[MasterZoran]

Hi,

My computer has been having quite a few problems lately and I believe it is related to a piece of software I removed from my computer a while back. It was a fake anti virus program that installed itself and redirected my internet. I downloaded anti malware bytes and ran it, it found a few things and removed them. I thought the problem was gone but recently a bunch of problems surfaced. windows explorer ends frequently and restarts itself. Firefox has been locking up and crashing when I click certain things online, such as trying to post on facebook or clicking login on yahoo. Many of my game applications have been experiencing strange lockups as well. Windows has also been refusing to shut down. It will get past "saving your settings..." to "shutting down..." and then it just sits there until I force shutdown by holding in the button. (i know this is terrible for it but cant figure out any way to shut it down)

I attempted to run anti malware bytes again but it will get to about 66% and then stop scanning. I have attempted this
a few times and have let it sit as long as 8 hours at 66%.

Any help would be appreciated.

[Advertisements]

Oh and I forgot to post the OTL log, here it is

OTL logfile created on: 8/4/2010 10:47:30 PM - Run 7
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Owner\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 70.00% Memory free
3.00 Gb Paging File | 2.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): C:\pagefile.sys 720 1440 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111.78 Gb Total Space | 43.80 Gb Free Space | 39.18% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: KINGGYPSY
Current User Name: Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/08/04 22:45:49 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\My Documents\Downloads\OTL.exe
PRC - [2010/07/22 21:07:03 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe
PRC - [2010/07/22 21:06:53 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/06/28 15:57:18 | 002,837,864 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/06/28 15:57:15 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/03/04 23:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe
PRC - [2009/10/19 03:25:41 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2009/07/27 13:44:58 | 000,236,040 | ---- | M] () -- C:\WINDOWS\system32\DeltaIITray.exe
PRC - [2005/04/27 15:59:24 | 000,241,725 | ---- | M] (Microsoft Corporation) -- C:\Program Files\UPHClean\uphclean.exe
PRC - [2002/03/19 18:30:00 | 000,045,632 | ---- | M] () -- C:\WINDOWS\system32\TaskSwitch.exe


========== Modules (SafeList) ==========

MOD - [2010/08/04 22:45:49 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\My Documents\Downloads\OTL.exe
MOD - [2010/07/22 21:06:57 | 000,169,432 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nspr4.dll
MOD - [2010/07/22 21:06:56 | 000,718,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozcrt19.dll
MOD - [2009/10/19 03:24:08 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5705_x-ww_36cfed49\comctl32.dll
MOD - [2008/04/14 07:00:00 | 001,852,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\AppPatch\AcGenral.dll
MOD - [2008/04/14 07:00:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2008/04/14 07:00:00 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\iphlpapi.dll
MOD - [2008/04/14 07:00:00 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msacm32.dll
MOD - [2008/04/14 07:00:00 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wsock32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\WINDOWS\System32\wscsvc.dll -- (wscsvc)
SRV - [2010/06/28 15:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/06/28 15:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/06/28 15:57:15 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/06/06 11:32:00 | 003,819,912 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2010/03/18 16:47:22 | 000,035,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state)
SRV - [2010/03/18 13:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/04 23:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess)
SRV - [2005/04/27 15:59:24 | 000,241,725 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\UPHClean\uphclean.exe -- (UPHClean)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Owner\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - [2010/06/28 15:37:52 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010/06/28 15:37:30 | 000,165,456 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010/06/28 15:33:13 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010/06/28 15:32:45 | 000,100,176 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2010/06/28 15:32:33 | 000,017,744 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010/06/28 15:32:16 | 000,028,880 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2010/02/15 18:20:59 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010/01/11 23:03:33 | 010,276,768 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2009/11/12 14:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009/10/19 03:29:36 | 000,009,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\dumpdrv.sys -- (DumpDrv)
DRV - [2009/08/17 20:16:06 | 001,390,976 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - [2009/07/27 13:44:46 | 000,302,472 | ---- | M] (Avid Technology, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\MAudioDelta.sys -- (DELTAII) Service for M-Audio Delta Driver (WDM)
DRV - [2009/03/23 05:55:24 | 000,296,032 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\mhlsrxm.sys -- (mhlsrxm)
DRV - [2008/08/01 10:36:00 | 000,054,784 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2008/08/01 10:36:00 | 000,022,016 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2008/04/14 07:00:00 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008/04/13 23:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2007/06/29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2003/07/10 11:09:56 | 000,096,256 | ---- | M] (The Linksys Group, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LSIPNDS.sys -- (IPN2120)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5643

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/07/29 23:08:36 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/08/01 03:30:01 | 000,000,000 | ---D | M]

[2010/07/29 23:08:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Mozilla\Extensions
[2010/08/04 22:22:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\83p8c6pe.default\extensions
[2010/08/01 03:27:02 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\83p8c6pe.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/08/04 22:22:27 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/08/01 03:30:02 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/07/17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

O1 HOSTS File: ([2010/06/09 15:31:17 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CoolSwitch] C:\WINDOWS\system32\TaskSwitch.exe ()
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [M-Audio Taskbar Icon] C:\WINDOWS\system32\DeltaIITray.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKCU..\Run: [{ABA7AB82-6D23-F3A5-9E55-65855AE9F821}] C:\Documents and Settings\Owner\Application Data\Vupeav\udap.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MaxRecentDocs = 18
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MemCheckBoxInRunDlg = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: ketsujin.com ([fighterace] https in Trusted sites)
O15 - HKCU\..Trusted Domains: ketsujin.com ([primary] https in Trusted sites)
O15 - HKCU\..Trusted Domains: ketsujin.com ([update] https in Trusted sites)
O15 - HKCU\..Trusted Domains: ketsujin.com ([www] https in Trusted sites)
O15 - HKCU\..Trusted Domains: stormofaces.com ([www] https in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Owner\Desktop\Desktop Background.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Owner\Desktop\Desktop Background.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/01/18 16:04:33 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.divxa32 - C:\WINDOWS\System32\divxa32.acm (Kristal StudioD
FileDescription)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\WINDOWS\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.vorbis - C:\WINDOWS\System32\vorbis.acm (HMS http://hp.vector.co....thors/VA012897/)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.DIVX - C:\WINDOWS\System32\divx.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\WINDOWS\System32\frapsvid.dll (Beepa P/L)
Drivers32: VIDC.HFYU - C:\WINDOWS\System32\huffyuv.dll (Disappearing Inc.)
Drivers32: vidc.i263 - C:\WINDOWS\System32\I263_32.drv (Intel Corporation)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.VP60 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP61 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP62 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP70 - C:\WINDOWS\System32\vp7vfw.dll (On2.com)
Drivers32: VIDC.X264 - C:\WINDOWS\System32\x264vfw.dll ()
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (59123355860598784)

