Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Trend Micro very slow load!


  • Please log in to reply

#1
Jake_Speed

Jake_Speed

    New Member

  • Member
  • Pip
  • 1 posts
Hello,

I have been using Trend Micro for a few years now with no problem till recently. I followed the cleaning guide but still have a problem. Windows boots fairly fast, my desktop with icons is up fast, but Trend Micro loads for 5 to 6 minutes. I can use some programs while this is happening, but it will not let Firefox load until Trend Micro is fully loaded. When Trend Micros finishes it's load, all the icons on my desktop refresh. I don't remember all this happening in previous versions.

I am using Tend Micro Internet Security Pro v.2 and Windows Vista 32.

Any help would be appreciated.

The following is my log file from HiJackThis, OTL.txt and extras.txt:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:23:48 AM, on 1/2/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe
C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe
C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe
C:\Windows\sttray.exe
C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe
C:\Program Files\Microsoft Office\Office14\OfficeSAS\officeSASscheduler.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Microsoft Office\Office14\OfficeSAS\OfficeSAS.exe
C:\Windows\system32\WTablet\Wacom_TabletUser.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Trend Micro\TrendSecure\TSCFCommander.exe
C:\Users\Walter\Desktop\Utilities\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Trend Micro Toolbar BHO - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
O2 - BHO: Yahoo! IE Suggest - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\Search\YSearchSuggest.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [CCUTRAYICON] C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe
O4 - HKLM\..\Run: [NMSSupport] "C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe" /startup
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [WrtMon.exe] C:\Windows\system32\spool\drivers\w32x86\3\WrtMon.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [UfSeAgnt.exe] C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [WebEx Document Loader] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATI9LA.EXE /FU "C:\Windows\TEMP\E_S5C24.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [EPSON Stylus Photo R1800] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATI9LA.EXE /FU "C:\Windows\TEMP\E_SE6B1.tmp" /EF "HKCU"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (User 'Default user')
O4 - Startup: Microsoft Office Outlook 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
O4 - Global Startup: ColorVisionStartup.lnk = C:\Program Files\ColorVision\Utility\ColorVisionStartup.exe
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: OfficeSAS.lnk = ?
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\dtv\EXPLBAR.DLL
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: CabBuilder - http://kiw.imgag.com...llerControl.cab
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - http://support.dell....r/SysProExe.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1261583535900
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.m...ash/swflash.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files\Stardock\Fences\FencesMenu.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Intel® Alert Service (AlertService) - Intel® Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\Windows\SYSTEM32\astsrv.exe
O23 - Service: WebEx Service Host for Support Center (atashost) - WebEx Communications, Inc. - C:\Windows\system32\atashost.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\ATI\Catalyst Media Center\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\ATI\Catalyst Media Center\Kernel\TV\CLSched.exe
O23 - Service: Creative ALchemy AL1 Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\AL1Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative HOAL Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTHOALLicensing.exe
O23 - Service: Creative Media Toolbox 6 Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\MT6Licensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\ATI\Catalyst Media Center\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate1c986229bed4cc0) (gupdate1c986229bed4cc0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Intel® Software Services Manager (ISSM) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: Intel® Viiv™ Media Server (M1 Server) - Unknown owner - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe
O23 - Service: Intel® Application Tracker (MCLServiceATL) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: Pure Networks Platform Service (nmservice) - Cisco Systems, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Network Inventory Advisor Service by ClearApps Software (piaservice) - Unknown owner - C:\Program Files\ClearApps\Network Inventory Advisor\piaservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Intel® Remoting Service (Remote UI Service) - Intel® Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Security Activity Dashboard Service - Trend Micro Inc. - C:\Program Files\Trend Micro\TrendSecure\SecurityActivityDashboard\tmarsvc.exe
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: SlingAgentService - Sling Media Inc. - C:\Program Files\Sling Media\SlingAgent\SlingAgentService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: TabletServiceWacom - Wacom Technology, Corp. - C:\Windows\system32\Wacom_Tablet.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 14122 bytes

OTL logfile created on: 1/2/2010 4:04:01 PM - Run 1
OTL by OldTimer - Version 3.1.20.1 Folder = C:\Users\Walter\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18865)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 48.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 74.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232.81 Gb Total Space | 80.02 Gb Free Space | 34.37% Space Free | Partition Type: NTFS
Drive D: | 232.90 Gb Total Space | 130.21 Gb Free Space | 55.91% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 232.94 Gb Total Space | 74.36 Gb Free Space | 31.92% Space Free | Partition Type: NTFS
Drive I: | 232.82 Gb Total Space | 70.27 Gb Free Space | 30.18% Space Free | Partition Type: NTFS

Computer Name: XPS410
Current User Name: Walter
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/01/02 16:01:19 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Users\Walter\Downloads\OTL.exe
PRC - [2010/01/01 00:13:16 | 00,189,184 | ---- | M] () -- C:\Windows\System32\PnkBstrB.exe
PRC - [2009/12/16 10:04:05 | 00,908,248 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009/10/20 19:50:12 | 00,995,528 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
PRC - [2009/10/20 19:50:10 | 00,711,248 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
PRC - [2009/09/26 07:35:02 | 00,819,600 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
PRC - [2009/09/26 06:00:52 | 00,429,448 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\OfficeSAS\OfficeSAS.exe
PRC - [2009/09/26 06:00:52 | 00,202,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\OfficeSAS\OfficeSASScheduler.exe
PRC - [2009/09/25 13:16:06 | 00,093,960 | ---- | M] (Sling Media Inc.) -- C:\Program Files\Sling Media\SlingAgent\SlingAgentService.exe
PRC - [2009/09/23 15:04:56 | 00,203,608 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2009/09/23 15:04:52 | 00,447,832 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2009/09/21 13:25:02 | 00,275,792 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\TrendSecure\TSCFCommander.exe
PRC - [2009/09/14 13:20:08 | 00,020,376 | ---- | M] (WebEx Communications, Inc.) -- C:\Windows\System32\atashost.exe
PRC - [2009/09/03 20:07:28 | 00,497,008 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Internet Security\TmPfw.exe
PRC - [2009/09/03 19:51:40 | 00,677,128 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
PRC - [2009/07/22 12:09:22 | 00,057,344 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\System32\ASTSRV.EXE
PRC - [2009/07/07 14:48:44 | 00,647,216 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
PRC - [2009/07/07 14:48:44 | 00,647,216 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
PRC - [2009/06/05 22:43:30 | 00,608,256 | ---- | M] () -- C:\Program Files\ClearApps\Network Inventory Advisor\piaservice.exe
PRC - [2009/04/30 23:07:52 | 00,211,488 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvvsvc.exe
PRC - [2009/04/10 22:28:16 | 00,244,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wisptis.exe
PRC - [2009/04/10 22:28:10 | 00,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\unsecapp.exe
PRC - [2009/04/10 22:27:38 | 02,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/03/30 16:28:36 | 01,533,808 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
PRC - [2009/03/30 16:28:36 | 00,183,152 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
PRC - [2009/03/30 02:25:26 | 43,010,392 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
PRC - [2009/03/24 18:09:36 | 00,169,296 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\TrendSecure\TSCFPlatformCOMSvr.exe
PRC - [2009/03/12 16:36:24 | 00,086,016 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
PRC - [2009/03/03 03:46:13 | 00,341,256 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\BM\TMBMSRV.exe
PRC - [2009/02/18 17:28:05 | 00,075,064 | ---- | M] () -- C:\Windows\System32\PnkBstrA.exe
PRC - [2009/02/12 17:52:44 | 00,161,104 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\platformdependent\ProToolbarComm.exe
PRC - [2009/02/12 17:52:26 | 00,083,280 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe
PRC - [2008/11/09 15:48:14 | 00,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/08/14 06:08:59 | 00,181,584 | ---- | M] (Trend Micro Inc.) -- C:\Program Files\Trend Micro\TrendSecure\SecurityActivityDashboard\tmarsvc.exe
PRC - [2008/07/10 01:49:44 | 00,098,840 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
PRC - [2008/06/05 23:31:36 | 00,262,246 | ---- | M] () -- C:\Program Files\ATI\Catalyst Media Center\Kernel\TV\CLCapSvc.exe
PRC - [2008/06/05 23:31:12 | 01,073,152 | ---- | M] (Cyberlink) -- C:\Program Files\ATI\Catalyst Media Center\Kernel\CLML_NTService\CLMLServer.exe
PRC - [2008/05/05 08:30:20 | 00,221,300 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe
PRC - [2008/05/02 01:44:08 | 00,805,392 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe
PRC - [2008/05/02 01:40:56 | 00,076,304 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
PRC - [2008/04/29 21:27:50 | 00,417,792 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2008/01/19 02:33:39 | 00,202,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnscfg.exe
PRC - [2008/01/19 02:33:15 | 00,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mobsync.exe
PRC - [2007/09/07 10:40:34 | 00,132,392 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\WTablet\Wacom_TabletUser.exe
PRC - [2007/09/07 10:40:04 | 01,373,480 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\Wacom_Tablet.exe
PRC - [2007/07/03 12:32:16 | 00,131,072 | ---- | M] (NVIDIA) -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
PRC - [2007/01/12 21:30:14 | 00,272,024 | ---- | M] () -- C:\Program Files\CyberLink\Shared files\RichVideo.exe
PRC - [2007/01/12 10:51:28 | 00,303,104 | ---- | M] (SigmaTel, Inc.) -- C:\Windows\sttray.exe
PRC - [2007/01/11 03:02:00 | 00,113,664 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
PRC - [2006/11/18 08:01:26 | 00,195,032 | ---- | M] (Intel® Corporation) -- C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
PRC - [2006/11/05 12:13:00 | 00,159,744 | ---- | M] (Sonic Solutions) -- C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
PRC - [2006/10/29 10:03:30 | 00,208,896 | ---- | M] () -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe
PRC - [2006/09/29 13:38:50 | 00,081,920 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2006/09/26 11:56:00 | 00,423,424 | ---- | M] (Intel Corporation) -- C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe
PRC - [2006/09/20 08:35:26 | 00,020,480 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe
PRC - [2006/09/19 16:05:32 | 00,024,576 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe
PRC - [2006/08/04 19:39:20 | 00,386,560 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\System32\drivers\XAudio.exe


========== Modules (SafeList) ==========

MOD - [2010/01/02 16:01:19 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Users\Walter\Downloads\OTL.exe
MOD - [2009/12/09 13:51:13 | 00,632,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d08d7da0442a985d\msvcr80.dll
MOD - [2009/04/10 22:21:40 | 01,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll
MOD - [2008/05/02 01:42:50 | 00,045,584 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\lgscroll.dll
MOD - [2008/05/02 01:38:54 | 00,064,016 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\GameHook.dll


