OTL logfile created on: 2/3/2010 8:27:04 AM - Run 1
OTL by OldTimer - Version 3.1.27.1 Folder = C:\Documents and Settings\Shawn\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
959.00 Mb Total Physical Memory | 369.00 Mb Available Physical Memory | 38.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 59.00% Paging File free
Paging file location(s): C:\pagefile.sys 1440 2880 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149.05 Gb Total Space | 88.98 Gb Free Space | 59.70% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 19.13 Gb Total Space | 14.60 Gb Free Space | 76.32% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive Z: | 298.09 Gb Total Space | 10.98 Gb Free Space | 3.68% Space Free | Partition Type: NTFS
Computer Name: SHAWNLLOYD
Current User Name: Shawn
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ========== PRC - C:\Documents and Settings\Shawn\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Documents and Settings\Shawn\Desktop\Xenomorph_slim.exe ()
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\McAfee\VirusScan\Mcshield.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\MPF\MpfSrv.exe (McAfee, Inc.)
PRC - C:\Program Files\PeerBlock\peerblock.exe (PeerBlock, LLC)
PRC - C:\WINDOWS\system32\ZuneBusEnum.exe (Microsoft Corporation)
PRC - c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\cmd.exe (Microsoft Corporation)
PRC - C:\Program Files\a-squared Free\a2service.exe (Emsi Software GmbH)
PRC - C:\Program Files\Lexmark 4800 Series\lxdemon.exe ()
PRC - C:\Program Files\Lexmark 4800 Series\lxdeamon.exe ()
PRC - C:\WINDOWS\system32\lxdecoms.exe ( )
PRC - C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe (Linksys, a Division of Cisco Systems, Inc.)
PRC - C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
PRC - C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe (Stardock)
PRC - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe (Autodesk, Inc.)
PRC - C:\Program Files\Google\Gmail Notifier\gnotify.exe (Google Inc.)
PRC - C:\Program Files\AlienGUIse\wbload.exe (Stardock Systems, Inc)
PRC - C:\Program Files\Saitek\Software\Profiler.exe (Saitek)
PRC - C:\Program Files\eMachines Bay Reader\shwiconEM.exe (Alcor Micro, Corp.)
PRC - C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
PRC - C:\Program Files\Ahead\InCD\incdsrv.exe (AHEAD Software)
PRC - C:\WINDOWS\zHotkey.exe (Chicony)
PRC - C:\WINDOWS\system32\wbem\unsecapp.exe (Microsoft Corporation)
========== Modules (SafeList) ========== MOD - C:\WINDOWS\system32\midirude.dll ()
MOD - C:\WINDOWS\system32\pizureke.dll ()
MOD - C:\Documents and Settings\Shawn\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\AlienGUIse\wblind.dll (Stardock.Net, Inc)
MOD - C:\Program Files\AlienGUIse\AlienwareDock\DockShellHookOEM.dll ()
MOD - C:\WINDOWS\system32\wbsys.dll (Stardock.Net, Inc)
MOD - C:\Program Files\AlienGUIse\wbhelp.dll (Stardock.Net, Inc)
========== Win32 Services (SafeList) ========== SRV - (FLEXnet Licensing Service) -- File not found
SRV - (AOL ACS) -- File not found
SRV - (Adobe LM Service) -- C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe ()
SRV - (Lavasoft Ad-Aware Service) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (McShield) -- C:\Program Files\McAfee\VirusScan\Mcshield.exe (McAfee, Inc.)
SRV - (McSysmon) -- C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
SRV - (mcmscsvc) -- C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
SRV - (McODS) -- C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (MpfService) -- C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
SRV - (getPlusHelper) getPlus® -- C:\Program Files\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.)
SRV - (ZuneWlanCfgSvc) -- C:\WINDOWS\system32\ZuneWlanCfgSvc.exe (Microsoft Corporation)
SRV - (ZuneNetworkSvc) -- C:\Program Files\Zune\ZuneNss.exe (Microsoft Corporation)
SRV - (ZuneBusEnum) -- C:\WINDOWS\system32\ZuneBusEnum.exe (Microsoft Corporation)
SRV - (MBackMonitor) -- C:\Program Files\McAfee\MBK\MBackMonitor.exe (McAfee)
SRV - (McProxy) -- c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
SRV - (McNASvc) -- c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
SRV - (odserv) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (a2free) -- C:\Program Files\a-squared Free\a2service.exe (Emsi Software GmbH)
SRV - (WLSetupSvc) -- C:\Program Files\Windows Live\installer\WLSetupSvc.exe (Microsoft Corporation)
SRV - (lxde_device) -- C:\WINDOWS\System32\lxdecoms.exe ( )
SRV - (Viewpoint Manager Service) -- C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV - (ose) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (Autodesk Licensing Service) -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe (Autodesk, Inc.)
SRV - (NVSvc) -- C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
SRV - (InCDsrv) -- C:\Program Files\Ahead\InCD\incdsrv.exe (AHEAD Software)
========== Driver Services (SafeList) ========== DRV - (Lbd) -- C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (mfehidk) -- C:\WINDOWS\system32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mfeavfk) -- C:\WINDOWS\system32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfesmfk) -- C:\WINDOWS\system32\drivers\mfesmfk.sys (McAfee, Inc.)
DRV - (mfebopk) -- C:\WINDOWS\system32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (mferkdk) -- C:\WINDOWS\system32\drivers\mferkdk.sys (McAfee, Inc.)
DRV - (pbfilter) -- C:\Program Files\PeerBlock\pbfilter.sys ()
DRV - (zumbus) -- C:\WINDOWS\system32\drivers\zumbus.sys (Microsoft Corporation)
DRV - (MPFP) -- C:\WINDOWS\system32\drivers\Mpfp.sys (McAfee, Inc.)
DRV - (amdagp) -- C:\WINDOWS\System32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (sisagp) -- C:\WINDOWS\System32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (SCDEmu) -- C:\WINDOWS\system32\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV - (Secdrv) -- C:\WINDOWS\system32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (elagopro) -- C:\WINDOWS\system32\drivers\elagopro.sys (Gteko Ltd.)