========== Files/Folders - Created Within 90 Days ==========

[2010/08/01 03:30:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/08/01 03:30:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010/07/29 23:08:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Mozilla
[2010/07/29 23:08:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Mozilla
[2010/07/29 23:08:30 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010/07/28 21:57:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\PAPER
[2010/07/28 21:15:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\FINAL PAPER
[2010/07/25 21:40:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\yqymopmvs
[2010/07/21 17:38:47 | 000,000,000 | ---D | C] -- C:\Program Files\PeerGuardian2
[2010/07/07 23:20:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\I2P
[2010/07/02 13:34:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\Flash Drive Files
[2010/06/29 14:55:54 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\WINDOWS\avastSS.scr
[2010/06/28 22:00:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Dungeons and Dragons Online
[2010/06/28 15:23:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Turbine
[2010/06/28 15:23:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Turbine
[2010/06/28 15:23:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\ApplicationHistory
[2010/06/28 07:51:06 | 000,000,000 | ---D | C] -- C:\Program Files\Turbine
[2010/06/28 00:01:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\PMB Files
[2010/06/28 00:01:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PMB Files
[2010/06/27 23:51:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\GetRightToGo
[2010/06/26 01:01:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\dwhelper
[2010/06/23 14:15:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\McAfee
[2010/06/23 14:00:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\McAfee
[2010/06/18 19:32:55 | 003,819,912 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\GameMon.des
[2010/06/18 19:32:29 | 000,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\npptNT2.sys
[2010/06/18 19:32:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\INCA Shared
[2010/06/18 18:30:27 | 000,000,000 | ---D | C] -- C:\Program Files\Games-Masters.com
[2010/06/14 03:14:09 | 000,000,000 | ---D | C] -- C:\Program Files\Sony
[2010/06/11 19:48:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\ZSNES
[2010/06/10 03:23:22 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2010/06/10 03:23:16 | 000,000,000 | ---D | C] -- C:\Program Files\ReflexiveArcade
[2010/06/10 00:38:03 | 000,000,000 | ---D | C] -- C:\Program Files\Activision
[2010/06/09 23:45:25 | 000,444,952 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2010/06/09 23:45:25 | 000,109,080 | ---- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2010/06/09 23:45:25 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2010/06/09 16:25:51 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\outlook express
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\netmeeting
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\msn gaming zone
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\movie maker
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2010/06/09 15:42:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2010/06/09 15:28:48 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/06/09 15:25:51 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/06/09 15:25:51 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/06/09 15:25:51 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/06/09 15:25:51 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/06/09 15:25:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/06/09 15:23:43 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/06/09 15:16:09 | 000,000,000 | ---D | C] -- C:\_OTL
[2010/06/09 07:44:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Schools Docs
[2010/06/08 03:12:57 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/06/07 22:54:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Sun
[2010/06/07 21:45:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\SUPERAntiSpyware.com
[2010/06/07 15:32:31 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2010/06/07 15:31:44 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio
[2010/06/07 15:31:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2010/06/07 15:29:06 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8
[2010/06/07 15:28:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2010/06/07 15:27:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft Help
[2010/06/07 15:27:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2010/06/07 15:27:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2010/06/07 15:26:49 | 000,000,000 | R--D | C] -- C:\MSOCache
[2010/06/07 14:34:29 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2010/06/07 14:30:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2010/06/07 10:29:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Macromedia
[2010/06/07 09:49:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2010/06/06 23:03:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2010/06/06 23:03:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2010/06/06 22:58:38 | 000,165,456 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010/06/06 22:58:38 | 000,017,744 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/06/06 22:58:37 | 000,023,376 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/06/06 22:58:36 | 000,046,672 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/06/06 22:58:35 | 000,100,176 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/06/06 22:58:35 | 000,094,544 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010/06/06 22:58:35 | 000,028,880 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/06/06 22:58:24 | 000,165,032 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010/06/06 22:58:19 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2010/06/03 20:47:00 | 000,000,000 | ---D | C] -- C:\Program Files\Black Isle
[2010/06/01 00:40:02 | 000,000,000 | ---D | C] -- C:\Program Files\Crimsonland
[2010/05/30 21:36:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\smc
[2010/05/30 17:20:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Comics
[2010/05/27 18:15:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\microsoft
[2010/05/27 18:08:33 | 000,034,304 | ---- | C] (AMD, Inc.) -- C:\WINDOWS\System32\drivers\AmdLLD.sys
[2010/05/27 18:08:32 | 000,000,000 | ---D | C] -- C:\Program Files\AMD
[2010/05/27 18:08:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Downloaded Installations
[2010/05/26 06:24:58 | 000,000,000 | ---D | C] -- C:\Program Files\HeroOnline
[2010/05/20 21:15:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment
[2010/05/15 23:51:06 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools
[2010/05/14 00:27:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\www.cruxt.org
[2010/05/11 17:41:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\LolClient
[2010/05/11 05:25:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\cYo
[2010/05/11 05:25:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\cYo
[2010/05/11 05:24:04 | 000,000,000 | ---D | C] -- C:\Program Files\ComicRack
[2010/05/11 05:20:05 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2010/05/10 20:18:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Mouseguard
[2010/05/09 22:28:15 | 000,000,000 | ---D | C] -- C:\Fraps
[2010/05/07 23:53:33 | 000,000,000 | ---D | C] -- C:\Program Files\Mixed In Key 4
[2010/05/07 23:47:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Rapid Evolution 2
[2010/05/07 23:38:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\BeatportDownloader.EE670286545758FAB4A69D4439CF6054F83E0AC2.1
[2010/05/07 22:44:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\M-Audio