========== Win32 Services (SafeList) ==========

SRV - [2010/01/01 00:13:16 | 00,189,184 | ---- | M] () [Auto | Running] -- C:\Windows\System32\PnkBstrB.exe -- (PnkBstrB)
SRV - [2009/12/11 14:51:31 | 02,431,024 | ---- | M] () [Auto | Running] -- c:\Program Files\Common Files\Akamai\rswin_3629.dll -- (Akamai)
SRV - [2009/10/20 19:50:10 | 00,711,248 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe -- (SfCtlCom)
SRV - [2009/09/26 07:35:02 | 00,819,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE -- (cvhsvc)
SRV - [2009/09/26 04:28:22 | 04,639,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2009/09/26 03:31:58 | 00,149,336 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2009/09/25 13:16:06 | 00,093,960 | ---- | M] (Sling Media Inc.) [Auto | Running] -- C:\Program Files\Sling Media\SlingAgent\SlingAgentService.exe -- (SlingAgentService)
SRV - [2009/09/24 20:27:04 | 00,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2009/09/23 15:04:56 | 00,203,608 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2009/09/23 15:04:52 | 00,447,832 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2009/09/14 13:20:08 | 00,020,376 | ---- | M] (WebEx Communications, Inc.) [Auto | Running] -- C:\Windows\System32\atashost.exe -- (atashost)
SRV - [2009/09/03 20:07:28 | 00,497,008 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Internet Security\TmPfw.exe -- (TmPfw)
SRV - [2009/09/03 19:51:40 | 00,677,128 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Internet Security\TmProxy.exe -- (TmProxy)
SRV - [2009/07/22 12:09:22 | 00,057,344 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\System32\ASTSRV.EXE -- (astcc)
SRV - [2009/07/07 14:48:44 | 00,647,216 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe -- (nmservice)
SRV - [2009/06/05 22:43:30 | 00,608,256 | ---- | M] () [Auto | Running] -- C:\Program Files\ClearApps\Network Inventory Advisor\piaservice.exe -- (piaservice)
SRV - [2009/04/30 23:07:52 | 00,211,488 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Windows\System32\nvvsvc.exe -- (nvsvc)
SRV - [2009/04/27 12:06:47 | 00,182,768 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2009/03/30 16:28:36 | 01,533,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009/03/30 02:25:26 | 43,010,392 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe -- (MSSQL$SQLEXPRESS) SQL Server (SQLEXPRESS)
SRV - [2009/03/30 02:23:32 | 00,254,808 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe -- (SQLBrowser)
SRV - [2009/03/30 02:23:24 | 00,366,936 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE -- (SQLAgent$SQLEXPRESS) SQL Server Agent (SQLEXPRESS)
SRV - [2009/03/12 16:36:24 | 00,086,016 | ---- | M] () [Auto | Running] -- C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe -- (mi-raysat_3dsmax2010_32)
SRV - [2009/03/03 03:46:13 | 00,341,256 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\BM\TMBMSRV.exe -- (TMBMServer)
SRV - [2009/02/18 17:28:05 | 00,075,064 | ---- | M] () [Auto | Running] -- C:\Windows\System32\PnkBstrA.exe -- (PnkBstrA)
SRV - [2009/02/03 12:12:21 | 00,133,104 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate1c986229bed4cc0) Google Update Service (gupdate1c986229bed4cc0)
SRV - [2008/11/09 15:48:14 | 00,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2008/10/25 20:40:40 | 00,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\MT6Licensing.exe -- (Creative Media Toolbox 6 Licensing Service)
SRV - [2008/10/22 20:17:47 | 00,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008/08/21 19:13:25 | 00,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\AL1Licensing.exe -- (Creative ALchemy AL1 Licensing Service)
SRV - [2008/08/21 19:05:37 | 00,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTHOALLicensing.exe -- (Creative HOAL Licensing Service)
SRV - [2008/08/21 19:03:52 | 00,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2008/08/14 06:08:59 | 00,181,584 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\TrendSecure\SecurityActivityDashboard\tmarsvc.exe -- (Security Activity Dashboard Service)
SRV - [2008/07/10 19:28:04 | 00,047,128 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE -- (MSSQLServerADHelper100)
SRV - [2008/07/10 01:49:44 | 00,098,840 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe -- (SQLWriter)
SRV - [2008/06/05 23:31:38 | 00,110,692 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ATI\Catalyst Media Center\Kernel\TV\CLSched.exe -- (CLSched) CyberLink Task Scheduler (CTS)
SRV - [2008/06/05 23:31:36 | 00,262,246 | ---- | M] () [Auto | Running] -- C:\Program Files\ATI\Catalyst Media Center\Kernel\TV\CLCapSvc.exe -- (CLCapSvc) CyberLink Background Capture Service (CBCS)
SRV - [2008/06/05 23:31:12 | 01,073,152 | ---- | M] (Cyberlink) [Auto | Running] -- C:\Program Files\ATI\Catalyst Media Center\Kernel\CLML_NTService\CLMLServer.exe -- (CyberLink Media Library Service)
SRV - [2008/05/02 01:42:06 | 00,121,360 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2008/04/29 21:27:50 | 00,417,792 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2008/01/19 02:38:24 | 00,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/09/07 10:40:04 | 01,373,480 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Windows\System32\Wacom_Tablet.exe -- (TabletServiceWacom)
SRV - [2007/07/03 12:32:16 | 00,131,072 | ---- | M] (NVIDIA) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe -- (nTuneService)
SRV - [2007/05/31 15:21:24 | 00,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007/05/31 15:21:18 | 00,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007/05/17 22:42:10 | 01,831,936 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe -- (GoogleDesktopManager)
SRV - [2007/02/16 17:49:50 | 00,411,168 | ---- | M] (Acronis) [On_Demand | Stopped] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2007/01/12 21:30:14 | 00,272,024 | ---- | M] () [Auto | Running] -- C:\Program Files\CyberLink\Shared files\RichVideo.exe -- (RichVideo) Cyberlink RichVideo Service(CRVS)
SRV - [2007/01/11 03:02:00 | 00,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)
SRV - [2006/11/18 08:01:26 | 00,195,032 | ---- | M] (Intel® Corporation) [On_Demand | Running] -- C:\Program Files\Intel\IntelDH\CCU\AlertService.exe -- (AlertService) Intel®
SRV - [2006/11/18 08:00:48 | 00,550,872 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe -- (Remote UI Service) Intel®
SRV - [2006/11/18 08:00:06 | 00,174,552 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe -- (MCLServiceATL) Intel®
SRV - [2006/11/18 07:59:38 | 00,081,880 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe -- (ISSM) Intel®
SRV - [2006/11/18 07:59:02 | 00,032,216 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe -- (M1 Server) Intel® Viiv™
SRV - [2006/11/05 12:15:12 | 00,880,640 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe -- (RoxMediaDB9)
SRV - [2006/11/05 12:13:00 | 00,159,744 | ---- | M] (Sonic Solutions) [Auto | Running] -- C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe -- (RoxWatch9)
SRV - [2006/11/02 07:35:29 | 00,013,312 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\ehome\ehstart.dll -- (ehstart)
SRV - [2006/10/29 10:03:30 | 00,208,896 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe -- (DQLWinService)
SRV - [2006/09/29 13:38:50 | 00,081,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel®
SRV - [2006/09/14 15:54:34 | 00,073,728 | ---- | M] (MicroVision Development, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\SureThing Shared\stllssvr.exe -- (stllssvr)
SRV - [2006/08/04 19:39:20 | 00,386,560 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\System32\drivers\XAudio.exe -- (XAudioService)
SRV - [2004/10/22 04:24:18 | 00,073,728 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co...amp;ibd=2070310
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultthis.engineName: "LiveTV_ Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.condui...={searchTerms}"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://my.msn.com/"
FF - prefs.js..extensions.enabledItems: [email protected]:0.3.1
FF - prefs.js..extensions.enabledItems: [email protected]:0.9.5.2
FF - prefs.js..extensions.enabledItems: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.45
FF - prefs.js..extensions.enabledItems: [email protected]:1.4.0
FF - prefs.js..extensions.enabledItems: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3}:0.9.10.1
FF - prefs.js..extensions.enabledItems: {ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}:2.5.2
FF - prefs.js..extensions.enabledItems: {acbe8c0e-43df-4a61-a626-171d523e9353}:0.3.2.1
FF - prefs.js..extensions.enabledItems: {5546F97E-11A5-46b0-9082-32AD74AAA920}:0.5.5.5
FF - prefs.js..extensions.enabledItems: [email protected]:0.5.2009110501
FF - prefs.js..extensions.enabledItems: {72938f90-8d8a-11de-8a39-0800200c9a66}:1.0.20
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
FF - prefs.js..extensions.enabledItems: [email protected]:1.2
FF - prefs.js..extensions.enabledItems: {22181a4d-af90-4ca3-a569-faed9118d6bc}:1.2.0.1073
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.5.200812101546
FF - prefs.js..extensions.enabledItems: [email protected]:0.7
FF - prefs.js..extensions.enabledItems: {c1dffba0-628e-11d9-9669-0800200c9a66}:3.5.0
FF - prefs.js..extensions.enabledItems: [email protected]:3.0
FF - prefs.js..keyword.URL: "http://kwtb.search.i...1bf93043ede&q="
FF - prefs.js..network.proxy.no_proxies_on: "*.local"


FF - HKLM\software\mozilla\Firefox\Extensions\\{22181a4d-af90-4ca3-a569-faed9118d6bc}: C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\FirefoxExtension [2009/10/07 10:37:15 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/12/20 15:23:03 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/12/16 10:04:09 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.23\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2009/12/09 13:50:12 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.23\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2009/12/09 13:50:12 | 00,000,000 | ---D | M]

[2009/06/30 07:33:42 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Extensions
[2009/06/30 07:33:42 | 00,000,000 | ---D | M] (No name found) -- C:\Users\Walter\AppData\Roaming\Mozilla\Extensions\{a23983c0-fd0e-11dc-95ff-0800200c9a66}
[2009/06/30 07:33:42 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Fennec\Profiles\wxnfnxqc.default\extensions
[2010/01/02 14:48:06 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions
[2009/06/13 18:46:02 | 00,000,000 | ---D | M] (Forecastfox) -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
[2009/08/14 22:35:57 | 00,000,000 | ---D | M] (InFormEnter) -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\{5546F97E-11A5-46b0-9082-32AD74AAA920}
[2009/01/13 23:29:02 | 00,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010/01/02 14:47:55 | 00,000,000 | ---D | M] (PriceTrace Toolbar) -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\{72938f90-8d8a-11de-8a39-0800200c9a66}
[2009/12/08 14:27:29 | 00,000,000 | ---D | M] (GoogleReaderPlus) -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\{acbe8c0e-43df-4a61-a626-171d523e9353}
[2009/07/10 11:24:04 | 00,000,000 | ---D | M] (PitchDark) -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\{c1dffba0-628e-11d9-9669-0800200c9a66}
[2009/11/07 15:53:09 | 00,000,000 | ---D | M] (No name found) -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
[2009/12/11 22:00:59 | 00,000,000 | ---D | M] (FoxLingo) -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
[2009/10/24 23:27:02 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\[email protected]
[2009/07/06 12:30:28 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\[email protected]
[2009/03/26 08:42:08 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\[email protected]
[2009/07/25 20:41:03 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\[email protected]
[2009/02/17 00:24:06 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\[email protected]
[2010/01/02 14:47:54 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\[email protected]
[2009/11/10 21:08:02 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\[email protected]
[2009/08/23 20:53:39 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\extensions\[email protected]
[2009/05/19 10:29:48 | 00,000,876 | ---- | M] () -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\searchplugins\conduit.xml
[2009/03/26 21:40:57 | 00,002,354 | ---- | M] () -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\searchplugins\kiwee-live-search.xml
[2008/05/05 18:29:18 | 00,000,275 | ---- | M] () -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\searchplugins\search.xml
[2009/08/14 22:50:31 | 00,001,861 | ---- | M] () -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\searchplugins\searchgeek-search-engine.xml
[2009/08/14 22:46:38 | 00,001,837 | ---- | M] () -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\searchplugins\searchgeek.xml
[2009/01/06 00:38:52 | 00,001,447 | ---- | M] () -- C:\Users\Walter\AppData\Roaming\Mozilla\Firefox\Profiles\saruxoe5.default\searchplugins\userlogos.xml
[2010/01/02 14:48:02 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009/09/14 13:19:50 | 00,060,824 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\Mozilla Firefox\plugins\npatgpc.dll
[2008/04/16 18:09:28 | 00,249,856 | ---- | M] ( ) -- C:\Program Files\Mozilla Firefox\plugins\npff_gdm.dll

O1 HOSTS File: (761 bytes) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (TSToolbarBHO) - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll (Trend Micro Inc.)
O2 - BHO: (Yahoo! IE Suggest) - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - C:\Program Files\Yahoo!\Search\YSearchSuggest.dll (Yahoo! Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Trend Micro Toolbar) - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll (Trend Micro Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (free-downloads.net Toolbar) - {ECDEE021-0D17-467F-A1FF-C7A115230949} - C:\Program Files\free-downloads.net\tbfree.dll (Conduit Ltd.)
O4 - HKLM..\Run: [CCUTRAYICON] C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe (Intel® Corporation)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [nmctxth] C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
O4 - HKLM..\Run: [NMSSupport] C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe (Intel Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Windows\sttray.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [UfSeAgnt.exe] C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [WrtMon.exe] C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe ()
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [EPSON Stylus Photo R1800] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATI9LA.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [NVIDIA nTune] C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe (NVIDIA)
O4 - HKCU..\Run: [WebEx Document Loader] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATI9LA.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Walter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O4 - Startup: C:\Users\Walter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office Outlook 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\dtv\EXPLBAR.DLL (ATI Technologies Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} http://support.dell....r/SysProExe.CAB (WMI Class)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.micros...b?1261583535900 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...r/ultrashim.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.m...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (Reg Error: Value error.)
O16 - DPF: CabBuilder http://kiw.imgag.com...llerControl.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 68.87.71.230 68.87.73.246
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll (Trend Micro Inc.)
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O22 - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files\Stardock\Fences\FencesMenu.dll (Stardock)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O30 - LSA: Authentication Packages - (relog_ap) - C:\Windows\System32\relog_ap.dll (Acronis)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/08/02 06:38:50 | 00,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2006/09/18 16:43:36 | 00,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2008/01/31 17:59:10 | 00,045,056 | R--- | M] () - H:\AutoUpdate.dll -- [ NTFS ]
O33 - MountPoints2\{f64e771e-5d9f-11dc-b80c-0019d13195f8}\Shell\AutoRun\command - "" = K:\Office.exe -- File not found
O33 - MountPoints2\{f64e7721-5d9f-11dc-b80c-0019d13195f8}\Shell - "" = AutoRun
O33 - MountPoints2\{f64e7721-5d9f-11dc-b80c-0019d13195f8}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias [2008/09/27 01:10:52 | 00,000,000 | ---D | M]
NetSvcs: Irmon - C:\Windows\System32\irmon.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
OTL cannot create restorepoints on Vista OSs!

