream Of Mirror Online File not found
C:\Program Files\DNA\btdna.exe:*:Enabled:DNA File not found
C:\Aeria Games\Dreamlords\dreamlords.exe:*:Enabled:Dreamlords Game Client File not found
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) File not found
C:\Documents and Settings\Chris\My Documents\My Received Files\Empire Earth © Sierra\Empire\Empire Earth.exe:*:Enabled:Empire Earth ()
C:\Downloads\game\Q3A\quake3.exe:*:Enabled:quake3 File not found
C:\Program Files\THQ\Dawn of War\W40k.exe:*:Enabled:W40k File not found
C:\Program Files\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe:*:Enabled:DarkCrusade File not found
C:\Program Files\THQ\Dawn of War\W40kWA.exe:*:Enabled:W40kWA File not found
C:\Documents and Settings\Chris\My Documents\OpenLieroX\OpenLieroX.exe:*:Enabled:OpenLieroX ()
C:\Documents and Settings\All Users\Application Data\Nexon\NGM\NGM.exe:*:Enabled:Nexon Game Manager (Nexon)
C:\Documents and Settings\All Users\Application Data\Nexon\Common\NMService.exe:*:Enabled:Nexon Messenger Service (Nexon Corp.)
C:\Nexon\ElSword\Data\X2.exe:*:Enabled:¿¤¼̉µå ()
C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe (AVG Technologies CZ, s.r.o.)
C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe (AVG Technologies CZ, s.r.o.)
C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe (AVG Technologies CZ, s.r.o.)
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe:*:Enabled:CLI Application (Command Line Interface) (ATI Technologies Inc.)
C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call (Microsoft Corporation)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger (Microsoft Corporation)
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync (Microsoft Corporation)
C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (Mozilla Corporation)
C:\Documents and Settings\Chris\My Documents\SRO_L4_Full_Client_Downloader.exe:*:Enabled:Full-Client Downloader File not found
C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger (Microsoft Corporation)
========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{08C5815C-2C6E-44f8-8748-0E61BC9AFB03}" = La Tale
"{0AAA9C97-74D4-47CE-B089-0B147EF3553C}" = Windows Live Messenger
"{0CDB3307-A4D6-48AE-ACA1-C49F299A6EB9}" = Wireless-B USB Network Adapter Configuration Utility
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{23A287DB-449A-462F-BDE1-8635A61671CE}" = Kiwee Toolbar
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java™ 6 Update 13
"{2BA00471-0328-3743-93BD-FA813353A783}" = Microsoft .NET Framework 3.0 Service Pack 1
"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine
"{2FC099BD-AC9B-33EB-809C-D332E1B27C40}" = Microsoft .NET Framework 3.5
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{394BE3D9-7F57-4638-A8D1-1D88671913B7}" = Microsoft AppLocale
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3C52E7DA-C431-4239-B66B-1BF703D5B194}" = Windows Live Photo Gallery
"{405FA152-1638-4FC1-9233-62DB6F2D4C98}" = Geneforge 5
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{49DC0DD3-1370-41E4-B82C-552EB4985F89}" = Geneforge 4
"{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}" = Junk Mail filter update
"{53B2CFE9-A508-4457-B2CA-5D253536BFB7}" = OneCare Advisor (Windows Live Toolbar)
"{548B3DC6-2300-47E1-BA7B-74AD25F8DEBF}" = Form Fill (Windows Live Toolbar)
"{5B09BD67-4C99-46A1-8161-B7208CE18121}" = QuickTime
"{63C1109E-D977-49ED-BCE3-D00D0BF187D6}" = Windows Live Mail
"{68108E66-D13A-4EE8-A6F4-40E4B90C2A26}" = Windows Live Toolbar Feed Detector (Windows Live Toolbar)
"{6A92E5C5-0578-443D-91F3-92ECE5F2CAE2}" = Windows Live Writer
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7745B7A9-F323-4BB9-9811-01BF57A028DA}" = Map Button (Windows Live Toolbar)
"{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}" = Windows Live Favorites for Windows Live Toolbar
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{78CC3BAB-DE2A-4FB4-8FBB-E4DADDC26747}" = Ad-Aware SE Personal
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{932FB3F3-594D-4600-ABFA-F2DE80A14214}" = Marvel™ - Ultimate Alliance
"{937B232D-9776-471E-92BD-D424E514EF14}" = Logitech QuickCam
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{995F1E2E-F542-4310-8E1D-9926F5A279B3}" = Windows Live Toolbar
"{9984DF60-1C5B-11D3-ACA1-908A4FC10801}" = Intel Application Accelerator
"{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}" = Microsoft Search Enhancement Pack
"{A06275F4-324B-4E85-95E6-87B2CD729401}" = Windows Defender
"{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}" = Windows Live Sync
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}" = Apple Software Update
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BEAD39CD-901D-4267-8B8B-EAA83CB4B70D}" = Pivot Stickfigure Animator
"{C6CA8874-5F22-4AF0-9BE3-016BF299C536}" = Windows Live Essentials
"{C7EEF2B9-8C16-4A04-B98D-B1A952A47E55}" = Linksys Wireless-G USB Network Adapter
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb" = Microsoft Windows Application Compatibility Database
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}" = ATI Catalyst Control Center
"{EF4EF65F-4D62-44D7-82C9-1AECCBA74C50}" = Intel® PROSet
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{F99C5427-4D78-43E2-B97E-F4C4E622D612}" = MapleStory
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FC47C7A5-BE63-11D5-B7C9-005004566E4D}" = ViewSonic Windows XP Signed Files
"{FEF678D4-D104-4589-B858-37C53F2ACE05}" =
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"AVG8Uninstall" = AVG Free 8.0
"CCleaner" = CCleaner (remove only)
"ElSword" = ???