========== Files - Modified Within 90 Days ==========

[2010/08/04 22:45:45 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{42450835-FFD9-441E-A3AA-D6367F4E74A4}.job
[2010/08/04 22:15:11 | 000,601,906 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/08/04 22:15:11 | 000,501,822 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/08/04 22:15:11 | 000,087,346 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/08/04 22:10:59 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/08/04 22:10:40 | 000,271,490 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010/08/04 22:10:23 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/08/04 22:10:18 | 2146,619,392 | -HS- | M] () -- C:\hiberfil.sys
[2010/08/03 20:33:09 | 003,242,170 | -H-- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\IconCache.db
[2010/08/03 09:49:07 | 004,456,448 | ---- | M] () -- C:\Documents and Settings\Owner\NTUSER.DAT
[2010/08/03 00:49:25 | 000,119,906 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Network Discrimination.pptx
[2010/08/03 00:48:47 | 000,011,151 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\power point info.docx
[2010/08/03 00:22:17 | 000,023,641 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\music_pirate_piracy_anti_riaa_icon_sticker-p217172253079285119qjcl_400.jpg
[2010/08/02 15:27:37 | 000,000,294 | RHS- | M] () -- C:\boot.ini
[2010/08/02 15:08:03 | 000,049,798 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\ITman.jpg
[2010/08/01 03:05:21 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/07/30 21:21:59 | 000,262,144 | ---- | M] () -- C:\WINDOWS\System32\default_user_class.dat
[2010/07/30 21:21:59 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Owner\ntuser.ini
[2010/07/29 23:08:34 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/07/29 23:08:34 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/07/29 22:59:26 | 000,027,112 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\ad2.gif
[2010/07/29 22:59:26 | 000,003,429 | ---- | M] () -- C:\Documents and Settings\Owner\.recently-used.xbel
[2010/07/29 22:49:18 | 000,082,513 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\ad2.png
[2010/07/27 01:00:33 | 000,011,931 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Letter of Transmital NOT DONE.docx
[2010/07/25 23:40:55 | 000,357,216 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Desktop Background.jpg
[2010/07/25 01:59:01 | 002,979,254 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Desktop Background.bmp
[2010/07/22 09:08:57 | 014,400,912 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\USS_Enterprise-30.mp3
[2010/07/18 04:07:03 | 000,536,854 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\wonka.jpg
[2010/07/08 19:09:58 | 000,051,712 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/29 14:55:55 | 000,002,626 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/06/28 15:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\WINDOWS\avastSS.scr
[2010/06/28 15:57:12 | 000,165,032 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010/06/28 15:37:52 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/06/28 15:37:30 | 000,165,456 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010/06/28 15:33:13 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/06/28 15:32:45 | 000,100,176 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/06/28 15:32:42 | 000,094,544 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010/06/28 15:32:33 | 000,017,744 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/06/28 15:32:16 | 000,028,880 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/06/28 15:23:22 | 000,000,128 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\fusioncache.dat
[2010/06/28 08:04:59 | 000,001,716 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\DDO Unlimited.lnk
[2010/06/26 01:34:22 | 000,000,419 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\hexplorer.dat
[2010/06/26 01:34:22 | 000,000,004 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\mclip.dat
[2010/06/23 13:51:59 | 000,090,736 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/06/20 22:28:27 | 000,000,633 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/06/18 23:26:54 | 000,335,464 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/06/15 18:53:29 | 000,000,086 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\MTC-savedfolder.dat
[2010/06/13 00:17:16 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/06/09 23:45:25 | 000,444,952 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2010/06/09 23:45:25 | 000,109,080 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2010/06/09 15:35:47 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\HiJackThis.lnk
[2010/06/09 15:31:22 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/06/09 15:31:17 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/06/09 15:12:19 | 000,000,223 | ---- | M] () -- C:\Boot.bak
[2010/06/06 11:32:00 | 003,819,912 | ---- | M] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\GameMon.des
[2010/06/04 19:38:22 | 000,000,671 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\vso_ts_preview.xml
[2010/05/30 14:01:10 | 000,000,008 | ---- | M] () -- C:\WINDOWS\System32\nvModes.dat
[2010/05/15 23:51:06 | 000,000,698 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\DAEMON Tools.lnk
[2010/05/11 05:24:05 | 000,000,710 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\ComicRack.lnk
[2010/05/09 22:28:15 | 000,000,478 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Fraps.lnk