========== Files/Folders - Created Within 14 Days ==========

[2010/01/02 10:48:44 | 00,000,000 | ---D | C] -- C:\Windows\ERDNT
[2010/01/02 10:48:14 | 00,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2009/12/28 23:41:42 | 00,000,000 | ---D | C] -- C:\Keyfinder.2.0.1
[2009/12/19 22:34:07 | 00,000,000 | ---D | C] -- C:\Program Files\Fast Duplicate File Finder
[2009/12/19 22:00:11 | 00,000,000 | ---D | C] -- C:\Program Files\SyncToy 2.1
[2007/12/08 22:03:33 | 00,047,360 | ---- | C] (VSO Software) -- C:\Users\Walter\AppData\Roaming\pcouffin.sys

========== Files - Modified Within 14 Days ==========

[2010/01/02 16:10:59 | 00,000,420 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{1DDBBCB6-A408-43FE-8A88-477D379784A0}.job
[2010/01/02 16:02:40 | 06,553,600 | ---- | M] () -- C:\Users\Walter\ntuser.dat
[2010/01/02 15:49:01 | 00,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/01/02 14:34:27 | 00,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/01/02 14:34:27 | 00,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/01/02 10:48:26 | 00,000,907 | ---- | M] () -- C:\Users\Walter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2010/01/02 10:34:48 | 00,000,314 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize.job
[2010/01/02 10:34:44 | 00,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/01/02 10:34:25 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/01/02 10:34:22 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/01/02 10:34:17 | 32,190,50496 | -HS- | M] () -- C:\hiberfil.sys
[2010/01/02 10:33:39 | 00,524,288 | -HS- | M] () -- C:\Users\Walter\ntuser.dat{7e141b99-4c43-11de-b047-0019d13195f8}.TMContainer00000000000000000001.regtrans-ms
[2010/01/02 10:33:39 | 00,065,536 | -HS- | M] () -- C:\Users\Walter\ntuser.dat{7e141b99-4c43-11de-b047-0019d13195f8}.TM.blf
[2010/01/02 10:33:18 | 00,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2010/01/02 10:15:14 | 04,109,181 | -H-- | M] () -- C:\Users\Walter\AppData\Local\IconCache.db
[2010/01/01 01:27:52 | 00,189,184 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[2010/01/01 00:13:25 | 00,138,064 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010/01/01 00:13:16 | 00,189,184 | ---- | M] () -- C:\Windows\System32\PnkBstrB.exe
[2009/12/31 19:25:50 | 00,147,517 | ---- | M] () -- C:\Users\Walter\Desktop\image001.jpg
[2009/12/31 16:23:12 | 00,000,761 | ---- | M] () -- C:\Windows\System32\drivers\etc\tmvsthfud.bin
[2009/12/31 16:22:43 | 00,000,761 | ---- | M] () -- C:\Windows\System32\drivers\etc\tmvsthfss.bin
[2009/12/31 16:16:06 | 00,000,036 | ---- | M] () -- C:\Users\Walter\AppData\Local\housecall.guid.cache
[2009/12/30 14:23:44 | 00,015,559 | ---- | M] () -- C:\Users\Walter\Documents\TooManyTabs 2009-12-30.json
[2009/12/29 14:07:58 | 00,027,648 | ---- | M] () -- C:\Users\Walter\Documents\My eWallet.wlt
[2009/12/27 22:00:00 | 00,000,386 | ---- | M] () -- C:\Windows\tasks\SmartDefrag.job
[2009/12/26 14:14:53 | 00,185,154 | ---- | M] () -- C:\Users\Walter\Desktop\jim & Bo2.jpg
[2009/12/26 14:14:51 | 00,148,894 | ---- | M] () -- C:\Users\Walter\Desktop\Big2.jpg
[2009/12/23 16:50:00 | 00,002,067 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2009/12/22 11:18:29 | 00,000,046 | ---- | M] () -- C:\Windows\System32\_WDYSZYG.sys
[2009/12/21 11:10:32 | 00,004,220 | ---- | M] () -- C:\Windows\jgcp-x48.ini
[2009/12/19 23:21:07 | 00,812,900 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2009/12/19 23:21:07 | 00,686,680 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2009/12/19 23:21:07 | 00,129,076 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2009/12/19 22:59:52 | 00,030,720 | ---- | M] () -- C:\Users\Walter\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== Files Created - No Company Name ==========

[2010/01/02 10:48:26 | 00,000,907 | ---- | C] () -- C:\Users\Walter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2009/12/31 19:25:50 | 00,147,517 | ---- | C] () -- C:\Users\Walter\Desktop\image001.jpg
[2009/12/31 16:16:06 | 00,000,036 | ---- | C] () -- C:\Users\Walter\AppData\Local\housecall.guid.cache
[2009/12/30 14:23:44 | 00,015,559 | ---- | C] () -- C:\Users\Walter\Documents\TooManyTabs 2009-12-30.json
[2009/12/26 14:14:53 | 00,185,154 | ---- | C] () -- C:\Users\Walter\Desktop\jim & Bo2.jpg
[2009/12/26 14:14:50 | 00,148,894 | ---- | C] () -- C:\Users\Walter\Desktop\Big2.jpg
[2009/12/23 16:50:00 | 00,002,067 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2009/12/21 11:10:32 | 00,004,220 | ---- | C] () -- C:\Windows\jgcp-x48.ini
[2009/11/09 11:33:16 | 08,892,928 | ---- | C] () -- C:\ProgramData\atscie.msi
[2009/11/09 11:23:11 | 00,000,003 | ---- | C] () -- C:\Program Files\option.txt
[2009/11/09 09:18:32 | 00,000,046 | ---- | C] () -- C:\Windows\System32\_WDYSZYG.sys
[2009/10/24 11:40:04 | 00,000,576 | ---- | C] () -- C:\ProgramData\afl.log
[2009/08/21 07:13:32 | 00,000,016 | ---- | C] () -- C:\Windows\System32\dpwsockhd.dll
[2009/08/03 14:07:42 | 00,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009/06/01 11:10:01 | 00,000,175 | ---- | C] () -- C:\ProgramData\OutlookFail.20090601.log
[2009/05/26 10:18:49 | 00,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/05/08 09:37:54 | 00,031,966 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009/05/08 09:37:43 | 00,031,966 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009/03/26 19:35:45 | 00,339,968 | ---- | C] () -- C:\Windows\System32\pythoncom25.dll
[2009/03/26 19:35:45 | 00,114,688 | ---- | C] () -- C:\Windows\System32\pywintypes25.dll
[2009/03/08 07:17:25 | 00,742,220 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2009/02/13 21:16:34 | 00,000,332 | ---- | C] () -- C:\Windows\System32\CNCMFP23.INI
[2009/02/10 20:57:49 | 00,040,960 | ---- | C] () -- C:\Windows\System32\IPPCPUID.DLL
[2009/02/10 20:56:56 | 00,011,776 | ---- | C] () -- C:\Windows\System32\pmsbfn32.dll
[2009/02/10 20:55:27 | 00,000,416 | ---- | C] () -- C:\Windows\MAXLINK.INI
[2009/01/29 00:00:53 | 00,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2009/01/27 23:07:39 | 00,087,552 | ---- | C] () -- C:\Windows\System32\cpwmon2k.dll
[2009/01/11 13:15:12 | 00,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2009/01/08 23:11:50 | 00,000,052 | ---- | C] () -- C:\Users\Walter\AppData\Local\mm-device-08.ini
[2008/10/30 20:15:27 | 00,000,033 | ---- | C] () -- C:\Windows\Eic.ini
[2008/10/30 19:54:20 | 00,000,141 | ---- | C] () -- C:\Windows\System32\09wutili.sys
[2008/09/19 00:49:26 | 00,001,209 | ---- | C] () -- C:\Windows\skSPcfg.ini
[2008/09/19 00:49:24 | 00,000,381 | ---- | C] () -- C:\Windows\skMCcfg.ini
[2008/09/07 22:44:48 | 00,217,088 | ---- | C] () -- C:\Users\Walter\AppData\Local\filesync.metadata
[2008/08/21 19:06:23 | 00,000,052 | R--- | C] () -- C:\Windows\System32\ctzapxx.ini
[2008/08/21 19:06:07 | 00,024,825 | ---- | C] () -- C:\Windows\System32\xfisk.ini
[2008/08/21 19:05:55 | 00,001,209 | R--- | C] () -- C:\Windows\xfiskcfg.ini
[2008/08/21 19:05:48 | 00,127,488 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL
[2008/08/21 19:05:48 | 00,069,120 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL
[2008/07/25 20:13:24 | 00,408,576 | ---- | C] () -- C:\Windows\System32\Smab.dll
[2008/07/25 20:13:22 | 00,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2008/06/06 21:03:09 | 00,000,000 | ---- | C] () -- C:\Windows\ATIMMC.INI
[2008/01/25 22:00:34 | 00,000,165 | ---- | C] () -- C:\Windows\QUICKEN.INI
[2007/12/08 22:04:09 | 00,000,034 | ---- | C] () -- C:\Users\Walter\AppData\Roaming\pcouffin.log
[2007/12/08 22:03:33 | 00,081,920 | ---- | C] () -- C:\Users\Walter\AppData\Roaming\ezpinst.exe
[2007/12/08 22:03:33 | 00,007,176 | ---- | C] () -- C:\Users\Walter\AppData\Roaming\pcouffin.cat
[2007/12/08 22:03:33 | 00,001,144 | ---- | C] () -- C:\Users\Walter\AppData\Roaming\pcouffin.inf
[2007/11/06 20:49:44 | 00,022,328 | ---- | C] () -- C:\Users\Walter\AppData\Roaming\PnkBstrK.sys
[2007/10/26 20:06:17 | 00,164,352 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2007/10/26 20:06:12 | 03,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2007/10/26 20:06:10 | 00,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2007/10/26 20:06:10 | 00,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest
[2007/10/17 21:57:48 | 00,000,319 | ---- | C] () -- C:\Windows\game.ini
[2007/08/23 07:16:02 | 00,000,421 | ---- | C] () -- C:\Windows\mosswin.ini
[2007/07/26 20:45:45 | 00,138,064 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2007/05/08 23:30:07 | 00,000,680 | ---- | C] () -- C:\Users\Walter\AppData\Local\d3d9caps.dat
[2007/04/24 12:22:02 | 00,274,432 | ---- | C] () -- C:\Windows\System32\MFT_anet.dll
[2007/04/20 20:47:33 | 00,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2007/04/11 20:29:53 | 00,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2007/04/04 20:15:47 | 00,024,206 | ---- | C] () -- C:\Users\Walter\AppData\Roaming\UserTile.png
[2007/03/22 23:11:03 | 00,000,100 | ---- | C] () -- C:\Users\Walter\AppData\Roaming\wklnhst.dat
[2007/03/22 20:02:58 | 00,000,819 | ---- | C] () -- C:\Windows\CoDUO.INI
[2007/03/22 19:46:37 | 00,000,745 | ---- | C] () -- C:\Windows\CoD.INI
[2007/03/21 21:27:22 | 00,056,056 | ---- | C] () -- C:\Windows\System32\DLAAPI_W.DLL
[2007/03/20 19:11:00 | 00,030,720 | ---- | C] () -- C:\Users\Walter\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/03/12 12:01:30 | 00,217,088 | ---- | C] () -- C:\Windows\NVGfxOgl.dll
[2007/03/09 14:17:25 | 00,000,228 | ---- | C] () -- C:\Windows\wininit.ini
[2007/02/13 16:16:04 | 00,012,288 | ---- | C] () -- C:\Windows\System32\drivers\Spyder2.sys
[2006/11/07 14:25:58 | 00,000,000 | ---- | C] () -- C:\Windows\System32\px.ini
[2006/11/02 07:35:32 | 00,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 05:25:44 | 00,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2006/11/02 02:40:29 | 00,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/09/17 00:36:50 | 00,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Roxio.dll
[2006/09/17 00:36:50 | 00,204,800 | ---- | C] () -- C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/06/23 10:09:34 | 00,019,968 | R--- | C] () -- C:\Windows\System32\cpuinf32.dll
[2006/01/20 16:26:02 | 00,000,108 | RHS- | C] () -- C:\Windows\neoqaz2.dll
[2004/01/28 10:42:06 | 00,066,560 | ---- | C] () -- C:\Windows\System32\atiyuv12.dll
[2004/01/28 10:42:06 | 00,056,832 | ---- | C] () -- C:\Windows\System32\Iyvu9_32.dll
[2004/01/28 10:42:06 | 00,013,601 | ---- | C] () -- C:\Windows\System32\vctest.ini
[2003/01/07 15:05:08 | 00,002,695 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI

========== LOP Check ==========

[2009/08/18 18:41:35 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Apowersoft
[2009/01/13 23:44:04 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Ariea
[2009/11/19 08:07:48 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Auslogics
[2009/08/04 19:20:03 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Autodesk
[2009/05/13 09:11:55 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Bentley
[2009/01/31 22:44:02 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Bullzip
[2009/02/14 16:53:37 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Canon
[2009/09/22 08:24:46 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\CBS Interactive
[2009/09/09 09:21:44 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2008/11/11 20:40:56 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\com.raptr.Raptr.848BBC53270CAC248E8FA0F339176201CDEB525F.1
[2009/08/12 19:10:31 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\ContentGuard
[2008/05/28 22:23:32 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\DemoCreator
[2009/12/13 15:25:08 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Desktopicon
[2009/11/10 09:25:13 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Eltima Software
[2009/12/09 00:56:55 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\FileZilla
[2007/04/23 17:35:08 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Flexigen
[2009/04/11 13:35:05 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\GetRightToGo
[2009/03/29 23:23:44 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\GHISLER
[2007/10/05 19:27:50 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\GlarySoft
[2009/04/18 21:32:02 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\HDRsoft
[2007/08/14 19:46:01 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Ideazon
[2008/07/23 21:17:31 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Ilium Software
[2008/07/18 20:32:42 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\ImagingLuminaryLLC
[2009/02/01 01:26:54 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\IObit
[2008/02/18 01:26:41 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\JAlbum
[2008/10/17 21:59:04 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\KompoZer
[2008/01/28 22:37:02 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\landware
[2008/08/30 01:17:52 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\NetMeter
[2009/02/13 21:18:46 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\NewSoft
[2009/03/01 16:59:16 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Nik Software
[2009/11/20 20:47:53 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\NVD
[2009/08/06 20:22:19 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\onOne Software
[2009/01/29 23:33:26 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\OpenOffice.org
[2009/02/14 00:37:55 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Participatory Culture Foundation
[2009/02/14 00:45:59 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\PCF-VLC
[2007/04/04 20:15:47 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\PeerNetworking
[2008/11/13 19:57:10 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Raptr
[2009/02/10 20:55:22 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\ScanSoft
[2008/10/21 22:48:19 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Serif
[2009/12/24 16:47:45 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\SoftGrid Client
[2009/01/01 08:07:30 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Software Informer
[2009/10/21 20:32:36 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Stardock
[2008/03/31 19:55:34 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Sync App Settings
[2009/05/08 09:25:36 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\SystemRequirementsLab
[2007/04/16 21:47:41 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Template
[2009/10/30 14:49:31 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\The Carbon Project
[2009/12/11 00:12:53 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\ThumbsPlus
[2007/06/08 20:44:41 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Thunderbird
[2009/11/20 20:46:20 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\TP
[2009/03/08 07:20:31 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\Vso
[2009/07/03 07:28:33 | 00,000,000 | ---D | M] -- C:\Users\Walter\AppData\Roaming\YCanPDF
[2010/01/02 10:34:48 | 00,000,314 | ---- | M] () -- C:\Windows\Tasks\GlaryInitialize.job
[2009/04/14 07:55:20 | 00,000,906 | ---- | M] () -- C:\Windows\Tasks\Paragon Archive name 410XPS04132009.job
[2010/01/02 10:33:18 | 00,032,554 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009/12/27 22:00:00 | 00,000,386 | ---- | M] () -- C:\Windows\Tasks\SmartDefrag.job
[2010/01/02 16:10:59 | 00,000,420 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{1DDBBCB6-A408-43FE-8A88-477D379784A0}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.exe >


< MD5 for: AGP440.SYS >
[2008/01/19 02:42:25 | 00,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008/01/19 02:42:25 | 00,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008/01/19 02:42:25 | 00,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008/01/19 02:42:25 | 00,056,376 | ---- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2007/03/09 21:57:41 | 00,053,864 | ---- | M] (Microsoft Corporation) MD5=8B10CE1C1F9F1D47E4DEB1A547A00CD4 -- C:\Windows\System32\drivers\AGP440.sys
[2007/03/09 21:57:41 | 00,053,864 | ---- | M] (Microsoft Corporation) MD5=8B10CE1C1F9F1D47E4DEB1A547A00CD4 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_8ed06b47\AGP440.sys
[2007/03/09 21:57:41 | 00,053,864 | ---- | M] (Microsoft Corporation) MD5=8B10CE1C1F9F1D47E4DEB1A547A00CD4 -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6000.16400_none_b82caac9c18a4e3b\AGP440.sys
[2007/03/09 21:57:41 | 00,053,864 | ---- | M] (Microsoft Corporation) MD5=BF34B4A0E0B64440C5389AA6B902F4AD -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6000.20496_none_b85af81edaeb8461\AGP440.sys
[2006/11/02 04:49:52 | 00,053,864 | ---- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/04/10 22:32:28 | 00,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009/04/10 22:32:28 | 00,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008/01/19 02:41:30 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008/01/19 02:41:30 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006/11/02 04:49:36 | 00,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2007/03/09 21:58:06 | 00,019,048 | ---- | M] (Microsoft Corporation) MD5=5653737BAD8C6C10136451C195C19881 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20485_none_db8a029f3dbd443b\atapi.sys
[2007/03/09 21:58:06 | 00,019,048 | ---- | M] (Microsoft Corporation) MD5=A779CA2C76DA4FCB595E692C05E8E4EB -- C:\Windows\System32\drivers\atapi.sys
[2007/03/09 21:58:06 | 00,019,048 | ---- | M] (Microsoft Corporation) MD5=A779CA2C76DA4FCB595E692C05E8E4EB -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_82339ef2\atapi.sys
[2007/03/09 21:58:06 | 00,019,048 | ---- | M] (Microsoft Corporation) MD5=A779CA2C76DA4FCB595E692C05E8E4EB -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16391_none_daf194c024ab5b06\atapi.sys
[2008/02/14 19:52:34 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
[2008/02/14 19:52:34 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
[2008/02/14 19:52:34 | 00,021,560 | ---- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2006/11/02 04:46:03 | 00,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\System32\cngaudit.dll
[2006/11/02 04:46:03 | 00,011,776 | ---- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll

< MD5 for: EVENTLOG.DLL >
[2007/01/12 21:30:08 | 00,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files\CyberLink\PowerDirector\EventLog.dll

< MD5 for: IASTOR.SYS >
[2006/09/29 14:16:20 | 00,495,896 | ---- | M] (Intel Corporation) MD5=C212BE4F068A02E54EB0CF6F5B23569B -- C:\Program Files\Intel\Intel Matrix Storage Manager\Driver64\IaStor.sys
[2006/09/29 14:59:58 | 00,250,368 | ---- | M] (Intel Corporation) MD5=E9F704CA833BD24BFAA3B4A59707633A -- C:\Drivers\storage\R139843\iaStor.sys
[2006/09/29 12:59:58 | 00,250,368 | ---- | M] (Intel Corporation) MD5=E9F704CA833BD24BFAA3B4A59707633A -- C:\Program Files\Intel\Intel Matrix Storage Manager\Driver\iaStor.sys
[2006/09/29 14:59:58 | 00,250,368 | ---- | M] (Intel Corporation) MD5=E9F704CA833BD24BFAA3B4A59707633A -- C:\Windows\System32\drivers\iaStor.sys
[2006/09/29 14:59:58 | 00,250,368 | ---- | M] (Intel Corporation) MD5=E9F704CA833BD24BFAA3B4A59707633A -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_6a23f079\iaStor.sys
[2006/09/29 14:59:58 | 00,250,368 | ---- | M] (Intel Corporation) MD5=E9F704CA833BD24BFAA3B4A59707633A -- C:\Windows\System32\DriverStore\FileRepository\iastor.inf_0afadd92\iaStor.sys

< MD5 for: IASTORV.SYS >
[2008/01/19 02:42:51 | 00,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008/01/19 02:42:51 | 00,235,064 | ---- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006/11/02 04:51:25 | 00,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\drivers\iaStorV.sys
[2006/11/02 04:51:25 | 00,232,040 | ---- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2006/11/02 04:46:11 | 00,559,616 | ---- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll
[2009/04/10 22:28:24 | 00,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\System32\netlogon.dll
[2009/04/10 22:28:24 | 00,592,896 | ---- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008/01/19 02:35:36 | 00,592,384 | ---- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2007/01/05 20:59:42 | 00,035,920 | ---- | M] (NVIDIA Corporation) MD5=4A5FCAB82D9BF6AF8A023A66802FE9E9 -- C:\DELL\Drivers\R150193\IDE\WinVista\sata_ide\nvstor.sys
[2007/01/05 20:59:42 | 00,035,920 | ---- | M] (NVIDIA Corporation) MD5=4A5FCAB82D9BF6AF8A023A66802FE9E9 -- C:\DELL\Drivers\R150193\IDE\WinVista\sataraid\nvstor.sys
[2006/11/02 04:50:13 | 00,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\drivers\nvstor.sys
[2006/11/02 04:50:13 | 00,040,040 | ---- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008/01/19 02:42:09 | 00,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008/01/19 02:42:09 | 00,045,112 | ---- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys

< MD5 for: SCECLI.DLL >
[2008/01/19 02:36:19 | 00,177,152 | ---- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2006/11/02 04:46:12 | 00,176,640 | ---- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll
[2009/04/10 22:28:26 | 00,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\System32\scecli.dll
[2009/04/10 22:28:26 | 00,177,152 | ---- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2009/04/10 22:28:18 | 00,800,768 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\advapi32.dll
[2009/04/10 22:28:20 | 00,168,448 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dnsapi.dll
[2009/04/10 22:28:20 | 00,297,472 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\gdi32.dll
[2009/04/10 22:28:22 | 00,114,688 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\imm32.dll
[2009/04/10 22:28:22 | 00,891,392 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\kernel32.dll
[2009/06/15 09:52:42 | 00,023,552 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\lpk.dll
[2009/04/10 22:28:22 | 00,807,424 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\msctf.dll
[2009/04/10 22:28:24 | 00,679,936 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\msvcrt.dll
[2008/01/19 02:35:57 | 00,008,192 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\nsi.dll
[2009/04/10 22:27:50 | 01,202,168 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\ntdll.dll
[2009/04/10 22:28:24 | 01,316,864 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\ole32.dll
[2009/04/23 07:15:07 | 00,784,896 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rpcrt4.dll
[2009/04/10 22:27:48 | 00,241,128 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\rsaenh.dll
[2009/06/15 09:53:43 | 00,072,704 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\secur32.dll
[2009/04/10 22:28:26 | 11,584,000 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\shell32.dll
[2009/04/10 22:28:26 | 00,353,280 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\shlwapi.dll
[2009/04/10 22:28:24 | 00,228,352 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\SLC.dll
[2009/04/10 22:28:26 | 00,627,712 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\user32.dll
[2009/04/10 22:28:26 | 00,108,544 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\userenv.dll
[2009/04/10 22:28:26 | 00,502,272 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\usp10.dll
[2008/01/19 02:37:09 | 00,179,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\ws2_32.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 98 bytes -> C:\ProgramData\temp:30FD0CBD
@Alternate Data Stream - 203 bytes -> C:\ProgramData\temp:0C43407A
@Alternate Data Stream - 162 bytes -> C:\ProgramData\temp:060CC3DC
@Alternate Data Stream - 126 bytes -> C:\ProgramData\temp:73B1147D
@Alternate Data Stream - 113 bytes -> C:\ProgramData\temp:86BD0D3E
@Alternate Data Stream - 108 bytes -> C:\Windows:
< End of report >

OTL Extras logfile created on: 1/2/2010 4:04:01 PM - Run 1
OTL by OldTimer - Version 3.1.20.1 Folder = C:\Users\Walter\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18865)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 48.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 74.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232.81 Gb Total Space | 80.02 Gb Free Space | 34.37% Space Free | Partition Type: NTFS
Drive D: | 232.90 Gb Total Space | 130.21 Gb Free Space | 55.91% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Drive H: | 232.94 Gb Total Space | 74.36 Gb Free Space | 31.92% Space Free | Partition Type: NTFS
Drive I: | 232.82 Gb Total Space | 70.27 Gb Free Space | 30.18% Space Free | Partition Type: NTFS