"ERUNT_is1" = ERUNT 1.1j
"FlashGet" = FlashGet 1.9.0.1012
"Granado Espada_is1" = Granado Espada
"Grand Chase" = Grand Chase
"GravityWellV40" = Gravity Well v4.0
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{932FB3F3-594D-4600-ABFA-F2DE80A14214}" = Marvel™ - Ultimate Alliance
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 2.1.0
"lvdrivers_11.90" = Logitech QuickCam Driver Package
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5" = Microsoft .NET Framework 3.5
"Mozilla Firefox (3.0.8)" = Mozilla Firefox (3.0.8)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NexonPlug" = ³Ø½¼ÇĂ·¯±×
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"OpenAL" = OpenAL
"Phantasy Star Online Blue Burst_is1" = Phantasy Star Online Blue Burst 1.0
"PhoTagsExpress" = PhoTags Express
"Populous: The Beginning" = Populous: The Beginning
"Product_Name" = Geneforge 3
"Sean O'Connor's Windows Games_is1" = Sean O'Connor's Windows Games
"Shattered Galaxy" = Shattered Galaxy
"Shin Megami Tensei: Imagine Online" = Shin Megami Tensei: Imagine Online
"SolidStateIONIE" = Solid State ION Internet Explorer Plugin
"Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.4
"Trickster Online" = Trickster Online
"VLC media player" = VideoLAN VLC media player 0.8.6c
"WIC" = Windows Imaging Component
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Extras" = Yahoo! Browser Services
"Yahoo! IE Suggest" = Yahoo! IE Search Suggest
"Yahoo! Mail" = Yahoo! Internet Mail
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Toolbar" = Yahoo! Toolbar
"YInstHelper" = Yahoo! Install Manager
========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Words That Follow" = Words That Follow
========== Last 10 Event Log Errors ========== [ Application Events ]
Error - 2009-04-18 2:20:30 PM | Computer Name = KEVIN-BLXM4BP7P | Source = Application Hang | ID = 1002
Description = Hanging application OTListIt2.exe, version 2.0.12.1, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
[ System Events ]
Error - 2009-04-18 2:26:17 PM | Computer Name = KEVIN-BLXM4BP7P | Source = Service Control Manager | ID = 7023
Description = The System Event Notification service terminated with the following
error: %%126
Error - 2009-04-18 2:26:45 PM | Computer Name = KEVIN-BLXM4BP7P | Source = DCOM | ID = 10010
Description = The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.
Error - 2009-04-18 2:26:45 PM | Computer Name = KEVIN-BLXM4BP7P | Source = Service Control Manager | ID = 7023
Description = The System Event Notification service terminated with the following
error: %%126
Error - 2009-04-18 2:27:15 PM | Computer Name = KEVIN-BLXM4BP7P | Source = DCOM | ID = 10010
Description = The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.
Error - 2009-04-18 2:27:15 PM | Computer Name = KEVIN-BLXM4BP7P | Source = Service Control Manager | ID = 7023
Description = The System Event Notification service terminated with the following
error: %%126
Error - 2009-04-18 2:27:45 PM | Computer Name = KEVIN-BLXM4BP7P | Source = DCOM | ID = 10010
Description = The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.
Error - 2009-04-18 2:27:45 PM | Computer Name = KEVIN-BLXM4BP7P | Source = Service Control Manager | ID = 7023
Description = The System Event Notification service terminated with the following
error: %%126
Error - 2009-04-18 2:28:15 PM | Computer Name = KEVIN-BLXM4BP7P | Source = DCOM | ID = 10010
Description = The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.
Error - 2009-04-18 2:28:15 PM | Computer Name = KEVIN-BLXM4BP7P | Source = Service Control Manager | ID = 7023
Description = The System Event Notification service terminated with the following
error: %%126
Error - 2009-04-18 2:28:45 PM | Computer Name = KEVIN-BLXM4BP7P | Source = DCOM | ID = 10010
Description = The server {D3938AB0-5B9D-11D1-8DD2-00AA004ABD5E} did not register
with DCOM within the required timeout.
< End of report >
This topic is locked
Sign In
Create Account