========== Files Created - No Company Name ==========

[2010/08/03 00:22:16 | 000,023,641 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\music_pirate_piracy_anti_riaa_icon_sticker-p217172253079285119qjcl_400.jpg
[2010/08/02 16:07:52 | 000,119,906 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Network Discrimination.pptx
[2010/08/02 15:51:54 | 000,011,151 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\power point info.docx
[2010/08/02 15:08:03 | 000,049,798 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\ITman.jpg
[2010/07/30 21:21:59 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\default_user_class.dat
[2010/07/29 23:08:34 | 000,001,620 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/07/29 23:08:34 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/07/29 22:59:26 | 000,027,112 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\ad2.gif
[2010/07/29 22:59:26 | 000,003,429 | ---- | C] () -- C:\Documents and Settings\Owner\.recently-used.xbel
[2010/07/29 22:49:18 | 000,082,513 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\ad2.png
[2010/07/28 21:15:12 | 000,011,931 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Letter of Transmital NOT DONE.docx
[2010/07/25 23:40:55 | 000,357,216 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Desktop Background.jpg
[2010/07/25 23:36:37 | 002,979,254 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Desktop Background.bmp
[2010/07/25 22:25:34 | 2146,619,392 | -HS- | C] () -- C:\hiberfil.sys
[2010/07/22 09:08:37 | 014,400,912 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\USS_Enterprise-30.mp3
[2010/07/18 04:07:02 | 000,536,854 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\wonka.jpg
[2010/06/28 15:23:22 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\fusioncache.dat
[2010/06/28 08:04:59 | 000,001,716 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\DDO Unlimited.lnk
[2010/06/26 01:32:33 | 000,000,419 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\hexplorer.dat
[2010/06/26 01:32:33 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\mclip.dat
[2010/06/22 23:14:37 | 000,057,230 | ---- | C] () -- C:\Documents and Settings\Owner\activity.txt
[2010/06/18 19:32:29 | 000,005,174 | ---- | C] () -- C:\WINDOWS\System32\nppt9x.vxd
[2010/06/15 18:53:26 | 000,000,086 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\MTC-savedfolder.dat
[2010/06/09 15:28:52 | 000,000,223 | ---- | C] () -- C:\Boot.bak
[2010/06/09 15:28:49 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010/06/09 15:25:51 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/06/09 15:25:51 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/06/09 15:25:51 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/06/09 15:25:51 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/06/09 15:25:51 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/06/08 03:12:57 | 000,002,447 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\HiJackThis.lnk
[2010/05/30 14:01:10 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2010/05/15 23:51:06 | 000,000,698 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\DAEMON Tools.lnk
[2010/05/11 05:24:05 | 000,000,710 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\ComicRack.lnk
[2010/05/09 22:28:15 | 000,000,478 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Fraps.lnk
[2010/04/04 19:28:19 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2010/02/17 00:17:41 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2010/02/15 18:20:58 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2010/02/04 19:59:43 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2010/01/18 16:13:59 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010/01/18 16:13:58 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/01/18 16:13:55 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2010/01/18 16:13:55 | 002,378,752 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll
[2010/01/18 16:13:55 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/01/18 16:13:55 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/01/18 16:13:54 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/01/18 16:13:54 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009/10/19 03:34:58 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\msvcrt10.dll

========== LOP Check ==========

[2010/05/05 22:14:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/04/04 19:28:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Canneverbe Limited
[2010/02/15 18:20:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Pro
[2010/03/07 17:02:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GARMIN
[2010/06/28 00:03:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PMB Files
[2010/01/19 23:09:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\vsosdk
[2010/05/07 23:38:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\BeatportDownloader.EE670286545758FAB4A69D4439CF6054F83E0AC2.1
[2010/04/04 19:28:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Canneverbe Limited
[2010/05/11 05:25:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\cYo
[2010/02/15 18:30:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\DAEMON Tools Pro
[2010/01/18 16:13:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Foxit
[2010/03/07 16:29:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\GARMIN
[2010/07/08 19:04:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\GetRightToGo
[2010/07/29 22:59:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\gtk-2.0
[2010/07/07 23:20:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\I2P
[2010/05/11 17:41:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\LolClient
[2010/01/20 01:21:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\LolClient.F24C99354F615F3BAB18AE7B93E3F9B9E8784FA6.1
[2010/05/07 22:44:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\M-Audio
[2010/05/07 23:49:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Rapid Evolution 2
[2010/02/23 20:17:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Renoise
[2010/05/30 21:41:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\smc
[2010/06/28 15:23:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Turbine
[2010/07/26 00:25:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\uTorrent
[2010/06/04 19:38:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Vso
[2010/07/15 00:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Vupeav
[2010/07/14 16:23:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Ywexo
[2010/08/04 22:45:45 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{42450835-FFD9-441E-A3AA-D6367F4E74A4}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/01/18 16:04:33 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/06/09 15:12:19 | 000,000,223 | ---- | M] () -- C:\Boot.bak
[2010/08/02 15:27:37 | 000,000,294 | RHS- | M] () -- C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2010/06/09 15:32:22 | 000,018,804 | ---- | M] () -- C:\ComboFix.txt
[2010/01/18 16:04:33 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2009/08/06 20:19:45 | 000,006,523 | ---- | M] () -- C:\DriverPack_WLAN_wnt5_x86-32.txt
[2010/08/04 22:10:18 | 2146,619,392 | -HS- | M] () -- C:\hiberfil.sys
[2010/01/18 16:04:33 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/01/18 16:04:33 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2008/04/14 07:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/04/14 07:00:00 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2010/08/04 22:10:13 | 754,974,720 | -HS- | M] () -- C:\pagefile.sys
[2010/07/25 22:08:26 | 000,000,392 | ---- | M] () -- C:\rkill.log

< %systemroot%\system32\*.wt >

< %systemroot%\system32\*.ruy >

< %systemroot%\Fonts\*.com >
[2006/04/18 14:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 13:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 14:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 13:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2010/01/18 16:04:10 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2009/08/14 09:19:28 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2006/10/26 19:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
[2009/08/14 09:19:28 | 000,589,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/06/28 15:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\WINDOWS\avastSS.scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2010/01/18 09:41:17 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2010/01/18 09:41:17 | 001,073,152 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2010/01/18 09:41:17 | 000,897,024 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
"NoAutoRebootWithLoggedOnUsers" = 1
"RebootRelaunchTimeoutEnabled" = 1
"RebootRelaunchTimeout" = 1440

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-06-16 00:32:23
< End of report >

[MasterZoran]