Computer Name: XPS410
Current User Name: Walter
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.chm [@ = chm.file] -- "%SystemRoot%\hh.exe" %1
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.scr [@ = AutoCADScriptFile] -- C:\Program Files\Windows NT\Accessories\WORDPAD.EXE (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
chm.file [open] -- "%SystemRoot%\hh.exe" %1
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [Digital Photo Professional] -- C:\Program Files\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [open_x2] -- "C:\Program Files\zabkat\xplorer2\xplorer2_uc.exe" /1 /M /T "%1" (ZabKat)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"AutoUpdateDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02DC9B31-CC62-4668-9ADA-0C63909819DA}" = lport=63299 | protocol=6 | dir=in | name=akamai netsession interface |
"{0318536D-C5E0-4ACB-B3B6-D147C851E878}" = lport=52909 | protocol=6 | dir=in | name=akamai netsession interface |
"{04700275-C295-4086-89CE-9E2F6F2A36C8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{0856A553-B7D0-4114-AF56-307574B7EA5A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{09235C71-B796-445E-8F6B-0435997B3C55}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{0D054AD1-03B1-4620-919E-BE65426B81A5}" = lport=57286 | protocol=6 | dir=in | name=akamai netsession interface |
"{0D0B4198-155F-49D5-99FC-8CDC45F5C2DB}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface |
"{11648874-FE5C-4E25-9889-DD3BCA3970F9}" = lport=52534 | protocol=6 | dir=in | name=akamai netsession interface |
"{141CBB7D-A2C4-4D73-8D7F-6DB15307C79E}" = lport=54654 | protocol=6 | dir=in | name=akamai netsession interface |
"{1663F1E1-4B62-4F9B-A073-8C5AF1FE716F}" = lport=54032 | protocol=6 | dir=in | name=akamai netsession interface |
"{18B2F134-E9CF-4C16-9D9E-A6D67CAA2C79}" = lport=55670 | protocol=6 | dir=in | name=akamai netsession interface |
"{1D20A8DB-D815-4B8F-BED6-4039E4F74366}" = lport=50812 | protocol=6 | dir=in | name=akamai netsession interface |
"{1F0B8B52-0BF6-4834-8868-23D5BAE6B530}" = lport=52795 | protocol=6 | dir=in | name=akamai netsession interface |
"{2450F1EA-55C1-4B81-BAE1-BA0763E66C2D}" = lport=56190 | protocol=6 | dir=in | name=akamai netsession interface |
"{24A0970D-B592-4E78-AE30-8826F802B1AC}" = lport=67 | protocol=17 | dir=in | name=dhcp discovery service |
"{27245204-0894-42AC-B554-2690AA760A3A}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{27D9299E-7986-46BC-8198-BE9D6A0BA571}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{31063E3C-F6B7-45FD-BF37-7F2B58ACDB70}" = lport=54800 | protocol=6 | dir=in | name=akamai netsession interface |
"{37D9C646-3764-4750-BC9C-35D31093120D}" = lport=1900 | protocol=17 | dir=in | name=intel® viiv™ media server upnp discovery |
"{3BAD3496-64FB-49B2-B6ED-D16FCB4F9F93}" = lport=49802 | protocol=6 | dir=in | name=akamai netsession interface |
"{3C6EC49C-439A-4036-8418-3C4FA22A28CE}" = lport=64303 | protocol=6 | dir=in | name=akamai netsession interface |
"{3F2C92DC-BE9D-4989-905F-82D75F4F7FEB}" = lport=53701 | protocol=6 | dir=in | name=akamai netsession interface |
"{41F59018-2553-4299-BB5F-DE15E7FDC5D6}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=c:\windows\system32\svchost.exe |
"{46160678-A883-4DD7-BBD1-2915DEC7E3EC}" = lport=54239 | protocol=6 | dir=in | name=akamai netsession interface |
"{47F8099D-39D1-42CD-8FD7-E8198B3AC264}" = lport=49812 | protocol=6 | dir=in | name=akamai netsession interface |
"{4C199F02-19D7-4F9F-9EA5-A8DE8F11551D}" = lport=52691 | protocol=6 | dir=in | name=akamai netsession interface |
"{4CC5A8C5-25C9-4E0D-BF1B-0675918BF4BA}" = lport=52787 | protocol=6 | dir=in | name=akamai netsession interface |
"{51295FC0-5E9D-459C-B3B3-CA2E8A4354EE}" = lport=49160 | protocol=6 | dir=in | name=akamai netsession interface |
"{525DD11C-1145-4227-B9F6-2D1776FEAE3D}" = lport=56732 | protocol=6 | dir=in | name=akamai netsession interface |
"{5315FD13-AC07-4429-B935-11F5E89DCBB2}" = lport=50822 | protocol=6 | dir=in | name=akamai netsession interface |
"{541551AC-8A06-4616-AB18-BEDE3333F1A6}" = lport=56184 | protocol=6 | dir=in | name=akamai netsession interface |
"{55ECB54D-92FE-4059-8756-881DADD9C340}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
"{57755E58-AC25-4F79-B86F-C8D3E9CA6300}" = lport=49162 | protocol=6 | dir=in | name=akamai netsession interface |
"{577FB00F-DED6-4AAD-B5A5-4E0921AE09AD}" = lport=52316 | protocol=6 | dir=in | name=akamai netsession interface |
"{64A464FF-397C-4432-86E0-5A5D61603704}" = lport=57717 | protocol=6 | dir=in | name=akamai netsession interface |
"{654C1018-145A-41C9-86EC-C8EB3E72B507}" = lport=26675 | protocol=6 | dir=in | [email protected]%systemroot%\windowsmobile\wmdc.exe,-4006 |
"{6713AFD1-DC00-4F47-B9CB-D3993E80DFE1}" = lport=54023 | protocol=6 | dir=in | name=akamai netsession interface |
"{678932F9-7E8D-4880-8AD3-D6396A8E3BD0}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{6C047610-A289-45F8-B06B-9646FCDFBB68}" = lport=54096 | protocol=6 | dir=in | name=akamai netsession interface |
"{6D62F58B-BB0E-442B-BEAB-341DA94FDA54}" = lport=2869 | protocol=6 | dir=in | app=system |
"{6E20D79A-93DF-42D2-85F2-E13FCA4A43CA}" = lport=57726 | protocol=6 | dir=in | name=akamai netsession interface |
"{70BB4710-C05F-452F-85C6-1ACCF4414432}" = lport=57943 | protocol=6 | dir=in | name=akamai netsession interface |
"{7180ABD9-6114-4CD7-8F72-4C99B7E05089}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{7457A5D3-60B9-4BBF-BDAE-B7E93C59DEB1}" = lport=49158 | protocol=6 | dir=in | name=akamai netsession interface |
"{7915ABF2-A794-41CC-AC4D-76D404BF13EE}" = lport=53448 | protocol=6 | dir=in | name=akamai netsession interface |
"{82939EB4-BC33-458E-8ED9-82388748590E}" = lport=52971 | protocol=6 | dir=in | name=akamai netsession interface |
"{8309C073-D874-4D8F-BFC4-BF3AD0583B4E}" = lport=54805 | protocol=6 | dir=in | name=akamai netsession interface |
"{840C5656-B6E8-443B-947D-B95EAE13F2A4}" = lport=63978 | protocol=6 | dir=in | name=akamai netsession interface |
"{872E7EAC-FA16-495D-9BD2-4D33C291893C}" = lport=57916 | protocol=6 | dir=in | name=akamai netsession interface |
"{87F4AC59-5BDE-44CA-9381-821B261E762E}" = lport=58223 | protocol=6 | dir=in | name=akamai netsession interface |
"{92512F6C-411C-4BAF-93D1-209FD3BCCB04}" = lport=53801 | protocol=6 | dir=in | name=akamai netsession interface |
"{942D96F5-8603-4986-9999-AED487BCA28E}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{94E46D45-86AE-467C-9234-BE6FCA55CCD2}" = lport=58985 | protocol=6 | dir=in | name=akamai netsession interface |
"{9DB2B615-E605-432B-9944-95A1399AD920}" = lport=49508 | protocol=6 | dir=in | name=akamai netsession interface |
"{A0E60C32-38D4-4D5C-8CBC-19EA3D7DDF6F}" = lport=50693 | protocol=6 | dir=in | name=akamai netsession interface |
"{A4ABB5E0-1AF1-4628-BE53-B534B87DD681}" = lport=53854 | protocol=6 | dir=in | name=akamai netsession interface |
"{A502C5AC-5929-4FA2-8B77-09D410CF49F8}" = lport=56858 | protocol=6 | dir=in | name=akamai netsession interface |
"{A60891AE-DCFF-4A8C-8978-7F8077018EB1}" = lport=54656 | protocol=6 | dir=in | name=akamai netsession interface |
"{A96E6B36-C52E-4E10-B1D0-1D18E16419F8}" = lport=58255 | protocol=6 | dir=in | name=akamai netsession interface |
"{AA866417-5634-4F62-A72F-4322B1262416}" = lport=49636 | protocol=6 | dir=in | name=akamai netsession interface |
"{ACA8BA0B-E605-4D59-B457-421102B30937}" = lport=26675 | protocol=6 | dir=in | [email protected]%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{AEDF9F93-343F-4781-9FC5-70FA378DC570}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{B2DFB9B6-2E52-4132-9261-881F0F09C831}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{B30514B8-D706-41E9-89CF-94CCBE69DB61}" = lport=49164 | protocol=6 | dir=in | name=akamai netsession interface |
"{B39A080C-492B-4306-B656-11E7C127C826}" = lport=58981 | protocol=6 | dir=in | name=akamai netsession interface |
"{B7602724-93E9-459F-A989-039E585E8F18}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{BABBE037-542B-4E06-BAD8-E1ECF81708FF}" = lport=52158 | protocol=6 | dir=in | name=akamai netsession interface |
"{BB1E581C-F984-4206-B9C7-00AF31493FDD}" = lport=9442 | protocol=17 | dir=in | name=intel® viiv™ media server discovery |
"{BD2EF990-B8BA-417E-9886-C57972E9A458}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{BF452EA0-93E6-4DD3-A72D-7330A1406E50}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{BF9C5BF8-5990-43E2-AD47-D23A3288FDFA}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=c:\windows\system32\svchost.exe |
"{C0A5CDD5-DAB4-4F17-B2B8-BA03FA9BFA28}" = lport=63292 | protocol=6 | dir=in | name=akamai netsession interface |
"{C302BEA5-6D10-4714-BFD7-1616D1C78C91}" = lport=49159 | protocol=6 | dir=in | name=akamai netsession interface |
"{C37828D2-0FC2-41F5-A634-3E747E52FA6F}" = lport=54914 | protocol=6 | dir=in | name=akamai netsession interface |
"{C420A86C-50F8-470B-84ED-BB6818A592DB}" = lport=52308 | protocol=6 | dir=in | name=akamai netsession interface |
"{CA1AA759-BF37-4542-A96E-223A3B36F4F1}" = lport=55678 | protocol=6 | dir=in | name=akamai netsession interface |
"{CE1CAAE0-ED66-4610-AD47-0FB5DABCEC96}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{CF1E7EF6-6485-485A-88EA-A101E78720E1}" = lport=3702 | protocol=17 | dir=in | app=c:\windows\system32\p2phost.exe |
"{CFFA8506-0F7F-47AF-8B7A-309C9967A8E5}" = lport=49491 | protocol=6 | dir=in | name=akamai netsession interface |
"{D2A6187B-CAF0-4020-A840-339D5FF44E18}" = lport=57916 | protocol=6 | dir=in | name=akamai netsession interface |
"{D35482C1-D2C5-42EC-8464-57D5DFD1304E}" = lport=59551 | protocol=6 | dir=in | name=akamai netsession interface |
"{D5F4FF37-626A-469A-819B-E2B95D18FCC6}" = lport=58393 | protocol=6 | dir=in | name=akamai netsession interface |
"{D6204283-E015-4507-9607-4F829E7E8460}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface |
"{D69B70E0-D3F9-4A41-BAEC-093A51BAB7A4}" = lport=58076 | protocol=6 | dir=in | name=akamai netsession interface |
"{D801F1C2-460A-40B3-9DE2-2DEDD5E59A6D}" = lport=49500 | protocol=6 | dir=in | name=akamai netsession interface |
"{DA598D4E-58CA-4B58-AF7A-10048F21DF7A}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{DAA9E5A4-0158-4CBE-BAF1-3AE97D22B29E}" = lport=64778 | protocol=6 | dir=in | name=akamai netsession interface |
"{DAB4E63F-3804-4025-BBED-F5F3E85B37AB}" = lport=57006 | protocol=6 | dir=in | name=akamai netsession interface |
"{E2BA71FF-FBB7-48E1-86A4-49E8DC081ADA}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{E6649304-28D4-46BA-9271-ED2685D5FE08}" = lport=57107 | protocol=6 | dir=in | name=akamai netsession interface |
"{E744982B-08D9-44D5-AE19-156581E65C0A}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{E7AD18AE-9E4B-4A30-93C5-61CB146F47EC}" = lport=57310 | protocol=6 | dir=in | name=akamai netsession interface |
"{E893828C-7928-4AE7-871E-9FEBDBD5835E}" = lport=67 | protocol=17 | dir=in | name=dhcp discovery service |
"{E8E007CE-5B9C-4764-905A-8CCCEE5CAC29}" = rport=3702 | protocol=17 | dir=out | app=c:\windows\system32\p2phost.exe |
"{E997D1E3-994C-4939-8FCC-1491214C7049}" = lport=64175 | protocol=6 | dir=in | name=akamai netsession interface |
"{EA4DBD7C-05AD-4764-A444-0779F6C67891}" = lport=58236 | protocol=6 | dir=in | name=akamai netsession interface |
"{EA949242-2A48-45EC-8CC6-B52E9B502FDC}" = lport=49315 | protocol=6 | dir=in | name=akamai netsession interface |
"{EE5BB81F-9669-40B2-AC24-E2C75CDF8966}" = lport=54485 | protocol=6 | dir=in | name=akamai netsession interface |
"{EEFAF816-F51A-4172-AF68-7947621A76A7}" = lport=52164 | protocol=6 | dir=in | name=akamai netsession interface |
"{F1A628E1-5E26-459E-882B-CBD48E96EF19}" = lport=65240 | protocol=6 | dir=in | name=akamai netsession interface |
"{F38A8034-30C4-457C-A8CC-F455C55B0818}" = lport=62989 | protocol=6 | dir=in | name=akamai netsession interface |
"{F5D9C46B-1EDB-49C4-841A-9ECC7B95E8DF}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{F666864B-32A4-41E5-A31E-54D84389C942}" = lport=57906 | protocol=6 | dir=in | name=akamai netsession interface |
"{FBEF1714-6DB4-4252-81CD-A1555DC315D3}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{FDC2F36F-1DE9-48FA-B98B-C374777E8407}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00661391-99B9-4D8C-86DF-4E1B6FEB7968}" = protocol=6 | dir=in | app=c:\program files\intel\inteldh\intel media server\media server\bin\mediaserver.exe |
"{0D95361D-F9CB-4390-B4F5-8AE6A697079E}" = protocol=17 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{12643E48-0D8F-42F1-B96C-AD0F2BDFFF5F}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{14D44BFD-1DC6-4162-A2B7-36B64013C151}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{167D3643-8581-4EB7-9D8D-B3134A0CC620}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32.exe |
"{1B145F7E-34F1-4741-90A2-3808B5535816}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{1CF54F28-AEB0-4B3E-A698-5E07FBDDBCED}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2010\3dsmax.exe |
"{1D1204EE-44E2-441F-AA54-D5D098603FF0}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{203C5791-6D0B-4C6D-845C-2C3AE0A21411}" = protocol=6 | dir=out | app=c:\windows\system32\p2phost.exe |
"{21430CDB-367D-417E-AC73-6D05246FEA16}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{2414756B-5261-4475-B2CF-99ACCBF5BBA5}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{2513BBD7-2167-45A0-A1E4-4C1AAF60D741}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{28BF0242-0C02-4624-917D-B06376BC4F8B}" = protocol=17 | dir=in | app=c:\program files\activision\call of duty - world at war\codwaw.exe |
"{307DEDEA-8AAC-414A-9C1B-0F5199663869}" = protocol=6 | dir=in | app=c:\program files\activision\call of duty - world at war\codwaw.exe |
"{36BBBCF1-5C60-40CA-8818-D88B1CE0DADA}" = protocol=6 | dir=in | app=c:\program files\common files\pure networks shared\platform\nmsrvc.exe |
"{38491343-81BD-49E3-A8EC-922E9C01AD97}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{486FB902-2D86-44A8-8E48-CDF7F15056EE}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\manager.exe |
"{4D2E9035-89CB-4540-8DE1-2F9E275BAD7B}" = protocol=6 | dir=in | app=c:\program files\intel\inteldh\intel media server\media server\bin\tshwmdtcp.exe |