DRV - (elaunidr) -- C:\WINDOWS\system32\drivers\elaunidr.sys (Gteko Ltd.)
DRV - (WinUSB) -- C:\WINDOWS\system32\drivers\winusb.sys (Microsoft Corporation)
DRV - (CdaC15BA) -- C:\WINDOWS\system32\drivers\CdaC15BA.SYS (Macrovision Europe Ltd)
DRV - (vgadrv) -- C:\WINDOWS\system32\drivers\vgadrv.sys ()
DRV - (PxHelp20) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (SVKP) -- C:\WINDOWS\system32\SVKP.sys (AntiCracking)
DRV - (viamraid) -- C:\WINDOWS\system32\DRIVERS\viamraid.sys (VIA Technologies inc,.ltd)
DRV - (SaiNtBus) -- C:\WINDOWS\system32\drivers\SaiNtBus.sys (Saitek)
DRV - (SaiMini) -- C:\WINDOWS\system32\drivers\SaiMini.sys (Saitek)
DRV - (SaiHFF0C) -- C:\WINDOWS\system32\drivers\SaiHFF0C.sys (Saitek)
DRV - (SaiUFF0C) -- C:\WINDOWS\system32\drivers\saiuFF0C.sys (Saitek)
DRV - (Jukebox3) -- C:\WINDOWS\system32\drivers\ctpdusb.sys (Creative Technology Ltd.)
DRV - (pfc) -- C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (SunkFilt39) -- C:\WINDOWS\system32\drivers\Sunkfilt39.sys (Alcor Micro Corp.)
DRV - (SunkFilt) -- C:\WINDOWS\system32\drivers\Sunkfilt.sys (Alcor Micro Corp.)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (mdmxsdk) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys (Conexant)
DRV - (InCDPass) -- C:\WINDOWS\system32\drivers\incdpass.sys (Ahead Software)
DRV - (InCDfs) -- C:\WINDOWS\system32\drivers\incdfs.sys (Ahead Software)
DRV - (HSFHWBS2) -- C:\WINDOWS\system32\drivers\HSFHWBS2.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) -- C:\WINDOWS\system32\drivers\HSF_DP.sys (Conexant Systems, Inc.)
DRV - (nvnforce) Service for NVIDIA® nForce -- C:\WINDOWS\system32\drivers\nvapu.sys (NVIDIA Corporation)
DRV - (nvax) Service for NVIDIA® nForce -- C:\WINDOWS\system32\drivers\nvax.sys (NVIDIA Corporation)
DRV - (NVENET) -- C:\WINDOWS\system32\drivers\NVENET.sys (NVIDIA Corporation)
DRV - (dac2w2k) -- C:\WINDOWS\System32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (ql1280) -- C:\WINDOWS\System32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (ql12160) -- C:\WINDOWS\System32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1080) -- C:\WINDOWS\System32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ultra) -- C:\WINDOWS\System32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (symc8xx) -- C:\WINDOWS\System32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (sym_u3) -- C:\WINDOWS\System32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (sym_hi) -- C:\WINDOWS\System32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (asc) -- C:\WINDOWS\System32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (Sparrow) -- C:\WINDOWS\System32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (Ptilink) -- C:\WINDOWS\system32\drivers\ptilink.sys (Parallel Technologies, Inc.)
DRV - (mraid35x) -- C:\WINDOWS\System32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (symc810) -- C:\WINDOWS\System32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (asc3550) -- C:\WINDOWS\System32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (CmdIde) -- C:\WINDOWS\System32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (AliIde) -- C:\WINDOWS\System32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (nv_agp) -- C:\WINDOWS\System32\DRIVERS\nv_agp.sys (NVIDIA Corporation)
DRV - (SONYPVU1) Sony USB Filter Driver (SONYPVU1) -- C:\WINDOWS\system32\drivers\SONYPVU1.SYS (Sony Corporation)
DRV - (mxnic) -- C:\WINDOWS\system32\drivers\mxnic.sys (Macronix International Co., Ltd. )
DRV - (Aspi32) -- C:\WINDOWS\system32\drivers\aspi32.sys (Adaptec)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://home.peoplepc.com/search IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com/IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - prefs.js..browser.startup.homepage: "
http://www.google.co...en&source=iglk" FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/22 12:31:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/22 12:31:56 | 000,000,000 | ---D | M]
[2009/10/03 20:49:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Mozilla\Extensions
[2010/02/01 22:15:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Mozilla\Firefox\Profiles\ibgxdb5f.default\extensions
[2010/01/12 19:34:05 | 000,000,000 | ---D | M] (Dafizilla ViewSourceWith) -- C:\Documents and Settings\Shawn\Application Data\Mozilla\Firefox\Profiles\ibgxdb5f.default\extensions\{eecba28f-b68b-4b3a-b501-6ce12e6b8696}(2)
[2010/01/12 19:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Shawn\Application Data\Mozilla\Firefox\Profiles\ibgxdb5f.default\extensions\{eecba28f-b68b-4b3a-b501-6ce12e6b8696}-trash
[2010/01/15 17:56:34 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2007/04/16 09:07:12 | 000,180,293 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
O1 HOSTS File: ([2009/09/29 20:38:18 | 000,000,727 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O4 - HKLM..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe (Google Inc.)
O4 - HKLM..\Run: [bomuwonaw] C:\WINDOWS\System32\midirude.DLL ()
O4 - HKLM..\Run: [CHotkey] C:\WINDOWS\zHotkey.exe (Chicony)
O4 - HKLM..\Run: [lxdeamon] C:\Program Files\Lexmark 4800 Series\lxdeamon.exe ()
O4 - HKLM..\Run: [lxdemon.exe] C:\Program Files\Lexmark 4800 Series\lxdemon.exe ()
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [nForce Tray Options] C:\WINDOWS\System32\sstray.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [SunKistEM] C:\Program Files\eMachines Bay Reader\shwiconEM.exe (Alcor Micro, Corp.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [EasyLinkAdvisor] C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe (Linksys, a Division of Cisco Systems, Inc.)
O4 - HKCU..\Run: [PeerBlock] C:\Program Files\PeerBlock\peerblock.exe (PeerBlock, LLC)
O4 - Startup: C:\Documents and Settings\Shawn\Start Menu\Programs\Startup\Alienware Dock.lnk = C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe (Stardock)
O4 - Startup: C:\Documents and Settings\Shawn\Start Menu\Programs\Startup\AutoPlay.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O12 - Plugin for: .spop - Reg Error: Value error. File not found
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.87.69.150 68.87.85.102
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (pizureke.dll) - C:\WINDOWS\System32\pizureke.dll ()
O20 - AppInit_DLLs: (c:\windows\system32\babeleso.dll) - C:\WINDOWS\System32\babeleso.dll File not found
O20 - AppInit_DLLs: (wbsys.dll) - C:\WINDOWS\System32\wbsys.dll (Stardock.Net, Inc)
O20 - AppInit_DLLs: (c:\windows\system32\midirude.dll) - C:\WINDOWS\system32\midirude.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (C:\WINDOWS\system32\logonuiX.exe) - C:\WINDOWS\system32\logonuiX.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WB: DllName - C:\Program Files\AlienGUIse\fastload.dll - C:\Program Files\AlienGUIse\fastload.dll (Stardock)
O20 - Winlogon\Notify\WRNotifier: DllName - WRLogonNTF.dll - File not found
O20 - Winlogon\Notify\xxyVpQHB: DllName - xxyVpQHB.dll - File not found
O21 - SSODL: 0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC} - CLSID or File not found.
O21 - SSODL: girusahuf - {b4b91d17-fa01-4690-a808-d061922a375c} - CLSID or File not found.
O21 - SSODL: horabenet - {83ee1e2d-8257-418b-aa7b-181d6adb9d4a} - C:\WINDOWS\System32\babeleso.dll File not found
O21 - SSODL: lumuralul - {70821703-13e1-43fa-9d4b-18c1c9699d49} - CLSID or File not found.
O21 - SSODL: revibuluj - {f3a8251a-3e1e-4f05-bae9-c9b3e2b1b804} - CLSID or File not found.
O21 - SSODL: vetimulov - {24046b25-183b-4cfe-813f-bb6407c90a5f} - CLSID or File not found.
O21 - SSODL: zupejazud - {57397580-2b29-4719-a320-79241e951af6} - C:\WINDOWS\system32\midirude.dll ()
O22 - SharedTaskScheduler: {24046b25-183b-4cfe-813f-bb6407c90a5f} - mujuzedij - Reg Error: Key error. File not found
O22 - SharedTaskScheduler: {57397580-2b29-4719-a320-79241e951af6} - kupuhivus - C:\WINDOWS\system32\midirude.dll ()
O22 - SharedTaskScheduler: {70821703-13e1-43fa-9d4b-18c1c9699d49} - kupuhivus - Reg Error: Key error. File not found
O22 - SharedTaskScheduler: {83ee1e2d-8257-418b-aa7b-181d6adb9d4a} - jugezatag - C:\WINDOWS\System32\babeleso.dll File not found
O22 - SharedTaskScheduler: {b4b91d17-fa01-4690-a808-d061922a375c} - gahurihor - Reg Error: Key error. File not found
O22 - SharedTaskScheduler: {f3a8251a-3e1e-4f05-bae9-c9b3e2b1b804} - mujuzedij - Reg Error: Key error. File not found
O24 - Desktop WallPaper: C:\Documents and Settings\Shawn\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Shawn\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {24E9519B-3F70-429B-99BC-4B2B49B96F66} - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/05/01 09:54:27 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2005/05/11 17:34:50 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (SsiEfr.e) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - C:\WINDOWS\system32\ias [2004/05/07 14:10:15 | 000,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: Wmi - C:\WINDOWS\system32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 2
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 0
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: Lavasoft Ad-Aware Service - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SafeBootMin: mcmscsvc - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
SafeBootMin: MCODS - C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: Lavasoft Ad-Aware Service - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SafeBootNet: mcmscsvc - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
SafeBootNet: MCODS - C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SafeBootNet: MpfService - C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: UploadMgr - Service
SafeBootNet: vga.sys - Driver
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
ActiveX: {00876589-E4E1-9BC5-EDDE-88E268B9926D} - Microsoft Windows Media Player 6.4
ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML)
ActiveX: {1501B169-DF40-D177-8C84-AE52BF1DDA60} - Dynamic HTML Data Binding for Java
ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {31FBFD6F-766C-3882-6FBD-9154E9CC525D} - Dynamic HTML Data Binding for Java
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML Data Binding for Java
ActiveX: {377483c2-e4b4-4ee8-b577-9aed264c8735} - Q822925
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Advanced Authoring
ActiveX: {43FC83B1-2578-4E20-A2CB-E7F53E06979E} - Internet Explorer
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5f3c70b3-ac2f-432c-8f9c-1624df61f54f} - Microsoft Data Access Components KB870669
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {689e5762-8d75-4346-90cf-bc1902c32d63} - KB896688
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {795d0712-722c-43ec-906a-fc5e678eada9} - Q831167
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
ActiveX: {8ade8c02-8da6-4ec1-a9ee-ec00ff73ce98} - Internet Explorer Q903235
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {A84903B2-B681-9478-A2BF-820D20B021B3} - DirectX
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Task Scheduler
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {CF1F8197-9D98-C957-5FC9-00B674369EFA} - Windows Media Player
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D} - Microsoft .NET Framework 1.1 Security Update (KB953297)
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.siren - C:\WINDOWS\System32\sirenacm.dll (Microsoft Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (0)
========== Files/Folders - Created Within 30 Days ========== [2010/02/03 08:24:11 | 000,548,864 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Shawn\Desktop\OTL.exe
[2010/02/02 21:53:19 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/02/02 21:52:55 | 000,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\Shawn\Desktop\HJTInstall.exe
[2010/02/02 21:39:16 | 000,000,000 | ---D | C] -- C:\VundoFix Backups
[2010/02/02 21:37:56 | 000,119,808 | ---- | C] (Atribune.org) -- C:\Documents and Settings\Shawn\Desktop\VundoFix.exe
[2010/02/02 19:47:40 | 000,000,000 | ---D | C] -- C:\Program Files\AutoCAD 2005
[2010/02/02 19:24:52 | 000,136,312 | ---- | C] (Autodesk) -- C:\WINDOWS\System32\AcSignIcon.dll
[2010/02/02 18:33:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Shawn\Application Data\Aim
[2010/02/01 21:52:10 | 000,000,000 | ---D | C] -- C:\Program Files\TrendMicro
[2010/01/31 22:02:47 | 000,035,824 | ---- | C] (Curio Laboratories) -- C:\Documents and Settings\Shawn\Desktop\RemoveOnRebootSetup.exe
[2010/01/31 11:24:59 | 000,000,000 | ---D | C] -- C:\Program Files\PeerBlock
[2010/01/31 11:07:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Shawn\My Documents\Logs
[2010/01/31 11:04:12 | 000,064,288 | ---- | C] (Lavasoft AB) -- C:\WINDOWS\System32\drivers\Lbd.sys
[2010/01/31 11:00:02 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
[2010/01/31 10:58:58 | 000,000,000 | ---D | C] -- C:\Program Files\Lavasoft
[2010/01/31 10:58:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Lavasoft
[2010/01/31 10:47:48 | 000,000,000 | ---D | C] -- C:\logs
[2010/01/28 10:59:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Shawn\Desktop\Lloyd's
[2010/01/25 19:26:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Shawn\My Documents\My Webs
[2010/01/22 12:54:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Shawn\My Documents\New Folder (3)
[2010/01/12 21:20:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Shawn\Local Settings\Application Data\ApplicationHistory
[2010/01/12 21:17:17 | 000,079,816 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfeavfk.sys
[2010/01/12 21:17:17 | 000,040,552 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfesmfk.sys
[2010/01/12 21:17:17 | 000,035,272 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mfebopk.sys
[2010/01/12 21:17:06 | 000,120,136 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\Mpfp.sys
[2010/01/12 21:13:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\McAfee
[2010/01/12 21:08:25 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee.com
[2010/01/12 20:57:05 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee
[2010/01/12 20:48:26 | 000,034,248 | ---- | C] (McAfee, Inc.) -- C:\WINDOWS\System32\drivers\mferkdk.sys
[2010/01/12 19:48:05 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll
[2010/01/12 19:16:37 | 000,000,000 | ---D | C] -- C:\Program Files\Malware Defense
[2010/01/12 15:44:00 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Shawn\PrivacIE
[2010/01/12 15:43:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Shawn\Local Settings\Application Data\AskToolbar
[2009/10/14 18:26:36 | 000,434,176 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdehcp.dll
[2009/10/14 18:26:36 | 000,356,352 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeinpa.dll
[2009/10/14 18:26:36 | 000,339,968 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeiesc.dll
[2009/10/14 18:26:35 | 001,200,128 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeserv.dll
[2009/10/14 18:26:35 | 000,950,272 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeusb1.dll
[2009/10/14 18:26:34 | 000,647,168 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdepmui.dll
[2009/10/14 18:26:34 | 000,565,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdelmpm.dll
[2009/10/14 18:26:34 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdeprox.dll
[2009/10/14 18:26:33 | 000,663,552 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdehbn3.dll
[2009/10/14 18:26:31 | 000,860,160 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdecomc.dll
[2009/10/14 18:26:31 | 000,364,544 | ---- | C] ( ) -- C:\WINDOWS\System32\lxdecomm.dll
[2007/02/08 01:43:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\PCHealth
[2007/01/06 14:00:09 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2006/03/06 21:02:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Webroot
[2005/12/08 07:03:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2004/05/07 14:11:15 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2004/05/07 14:11:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft
========== Files - Modified Within 30 Days ========== [2099/01/01 12:00:00 | 000,096,256 | -HS- | M] () -- C:\WINDOWS\System32\tetahezi.dll
[2099/01/01 12:00:00 | 000,094,720 | -HS- | M] () -- C:\WINDOWS\System32\midirude.dll
[2099/01/01 12:00:00 | 000,053,248 | -HS- | M] () -- C:\WINDOWS\System32\vukahesu.dll
[2099/01/01 12:00:00 | 000,053,248 | -HS- | M] () -- C:\WINDOWS\System32\pizureke.dll
[2099/01/01 12:00:00 | 000,053,248 | -HS- | M] () -- C:\WINDOWS\System32\kogitema.dll
[2099/01/01 12:00:00 | 000,053,248 | -HS- | M] () -- C:\WINDOWS\System32\fanokogu.dll
[2099/01/01 12:00:00 | 000,043,008 | -HS- | M] () -- C:\WINDOWS\System32\pisiwufu.dll
[2099/01/01 12:00:00 | 000,042,496 | -HS- | M] () -- C:\WINDOWS\System32\nanawigi.dll
[2099/01/01 12:00:00 | 000,040,960 | -HS- | M] () -- C:\WINDOWS\System32\dolivowa.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | M] () -- C:\WINDOWS\System32\vedogido.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | M] () -- C:\WINDOWS\System32\sosagatu.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | M] () -- C:\WINDOWS\System32\kazarige.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | M] () -- C:\WINDOWS\System32\jopumeti.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | M] () -- C:\WINDOWS\System32\jokilake.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | M] () -- C:\WINDOWS\System32\huwuzewu.dll
[2010/02/03 08:30:31 | 000,006,456 | -H-- | M] () -- C:\WINDOWS\System32\luruwala
[2010/02/03 08:24:14 | 000,548,864 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Shawn\Desktop\OTL.exe
[2010/02/03 08:19:30 | 000,012,749 | ---- | M] () -- C:\WINDOWS\System32\Config.MPF
[2010/02/03 08:15:01 | 000,000,290 | -H-- | M] () -- C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
[2010/02/03 08:02:01 | 000,000,240 | -H-- | M] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/02/03 05:04:02 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010/02/03 02:32:40 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/02/03 02:32:35 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010/02/03 02:32:34 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010/02/03 02:32:30 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010/02/02 21:53:20 | 000,001,750 | ---- | M] () -- C:\Documents and Settings\Shawn\Desktop\HiJackThis.lnk
[2010/02/02 21:52:56 | 000,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Shawn\Desktop\HJTInstall.exe
[2010/02/02 21:52:25 | 000,149,520 | ---- | M] () -- C:\Documents and Settings\Shawn\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/02/02 21:37:59 | 000,119,808 | ---- | M] (Atribune.org) -- C:\Documents and Settings\Shawn\Desktop\VundoFix.exe
[2010/02/02 19:24:28 | 005,505,024 | -H-- | M] () -- C:\Documents and Settings\Shawn\NTUSER.DAT
[2010/02/02 19:19:04 | 000,000,878 | ---- | M] () -- C:\Documents and Settings\Shawn\Start Menu\Programs\Startup\Alienware Dock.lnk
[2010/02/02 19:10:51 | 000,001,552 | ---- | M] () -- C:\Documents and Settings\Shawn\Desktop\AlienGUIse.lnk
[2010/02/02 19:10:29 | 000,000,056 | ---- | M] () -- C:\WINDOWS\wb.ini
[2010/02/02 19:10:00 | 039,629,592 | ---- | M] () -- C:\Documents and Settings\Shawn\Desktop\Xenomorph_slim.exe
[2010/02/02 19:01:04 | 000,015,244 | ---- | M] () -- C:\Documents and Settings\Shawn\Desktop\topoc.jpg
[2010/02/02 19:00:01 | 000,000,294 | ---- | M] () -- C:\WINDOWS\tasks\kczqcixl.job
[2010/02/02 18:53:35 | 000,001,742 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Audition 1.5.lnk
[2010/02/02 18:23:46 | 000,001,170 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/02/02 18:22:41 | 000,003,731 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010/02/02 18:22:28 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/02/02 18:22:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/02/02 18:22:16 | 1006,161,920 | -HS- | M] () -- C:\hiberfil.sys
[2010/02/01 23:02:25 | 000,000,049 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/02/01 22:00:24 | 000,025,600 | ---- | M] () -- C:\Documents and Settings\Shawn\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/02/01 21:51:00 | 001,401,344 | ---- | M] () -- C:\Documents and Settings\Shawn\Desktop\HijackThis.msi
[2010/02/01 20:05:03 | 000,011,199 | ---- | M] () -- C:\Documents and Settings\Shawn\My Documents\Shawn Lloyd Services.docx
[2010/02/01 19:38:13 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\Shawn\My Documents\~$awn Lloyd Services.docx
[2010/02/01 19:16:41 | 001,738,696 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/02/01 11:21:44 | 000,030,817 | ---- | M] () -- C:\Documents and Settings\Shawn\Desktop\Landscaping.docx
[2010/02/01 01:02:37 | 000,000,318 | ---- | M] () -- C:\WINDOWS\tasks\McQcTask.job
[2010/01/31 22:02:49 | 000,035,824 | ---- | M] (Curio Laboratories) -- C:\Documents and Settings\Shawn\Desktop\RemoveOnRebootSetup.exe
[2010/01/31 11:03:55 | 000,015,880 | ---- | M] () -- C:\WINDOWS\System32\lsdelete.exe
[2010/01/31 10:59:58 | 000,000,877 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/01/31 09:21:06 | 005,049,094 | ---- | M] () -- C:\Documents and Settings\Shawn\Desktop\Untitled-1.psd
[2010/01/30 12:10:38 | 000,000,205 | ---- | M] () -- C:\Documents and Settings\Shawn\Desktop\styles.css
[2010/01/30 11:47:16 | 000,001,097 | -H-- | M] () -- C:\net_save.dna
[2010/01/30 11:44:37 | 002,746,496 | ---- | M] () -- C:\Documents and Settings\Shawn\Desktop\Ryashon-Mortal Kombat (Theme Cover).mp3
[2010/01/29 22:20:56 | 016,149,473 | ---- | M] () -- C:\Documents and Settings\Shawn\Desktop\Clouds_II_Photoshop_Brushes_by_redheadstock.zip
[2010/01/21 21:24:40 | 000,010,288 | ---- | M] () -- C:\Documents and Settings\Shawn\My Documents\To whom my concern.docx
[2010/01/15 17:56:37 | 000,001,612 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/01/15 01:59:00 | 000,000,340 | ---- | M] () -- C:\WINDOWS\tasks\McDefragTask.job
[2010/01/14 11:12:06 | 000,181,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2010/01/12 21:21:21 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\McAfee Security Center.lnk
[2010/01/12 21:21:06 | 000,000,128 | ---- | M] () -- C:\Documents and Settings\Shawn\Local Settings\Application Data\fusioncache.dat
[2010/01/12 19:14:26 | 000,000,524 | ---- | M] () -- C:\WINDOWS\System32\h8srtshsyst.dll
[2010/01/12 16:16:29 | 000,000,245 | ---- | M] () -- C:\WINDOWS\System32\H8SRTbukhnxornp.dat
[2010/01/12 16:16:01 | 000,000,928 | ---- | M] () -- C:\WINDOWS\System32\h8srtkrl32mainweq.dll
[2010/01/10 18:47:56 | 000,658,244 | ---- | M] () -- C:\Documents and Settings\Shawn\My Documents\Untitled-1.psd
========== Files Created - No Company Name ========== [2099/01/01 12:00:00 | 000,096,256 | -HS- | C] () -- C:\WINDOWS\System32\tetahezi.dll
[2099/01/01 12:00:00 | 000,094,720 | -HS- | C] () -- C:\WINDOWS\System32\midirude.dll
[2099/01/01 12:00:00 | 000,053,248 | -HS- | C] () -- C:\WINDOWS\System32\vukahesu.dll
[2099/01/01 12:00:00 | 000,053,248 | -HS- | C] () -- C:\WINDOWS\System32\pizureke.dll
[2099/01/01 12:00:00 | 000,053,248 | -HS- | C] () -- C:\WINDOWS\System32\kogitema.dll
[2099/01/01 12:00:00 | 000,053,248 | -HS- | C] () -- C:\WINDOWS\System32\fanokogu.dll
[2099/01/01 12:00:00 | 000,043,008 | -HS- | C] () -- C:\WINDOWS\System32\pisiwufu.dll
[2099/01/01 12:00:00 | 000,042,496 | -HS- | C] () -- C:\WINDOWS\System32\nanawigi.dll
[2099/01/01 12:00:00 | 000,040,960 | -HS- | C] () -- C:\WINDOWS\System32\dolivowa.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | C] () -- C:\WINDOWS\System32\vedogido.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | C] () -- C:\WINDOWS\System32\sosagatu.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | C] () -- C:\WINDOWS\System32\kazarige.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | C] () -- C:\WINDOWS\System32\jopumeti.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | C] () -- C:\WINDOWS\System32\jokilake.dll
[2099/01/01 12:00:00 | 000,039,424 | -HS- | C] () -- C:\WINDOWS\System32\huwuzewu.dll
[2099/01/01 12:00:00 | 000,006,456 | -H-- | C] () -- C:\WINDOWS\System32\luruwala
[2010/02/02 19:48:18 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/02/02 19:19:03 | 000,000,878 | ---- | C] () -- C:\Documents and Settings\Shawn\Start Menu\Programs\Startup\Alienware Dock.lnk
[2010/02/02 19:10:51 | 000,001,552 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\AlienGUIse.lnk
[2010/02/02 19:10:29 | 000,000,056 | ---- | C] () -- C:\WINDOWS\wb.ini
[2010/02/02 19:08:47 | 039,629,592 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\Xenomorph_slim.exe
[2010/02/02 19:01:04 | 000,015,244 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\topoc.jpg
[2010/02/02 18:53:35 | 000,001,742 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Audition 1.5.lnk
[2010/02/02 18:26:30 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010/02/01 21:52:16 | 000,001,750 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\HiJackThis.lnk
[2010/02/01 21:50:55 | 001,401,344 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\HijackThis.msi
[2010/02/01 19:38:13 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\Shawn\My Documents\~$awn Lloyd Services.docx
[2010/02/01 19:38:12 | 000,011,199 | ---- | C] () -- C:\Documents and Settings\Shawn\My Documents\Shawn Lloyd Services.docx
[2010/02/01 11:21:31 | 000,030,817 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\Landscaping.docx
[2010/01/31 21:35:14 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010/01/31 21:35:10 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010/01/31 12:05:01 | 000,015,880 | ---- | C] () -- C:\WINDOWS\System32\lsdelete.exe
[2010/01/31 11:05:10 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010/01/31 10:59:58 | 000,000,877 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2010/01/31 09:23:07 | 000,000,294 | ---- | C] () -- C:\WINDOWS\tasks\kczqcixl.job
[2010/01/31 09:20:52 | 005,049,094 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\Untitled-1.psd
[2010/01/30 12:10:38 | 000,000,205 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\styles.css
[2010/01/29 22:19:10 | 016,149,473 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\Clouds_II_Photoshop_Brushes_by_redheadstock.zip
[2010/01/29 21:37:24 | 002,746,496 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\Ryashon-Mortal Kombat (Theme Cover).mp3
[2010/01/21 21:24:32 | 000,010,288 | ---- | C] () -- C:\Documents and Settings\Shawn\My Documents\To whom my concern.docx
[2010/01/15 17:56:37 | 000,001,612 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/01/13 12:53:30 | 000,001,673 | ---- | C] () -- C:\Documents and Settings\Shawn\Desktop\CuteFTP 8 Professional.lnk
[2010/01/12 21:22:47 | 000,012,749 | ---- | C] () -- C:\WINDOWS\System32\Config.MPF
[2010/01/12 21:21:21 | 000,000,681 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\McAfee Security Center.lnk
[2010/01/12 21:21:06 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Shawn\Local Settings\Application Data\fusioncache.dat
[2010/01/12 21:16:09 | 000,000,340 | ---- | C] () -- C:\WINDOWS\tasks\McDefragTask.job
[2010/01/12 21:16:06 | 000,000,318 | ---- | C] () -- C:\WINDOWS\tasks\McQcTask.job
[2010/01/12 16:16:14 | 000,000,524 | ---- | C] () -- C:\WINDOWS\System32\h8srtshsyst.dll
[2010/01/12 15:48:26 | 000,000,928 | ---- | C] () -- C:\WINDOWS\System32\h8srtkrl32mainweq.dll
[2010/01/12 15:47:12 | 000,000,245 | ---- | C] () -- C:\WINDOWS\System32\H8SRTbukhnxornp.dat
[2010/01/12 13:44:48 | 000,000,290 | -H-- | C] () -- C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
[2010/01/12 13:44:29 | 000,000,240 | -H-- | C] () -- C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
[2010/01/10 18:47:54 | 000,658,244 | ---- | C] () -- C:\Documents and Settings\Shawn\My Documents\Untitled-1.psd
[2009/10/27 18:51:32 | 000,025,600 | ---- | C] () -- C:\Documents and Settings\Shawn\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/10/14 18:30:48 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxdevs.dll
[2009/10/14 18:30:43 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\lxdecoin.dll
[2009/10/14 18:30:08 | 000,692,224 | ---- | C] () -- C:\WINDOWS\System32\lxdedrs.dll
[2009/10/14 18:30:08 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\lxdecnv4.dll
[2009/10/14 18:30:08 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\lxdecaps.dll
[2009/10/14 18:26:52 | 000,000,060 | ---- | C] () -- C:\WINDOWS\System32\lxderwrd.ini
[2009/10/14 18:26:37 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\lxdeinst.dll
[2009/10/14 18:26:32 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\lxdegrd.dll
[2009/10/03 19:22:18 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2009/09/29 20:01:11 | 000,348,160 | ---- | C] () -- C:\WINDOWS\System32\pnup0.dll
[2008/09/18 22:02:10 | 002,196,932 | -HS- | C] () -- C:\WINDOWS\System32\nawklvlu.ini
[2008/09/17 22:02:00 | 001,790,792 | -HS- | C] () -- C:\WINDOWS\System32\ooxioqkn.ini
[2008/09/13 19:55:43 | 001,844,764 | -HS- | C] () -- C:\WINDOWS\System32\bphvwxsw.ini
[2008/07/30 11:56:12 | 001,722,259 | -HS- | C] () -- C:\WINDOWS\System32\txktwwiw.ini
[2008/07/29 11:59:00 | 001,634,832 | -HS- | C] () -- C:\WINDOWS\System32\xfwlaogs.ini
[2008/07/28 11:54:36 | 001,634,772 | -HS- | C] () -- C:\WINDOWS\System32\omgacfbu.ini
[2008/04/23 15:20:30 | 001,540,617 | -HS- | C] () -- C:\WINDOWS\System32\fnmamojn.ini
[2008/04/22 10:01:01 | 001,540,677 | -HS- | C] () -- C:\WINDOWS\System32\huwqcgfa.ini
[2008/04/21 09:56:21 | 001,540,617 | -HS- | C] () -- C:\WINDOWS\System32\tlidqtel.ini
[2008/04/13 22:14:12 | 000,000,534 | -HS- | C] () -- C:\WINDOWS\System32\hgjqddef.ini
[2008/04/13 09:31:44 | 000,000,294 | -HS- | C] () -- C:\WINDOWS\System32\mqfwytok.ini
[2008/04/11 21:52:32 | 000,000,294 | -HS- | C] () -- C:\WINDOWS\System32\wtcwujpr.ini
[2008/04/11 16:30:23 | 000,000,474 | -HS- | C] () -- C:\WINDOWS\System32\ohxnyimu.ini
[2008/04/10 16:28:37 | 000,000,414 | -HS- | C] () -- C:\WINDOWS\System32\tpodjskk.ini
[2008/04/10 16:22:56 | 000,000,021 | ---- | C] () -- C:\WINDOWS\pskt.ini
[2008/04/10 00:32:40 | 000,000,345 | -HS- | C] () -- C:\WINDOWS\System32\NVuuDJjl.ini2
[2008/04/08 14:21:10 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXF3FXPU.DLL
[2008/04/08 14:21:09 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMON.DLL
[2008/04/08 14:20:45 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\lxf3oem.dll
[2008/04/08 14:20:45 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\LXF3PMRC.DLL
[2008/01/21 12:19:46 | 000,000,040 | ---- | C] () -- C:\WINDOWS\nero.INI
[2007/05/24 14:32:13 | 000,002,721 | ---- | C] () -- C:\WINDOWS\TrayServerData.ini
[2006/12/05 15:43:31 | 000,002,543 | ---- | C] () -- C:\WINDOWS\langorig.ini
[2006/12/05 15:42:31 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\wbload.dll
[2006/08/24 13:07:22 | 000,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI
[2006/06/10 01:41:22 | 000,013,357 | ---- | C] () -- C:\WINDOWS\System32\vgadrv.dll
[2006/06/10 01:41:22 | 000,008,078 | ---- | C] () -- C:\WINDOWS\System32\drivers\vgadrv.sys
[2006/05/14 10:08:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ringtonemaker.INI
[2006/05/14 10:01:59 | 000,001,208 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2006/04/21 18:40:21 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\SAICFG.dll
[2006/03/22 23:22:22 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2006/03/06 21:01:53 | 000,684,032 | ---- | C] () -- C:\WINDOWS\libeay32.dll
[2006/03/06 21:01:53 | 000,155,648 | ---- | C] () -- C:\WINDOWS\ssleay32.dll
[2006/02/22 19:16:09 | 000,000,034 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2006/01/29 16:38:05 | 000,000,329 | ---- | C] () -- C:\WINDOWS\Audiocut.ini
[2006/01/15 20:14:00 | 000,000,013 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\jgalt.ayn
[2005/12/30 14:40:36 | 000,000,382 | ---- | C] () -- C:\WINDOWS\GBAMedia.ini
[2005/12/23 01:40:08 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2005/12/22 14:27:18 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll
[2005/12/15 16:12:39 | 000,000,044 | ---- | C] () -- C:\WINDOWS\Snow.ini
[2005/11/29 17:23:34 | 000,000,024 | ---- | C] () -- C:\WINDOWS\LogonStudio.ini
[2005/11/28 19:33:57 | 000,187,392 | ---- | C] () -- C:\WINDOWS\System32\JPGUtils.dll
[2005/11/27 13:10:21 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\PdeSrvps.dll
[2005/11/26 21:19:30 | 000,000,049 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2005/11/26 20:55:04 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2005/11/26 18:39:29 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005/11/26 17:53:08 | 000,000,162 | ---- | C] () -- C:\WINDOWS\EPSON Stylus CX5400.ini
[2004/05/05 16:41:30 | 000,532,544 | ---- | C] () -- C:\WINDOWS\PIC.dll
[2004/05/05 16:41:30 | 000,024,576 | ---- | C] () -- C:\WINDOWS\HKNTDLL.dll
[2004/05/05 16:30:12 | 000,018,253 | ---- | C] () -- C:\WINDOWS\System32\ssnvfx.ini
[2004/05/04 02:13:35 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2004/05/02 06:40:08 | 000,000,489 | ---- | C] () -- C:\WINDOWS\System32\emver.ini
[2004/05/01 10:53:11 | 000,278,528 | ---- | C] () -- C:\WINDOWS\System32\pncrt.dll
[2004/05/01 10:50:46 | 000,000,132 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2004/05/01 10:50:09 | 000,000,310 | ---- | C] () -- C:\WINDOWS\net2fone.ini
[2004/05/01 10:09:46 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2003/08/07 14:01:52 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2002/03/19 17:30:00 | 000,141,824 | ---- | C] () -- C:\WINDOWS\System32\msvdm.dll
[1999/01/22 13:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. >[2009/09/24 19:22:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\acccore
[2010/02/02 18:53:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2009/09/24 19:21:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AOL
[2009/09/24 19:23:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AOL OCP
[2007/07/09 19:30:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Autodesk
[2005/11/27 13:35:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Creative
[2010/01/07 21:26:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DVD Shrink
[2008/04/08 14:18:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FaxCtr
[2008/04/02 18:35:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FLEXnet
[2009/10/03 19:04:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GlobalSCAPE
[2008/01/20 14:11:23 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\GTek
[2006/10/19 22:33:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Laconic Software
[2010/01/31 11:04:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Lavasoft
[2007/06/11 15:44:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Macromedia
[2005/11/26 18:48:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Macrovision
[2010/01/13 00:17:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\McAfee
[2009/10/03 17:25:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\McAfee Security Scan
[2010/01/20 18:14:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
[2009/09/27 21:02:02 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft
[2010/01/13 03:03:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2009/12/02 02:52:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Norton
[2009/10/03 18:54:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NOS
[2009/10/02 11:07:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\nView_Profiles
[2010/01/12 21:35:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\pingcloselongpop
[2004/05/07 14:11:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QuickTime
[2010/01/20 18:10:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Symantec
[2008/04/10 16:59:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/01/12 21:36:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\two setup mode load
[2009/09/24 19:22:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2005/11/27 19:40:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2008/04/02 19:21:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WLInstaller
[2010/01/31 11:00:13 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
< %ALLUSERSPROFILE%\Application Data\*.exe /s >[2009/12/07 06:10:33 | 002,953,352 | ---- | M] (Lavasoft ) -- C:\Documents and Settings\All Users\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}\Ad-AwareInstallation.exe
[2010/01/31 11:03:39 | 001,181,328 | ---- | M] (Lavasoft) -- C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWService.exe
[2010/01/31 11:03:40 | 000,788,880 | ---- | M] (Lavasoft) -- C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AAWTray.exe
[2010/01/31 11:03:41 | 001,643,272 | ---- | M] (Lavasoft) -- C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-Aware.exe
[2010/01/31 11:03:41 | 000,823,928 | ---- | M] (Lavasoft) -- C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareAdmin.exe
[2010/01/31 11:03:42 | 000,816,784 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\Ad-AwareCommand.exe
[2010/01/31 11:03:43 | 003,803,208 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\AutoLaunch.exe
[2010/01/31 11:03:55 | 000,015,880 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\lsdelete.exe
[2010/01/31 11:03:58 | 000,862,040 | ---- | M] (Lavasoft) -- C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\threatwork.exe
< %APPDATA%\*. >[2009/10/06 15:23:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\acccore
[2010/02/02 19:05:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Adobe
[2010/02/02 18:33:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Aim
[2004/05/07 14:11:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\CyberLink
[2009/10/14 18:21:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\FaxCtr
[2009/10/03 21:04:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\GlobalSCAPE
[2009/10/03 20:47:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Gtek
[2004/05/07 14:11:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Identities
[2009/10/22 18:41:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Lexmark Productivity Studio
[2010/02/02 18:15:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Macromedia
[2010/01/25 19:26:27 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Shawn\Application Data\Microsoft
[2009/10/03 20:49:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Mozilla
[2004/05/07 14:11:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Sun
[2004/05/07 14:11:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Shawn\Application Data\Symantec
< %APPDATA%\*.exe /s >[2010/02/01 21:52:17 | 000,388,096 | R--- | M] (Trend Micro Inc.) -- C:\Documents and Settings\Shawn\Application Data\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
[2004/05/01 10:09:04 | 000,065,536 | R--- | M] (InstallShield Software Corp.) -- C:\Documents and Settings\Shawn\Application Data\Microsoft\Installer\{49FC50FC-F965-40D9-89B4-CBFF80941033}\ARPPRODUCTICON.exe
< %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS >[2005/12/08 06:39:06 | 022,245,337 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2009/08/29 22:10:46 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2005/12/08 06:39:06 | 022,245,337 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2009/08/29 22:10:46 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008/04/13 10:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/13 10:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004/08/03 22:07:41 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys
< MD5 for: ATAPI.SYS >[2003/03/31 04:00:00 | 010,158,890 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2005/12/08 06:39:06 | 022,245,337 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2009/08/29 22:10:46 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2003/03/31 04:00:00 | 010,158,890 | ---- | M] () .cab file -- C:\WINDOWS\I386\sp1.cab:atapi.sys
[2005/12/08 06:39:06 | 022,245,337 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2009/08/29 22:10:46 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2003/04/01 01:00:00 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\i386\atapi.sys
[2008/04/13 10:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 10:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/03 21:59:42 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
< MD5 for: EVENTLOG.DLL >[2008/04/13 16:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/13 16:11:53 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=6D4FEB43EE538FC5428CC7F0565AA656 -- C:\WINDOWS\system32\eventlog.dll
[2004/08/03 23:56:42 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=82B24CB70E5944E6E34662205A2A5B78 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
< MD5 for: NETLOGON.DLL >[2008/04/13 16:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008/04/13 16:12:01 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=1B7F071C51B77C272875C3A23E1E4550 -- C:\WINDOWS\system32\netlogon.dll
[2009/02/06 10:46:09 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=6C476D33D82F1054849790181E8F7772 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2004/08/03 23:56:44 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=96353FCECBA774BB8DA74A1C6507015A -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
< MD5 for: NVATABUS.SYS >[2003/09/03 12:51:00 | 000,054,656 | ---- | M] (NVIDIA Corporation) MD5=04EF5690AC54924CF745A4A2D1FBF9C1 -- C:\Drivers\System\IDE\Win2K\NvAtaBus.sys
< MD5 for: SCECLI.DLL >[2004/08/03 23:56:44 | 000,180,224 | ---- | M] (Microsoft Corporation) MD5=0F78E27F563F2AAF74B91A49E2ABF19A -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008/04/13 16:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/13 16:12:05 | 000,181,248 | ---- | M] (Microsoft Corporation) MD5=A86BB5E61BF3E39B62AB4C7E7085A084 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: VIAMRAID.SYS >[2005/04/25 19:22:28 | 000,060,928 | R--- | M] (VIA Technologies inc,.ltd) MD5=0363E216E4EB5052969C96608934DBDE -- C:\WINDOWS\system32\drivers\viamraid.sys
< %systemroot%\*. /mp /s > < c:\$recycle.bin\*.* /s > < %systemroot%\system32\*.dll /lockedfiles > < %systemroot%\Tasks\*.job /lockedfiles > ========== Alternate Data Streams ========== @Alternate Data Stream - 98 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 88 bytes -> C:\net_save.dna:SummaryInformation
< End of report >