Oh and I forgot to post the OTL log, here it is

OTL logfile created on: 8/4/2010 10:47:30 PM - Run 7
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Owner\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 70.00% Memory free
3.00 Gb Paging File | 2.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): C:\pagefile.sys 720 1440 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111.78 Gb Total Space | 43.80 Gb Free Space | 39.18% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: KINGGYPSY
Current User Name: Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/08/04 22:45:49 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\My Documents\Downloads\OTL.exe
PRC - [2010/07/22 21:07:03 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe
PRC - [2010/07/22 21:06:53 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/06/28 15:57:18 | 002,837,864 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/06/28 15:57:15 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/03/04 23:38:00 | 000,071,096 | ---- | M] () -- C:\Program Files\CDBurnerXP\NMSAccessU.exe
PRC - [2009/10/19 03:25:41 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2009/07/27 13:44:58 | 000,236,040 | ---- | M] () -- C:\WINDOWS\system32\DeltaIITray.exe
PRC - [2005/04/27 15:59:24 | 000,241,725 | ---- | M] (Microsoft Corporation) -- C:\Program Files\UPHClean\uphclean.exe
PRC - [2002/03/19 18:30:00 | 000,045,632 | ---- | M] () -- C:\WINDOWS\system32\TaskSwitch.exe


========== Modules (SafeList) ==========

MOD - [2010/08/04 22:45:49 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner\My Documents\Downloads\OTL.exe
MOD - [2010/07/22 21:06:57 | 000,169,432 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nspr4.dll
MOD - [2010/07/22 21:06:56 | 000,718,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozcrt19.dll
MOD - [2009/10/19 03:24:08 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5705_x-ww_36cfed49\comctl32.dll
MOD - [2008/04/14 07:00:00 | 001,852,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\AppPatch\AcGenral.dll
MOD - [2008/04/14 07:00:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
MOD - [2008/04/14 07:00:00 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\iphlpapi.dll
MOD - [2008/04/14 07:00:00 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msacm32.dll
MOD - [2008/04/14 07:00:00 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wsock32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\WINDOWS\System32\wscsvc.dll -- (wscsvc)
SRV - [2010/06/28 15:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/06/28 15:57:15 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/06/28 15:57:15 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/06/06 11:32:00 | 003,819,912 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2010/03/18 16:47:22 | 000,035,160 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe -- (aspnet_state)
SRV - [2010/03/18 13:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/04 23:38:00 | 000,071,096 | ---- | M] () [Auto | Running] -- C:\Program Files\CDBurnerXP\NMSAccessU.exe -- (NMSAccess)
SRV - [2005/04/27 15:59:24 | 000,241,725 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\UPHClean\uphclean.exe -- (UPHClean)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\Owner\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - [2010/06/28 15:37:52 | 000,046,672 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2010/06/28 15:37:30 | 000,165,456 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2010/06/28 15:33:13 | 000,023,376 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2010/06/28 15:32:45 | 000,100,176 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2010/06/28 15:32:33 | 000,017,744 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2010/06/28 15:32:16 | 000,028,880 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2010/02/15 18:20:59 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010/01/11 23:03:33 | 010,276,768 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2009/11/12 14:48:56 | 000,007,168 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009/10/19 03:29:36 | 000,009,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\dumpdrv.sys -- (DumpDrv)
DRV - [2009/08/17 20:16:06 | 001,390,976 | R--- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - [2009/07/27 13:44:46 | 000,302,472 | ---- | M] (Avid Technology, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\MAudioDelta.sys -- (DELTAII) Service for M-Audio Delta Driver (WDM)
DRV - [2009/03/23 05:55:24 | 000,296,032 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\mhlsrxm.sys -- (mhlsrxm)
DRV - [2008/08/01 10:36:00 | 000,054,784 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2008/08/01 10:36:00 | 000,022,016 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2008/04/14 07:00:00 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008/04/13 23:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2007/06/29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2003/07/10 11:09:56 | 000,096,256 | ---- | M] (The Linksys Group, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LSIPNDS.sys -- (IPN2120)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5643

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/07/29 23:08:36 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/08/01 03:30:01 | 000,000,000 | ---D | M]

[2010/07/29 23:08:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Mozilla\Extensions
[2010/08/04 22:22:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\83p8c6pe.default\extensions
[2010/08/01 03:27:02 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\83p8c6pe.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/08/04 22:22:27 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/08/01 03:30:02 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/07/17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

O1 HOSTS File: ([2010/06/09 15:31:17 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CoolSwitch] C:\WINDOWS\system32\TaskSwitch.exe ()
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [M-Audio Taskbar Icon] C:\WINDOWS\system32\DeltaIITray.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKCU..\Run: [{ABA7AB82-6D23-F3A5-9E55-65855AE9F821}] C:\Documents and Settings\Owner\Application Data\Vupeav\udap.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MaxRecentDocs = 18
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MemCheckBoxInRunDlg = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: ketsujin.com ([fighterace] https in Trusted sites)
O15 - HKCU\..Trusted Domains: ketsujin.com ([primary] https in Trusted sites)
O15 - HKCU\..Trusted Domains: ketsujin.com ([update] https in Trusted sites)
O15 - HKCU\..Trusted Domains: ketsujin.com ([www] https in Trusted sites)
O15 - HKCU\..Trusted Domains: stormofaces.com ([www] https in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Owner\Desktop\Desktop Background.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Owner\Desktop\Desktop Background.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/01/18 16:04:33 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.divxa32 - C:\WINDOWS\System32\divxa32.acm (Kristal StudioD
FileDescription)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\WINDOWS\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\WINDOWS\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.vorbis - C:\WINDOWS\System32\vorbis.acm (HMS http://hp.vector.co....thors/VA012897/)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.DIVX - C:\WINDOWS\System32\divx.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\WINDOWS\System32\frapsvid.dll (Beepa P/L)
Drivers32: VIDC.HFYU - C:\WINDOWS\System32\huffyuv.dll (Disappearing Inc.)
Drivers32: vidc.i263 - C:\WINDOWS\System32\I263_32.drv (Intel Corporation)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.VP60 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP61 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP62 - C:\WINDOWS\System32\vp6vfw.dll (On2.com)
Drivers32: VIDC.VP70 - C:\WINDOWS\System32\vp7vfw.dll (On2.com)
Drivers32: VIDC.X264 - C:\WINDOWS\System32\x264vfw.dll ()
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (59123355860598784)

========== Files/Folders - Created Within 90 Days ==========

[2010/08/01 03:30:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Sun
[2010/08/01 03:30:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010/07/29 23:08:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Mozilla
[2010/07/29 23:08:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Mozilla
[2010/07/29 23:08:30 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2010/07/28 21:57:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\PAPER
[2010/07/28 21:15:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\FINAL PAPER
[2010/07/25 21:40:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\yqymopmvs
[2010/07/21 17:38:47 | 000,000,000 | ---D | C] -- C:\Program Files\PeerGuardian2
[2010/07/07 23:20:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\I2P
[2010/07/02 13:34:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Desktop\Flash Drive Files
[2010/06/29 14:55:54 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\WINDOWS\avastSS.scr
[2010/06/28 22:00:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Dungeons and Dragons Online
[2010/06/28 15:23:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Turbine
[2010/06/28 15:23:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Turbine
[2010/06/28 15:23:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\ApplicationHistory
[2010/06/28 07:51:06 | 000,000,000 | ---D | C] -- C:\Program Files\Turbine
[2010/06/28 00:01:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\PMB Files
[2010/06/28 00:01:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\PMB Files
[2010/06/27 23:51:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\GetRightToGo
[2010/06/26 01:01:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\dwhelper
[2010/06/23 14:15:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\McAfee
[2010/06/23 14:00:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\McAfee
[2010/06/18 19:32:55 | 003,819,912 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\GameMon.des
[2010/06/18 19:32:29 | 000,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\npptNT2.sys
[2010/06/18 19:32:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\INCA Shared
[2010/06/18 18:30:27 | 000,000,000 | ---D | C] -- C:\Program Files\Games-Masters.com
[2010/06/14 03:14:09 | 000,000,000 | ---D | C] -- C:\Program Files\Sony
[2010/06/11 19:48:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\ZSNES
[2010/06/10 03:23:22 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2010/06/10 03:23:16 | 000,000,000 | ---D | C] -- C:\Program Files\ReflexiveArcade
[2010/06/10 00:38:03 | 000,000,000 | ---D | C] -- C:\Program Files\Activision
[2010/06/09 23:45:25 | 000,444,952 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2010/06/09 23:45:25 | 000,109,080 | ---- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2010/06/09 23:45:25 | 000,000,000 | ---D | C] -- C:\Program Files\OpenAL
[2010/06/09 16:25:51 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\outlook express
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\netmeeting
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\msn gaming zone
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\movie maker
[2010/06/09 15:42:12 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage
[2010/06/09 15:42:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2010/06/09 15:28:48 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/06/09 15:25:51 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/06/09 15:25:51 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/06/09 15:25:51 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/06/09 15:25:51 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/06/09 15:25:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/06/09 15:23:43 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/06/09 15:16:09 | 000,000,000 | ---D | C] -- C:\_OTL
[2010/06/09 07:44:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Schools Docs
[2010/06/08 03:12:57 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/06/07 22:54:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Sun
[2010/06/07 21:45:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\SUPERAntiSpyware.com
[2010/06/07 15:32:31 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2010/06/07 15:31:44 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio
[2010/06/07 15:31:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2010/06/07 15:29:06 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8
[2010/06/07 15:28:30 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2010/06/07 15:27:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft Help
[2010/06/07 15:27:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2010/06/07 15:27:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2010/06/07 15:26:49 | 000,000,000 | R--D | C] -- C:\MSOCache
[2010/06/07 14:34:29 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2010/06/07 14:30:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2010/06/07 10:29:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Macromedia
[2010/06/07 09:49:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe
[2010/06/06 23:03:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2010/06/06 23:03:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Application Data\Adobe
[2010/06/06 22:58:38 | 000,165,456 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010/06/06 22:58:38 | 000,017,744 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/06/06 22:58:37 | 000,023,376 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/06/06 22:58:36 | 000,046,672 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/06/06 22:58:35 | 000,100,176 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/06/06 22:58:35 | 000,094,544 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010/06/06 22:58:35 | 000,028,880 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/06/06 22:58:24 | 000,165,032 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010/06/06 22:58:19 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2010/06/03 20:47:00 | 000,000,000 | ---D | C] -- C:\Program Files\Black Isle
[2010/06/01 00:40:02 | 000,000,000 | ---D | C] -- C:\Program Files\Crimsonland
[2010/05/30 21:36:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\smc
[2010/05/30 17:20:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Comics
[2010/05/27 18:15:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\microsoft
[2010/05/27 18:08:33 | 000,034,304 | ---- | C] (AMD, Inc.) -- C:\WINDOWS\System32\drivers\AmdLLD.sys
[2010/05/27 18:08:32 | 000,000,000 | ---D | C] -- C:\Program Files\AMD
[2010/05/27 18:08:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\Downloaded Installations
[2010/05/26 06:24:58 | 000,000,000 | ---D | C] -- C:\Program Files\HeroOnline
[2010/05/20 21:15:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Blizzard Entertainment
[2010/05/15 23:51:06 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools
[2010/05/14 00:27:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\www.cruxt.org
[2010/05/11 17:41:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\LolClient
[2010/05/11 05:25:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Local Settings\Application Data\cYo
[2010/05/11 05:25:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\cYo
[2010/05/11 05:24:04 | 000,000,000 | ---D | C] -- C:\Program Files\ComicRack
[2010/05/11 05:20:05 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2010/05/10 20:18:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\My Documents\Mouseguard
[2010/05/09 22:28:15 | 000,000,000 | ---D | C] -- C:\Fraps
[2010/05/07 23:53:33 | 000,000,000 | ---D | C] -- C:\Program Files\Mixed In Key 4
[2010/05/07 23:47:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\Rapid Evolution 2
[2010/05/07 23:38:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\BeatportDownloader.EE670286545758FAB4A69D4439CF6054F83E0AC2.1
[2010/05/07 22:44:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner\Application Data\M-Audio