"{4D8C44A4-395E-4E66-9833-135B47F27582}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{511972E6-5BAC-4A07-84F4-501C2BF09C96}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{56114623-44B0-4919-BF23-EBA90D6CD6E0}" = protocol=6 | dir=in | app=c:\program files\activision\call of duty - world at war\codwaw.exe |
"{57564178-CD1F-4861-B7D7-4695E6670D64}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{6441A600-36A3-45DF-B8A7-66A8D8B51BB9}" = protocol=17 | dir=in | app=c:\program files\intel\inteldh\intel media server\media server\bin\mediaserver.exe |
"{667EBA3F-56D4-4AE1-9EC4-B8FAC52351EE}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{68B51472-3287-4301-909D-C287E5C3974C}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{695328AB-A97C-4654-A8F0-BBB92ECCD460}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{6C47E519-0811-4E46-86A0-F5E360A6C320}" = protocol=6 | dir=in | app=c:\program files\intel\inteldh\intel media server\shells\remote ui service.exe |
"{6C5A2DE3-4617-4BDC-9C8D-32D1A67E3A4B}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\server.exe |
"{6F49A101-45BA-46D5-A219-D36D8DC34685}" = protocol=17 | dir=in | app=c:\program files\activision\call of duty - world at war\codwawmp.exe |
"{72CDB4CB-1E9B-4D76-BFCE-ADE8318BF676}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe |
"{74126FFE-8976-43E0-89B0-5EC1E35F181E}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{749FCF8D-F5A5-4F62-93EC-41050C3B882E}" = protocol=6 | dir=in | app=c:\program files\activision\call of duty - world at war\codwawmp.exe |
"{75879052-E6D7-4943-BDDF-AC291CAD78B3}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{766FF121-4937-4A34-B61C-DCF9823D9684}" = protocol=17 | dir=in | app=c:\program files\intel\inteldh\intel media server\shells\remote ui service.exe |
"{7C6D074E-A6AB-4B42-9C6A-65B4FFE840E9}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yserver.exe |
"{803E491A-2E51-4D38-B504-ADC16CFDE5F9}" = protocol=17 | dir=in | app=c:\program files\activision\call of duty - world at war\codwawmp.exe |
"{80E0B183-43E2-436B-8126-F63D9A9E1C4A}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{879A7A0C-85FA-40A9-B1B1-C5232A9FA5F2}" = protocol=17 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe |
"{8B2E7D12-870A-405C-85B9-3942A0527654}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2010\3dsmax.exe |
"{8B80FB89-40B2-4D5B-8911-D7A6AE82A93B}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{8EB9EC7B-CACC-4657-8A4E-18109CAD5F4E}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32.exe |
"{90982926-E474-4669-9457-E93D036609DE}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\monitor.exe |
"{95C8A242-7013-4314-8A50-BE890ED84A62}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{99E9BF51-3D94-4E8B-AC36-281A7950B47E}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{9A55283F-7A9C-4317-9920-EB55EDF57A2D}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{9C7DE7F4-F0C4-4E19-B015-8378C498E262}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{A5ED2ED3-4FC3-4121-8B14-37D9932B5204}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{A82DDCD1-26A4-443D-9EDC-41D5C4F6C600}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{AD19FC74-9B23-4E83-8A69-02937347922D}" = protocol=17 | dir=in | app=c:\windows\system32\migwiz\migwiz.exe |
"{B14B9D94-041D-40F1-9E31-60D4D1CA39A5}" = protocol=6 | dir=in | app=c:\windows\system32\migwiz\migwiz.exe |
"{B51ABFEC-0D57-4EC9-9875-889DD05F2517}" = protocol=17 | dir=in | app=c:\program files\common files\pure networks shared\platform\nmsrvc.exe |
"{B8F8C8B0-9852-4EF9-8B62-2E54848248CF}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\server.exe |
"{BADDF00A-143F-4912-938F-1A3200D56807}" = protocol=6 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{BF673D5C-18BD-4825-8DAC-C864451D36EB}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe |
"{C5D327EA-D0D6-4ABB-BDFA-A41A38559236}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{C990EA78-4F2C-4A9E-BC20-006D8D630F24}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{C9B73475-8948-4D84-9D9B-E706B498478C}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yserver.exe |
"{CBF2417F-74B0-4633-9BAB-415374D0ECF6}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{D6776DB1-E3E5-4F51-9908-443027D4F637}" = protocol=17 | dir=in | app=c:\program files\activision\call of duty - world at war\codwaw.exe |
"{D725FC26-4B82-4B24-A512-BD2E80A43780}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{DC0770A4-6195-4805-A0DB-D2AC16EB642A}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{DFC8A1B9-E89D-4E54-BE2A-7CDC5D943EE6}" = protocol=6 | dir=in | app=c:\windows\system32\p2phost.exe |
"{E251A2ED-6C31-4A55-9A1A-B48FC44A4709}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{E3E7C70F-A4FD-4232-AEF9-97C0A835D88E}" = protocol=6 | dir=in | app=c:\program files\autodesk\backburner\manager.exe |
"{E6141827-20AF-40A5-9C48-6A07D98D6C19}" = protocol=17 | dir=in | app=c:\program files\intel\inteldh\intel media server\media server\bin\tshwmdtcp.exe |
"{EE7E21AE-50FB-4489-AB62-E74BE7F023EA}" = protocol=6 | dir=in | app=c:\program files\activision\call of duty - world at war\codwawmp.exe |
"{F1FE2043-33EC-4D17-A4B6-3044D35B605B}" = protocol=17 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{F26637A2-739E-4AB4-A91F-AC6E39CC1A66}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe |
"{F5723046-B5FE-45E5-BE08-F925ABDEF075}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{F7A466D2-26AC-4169-A1CD-197C86C62A14}" = protocol=6 | dir=in | app=c:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{F9612E12-E3C5-475D-A798-36C0D3DE2483}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"TCP Query User{0D13D9BA-B116-4420-9818-9973BF94867A}C:\program files\jalbum7.1\jalbumwin.exe" = protocol=6 | dir=in | app=c:\program files\jalbum7.1\jalbumwin.exe |
"TCP Query User{33060854-C23D-4C1A-BF00-BF44492A905E}C:\program files\macromedia\dreamweaver mx\dreamweaver.exe" = protocol=6 | dir=in | app=c:\program files\macromedia\dreamweaver mx\dreamweaver.exe |
"TCP Query User{34876BC7-0394-4D32-B163-A266035A8BBF}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{57BB8E5D-F24A-4E69-8F64-22B2175E028D}C:\program files\call of duty\coduomp.exe" = protocol=6 | dir=in | app=c:\program files\call of duty\coduomp.exe |
"TCP Query User{7418460E-D80C-4311-98E3-FEC4993BB457}C:\program files\jalbum7.2\jalbumwin.exe" = protocol=6 | dir=in | app=c:\program files\jalbum7.2\jalbumwin.exe |
"TCP Query User{9C3ECC8B-4E53-4627-BC36-33EBBA1E4261}C:\program files\call of duty\codmp.exe" = protocol=6 | dir=in | app=c:\program files\call of duty\codmp.exe |
"TCP Query User{CEF7ED13-C294-4C7F-986A-F178AC33366C}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{288F713B-78BD-4E24-B3D6-021176165135}C:\program files\jalbum7.1\jalbumwin.exe" = protocol=17 | dir=in | app=c:\program files\jalbum7.1\jalbumwin.exe |
"UDP Query User{34B90B63-16D7-4289-9632-EA97EF5DD1AD}C:\program files\macromedia\dreamweaver mx\dreamweaver.exe" = protocol=17 | dir=in | app=c:\program files\macromedia\dreamweaver mx\dreamweaver.exe |
"UDP Query User{38245588-7BDA-492C-99FC-30CD1042C85D}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{5C815CD8-4CAF-4880-9C36-8DF3F3591611}C:\program files\call of duty\codmp.exe" = protocol=17 | dir=in | app=c:\program files\call of duty\codmp.exe |
"UDP Query User{C7FEF1F1-57BC-4130-AB9D-AC23817B990F}C:\program files\call of duty\coduomp.exe" = protocol=17 | dir=in | app=c:\program files\call of duty\coduomp.exe |
"UDP Query User{D293F9D4-93A8-4ACE-B14D-C3B976C984D9}C:\program files\jalbum7.2\jalbumwin.exe" = protocol=17 | dir=in | app=c:\program files\jalbum7.2\jalbumwin.exe |
"UDP Query User{FE162B61-52CB-4F49-ACAD-F0E5710A5665}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{03CAB33F-D1C2-48C6-8766-DAE84DFC25FE}" = Microsoft Sync Framework Services v1.0 (x86)
"{0428A339-FB43-45C4-A17F-D20FB064611F}" = Microsoft Office Mobile 6.1
"{044F9133-B8D7-4d11-BF39-803FA20F5C8B}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32
"{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}" = Call of Duty® 4 - Modern Warfare™ 1.3 Patch
"{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}" = Microsoft Visual C++ 2005 Redistributable
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{05BC428A-F2A5-4E11-8130-10C3237FD67B}" = Serif WebPlus X2 Resources
"{064A2789-D1BD-4F08-B12F-88582BF972F9}" = Bentley PowerCivil for Americas V8i 08.11.05.39
"{064DC64E-7A2F-4FDF-B598-E3C0747BBB9C}" = Call of Duty® - World at War™ 1.6 Patch
"{070B66DD-BD59-4F10-AD98-2218B8BEBFBB}" = SlingPlayer Mobile
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{0AAA9C97-74D4-47CE-B089-0B147EF3553C}" = Windows Live Messenger
"{0C19D563-5F25-4621-BF10-01F741BD283F}" = Microsoft SQL Server Compact 3.5 SP1 Design Tools English
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{10A44844-4465-456E-8C97-80BDD4F68845}" = Windows Live ID Sign-in Assistant
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{127B5C21-5917-4345-891A-2E1EEDD5E5C2}" = Keyboard Lockup Fix
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{149464D9-B06F-4505-9968-FD1206F67AD3}" = Call of Duty® - World at War™ 1.3 Patch
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{196E77C5-F524-4B50-BD1A-2C21EEE9B8F7}" = Microsoft SQL Server 2008 Common Files
"{1E56D5CB-0A76-4290-A998-1EAB8A5F2092}" = Windows Mobile Feb. 2008 DST Updates
"{20140000-006D-0409-0000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010 (Beta)
"{20140000-011A-0000-0000-0000000FF1CE}" = Microsoft Office Send-a-Smile
"{20140066-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 (Beta) - English
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{23717273-FABE-4C97-9FDD-60BD41346257}" = HDR MAX
"{239A8D60-270B-42e8-82D3-60D70A2942E0}" = Canon MF4100 Series
"{2515BF88-E42E-4AFA-A8E7-DF272762589B}" = Microsoft Office Live Meeting 2007
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = Catalyst Media Center
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java™ 6 Update 16
"{26C610BF-761B-4209-BD6A-A0F1B73D6DDE}" = Intel® Viiv™ Software
"{2758691A-2CDE-4942-A4AC-0E8F61FE2067}" = USB Video Driver
"{291A772C-FFB9-4681-B720-AB2A0A620896}" = Adobe Reader for Pocket PC 2.0
"{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty® - World at War™ 1.2 Patch
"{2D87E961-577B-492B-AD54-1368680FB9A7}" = Bing Maps 3D
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}" = Roxio Drag-to-Disc
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{3143CB05-16A3-4589-970E-87D844A76A61}" = Absolute Beginner's Series CS Lesson 2
"{317AC0C7-FEBF-0409-87A3-4FC70D0ED900}" = Autodesk 3ds Max 2010 32-bit
"{334B6B44-2C7F-4AC0-A215-E780541CE033}" = Paragon Drive Copy 9.0 Personal Special Edition
"{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}" = Microsoft SQL Server 2008 RsFx Driver
"{342D4AD7-EC4C-4EC8-AEA6-E70F5905A490}" = SQL Server System CLR Types
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Sonic Activation Module
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3B0F52AC-EF5C-4831-B221-06C782E41280}" = Quicken 2008
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3BD633E0-4BF8-4499-9149-88F0767D449C}" = Call of Duty® 4 - Modern Warfare™ 1.4 Patch
"{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{3CBA0E30-6F54-47EF-910E-1D4D450AFE45}" = ATI Multimedia Center
"{3D08333C-C366-425D-8C2D-D05630D68A46}" = SlingPlayer
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2008.1
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{3E25E350-949F-4DB7-8288-2A60E018B4C1}" = Games, Music, & Photos Launcher
"{3E3966CE-E4BD-434B-9585-EDF35B272FE3}" = Dell GPS Navigation System
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}" = URL Assistant
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{40E12A55-C504-4223-AFAC-7672DBF1ACDE}" = Trend Micro Internet Security Pro
"{419CF344-3D94-4DAD-99C8-EA7B00E5EA8B}" = Acronis True Image Home
"{46D61287-50D4-46B9-B10B-B6DBCD023873}" = EASEUS Data Recovery Wizard 4.3.6
"{4815BD99-96A4-49FE-A885-DCF06E9E4E78}" = Microsoft SQL Server 2008 Database Engine Shared
"{485DF5E7-8379-4BFA-BAE1-9B8DBFE0D6B4}" = Paragon Drive Backup™ 9 Professional
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"{4CEC5376-D526-4EC4-AB96-8F6AF1C947E5}" = Absolute Beginner's Series CS Lesson 5
"{4F44B5AE-82A6-4A8A-A3E3-E24D489728E3}" = Microsoft SQL Server 2008 Native Client
"{51CC405A-7D09-4EF7-8E04-13B8BF53B159}" = Absolute Beginner's Series CS Lesson 4
"{53735ECE-E461-4FD0-B742-23A352436D3A}" = Logitech Updater
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01)
"{55485AA6-B3C8-4FEF-9A1E-09B7DE3DB589}" = Serif WebPlus X4 Bonus Content Pack
"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4
"{55D9E026-DCB0-46FF-B60A-68B972228CF6}" = Autodesk Design Review 2010
"{5783F2D7-0211-0409-0000-0060B0CE6BBA}" = AutoCAD Express Tools Volumes 1-9
"{5783F2D7-0218-0409-0000-0060B0CE6BBA}" = Autodesk Civil Series 2004
"{5783F2D7-8000-0409-0002-0060B0CE6BBA}" = AutoCAD Civil 3D 2010
"{5783F2D7-8000-0409-1002-0060B0CE6BBA}" = AutoCAD Civil 3D 2010 Language Pack - English
"{5783F2D7-8028-0409-0000-0060B0CE6BBA}" = DWG TrueView 2010
"{58721EC3-8D4E-4B79-BC51-1054E2DDCD10}" = Microsoft SQL Server 2008 Database Engine Services
"{5B3A354B-C059-4861-A85B-CA46F1089E15}" = Creative USB Headsets
"{5BE1E709-30E4-3D6D-A708-96CE8D5E5E8D}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu
"{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}" = User's Guides
"{60A08432-00DD-0409-AC2C-143C75460878}" = Autodesk 3ds Max 2010 32-bit Components
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}" = Adobe Setup
"{64E47A5F-B3C4-476A-9100-2D006BD1FFB4}" = Z Engine
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler
"{6767DFEE-8909-453A-B553-C7693912B2EB}" = Canon MF Toolbox 4.9.1.1.mf07
"{67C14830-FDC4-4C31-A410-D7781A759CD6}" = Absolute Beginner's Series CS Lesson 6
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}" = Adobe Color Common Settings
"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works
"{718D791F-F4E8-4aa7-98A6-15FDED17BDD0}" = Trend Micro Internet Security Pro
"{750C87B8-AF19-4C3C-B791-50D9C83AE572}" = Call of Duty® - World at War™ 1.7 Patch
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77D2A9D3-5800-43E3-B274-87841BC87DB2}" = Adobe ExtendScript Toolkit 2
"{7AC0886A-CE48-4EB6-9CC3-4C56D427F2E1}" = Cisco Network Magic
"{7B4D193B-D76D-308B-8B12-5D9BB1CBCE6C}" = Microsoft Visual Basic Power Packs 3.0
"{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA nTune
"{7FCC4EDC-6EE2-4309-ABD7-85F2667A7B90}" = WebEx Support Manager for Internet Explorer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8503C901-85D7-4262-88D2-8D8B2A7B08B8}" = Call of Duty® 4 - Modern Warfare™ 1.5 Patch
"{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}" = Roxio Creator BDAV Plugin
"{8829E394-87E1-41C0-BCED-9B47F7C6DCDD}" = Serif WebPlus X2
"{89CEAE14-DD0F-448E-9554-15781EC9DB24}" = Documentation & Support Launcher
"{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}" = ATI AVIVO Codecs
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty® 4 - Modern Warfare™ 1.6 Patch
"{8AE03988-8C8C-40EE-BDC7-76781BEF1B1D}" = Adobe Setup
"{8B4AB829-DFD3-436D-B808-D9733D76C590}" = Macromedia Dreamweaver MX
"{8D70145A-3BD3-4DBF-9CBF-223EF4A43257}" = ATI Parental Control & Encoder
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile Device Center
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty® 4 - Modern Warfare™ 1.7 Patch
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{95120000-0038-0409-0000-0000000FF1CE}" = Time Zone Data Update Tool for Microsoft Office Outlook
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{959B7040-8448-4705-B951-BDB603CF69A0}_is1" = PDF Converter 2.0
"{96CFF0DB-C3C3-44B8-930C-1121EC68A3BF}" = Serif WebPlus X4 Resources
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9ADA45A0-8043-470A-8E8B-02EA7D95F896}" = Serif WebPlus X4
"{9F01A67B-7D67-482F-9D4F-D5980A440FD4}" = Call of Duty® - World at War™ 1.4 Patch
"{9FEA5804-A53D-4CD0-A508-96E85F7F024E}" = Windows Mobile Update KB975353 - DST Update August 2009
"{A066194B-DC8F-449A-8E0F-B57BDD3A2072}" = SyncToy 2.1 (x86)
"{A13D16C5-38A9-4D96-9647-59FCCAB12A85}" = Visual Basic for Applications ® Core - English
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A35001F0-F1E4-11DD-A38B-005056C00008}" = Paragon Partition Manager™ 9.5 Professional
"{A3DD7BA6-37A6-4245-A167-B3AA137B2157}" = TitanTV Client components for ATI
"{A4418082-E601-3954-805B-D56A2B50EC8B}" = Microsoft Visual C# 2008 Express Edition with SP1 - ENU
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{A5BA14E0-7384-11D4-BAE7-00409631A2C8}" = Macromedia Extension Manager
"{A662E280-64A8-4CF5-8407-13D0808602B3}" = Call of Duty - United Offensive
"{A7284E29-CC2E-48E8-AB86-0D32B247B7A5}" = ThumbsPlus Digicam Plug-in
"{A855D6F0-DB2E-11DE-B032-005056C00008}" = Paragon Drive Backup™ 2010 Special Edition
"{A8BD5A60-E843-46DC-8271-ABF20756BE0F}" = Microsoft Sync Framework Runtime v1.0 (x86)
"{A90C03D6-08E1-4C59-B93B-6919A6C0AC19}" = TSP_CODEC
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA645E8D-162B-4E1F-B21C-24F4029D4754}" = Absolute Beginner's Series CS Lesson 3
"{AC76BA86-7AD7-1033-7B44-A92000000001}" = Adobe Reader 9.2
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{AD1FE8DD-0A6A-46E7-9B5F-8A70DD75CA93}" = ThumbsPlus
"{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}" = Microsoft Office Live Add-in 1.4
"{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty® - World at War™ 1.1 Patch
"{AFECFED6-0A43-488F-8511-1DC6B52F31C3}_is1" = Fast Duplicate File Finder 1.1.0.1
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B2C7EA7C-4714-4682-ACDB-EEADA9830F86}" = Glossy Paper ICC Profiles
"{B5153233-9AEE-4CD4-9D2C-4FAAC870DBE2}" = Microsoft SQL Server 2008 Database Engine Services
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B857D868-F8B0-43EE-BC2B-D9E5ED21F237}" = Microsoft SQL Server VSS Writer
"{B9CFBA63-CDBB-4091-90DB-AD77845A6F9E}" = Vista Services Optimizer
"{BA4DA261-CB60-4690-B202-44998DFC6986}" = Microsoft SQL Server 2008 Setup Support Files
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{C0227F6C-C9B9-4FD6-9545-A252187CFA57}" = Matte Paper ICC Profiles
"{C084BC61-E537-11DE-8616-005056806466}" = Google Earth
"{C1E693A4-B1D5-4DCD-B68D-2087835B7184}" = ScanSoft OmniPage SE 4.0
"{C21C30F2-521C-4F86-882E-60CDCE615FBD}" = Intel® IPP Run-Time Installer 5.3 for Windows* on IA-32
"{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}" = Call of Duty® - World at War™ 1.5 Patch
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C688457E-03FD-4941-923B-A27F4D42A7DD}" = Microsoft SQL Server 2008 Browser
"{C6CA8874-5F22-4AF0-9BE3-016BF299C536}" = Windows Live Essentials
"{C88E49AA-41C5-4420-A08D-BE1B6C5A3A74}" = DAO
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator DE
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CB8CA439-DA83-419C-A4CF-5A0A50025144}" = Windows Mobile Device Center Driver Update
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CCFF1E13-77A2-4032-8B12-7566982A27DF}" = Internet Service Offers Launcher
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D2D6B9EB-C6DC-4DAA-B4DE-BB7D9735E7DA}" = Presto! PageManager 7.15.14
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow! 1.0
"{D3A80508-CD83-4CA3-8671-914A1BC78B61}" = Microsoft Sync Framework 2.0 Provider Services (x86) ENU
"{D639085F-4B6E-4105-9F37-A0DBB023E2FB}" = Roxio MyDVD DE
"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty® - World at War™
"{DBCC73BA-C69A-4BF5-B4BF-F07501EE7039}" = AnswerWorks 5.0 English Runtime
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E3C020C3-8523-4AEB-A9D3-A34911C6F3F9}" = Gaia 3
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty® 4 - Modern Warfare™
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{E5141379-B2D9-4BBC-BB2A-5805541571DD}" = Call of Duty® 4 - Modern Warfare™ 1.2 Patch
"{E551D82D-4D56-4AF7-A2C9-8897D7A0CB00}" = Autodesk 3ds Max 2010 Tutorials Files
"{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}" = Microsoft SQL Server Compact 3.5 SP1 English
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{E6B87DC4-2B3D-4483-ADFF-E483BF718991}" = OpenOffice.org 3.1
"{EFA0EFE8-247B-4486-8C07-41C19896AD57}" = CyberTracker 3
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F1A14CB2-A048-45A6-AFDA-3571296E1D76}" = Creative Media Toolbox 6
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F5E87B12-3C27-452F-8E78-21D42164FD83}" = Microsoft SQL Server 2008 Management Objects
"{F63A3748-B93D-4360-9AD4-B064481A5C7B}" = Modem Diagnostic Tool
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{F7845703-04EB-4524-B24B-30209318B293}" = Absolute Beginner's Series CS Additional Material
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FB97C283-1F3C-42D4-AE01-ADC1DC12F774}" = Visual Basic for Applications ® Core
"{FC467B61-F890-4E29-8585-365DAB66F13E}" = Pure Networks Platform
"{FC4F90EC-B1DA-11D9-9D77-000129760D75}" = Catalyst Media Center DVD Authoring Module
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FE2C92FC-ECAF-4987-8334-9CCE601C657A}" = Memory-Map
"{FF63121D-91C6-42CC-B341-F1AA729728E7}" = Microsoft Sync Framework 2.0 Core Components (x86) ENU
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"69083DC58646DE46A09847A522A1CC487F918039" = Windows Driver Package - eMPIA Technology Inc, (emAudio) MEDIA (08/31/2007 5.7.0831.0)
"7-Zip" = 7-Zip 4.65
"ActiveTouchMeetingClient" = WebEx
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_3e054d2218e7aa282c2369d939e58ff" = Adobe ExtendScript Toolkit 2
"Adobe_6c8e2cb4fd241c55406016127a6ab2e" = Adobe Color Common Settings
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"Akamai" = Akamai NetSession Interface
"ALchemy X-Fi" = Creative ALchemy (X-Fi Edition)
"Allway Sync_is1" = Allway Sync version 9.4.11
"AnVir Task Manager" = AnVir Task Manager
"ASTRA32_is1" = ASTRA32 - Advanced System Information Tool 2.03
"AutoCAD Civil 3D 2010" = AutoCAD Civil 3D 2010
"AutoCAD Civil 3D 2010 Version 3" = AutoCAD Civil 3D 2010 Version 3
"Autodesk Design Review 2010" = Autodesk Design Review 2010
"Autodesk Express Viewer" = Autodesk Express Viewer
"Autodesk FBX Plugin 2009.4 - 3ds Max 2010" = Autodesk FBX Plugin 2009.4 - 3ds Max 2010
"AVS DVD Copy_is1" = AVS DVD Copy version 1.4
"AVS DVDtoGO ver. 2_is1" = AVS DVD to GO 2 (Beta)
"Bullzip PDF Printer_is1" = Bullzip PDF Printer 6.0.0.741
"Call of Duty" = Call of Duty
"Canon RAW Codec" = Canon RAW Codec
"CCleaner" = CCleaner
"CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1" = Conexant D850 PCI V.92 Modem
"Color Efex Pro 3.0 Complete" = Color Efex Pro 3.0 Complete
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"CoreAAC" = CoreAAC
"Corner-A ArtStudio" = Corner-A ArtStudio
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"CutePDF Writer Installation" = CutePDF Writer 2.7
"Defraggler" = Defraggler
"Dfine 2.0" = Dfine 2.0
"DPP" = Canon Utilities Digital Photo Professional 3.6
"DWG TrueView 2010" = DWG TrueView 2010
"eBay Icon" = eBay Icon
"EOS Utility" = Canon Utilities EOS Utility
"EOS-1D MarkII WIA Driver" = EOS-1D MarkII WIA Driver
"EPSON Printer and Utilities" = EPSON Printer Software
"ERUNT_is1" = ERUNT 1.1j
"Extra DVD Tools_is1" = Extra DVD Tools 6.4
"Fences" = Fences
"FileZilla Client" = FileZilla Client 3.3.0.1
"FormatFactory" = FormatFactory 2.20
"Glary Utilities_is1" = Glary Utilities Pro 2.18.0.786
"GOM ENCODER" = GOM ENCODER
"GOM Player" = GOM Player
"Google Chrome" = Google Chrome
"Google Desktop" = Google Desktop
"GPL Ghostscript Lite_is1" = GPL Ghostscript Lite 8.63
"HDR Darkroom" = HDR Darkroom 1.2 Beta Version
"HijackThis" = HijackThis 2.0.2
"HP iPAQ Setup Assistant" = HP iPAQ Setup Assistant v1.4.9.0
"HydroCAD" = HydroCAD
"Ilium Software eWallet_is1" = eWallet 6.1 Professional Edition (Windows Mobile)
"Ilium Software eWalletImagePack1_is1" = eWallet Image Pack 1 Professional Edition (Windows Mobile)
"Ilium Software FlexWalletIconPack_is1" = FlexWallet Icon Pack Professional Edition (Windows Mobile)
"InstallShield_{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}" = Call of Duty® 4 - Modern Warfare™ 1.3 Patch
"InstallShield_{064DC64E-7A2F-4FDF-B598-E3C0747BBB9C}" = Call of Duty® - World at War™ 1.6 Patch
"InstallShield_{070B66DD-BD59-4F10-AD98-2218B8BEBFBB}" = SlingPlayer Mobile
"InstallShield_{149464D9-B06F-4505-9968-FD1206F67AD3}" = Call of Duty® - World at War™ 1.3 Patch
"InstallShield_{291A772C-FFB9-4681-B720-AB2A0A620896}" = Adobe Reader for Pocket PC 2.0
"InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}" = Call of Duty® - World at War™ 1.2 Patch
"InstallShield_{3BD633E0-4BF8-4499-9149-88F0767D449C}" = Call of Duty® 4 - Modern Warfare™ 1.4 Patch
"InstallShield_{3CBA0E30-6F54-47EF-910E-1D4D450AFE45}" = ATI Multimedia Center 9.16
"InstallShield_{3D08333C-C366-425D-8C2D-D05630D68A46}" = SlingPlayer
"InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"InstallShield_{750C87B8-AF19-4C3C-B791-50D9C83AE572}" = Call of Duty® - World at War™ 1.7 Patch
"InstallShield_{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA nTune
"InstallShield_{8503C901-85D7-4262-88D2-8D8B2A7B08B8}" = Call of Duty® 4 - Modern Warfare™ 1.5 Multiplayer Patch
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty® 4 - Modern Warfare™ 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty® 4 - Modern Warfare™ 1.7 Patch
"InstallShield_{9F01A67B-7D67-482F-9D4F-D5980A440FD4}" = Call of Duty® - World at War™ 1.4 Patch
"InstallShield_{A662E280-64A8-4CF5-8407-13D0808602B3}" = Call of Duty - United Offensive
"InstallShield_{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty® - World at War™ 1.1 Patch
"InstallShield_{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}" = Call of Duty® - World at War™ 1.5 Patch
"InstallShield_{C88E49AA-41C5-4420-A08D-BE1B6C5A3A74}" = DAO
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty® - World at War™
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty® 4 - Modern Warfare™
"InstallShield_{E5141379-B2D9-4BBC-BB2A-5805541571DD}" = Call of Duty® 4 - Modern Warfare™ 1.2 Patch
"Intel® Configuration Center" = Intel® Viiv™ Software
"IPP Run-Time 5.3" = IPP Run-Time 5.3
"Jalbum_0" = Jalbum 8.0
"KLiteCodecPack_is1" = K-Lite Codec Pack 3.5.3 Full
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft Visual C# 2008 Express Edition with SP1 - ENU" = Microsoft Visual C# 2008 Express Edition with SP1 - ENU
"Mozilla Firefox (3.5.6)" = Mozilla Firefox (3.5.6)
"Mozilla Thunderbird (2.0.0.23)" = Mozilla Thunderbird (2.0.0.23)
"NetMeter_is1" = NetMeter 1.1.3
"Network Inventory Advisor" = Network Inventory Advisor 3.5
"Network MagicUninstall" = Network Magic
"novaPDF Standard Desktop 6 printer_is1" = novaPDF Standard Desktop 6.4 printer
"NVIDIA Drivers" = NVIDIA Drivers
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010 (Beta)
"PDFZilla_is1" = PDFZilla V1.2
"PhotoStitch" = Canon Utilities PhotoStitch
"PunkBusterSvc" = PunkBuster Services
"Revo Uninstaller" = Revo Uninstaller 1.85
"SCalculator" = SCalculator
"Sharpener Pro 3.0" = Sharpener Pro 3.0
"Spb Finance" = Spb Finance
"Spb Mobile Shell" = Spb Mobile Shell
"Spyder2PRO" = Spyder2PRO
"Spyder3Print" = Spyder3Print
"SSC Service Utility_is1" = SSC Service Utility v4.30
"StarBurn(GiveAwayOfTheDay)_is1" = StarBurn(GiveAwayOfTheDay) Version 11 (Build 0x20081230)
"SUPER ©" = SUPER © Version 2009.bld.36 (June 10, 2009)
"SysInfo" = Creative System Information
"SystemRequirementsLab" = System Requirements Lab
"ThumbsPlus" = ThumbsPlus
"ThumbsPlus Digicam Plug-in" = ThumbsPlus Digicam Plug-in
"ToolCrib" = ToolCrib
"Totalcmd" = Total Commander (Remove or Repair)
"Uninstaller_B4736000_Creative Media Toolbox 6" = Creative Media Toolbox 6 (Shared Components)
"Viveza" = Viveza
"VLC media player" = VLC media player 1.0.3
"Wacom Tablet Driver" = Wacom Tablet
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinUtilities Free Version" = WinUtilities Free Version 9.1
"Wondershare DemoCreator (Build 2.1.0.7)_is1" = DemoCreator
"Wondershare DVD Ripper Platinum_is1" = Wondershare DVD Ripper Platinum(Build 4.2.0.16)
"Wondershare Flash Slideshow Builder Giveaway Edition_is1" = Wondershare Flash Slideshow Builder Giveaway Edition (4.6.0)
"xplorer2p" = xplorer² professional 32 bit
"XviD_is1" = XviD 1.1 final uninstall
"Yahoo! Mail" = Yahoo! Internet Mail
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update
"Zinio Reader" = Zinio Reader