========== Files - Modified Within 90 Days ==========

[2010/08/04 22:45:45 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{42450835-FFD9-441E-A3AA-D6367F4E74A4}.job
[2010/08/04 22:15:11 | 000,601,906 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/08/04 22:15:11 | 000,501,822 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/08/04 22:15:11 | 000,087,346 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/08/04 22:10:59 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/08/04 22:10:40 | 000,271,490 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010/08/04 22:10:23 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/08/04 22:10:18 | 2146,619,392 | -HS- | M] () -- C:\hiberfil.sys
[2010/08/03 20:33:09 | 003,242,170 | -H-- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\IconCache.db
[2010/08/03 09:49:07 | 004,456,448 | ---- | M] () -- C:\Documents and Settings\Owner\NTUSER.DAT
[2010/08/03 00:49:25 | 000,119,906 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Network Discrimination.pptx
[2010/08/03 00:48:47 | 000,011,151 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\power point info.docx
[2010/08/03 00:22:17 | 000,023,641 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\music_pirate_piracy_anti_riaa_icon_sticker-p217172253079285119qjcl_400.jpg
[2010/08/02 15:27:37 | 000,000,294 | RHS- | M] () -- C:\boot.ini
[2010/08/02 15:08:03 | 000,049,798 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\ITman.jpg
[2010/08/01 03:05:21 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/07/30 21:21:59 | 000,262,144 | ---- | M] () -- C:\WINDOWS\System32\default_user_class.dat
[2010/07/30 21:21:59 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Owner\ntuser.ini
[2010/07/29 23:08:34 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/07/29 23:08:34 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/07/29 22:59:26 | 000,027,112 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\ad2.gif
[2010/07/29 22:59:26 | 000,003,429 | ---- | M] () -- C:\Documents and Settings\Owner\.recently-used.xbel
[2010/07/29 22:49:18 | 000,082,513 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\ad2.png
[2010/07/27 01:00:33 | 000,011,931 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Letter of Transmital NOT DONE.docx
[2010/07/25 23:40:55 | 000,357,216 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Desktop Background.jpg
[2010/07/25 01:59:01 | 002,979,254 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Desktop Background.bmp
[2010/07/22 09:08:57 | 014,400,912 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\USS_Enterprise-30.mp3
[2010/07/18 04:07:03 | 000,536,854 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\wonka.jpg
[2010/07/08 19:09:58 | 000,051,712 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/29 14:55:55 | 000,002,626 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/06/28 15:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\WINDOWS\avastSS.scr
[2010/06/28 15:57:12 | 000,165,032 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010/06/28 15:37:52 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/06/28 15:37:30 | 000,165,456 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010/06/28 15:33:13 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/06/28 15:32:45 | 000,100,176 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/06/28 15:32:42 | 000,094,544 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010/06/28 15:32:33 | 000,017,744 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/06/28 15:32:16 | 000,028,880 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/06/28 15:23:22 | 000,000,128 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\fusioncache.dat
[2010/06/28 08:04:59 | 000,001,716 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\DDO Unlimited.lnk
[2010/06/26 01:34:22 | 000,000,419 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\hexplorer.dat
[2010/06/26 01:34:22 | 000,000,004 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\mclip.dat
[2010/06/23 13:51:59 | 000,090,736 | ---- | M] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/06/20 22:28:27 | 000,000,633 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/06/18 23:26:54 | 000,335,464 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/06/15 18:53:29 | 000,000,086 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\MTC-savedfolder.dat
[2010/06/13 00:17:16 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/06/09 23:45:25 | 000,444,952 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2010/06/09 23:45:25 | 000,109,080 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\WINDOWS\System32\OpenAL32.dll
[2010/06/09 15:35:47 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\HiJackThis.lnk
[2010/06/09 15:31:22 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/06/09 15:31:17 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010/06/09 15:12:19 | 000,000,223 | ---- | M] () -- C:\Boot.bak
[2010/06/06 11:32:00 | 003,819,912 | ---- | M] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\GameMon.des
[2010/06/04 19:38:22 | 000,000,671 | ---- | M] () -- C:\Documents and Settings\Owner\Application Data\vso_ts_preview.xml
[2010/05/30 14:01:10 | 000,000,008 | ---- | M] () -- C:\WINDOWS\System32\nvModes.dat
[2010/05/15 23:51:06 | 000,000,698 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\DAEMON Tools.lnk
[2010/05/11 05:24:05 | 000,000,710 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\ComicRack.lnk
[2010/05/09 22:28:15 | 000,000,478 | ---- | M] () -- C:\Documents and Settings\Owner\Desktop\Fraps.lnk

========== Files Created - No Company Name ==========

[2010/08/03 00:22:16 | 000,023,641 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\music_pirate_piracy_anti_riaa_icon_sticker-p217172253079285119qjcl_400.jpg
[2010/08/02 16:07:52 | 000,119,906 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Network Discrimination.pptx
[2010/08/02 15:51:54 | 000,011,151 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\power point info.docx
[2010/08/02 15:08:03 | 000,049,798 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\ITman.jpg
[2010/07/30 21:21:59 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\default_user_class.dat
[2010/07/29 23:08:34 | 000,001,620 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/07/29 23:08:34 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2010/07/29 22:59:26 | 000,027,112 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\ad2.gif
[2010/07/29 22:59:26 | 000,003,429 | ---- | C] () -- C:\Documents and Settings\Owner\.recently-used.xbel
[2010/07/29 22:49:18 | 000,082,513 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\ad2.png
[2010/07/28 21:15:12 | 000,011,931 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Letter of Transmital NOT DONE.docx
[2010/07/25 23:40:55 | 000,357,216 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Desktop Background.jpg
[2010/07/25 23:36:37 | 002,979,254 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Desktop Background.bmp
[2010/07/25 22:25:34 | 2146,619,392 | -HS- | C] () -- C:\hiberfil.sys
[2010/07/22 09:08:37 | 014,400,912 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\USS_Enterprise-30.mp3
[2010/07/18 04:07:02 | 000,536,854 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\wonka.jpg
[2010/06/28 15:23:22 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Owner\Local Settings\Application Data\fusioncache.dat
[2010/06/28 08:04:59 | 000,001,716 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\DDO Unlimited.lnk
[2010/06/26 01:32:33 | 000,000,419 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\hexplorer.dat
[2010/06/26 01:32:33 | 000,000,004 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\mclip.dat
[2010/06/22 23:14:37 | 000,057,230 | ---- | C] () -- C:\Documents and Settings\Owner\activity.txt
[2010/06/18 19:32:29 | 000,005,174 | ---- | C] () -- C:\WINDOWS\System32\nppt9x.vxd
[2010/06/15 18:53:26 | 000,000,086 | ---- | C] () -- C:\Documents and Settings\Owner\Application Data\MTC-savedfolder.dat
[2010/06/09 15:28:52 | 000,000,223 | ---- | C] () -- C:\Boot.bak
[2010/06/09 15:28:49 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010/06/09 15:25:51 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/06/09 15:25:51 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/06/09 15:25:51 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/06/09 15:25:51 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/06/09 15:25:51 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/06/08 03:12:57 | 000,002,447 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\HiJackThis.lnk
[2010/05/30 14:01:10 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2010/05/15 23:51:06 | 000,000,698 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\DAEMON Tools.lnk
[2010/05/11 05:24:05 | 000,000,710 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\ComicRack.lnk
[2010/05/09 22:28:15 | 000,000,478 | ---- | C] () -- C:\Documents and Settings\Owner\Desktop\Fraps.lnk
[2010/04/04 19:28:19 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2010/02/17 00:17:41 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2010/02/15 18:20:58 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2010/02/04 19:59:43 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2010/01/18 16:13:59 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010/01/18 16:13:58 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/01/18 16:13:55 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2010/01/18 16:13:55 | 002,378,752 | ---- | C] () -- C:\WINDOWS\System32\x264vfw.dll
[2010/01/18 16:13:55 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/01/18 16:13:55 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/01/18 16:13:54 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/01/18 16:13:54 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009/10/19 03:34:58 | 000,210,944 | ---- | C] () -- C:\WINDOWS\System32\msvcrt10.dll

========== LOP Check ==========

[2010/05/05 22:14:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/04/04 19:28:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Canneverbe Limited
[2010/02/15 18:20:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Pro
[2010/03/07 17:02:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GARMIN
[2010/06/28 00:03:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PMB Files
[2010/01/19 23:09:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\vsosdk
[2010/05/07 23:38:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\BeatportDownloader.EE670286545758FAB4A69D4439CF6054F83E0AC2.1
[2010/04/04 19:28:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Canneverbe Limited
[2010/05/11 05:25:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\cYo
[2010/02/15 18:30:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\DAEMON Tools Pro
[2010/01/18 16:13:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Foxit
[2010/03/07 16:29:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\GARMIN
[2010/07/08 19:04:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\GetRightToGo
[2010/07/29 22:59:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\gtk-2.0
[2010/07/07 23:20:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\I2P
[2010/05/11 17:41:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\LolClient
[2010/01/20 01:21:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\LolClient.F24C99354F615F3BAB18AE7B93E3F9B9E8784FA6.1
[2010/05/07 22:44:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\M-Audio
[2010/05/07 23:49:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Rapid Evolution 2
[2010/02/23 20:17:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Renoise
[2010/05/30 21:41:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\smc
[2010/06/28 15:23:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Turbine
[2010/07/26 00:25:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\uTorrent
[2010/06/04 19:38:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Vso
[2010/07/15 00:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Vupeav
[2010/07/14 16:23:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner\Application Data\Ywexo
[2010/08/04 22:45:45 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{42450835-FFD9-441E-A3AA-D6367F4E74A4}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/01/18 16:04:33 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/06/09 15:12:19 | 000,000,223 | ---- | M] () -- C:\Boot.bak
[2010/08/02 15:27:37 | 000,000,294 | RHS- | M] () -- C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2010/06/09 15:32:22 | 000,018,804 | ---- | M] () -- C:\ComboFix.txt
[2010/01/18 16:04:33 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2009/08/06 20:19:45 | 000,006,523 | ---- | M] () -- C:\DriverPack_WLAN_wnt5_x86-32.txt
[2010/08/04 22:10:18 | 2146,619,392 | -HS- | M] () -- C:\hiberfil.sys
[2010/01/18 16:04:33 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/01/18 16:04:33 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2008/04/14 07:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/04/14 07:00:00 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2010/08/04 22:10:13 | 754,974,720 | -HS- | M] () -- C:\pagefile.sys
[2010/07/25 22:08:26 | 000,000,392 | ---- | M] () -- C:\rkill.log

< %systemroot%\system32\*.wt >

< %systemroot%\system32\*.ruy >

< %systemroot%\Fonts\*.com >
[2006/04/18 14:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 13:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 14:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 13:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2010/01/18 16:04:10 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2009/08/14 09:19:28 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2006/10/26 19:56:12 | 000,033,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
[2009/08/14 09:19:28 | 000,589,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/06/28 15:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\WINDOWS\avastSS.scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2010/01/18 09:41:17 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2010/01/18 09:41:17 | 001,073,152 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2010/01/18 09:41:17 | 000,897,024 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
"NoAutoRebootWithLoggedOnUsers" = 1
"RebootRelaunchTimeoutEnabled" = 1
"RebootRelaunchTimeout" = 1440

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-06-16 00:32:23
< End of report >