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Adobe Acrobat Connect Add-in" = Adobe Acrobat Connect Add-in
"CNET TechTracker" = CNET TechTracker
"GoToMeeting" = GoToMeeting 4.0.0.320
"HuluDesktop" = Hulu Desktop

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 12/31/2009 11:07:01 PM | Computer Name = XPS410 | Source = AlertSource | ID = 1
Description =

Error - 1/1/2010 7:52:12 PM | Computer Name = XPS410 | Source = AlertSource | ID = 1
Description =

Error - 1/1/2010 7:53:11 PM | Computer Name = XPS410 | Source = AlertSource | ID = 1
Description =

Error - 1/2/2010 9:19:25 AM | Computer Name = XPS410 | Source = AlertSource | ID = 1
Description =

Error - 1/2/2010 10:45:59 AM | Computer Name = XPS410 | Source = AlertSource | ID = 1
Description =

Error - 1/2/2010 11:11:45 AM | Computer Name = XPS410 | Source = VSS | ID = 8194
Description =

Error - 1/2/2010 11:20:08 AM | Computer Name = XPS410 | Source = AlertSource | ID = 1
Description =

Error - 1/2/2010 11:37:40 AM | Computer Name = XPS410 | Source = AlertSource | ID = 1
Description =

Error - 1/2/2010 11:54:09 AM | Computer Name = XPS410 | Source = AlertSource | ID = 1
Description =

Error - 1/2/2010 12:34:33 PM | Computer Name = XPS410 | Source = Perflib | ID = 1010
Description =

[ IntelDH Events ]
Error - 6/1/2009 12:09:06 PM | Computer Name = XPS410 | Source = CCU_Engine | ID = 15
Description = A CCU internal function detected an error: CCUEngine failed to create
the DataManager

Error - 6/1/2009 12:09:06 PM | Computer Name = XPS410 | Source = TrayIcon | ID = 15
Description = A CCU internal function detected an error: CCU_TrayIcon::Could not
create ICCUEngine interface pointer

Error - 6/1/2009 3:21:45 PM | Computer Name = XPS410 | Source = CCU_Engine | ID = 15
Description = A CCU internal function detected an error: CCUEngine failed to create
the DataManager

Error - 6/1/2009 3:21:45 PM | Computer Name = XPS410 | Source = TrayIcon | ID = 15
Description = A CCU internal function detected an error: CCU_TrayIcon::Could not
create ICCUEngine interface pointer

Error - 6/1/2009 4:07:08 PM | Computer Name = XPS410 | Source = CCU_Engine | ID = 15
Description = A CCU internal function detected an error: CCUEngine failed to create
the DataManager

Error - 6/1/2009 4:07:08 PM | Computer Name = XPS410 | Source = TrayIcon | ID = 15
Description = A CCU internal function detected an error: CCU_TrayIcon::Could not
create ICCUEngine interface pointer

Error - 6/1/2009 4:26:27 PM | Computer Name = XPS410 | Source = CCU_Engine | ID = 15
Description = A CCU internal function detected an error: CCUEngine failed to create
the DataManager

Error - 6/1/2009 4:26:27 PM | Computer Name = XPS410 | Source = TrayIcon | ID = 15
Description = A CCU internal function detected an error: CCU_TrayIcon::Could not
create ICCUEngine interface pointer

Error - 6/3/2009 5:42:50 PM | Computer Name = XPS410 | Source = CCU_Engine | ID = 15
Description = A CCU internal function detected an error: CCUEngine failed to create
the DataManager

Error - 6/3/2009 5:42:50 PM | Computer Name = XPS410 | Source = TrayIcon | ID = 15
Description = A CCU internal function detected an error: CCU_TrayIcon::Could not
create ICCUEngine interface pointer

[ Media Center Events ]
Error - 10/19/2007 9:53:27 PM | Computer Name = XPS410 | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 10/20/2007 5:39:12 PM | Computer Name = XPS410 | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 10/23/2007 1:38:48 AM | Computer Name = XPS410 | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 10/23/2007 7:48:22 PM | Computer Name = XPS410 | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 10/31/2007 11:49:27 PM | Computer Name = XPS410 | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 5/29/2008 7:57:10 PM | Computer Name = XPS410 | Source = Recording | ID = 19
Description = The recording schedule has been corrupted and was automatically deleted
on 05/29/2008 19:57:09. You may need to reschedule your recordings.

Error - 4/21/2009 8:41:59 PM | Computer Name = XPS410 | Source = ehRecvr | ID = 4
Description =

Error - 4/21/2009 9:47:15 PM | Computer Name = XPS410 | Source = ehRecvr | ID = 4
Description =

Error - 11/16/2009 6:01:17 PM | Computer Name = XPS410 | Source = ehRecvr | ID = 3
Description =

Error - 11/22/2009 9:28:12 AM | Computer Name = XPS410 | Source = ehRecvr | ID = 4
Description =

[ System Events ]
Error - 1/2/2010 11:16:28 AM | Computer Name = XPS410 | Source = volmgr | ID = 262190
Description = Crash dump initialization failed!

Error - 1/2/2010 11:19:08 AM | Computer Name = XPS410 | Source = Service Control Manager | ID = 7022
Description =

Error - 1/2/2010 11:19:09 AM | Computer Name = XPS410 | Source = Service Control Manager | ID = 7001
Description =

Error - 1/2/2010 11:19:10 AM | Computer Name = XPS410 | Source = Service Control Manager | ID = 7001
Description =

Error - 1/2/2010 11:32:13 AM | Computer Name = XPS410 | Source = Service Control Manager | ID = 7034
Description =

Error - 1/2/2010 11:34:07 AM | Computer Name = XPS410 | Source = volmgr | ID = 262190
Description = Crash dump initialization failed!

Error - 1/2/2010 11:34:15 AM | Computer Name = XPS410 | Source = volmgr | ID = 262190
Description = Crash dump initialization failed!

Error - 1/2/2010 11:36:39 AM | Computer Name = XPS410 | Source = Service Control Manager | ID = 7022
Description =

Error - 1/2/2010 11:36:39 AM | Computer Name = XPS410 | Source = Service Control Manager | ID = 7001
Description =

Error - 1/2/2010 11:36:40 AM | Computer Name = XPS410 | Source = Service Control Manager | ID = 7001
Description =


< End of report >

Edited by Jake_Speed, 02 January 2010 - 03:29 PM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP