And also , I can't access windows update error 80072EFD
OTL logfile created on: 24/03/2011 1:26:10 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = E:\
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8080.16413)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy
4.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 31.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 78.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 698.63 Gb Total Space | 449.11 Gb Free Space | 64.28% Space Free | Partition Type: NTFS
Drive D: | 465.76 Gb Total Space | 465.62 Gb Free Space | 99.97% Space Free | Partition Type: NTFS
Drive E: | 931.51 Gb Total Space | 110.01 Gb Free Space | 11.81% Space Free | Partition Type: NTFS
Computer Name: CHRISTIAN-PC | User Name: Christian | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/03/24 13:25:23 | 000,580,608 | ---- | M] (OldTimer Tools) -- E:\OTL.exe
PRC - [2011/02/25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2011/01/27 14:42:42 | 000,943,472 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
PRC - [2010/12/10 19:29:30 | 029,293,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Dragon Age\tools\toolssql\MSSQL.1\MSSQL\Binn\sqlservr.exe
PRC - [2010/08/04 17:22:12 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\ASTSRV.EXE
PRC - [2010/07/21 11:51:43 | 000,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2009/12/28 21:35:30 | 000,629,888 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\AASP\1.01.02\aaCenter.exe
PRC - [2009/01/22 20:43:54 | 001,352,704 | ---- | M] () -- C:\Program Files (x86)\ASUS\AI Suite\EnergySaving\PwSave.exe
========== Modules (SafeList) ==========
MOD - [2011/03/24 13:25:23 | 000,580,608 | ---- | M] (OldTimer Tools) -- E:\OTL.exe
MOD - [2010/11/20 07:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV:64bit: - [2011/03/20 09:09:12 | 001,431,888 | ---- | M] (Flexera Software, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2010/12/13 15:37:16 | 000,194,416 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS64.exe -- (MSCamSvc)
SRV:64bit: - [2010/11/25 11:24:26 | 000,639,488 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\GenArts\Monsters-OFX64\bin\FlowFinder3MonstersOFX64.exe -- (FlowFinder3MonstersOFX64)
SRV:64bit: - [2010/10/27 19:21:12 | 000,036,160 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp)
SRV:64bit: - [2010/10/21 10:38:38 | 005,790,064 | ---- | M] (Wacom Technology, Corp.) [Disabled | Stopped] -- C:\Program Files\Tablet\Pen\Pen_Tablet.exe -- (TabletServicePen)
SRV:64bit: - [2010/10/21 10:38:38 | 000,487,280 | ---- | M] (Wacom Technology, Corp.) [Disabled | Stopped] -- C:\Program Files\Tablet\Pen\Pen_TouchService.exe -- (TouchServicePen)
SRV:64bit: - [2010/09/22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2010/08/24 18:30:04 | 000,096,768 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Autodesk\mrsat3.8.1-maya2011\bin\raysat2011server.exe -- (RaySat2011Server)
SRV:64bit: - [2010/03/10 01:38:18 | 000,086,016 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe -- (mi-raysat_3dsmax2011_64)
SRV:64bit: - [2009/12/24 08:55:30 | 002,430,304 | ---- | M] (Diskeeper Corporation) [Disabled | Stopped] -- C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe -- (Diskeeper)
SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009/07/13 21:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2011/03/17 20:35:44 | 003,229,784 | ---- | M] () [Auto | Running] -- c:\Program Files (x86)\Common Files\Akamai\netsession_win_d76cf65.dll -- (Akamai)
SRV - [2011/02/28 19:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/02/25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2011/02/23 01:17:26 | 000,378,984 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011/02/02 14:08:16 | 000,018,656 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service)
SRV - [2010/12/11 02:00:40 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService)
SRV - [2010/12/10 19:29:30 | 029,293,408 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Dragon Age\tools\toolssql\MSSQL.1\MSSQL\Binn\sqlservr.exe -- (MSSQL$BWDATOOLSET) SQL Server (BWDATOOLSET)
SRV - [2010/11/25 11:10:06 | 000,393,216 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\GenArts\Monsters-OFX64\bin\JawsServerOFX64.exe -- (JawsServerOFX64)
SRV - [2010/11/20 08:19:20 | 000,397,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2010/11/20 08:19:20 | 000,397,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC)
SRV - [2010/11/20 08:18:03 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2010/10/27 19:24:40 | 001,974,080 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc)
SRV - [2010/10/27 19:21:08 | 000,029,504 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp)
SRV - [2010/10/22 14:08:18 | 001,039,360 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
SRV - [2010/08/04 17:22:12 | 000,057,344 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\ASTSRV.EXE -- (astcc)
SRV - [2010/07/21 11:51:43 | 000,075,064 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2010/06/03 12:13:04 | 001,540,096 | ---- | M] (Reprise Software Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\GenArts\rlm\rlm.exe -- (RLM-GenArts)
SRV - [2010/04/29 20:33:47 | 002,480,048 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv)
SRV - [2010/04/16 12:34:22 | 001,045,256 | ---- | M] (Acresso Software Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/04/14 16:43:03 | 000,079,360 | ---- | M] (Creative Labs) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/10 02:10:38 | 000,086,016 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Autodesk\3ds Max Design 2011\mentalimages\satellite\raysat_3dsmax2011_32server.exe -- (mi-raysat_3dsmax2011_32)
SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/12/23 17:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Disabled | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009/12/15 16:07:16 | 000,025,832 | ---- | M] (BioWare) [Disabled | Stopped] -- C:\Program Files (x86)\Dragon Age\bin_ship\daupdatersvc.service.exe -- (DAUpdaterSvc)
SRV - [2009/12/15 06:55:32 | 000,034,816 | ---- | M] (3d-io GmbH) [Disabled | Stopped] -- C:\Program Files (x86)\3d-io plugins\licensing_v2\ActiveLockServerV2.exe -- (3d-io License Server v2.0)
SRV - [2009/11/12 03:50:24 | 000,894,136 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2009/09/17 08:06:00 | 001,246,496 | ---- | M] (SafeNet, Inc) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe -- (SentinelProtectionServer)
SRV - [2009/09/17 02:03:00 | 000,369,952 | ---- | M] (SafeNet, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe -- (SentinelKeysServer)
SRV - [2009/09/17 02:00:02 | 000,292,128 | ---- | M] (SafeNet, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe -- (SentinelSecurityRuntime)
SRV - [2009/06/10 17:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/02/23 11:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Disabled | Stopped] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2007/11/20 11:52:30 | 000,045,700 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\cebas\ip-clamp\ipclamp.exe -- (IPClampService)
SRV - [2007/10/24 16:43:48 | 000,139,268 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\DCPFLICS\DCPFLICS.exe -- (DCPFLICS)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2011/02/08 02:06:42 | 000,056,968 | ---- | M] (NetFilterSDK.com) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\networx.sys -- (networx)
DRV:64bit: - [2011/01/23 21:52:47 | 000,513,080 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2011/01/01 01:37:51 | 000,053,312 | ---- | M] (microOLAP Technologies LTD) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pssdk42.sys -- (PSSDK42)
DRV:64bit: - [2010/12/13 15:37:18 | 000,036,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nx6000.sys -- (MSHUSBVideo)
DRV:64bit: - [2010/11/20 09:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 09:32:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 09:32:46 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2010/11/20 07:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 07:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010/10/23 14:16:24 | 000,082,048 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin)
DRV:64bit: - [2010/10/05 14:26:10 | 000,018,288 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV:64bit: - [2010/10/05 14:26:02 | 000,012,848 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV:64bit: - [2010/10/05 14:26:00 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wacomvhid.sys -- (wacomvhid)
DRV:64bit: - [2010/09/23 00:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2010/04/29 20:33:48 | 000,251,488 | ---- | M] (Acronis) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\afcdp.sys -- (afcdp)
DRV:64bit: - [2010/04/29 20:33:46 | 001,477,728 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tdrpm258.sys -- (tdrpman258) Acronis Try&Decide and Restore Points filter (build 258)
DRV:64bit: - [2010/04/29 20:33:43 | 000,943,712 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\timntr.sys -- (timounter)
DRV:64bit: - [2010/04/29 20:33:34 | 000,257,120 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman)
DRV:64bit: - [2010/04/14 16:24:05 | 000,716,800 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr7364.sys -- (netr7364)
DRV:64bit: - [2010/03/22 13:11:12 | 000,049,752 | ---- | M] (Sunbelt Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\sbredrv.sys -- (SBRE)
DRV:64bit: - [2009/12/10 14:48:44 | 000,051,120 | ---- | M] (Diskeeper Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\DKRtWrt.sys -- (DKRtWrt)
DRV:64bit: - [2009/12/03 07:00:00 | 000,103,224 | ---- | M] (WIBU-SYSTEMS AG) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\WibuKey64.sys -- (WIBUKEY)
DRV:64bit: - [2009/09/17 08:05:02 | 000,145,448 | ---- | M] (SafeNet, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\sentinel64.sys -- (Sentinel64)
DRV:64bit: - [2009/09/11 12:49:18 | 000,076,552 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore)
DRV:64bit: - [2009/09/11 12:49:08 | 000,015,880 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid)
DRV:64bit: - [2009/09/11 12:48:58 | 000,036,872 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo)
DRV:64bit: - [2009/09/11 12:48:46 | 000,041,096 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter)
DRV:64bit: - [2009/09/11 12:48:36 | 000,026,248 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum)
DRV:64bit: - [2009/07/16 11:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/09 03:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009/06/10 16:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/06/10 11:14:36 | 000,043,264 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SaiBus.sys -- (SaiNtBus)
DRV:64bit: - [2009/06/10 11:14:36 | 000,016,000 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SaiMini.sys -- (SaiMini)
DRV:64bit: - [2009/06/04 02:49:58 | 001,561,112 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ha20x2k.sys -- (ha20x2k)
DRV:64bit: - [2009/06/04 02:49:42 | 000,118,296 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia)
DRV:64bit: - [2009/06/04 02:49:34 | 000,213,016 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV:64bit: - [2009/06/04 02:49:26 | 000,015,896 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV:64bit: - [2009/06/04 02:49:18 | 000,179,224 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv)
DRV:64bit: - [2009/06/04 02:49:08 | 000,684,312 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV:64bit: - [2009/06/04 02:49:00 | 000,580,632 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k)
DRV:64bit: - [2009/06/04 02:48:50 | 001,417,240 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTEXFIFX.sys -- (CTEXFIFX.SYS)
DRV:64bit: - [2009/06/04 02:48:50 | 001,417,240 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTEXFIFX.sys -- (CTEXFIFX)
DRV:64bit: - [2009/06/04 02:48:38 | 000,094,744 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTHWIUT.sys -- (CTHWIUT.SYS)
DRV:64bit: - [2009/06/04 02:48:38 | 000,094,744 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTHWIUT.sys -- (CTHWIUT)
DRV:64bit: - [2009/06/04 02:48:30 | 000,202,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CT20XUT.sys -- (CT20XUT.SYS)
DRV:64bit: - [2009/06/04 02:48:30 | 000,202,776 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CT20XUT.sys -- (CT20XUT)
DRV:64bit: - [2009/04/08 14:28:46 | 000,068,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
DRV:64bit: - [2008/10/22 14:48:40 | 000,131,584 | ---- | M] (Saitek) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SaiKCB03.sys -- (SaiKCB03)
DRV:64bit: - [2007/05/01 15:48:56 | 000,171,144 | ---- | M] (Saitek) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SaiH5F0D.sys -- (SaiH5F0D)
DRV:64bit: - [2007/05/01 15:48:56 | 000,034,304 | ---- | M] (Saitek) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SaiU5F0D.sys -- (SaiU5F0D)
DRV - [2010/10/07 14:34:32 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ca.msn.com/?l...en-ca&OCID=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 10 A2 F2 A8 91 26 CB 01 [binary data]
IE - HKCU\..\URLSearchHook: {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.90
FF - prefs.js..extensions.enabledItems: {01A8CA0A-4C96-465b-A49B-65C46FAD54F9}:6.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/04/26 10:22:14 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}: C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2010/05/01 17:07:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2010/12/04 17:44:23 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/03/18 09:45:05 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/03/22 12:43:18 | 000,000,000 | ---D | M]
[2010/05/22 00:29:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian\AppData\Roaming\Mozilla\Extensions
[2010/05/22 00:29:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian\AppData\Roaming\Mozilla\Extensions\[email protected]
[2011/03/18 11:18:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\zd7edhc1.default\extensions
[2010/05/21 22:57:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\zd7edhc1.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
[2011/03/16 20:34:13 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\zd7edhc1.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/09/11 15:28:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\zd7edhc1.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010/09/28 23:39:14 | 000,002,333 | ---- | M] () -- C:\Users\Christian\AppData\Roaming\Mozilla\Firefox\Profiles\zd7edhc1.default\searchplugins\askcom.xml
[2011/03/07 12:34:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/04/16 17:51:01 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/08/16 10:11:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/10/18 20:15:47 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/01/03 11:20:42 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/03/07 12:34:02 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2010/12/04 17:44:23 | 000,000,000 | ---D | M] (Adobe Acrobat - Create PDF) -- C:\PROGRAM FILES (X86)\ADOBE\ACROBAT 10.0\ACROBAT\BROWSER\WCFIREFOXEXTN
[2010/05/01 17:07:55 | 000,000,000 | ---D | M] (Adobe Contribute Toolbar) -- C:\PROGRAM FILES (X86)\ADOBE\ADOBE CONTRIBUTE CS5\PLUGINS\FIREFOXPLUGIN\{01A8CA0A-4C96-465B-A49B-65C46FAD54F9}
[2010/03/27 18:06:04 | 000,067,032 | ---- | M] (Adobe Systems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npContribute.dll
[2011/02/02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2009/07/31 13:06:48 | 001,654,784 | ---- | M] (LizardTech) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdjvu.dll
[2010/12/04 17:11:43 | 000,072,960 | ---- | M] (Foxit Software Company) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
[2010/12/09 06:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
O1 HOSTS File: ([2011/01/18 20:00:42 | 000,002,395 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 28 more lines...
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3:64bit: - HKLM\..\Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (Snagit) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitIEAddin64.dll (TechSmith Corporation)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll (Adobe Systems, Inc.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Snagit) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitIEAddin.dll (TechSmith Corporation)
O3 - HKLM\..\Toolbar: (Copernic Agent) - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Copernic Agent) - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
O4 - HKLM..\Run: [] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Search Using Copernic Agent - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
O8 - Extra context menu item: Search Using Copernic Agent - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
O9 - Extra 'Tools' menuitem : Launch Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\Program Files (x86)\Copernic Agent\CopernicAgent.exe (Copernic Technologies Inc.)
O9 - Extra Button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\Program Files (x86)\Copernic Agent\CopernicAgent.exe (Copernic Technologies Inc.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} http://cdn.scan.onec...a/wlscctrl2.cab (Windows Live OneCare safety scanner control)
O16 - DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} http://das.microsoft...tail/DASAct.cab (DASWebDownload Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.4.2_04)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} http://gfx2.hotmail....NPUplden-ca.cab (Windows Live Hotmail Photo Upload Tool)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creat...15111/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18:64bit: - Protocol\Handler\copernicagent {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\copernicagentcache {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18 - Protocol\Handler\copernicagent {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
O18 - Protocol\Handler\copernicagentcache {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - C:\Program Files (x86)\Copernic Agent\CopernicAgentExt.dll (Copernic Technologies Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/02/08 11:24:10 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{f5b5875c-3e85-11e0-8fc3-0023540784db}\Shell - "" = AutoRun
O33 - MountPoints2\{f5b5875c-3e85-11e0-8fc3-0023540784db}\Shell\AutoRun\command - "" = N:\LaunchU3.exe -a
O33 - MountPoints2\M\Shell - "" = AutoRun
O33 - MountPoints2\M\Shell\AutoRun\command - "" = M:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/03/24 12:09:45 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2011/03/24 11:05:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live Safety Center
[2011/03/24 08:34:50 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{E4FB4CB2-AAB3-46B2-9001-CD103DDEA29B}
[2011/03/23 20:24:46 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{0F508BD1-09BA-45AE-A9F8-B0AAF5B3651A}
[2011/03/23 14:15:34 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Roaming\Malwarebytes
[2011/03/23 14:15:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/03/23 14:15:26 | 000,024,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011/03/23 08:21:47 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{85D34C98-46F0-44B4-8E9F-598044E221C0}
[2011/03/22 08:04:08 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{7554D0F0-8115-40D7-BC57-AEF4F8BEEF29}
[2011/03/21 10:19:47 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Left 4 Dead 2
[2011/03/20 20:54:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Sandlot Games
[2011/03/20 13:26:07 | 000,000,000 | ---D | C] -- C:\ProgramData\CELSYS
[2011/03/20 13:25:55 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Roaming\Smith Micro
[2011/03/20 13:23:39 | 000,000,000 | ---D | C] -- C:\Users\Christian\Documents\Smith Micro
[2011/03/20 13:23:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Manga Studio EX 4.0
[2011/03/20 13:23:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Smith Micro
[2011/03/20 10:30:52 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{C32C9C14-AA6D-4392-A349-74DB8BE84260}
[2011/03/20 09:27:29 | 000,000,000 | ---D | C] -- C:\Users\Christian\Documents\Inventor Server x64 AutoCAD 2012 Language Pack - English
[2011/03/19 10:30:14 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{F1F42B8F-418E-46F5-A72A-B88602DAC8D2}
[2011/03/18 22:29:49 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{F46E6B21-0F2F-4B71-A95A-DD86A260D0B2}
[2011/03/18 21:13:08 | 000,067,176 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2011/03/18 21:13:08 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2011/03/17 10:11:36 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{DB2D40F6-AF8F-4FCB-BF02-C4A049D1987A}
[2011/03/17 08:03:03 | 000,000,000 | ---D | C] -- C:\Users\Christian\Desktop\Games
[2011/03/16 10:10:59 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{AD933EFD-88CC-484F-8116-5974435575C1}
[2011/03/16 08:11:47 | 000,000,000 | ---D | C] -- C:\Users\Christian\Documents\AnyDVDHD
[2011/03/16 08:11:37 | 000,000,000 | ---D | C] -- C:\ProgramData\SlySoft
[2011/03/15 10:10:20 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{2695689E-11F2-4BD9-9B84-6DFC8DB07EE4}
[2011/03/14 10:09:43 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{48B51C04-A5E0-4B16-9C77-4D5E9319AA30}
[2011/03/13 22:09:20 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{C00B0EBB-0F44-45F6-83F6-2E63CC694E5B}
[2011/03/13 10:08:56 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{0D0216C4-A537-47B1-B4B8-F0312942D794}
[2011/03/12 13:57:20 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{EFF181DA-E091-404F-AE7B-6BA4898F03BB}
[2011/03/10 21:18:27 | 000,034,624 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe
[2011/03/10 21:18:13 | 000,036,160 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll
[2011/03/10 21:18:13 | 000,029,504 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll
[2011/03/10 21:18:12 | 000,025,920 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll
[2011/03/10 21:18:10 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll
[2011/03/10 21:18:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2011
[2011/03/10 21:17:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TuneUp Utilities 2011
[2011/03/10 13:56:20 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{3DC8DBF1-3956-4FE8-A284-FA9D85C5646E}
[2011/03/10 01:55:55 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{6B68A972-FFBB-4A2E-96BA-FAAFECE1559A}
[2011/03/09 14:47:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dragon Age 2
[2011/03/09 13:55:31 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{4B9B5F71-D20E-4E86-A6CA-C9E1D43DAF08}
[2011/03/09 01:54:39 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{9F87C919-B2D3-4B2D-A92A-0557A8603ECC}
[2011/03/08 13:40:32 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{A85C7F85-D231-4000-B7C4-6DC20C30061E}
[2011/03/08 12:15:04 | 000,049,752 | ---- | C] (Sunbelt Software) -- C:\Windows\SysNative\drivers\sbredrv.sys
[2011/03/08 12:15:04 | 000,027,472 | ---- | C] (Sunbelt Software) -- C:\Windows\SysNative\sbbd.exe
[2011/03/07 23:28:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2011/03/07 23:28:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2011/03/07 13:38:34 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{9924FC65-1A9A-4FBC-B32D-1E012E5AE7E5}
[2011/03/07 01:38:02 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{E2BFD0BA-F219-4ED2-BA4B-129CA34C25F7}
[2011/03/06 18:22:01 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview
[2011/03/06 18:21:44 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders
[2011/03/06 18:15:03 | 000,116,224 | ---- | C] (Windows ® Codename Longhorn DDK provider) -- C:\Windows\SysNative\fms.dll
[2011/03/06 18:14:30 | 000,093,696 | ---- | C] (Windows ® Codename Longhorn DDK provider) -- C:\Windows\SysWow64\fms.dll
[2011/03/06 11:34:51 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{89B0D055-64AE-4672-9746-7178D4F95E39}
[2011/03/05 09:07:11 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{31634AE0-E2E0-4BCD-9713-D745EBD6094E}
[2011/03/04 21:06:46 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{959BD7F2-325D-479F-BA58-F65C641E231D}
[2011/03/04 17:21:19 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Roaming\AVS4YOU
[2011/03/04 17:20:39 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU
[2011/03/04 17:19:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU
[2011/03/04 17:19:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVSMedia
[2011/03/04 17:19:44 | 000,000,000 | ---D | C] -- C:\ProgramData\AVS4YOU
[2011/03/04 17:19:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVS4YOU
[2011/03/04 17:16:12 | 000,000,000 | ---D | C] -- C:\ProgramData\yCtSvaYGuPFv
[2011/03/04 09:06:16 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{1EC6F44A-5980-4581-AF94-B1F83F53A085}
[2011/03/03 20:23:56 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{A36BFDB7-3457-4552-B018-8729C55120A1}
[2011/03/03 08:23:23 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{3F66A1EF-E430-499F-A509-EBF37563AAC2}
[2011/03/03 02:20:09 | 000,000,000 | ---D | C] -- C:\Users\Christian\Documents\Toon Boom Animate Pro Library
[2011/03/03 00:32:37 | 000,000,000 | ---D | C] -- C:\Users\Christian\Impostazioni locali
[2011/03/02 15:31:10 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{C6947935-687F-4A11-8006-108CA852B268}
[2011/03/02 03:30:43 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{660CC4DB-BA72-416D-A06B-A8D68A578914}
[2011/03/01 16:27:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3 Player Utilities 4.15
[2011/03/01 16:27:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MP3 Player Utilities 4.15
[2011/03/01 13:17:11 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{FD6F6030-6390-47B3-942F-B77B0C078287}
[2011/03/01 01:28:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LooksBuilder
[2011/02/28 11:09:25 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{01D28586-DF9C-4777-8222-D14A1EEBB812}
[2011/02/27 23:08:59 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{751BA857-5EB5-4C2F-AB48-AC30B66E6B89}
[2011/02/27 22:59:54 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bamboo
[2011/02/27 09:37:23 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{0B20B71B-E8E8-42ED-BAC6-A7D76F24C3E5}
[2011/02/26 18:06:25 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{01D1F61B-2313-47FA-BBAD-EE95BD0B8745}
[2011/02/26 17:50:57 | 000,000,000 | ---D | C] -- C:\Users\Christian\AppData\Local\{96BDCD7E-76B6-43B0-8E71-F437CD74EE03}
[2011/02/26 17:50:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Feedback Tool
[2011/02/26 17:48:18 | 000,000,000 | ---D | C] -- C:\Windows\en
[2011/02/26 17:40:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft
[2011/02/26 01:33:24 | 000,000,000 | ---D | C] -- C:\Users\Christian\Documents\Mari
[2011/02/26 01:33:24 | 000,000,000 | ---D | C] -- C:\Users\Christian\.mari
[2011/02/26 01:28:34 | 000,000,000 | ---D | C] -- C:\Program Files\Mari1.2v1
[2011/02/25 21:26:58 | 000,592,803 | ---- | C] ( ) -- C:\Users\Christian\Desktop\CDRun_EN.exe
[2011/02/25 16:11:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Keyboard
[2011/02/25 16:11:08 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliType Pro
[2011/02/25 16:04:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cooler Master
[2011/02/25 16:04:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cooler Master
[2011/02/25 15:57:04 | 000,000,000 | ---D | C] -- C:\Users\Christian\Documents\Inferno
[2011/02/24 12:08:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mayer-Johnson
[2011/02/24 12:07:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Boardmaker with SD Pro
[2011/02/24 12:07:42 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Boardmaker Software Family
[2011/02/24 10:46:01 | 000,178,800 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll
[2011/02/23 22:00:24 | 000,000,000 | ---D | C] -- C:\Users\Christian\Documents\My Boards
[2010/10/23 14:16:24 | 000,082,048 | ---- | C] (VSO Software) -- C:\Users\Christian\AppData\Roaming\pcouffin.sys
[2009/06/04 00:57:38 | 000,060,928 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll
[2009/06/04 00:32:54 | 000,012,800 | ---- | C] ( ) -- C:\Windows\SysWow64\killapps.exe
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/03/24 13:01:00 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/03/24 12:03:14 | 000,016,000 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/24 12:03:14 | 000,016,000 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/24 12:00:19 | 001,018,914 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/03/24 12:00:19 | 000,835,738 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/03/24 12:00:19 | 000,188,122 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/03/24 11:54:30 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/03/24 11:53:18 | 000,000,312 | -HS- | M] () -- C:\Windows\tasks\rhuaqihk.job
[2011/03/24 11:52:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/03/24 11:52:18 | 3220,086,784 | -HS- | M] () -- C:\hiberfil.sys
[2011/03/24 11:51:31 | 000,062,788 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000005-00000000-00000007-00001102-00000005-00211102}.rfx
[2011/03/24 11:51:31 | 000,062,788 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000005-00000000-00000007-00001102-00000005-00211102}.rfx
[2011/03/24 11:51:31 | 000,000,788 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000005-00000000-00000007-00001102-00000005-00211102}.rfx
[2011/03/24 11:48:48 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2011/03/24 08:59:00 | 000,001,908 | ---- | M] () -- C:\Windows\diagwrn.xml
[2011/03/24 08:59:00 | 000,001,908 | ---- | M] () -- C:\Windows\diagerr.xml
[2011/03/23 20:59:18 | 001,027,752 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/03/23 12:16:03 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\SBRC.dat
[2011/03/23 10:57:05 | 000,093,696 | RHS- | M] () -- C:\Windows\SysWow64\xmltokg.dll
[2011/03/22 08:01:04 | 005,076,488 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011/03/18 18:46:46 | 000,000,136 | ---- | M] () -- C:\Users\Christian\Desktop\Ratatouille Demo - Shortcut.lnk
[2011/03/18 17:27:55 | 000,005,120 | ---- | M] () -- C:\Users\Christian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/16 07:58:46 | 000,000,081 | -HS- | M] () -- C:\ProgramData\.zreglib
[2011/03/15 04:31:40 | 000,000,336 | ---- | M] () -- C:\Windows\SysWow64\CountBlockedByFirewall.XML
[2011/03/14 21:20:42 | 001,889,498 | ---- | M] () -- C:\Users\Christian\Desktop\Circuit[1].pdf
[2011/03/10 21:18:06 | 000,002,209 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Click Maintenance.lnk
[2011/03/10 21:18:06 | 000,002,191 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities 2011.lnk
[2011/03/09 21:41:49 | 000,000,438 | ---- | M] () -- C:\Windows\SysWow64\WSCConfig.xml
[2011/03/09 21:41:48 | 000,018,662 | ---- | M] () -- C:\Windows\SysWow64\FirewallConfig.xml
[2011/03/09 21:41:48 | 000,001,110 | ---- | M] () -- C:\Windows\SysWow64\ServiceConfig.xml
[2011/03/07 23:28:53 | 000,001,950 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2011/03/07 23:22:33 | 000,000,124 | ---- | M] () -- C:\Users\Christian\Documents\ax_files.xml
[2011/03/04 17:19:58 | 000,001,237 | ---- | M] () -- C:\Users\Christian\Desktop\AVS Video Converter.lnk
[2011/02/26 18:04:01 | 000,001,437 | ---- | M] () -- C:\Users\Christian\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/02/26 17:53:04 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2011/02/26 17:53:03 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2011/02/24 12:08:48 | 000,001,070 | ---- | M] () -- C:\Users\Public\Desktop\AdaptedLearning.lnk
[2011/02/24 12:08:41 | 000,001,940 | ---- | M] () -- C:\Users\Public\Desktop\Boardmaker with SD Pro v6 Demo.LNK
[2011/02/24 10:46:01 | 000,178,800 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll
[2011/02/23 04:28:00 | 000,067,176 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2011/02/23 04:28:00 | 000,057,960 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2011/02/23 04:28:00 | 000,007,621 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/03/24 08:56:39 | 000,001,908 | ---- | C] () -- C:\Windows\diagwrn.xml
[2011/03/24 08:56:39 | 000,001,908 | ---- | C] () -- C:\Windows\diagerr.xml
[2011/03/23 20:59:41 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif
[2011/03/23 12:16:03 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\SBRC.dat
[2011/03/23 10:57:05 | 000,093,696 | RHS- | C] () -- C:\Windows\SysWow64\xmltokg.dll
[2011/03/23 10:57:05 | 000,000,312 | -HS- | C] () -- C:\Windows\tasks\rhuaqihk.job
[2011/03/18 18:46:46 | 000,000,136 | ---- | C] () -- C:\Users\Christian\Desktop\Ratatouille Demo - Shortcut.lnk
[2011/03/15 04:31:40 | 000,000,336 | ---- | C] () -- C:\Windows\SysWow64\CountBlockedByFirewall.XML
[2011/03/14 21:20:42 | 001,889,498 | ---- | C] () -- C:\Users\Christian\Desktop\Circuit[1].pdf
[2011/03/10 21:18:06 | 000,002,209 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Click Maintenance.lnk
[2011/03/10 21:18:06 | 000,002,191 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp Utilities 2011.lnk
[2011/03/10 21:18:01 | 000,002,203 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2011
[2011/03/09 21:41:49 | 000,000,438 | ---- | C] () -- C:\Windows\SysWow64\WSCConfig.xml
[2011/03/09 21:41:47 | 000,001,110 | ---- | C] () -- C:\Windows\SysWow64\ServiceConfig.xml
[2011/03/09 21:41:46 | 000,018,662 | ---- | C] () -- C:\Windows\SysWow64\FirewallConfig.xml
[2011/03/07 23:28:53 | 000,001,950 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2011/03/06 18:17:54 | 000,095,744 | ---- | C] () -- C:\Windows\SysNative\RDVGHelper.exe
[2011/03/06 18:17:07 | 000,347,904 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd
[2011/03/06 18:14:02 | 000,010,429 | ---- | C] () -- C:\Windows\SysNative\ScavengeSpace.xml
[2011/03/06 18:13:34 | 000,105,559 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml
[2011/03/06 18:13:34 | 000,105,559 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml
[2011/03/06 18:13:02 | 000,146,389 | ---- | C] () -- C:\Windows\SysWow64\printmanagement.msc
[2011/03/06 18:13:02 | 000,001,041 | ---- | C] () -- C:\Windows\SysWow64\tcpbidi.xml
[2011/03/04 17:19:58 | 000,001,237 | ---- | C] () -- C:\Users\Christian\Desktop\AVS Video Converter.lnk
[2011/02/26 17:53:04 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2011/02/26 17:53:03 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2011/02/24 12:08:48 | 000,001,070 | ---- | C] () -- C:\Users\Public\Desktop\AdaptedLearning.lnk
[2011/02/24 12:08:41 | 000,001,940 | ---- | C] () -- C:\Users\Public\Desktop\Boardmaker with SD Pro v6 Demo.LNK
[2011/02/23 21:25:31 | 000,000,081 | -HS- | C] () -- C:\ProgramData\.zreglib
[2011/02/18 17:29:08 | 000,000,187 | ---- | C] () -- C:\ProgramData\{DBA95D57-EA1E-4EC4-8018-ED2556560AC1}_WiseFW.ini
[2011/02/18 17:26:26 | 000,000,205 | ---- | C] () -- C:\ProgramData\{44D4A549-ED93-452B-902E-735CB5794756}_WiseFW.ini
[2011/02/18 00:19:48 | 000,073,220 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat
[2011/02/18 00:19:48 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat
[2011/02/18 00:19:48 | 000,029,114 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat
[2011/02/18 00:19:48 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat
[2011/02/18 00:19:48 | 000,021,021 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat
[2011/02/18 00:19:48 | 000,015,670 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat
[2011/02/18 00:19:48 | 000,013,280 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat
[2011/02/18 00:19:48 | 000,010,673 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat
[2011/02/18 00:19:48 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat
[2011/02/18 00:19:48 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2011/02/18 00:19:48 | 000,001,140 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2011/02/18 00:19:48 | 000,001,137 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2011/02/18 00:19:48 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2011/02/18 00:19:48 | 000,001,130 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2011/02/18 00:19:48 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2011/02/18 00:19:48 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2011/02/18 00:18:55 | 000,000,071 | ---- | C] () -- C:\Windows\EPNX110.ini
[2011/02/15 11:13:52 | 000,034,308 | ---- | C] () -- C:\ProgramData\mazuki.dll
[2011/02/11 04:32:50 | 000,000,132 | ---- | C] () -- C:\Users\Christian\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2011/01/29 16:10:52 | 000,052,265 | ---- | C] () -- C:\Windows\MaxwellMaxPluginUninstall.exe
[2011/01/23 21:44:58 | 000,000,000 | ---- | C] () -- C:\Users\Christian\AppData\Roaming\chrtmp
[2011/01/14 15:33:07 | 000,052,373 | ---- | C] () -- C:\Windows\MaxwellMayaPluginUninstall.exe
[2010/12/30 13:00:01 | 000,005,120 | ---- | C] () -- C:\Users\Christian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/11 02:01:15 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe
[2010/12/02 12:17:15 | 000,061,493 | ---- | C] () -- C:\ProgramData\bdinstall.bin
[2010/11/26 03:38:28 | 000,000,207 | ---- | C] () -- C:\Windows\MSUTIL.INI
[2010/10/23 14:17:50 | 000,000,014 | ---- | C] () -- C:\Windows\SysWow64\systeminfo3.dll
[2010/10/23 14:16:24 | 000,093,696 | ---- | C] () -- C:\Users\Christian\AppData\Roaming\ezpinst.exe
[2010/10/23 14:16:24 | 000,007,176 | ---- | C] () -- C:\Users\Christian\AppData\Roaming\pcouffin.cat
[2010/10/23 14:16:24 | 000,001,167 | ---- | C] () -- C:\Users\Christian\AppData\Roaming\pcouffin.inf
[2010/10/14 02:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2010/09/23 09:49:11 | 000,056,414 | ---- | C] () -- C:\Windows\RFMayaPluginUninstall.exe
[2010/09/23 09:48:23 | 000,056,732 | ---- | C] () -- C:\Windows\RFMaxPluginUninstall.exe
[2010/09/22 01:03:13 | 000,052,171 | ---- | C] () -- C:\Windows\RFC4DPluginUninstall.exe
[2010/09/10 19:33:33 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2010/08/10 00:02:07 | 000,000,110 | ---- | C] () -- C:\ProgramData\{B688D716-6A1A-47F7-9734-11A24071909A}_WiseFW.ini
[2010/08/09 23:57:00 | 000,000,110 | ---- | C] () -- C:\ProgramData\{22D3D528-C34C-4AB7-B16A-C1F627166C4E}_WiseFW.ini
[2010/08/09 23:54:29 | 000,000,110 | ---- | C] () -- C:\ProgramData\{5234D1A7-1C23-42D1-B894-58A6384680ED}_WiseFW.ini
[2010/08/09 23:23:37 | 000,000,187 | ---- | C] () -- C:\ProgramData\{092C0736-ED4A-46A6-96CF-1DCC5C6FB11D}_WiseFW.ini
[2010/08/09 23:22:02 | 000,000,187 | ---- | C] () -- C:\ProgramData\{DA16098E-E65E-46CC-9E45-26EE862C5845}_WiseFW.ini
[2010/08/09 23:08:37 | 000,000,208 | ---- | C] () -- C:\ProgramData\{6BC52438-5DE4-4102-846E-64C225A0A04E}_WiseFW.ini
[2010/08/03 09:27:00 | 000,109,782 | ---- | C] () -- C:\Windows\CopernicAgentUninstall.exe
[2010/08/01 23:04:11 | 000,000,102 | ---- | C] () -- C:\Windows\Antidote7.ini
[2010/07/28 10:13:58 | 000,000,036 | -H-- | C] () -- C:\Users\Christian\AppData\Roaming\swk.ini
[2010/07/21 11:51:43 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2010/07/08 10:37:14 | 000,101,544 | ---- | C] () -- C:\Program Files\Common Files\LinkInstaller.exe
[2010/05/18 16:36:55 | 000,667,136 | ---- | C] () -- C:\Windows\SysWow64\OGACheckControl.dll
[2010/05/13 17:24:28 | 000,069,632 | ---- | C] () -- C:\Windows\SysWow64\xmltok.dll
[2010/05/13 17:24:28 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\xmlparse.dll
[2010/05/12 16:11:31 | 000,222,757 | ---- | C] () -- C:\Windows\hpwins24.dat
[2010/05/12 16:11:31 | 000,001,832 | ---- | C] () -- C:\Windows\hpwmdl24.dat
[2010/05/11 16:48:24 | 000,534,016 | ---- | C] () -- C:\Windows\SysWow64\LS3Renderer.dll
[2010/04/28 13:58:45 | 001,048,576 | ---- | C] () -- C:\Windows\2102.BIN
[2010/04/26 10:20:07 | 000,023,145 | ---- | C] () -- C:\Windows\hpqins15.dat
[2010/04/20 09:33:20 | 000,215,128 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2010/04/20 09:33:07 | 002,506,752 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2010/04/20 09:33:07 | 000,075,064 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2010/04/17 14:54:40 | 000,221,380 | ---- | C] () -- C:\Windows\hpoins19.dat
[2010/04/17 14:54:40 | 000,013,898 | ---- | C] () -- C:\Windows\hpomdl19.dat
[2010/04/17 11:14:08 | 001,027,752 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/04/15 11:41:49 | 000,000,025 | ---- | C] () -- C:\Users\Christian\AppData\Roaming\bdfvconp.ini
[2010/04/14 16:41:47 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2010/04/14 16:41:47 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2010/04/14 16:34:23 | 000,013,368 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys
[2010/04/14 16:31:39 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\AsIO.dll
[2010/04/14 16:31:39 | 000,013,440 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2010/04/14 16:31:36 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2010/04/14 16:31:36 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2010/04/14 16:24:23 | 000,200,704 | ---- | C] () -- C:\Windows\SysWow64\UpdateDriver.exe
[2010/04/14 16:24:23 | 000,005,224 | ---- | C] () -- C:\Windows\SysWow64\ucuiinfo.ini
[2010/03/12 18:25:10 | 000,057,344 | R--- | C] () -- C:\Windows\SysWow64\XSIChooser.exe
[2009/07/14 01:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 17:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2009/06/04 01:37:08 | 000,021,093 | ---- | C] () -- C:\Windows\SysWow64\instwdm.ini
[2009/06/04 01:37:06 | 000,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini
[2009/06/04 00:55:20 | 000,002,560 | ---- | C] () -- C:\Windows\SysWow64\CTXFIRES.DLL
[2009/06/04 00:40:44 | 000,321,512 | ---- | C] () -- C:\Windows\SysWow64\ctdlang.dat
[2009/06/04 00:40:44 | 000,056,509 | ---- | C] () -- C:\Windows\SysWow64\ctdnlstr.dat
[2009/06/04 00:33:04 | 000,007,680 | ---- | C] () -- C:\Windows\SysWow64\enlocstr.exe
[2009/05/27 09:49:00 | 000,000,285 | ---- | C] () -- C:\Windows\SysWow64\kill.ini
[2006/03/06 11:41:02 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\AMV_DecDLL.dll
[2004/09/16 14:26:40 | 000,012,634 | ---- | C] () -- C:\Windows\SysWow64\drivers\ADFUUD.SYS
[2004/09/16 14:26:40 | 000,012,634 | ---- | C] () -- C:\Windows\ADFUUD.SYS
========== LOP Check ==========
[2010/04/21 19:24:00 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\2K Sports
[2011/03/17 15:52:41 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Ace
[2010/04/29 20:41:54 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Acronis
[2010/05/20 01:17:31 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Activision
[2011/03/20 09:58:42 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Autodesk
[2010/05/21 22:56:51 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Azureus
[2010/12/31 17:16:08 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Blender Foundation
[2010/06/07 04:28:03 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/04/15 08:22:02 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/08/03 09:28:55 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Copernic
[2010/04/16 15:25:59 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\DAEMON Tools Lite
[2010/04/21 18:16:34 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\DAEMON Tools Pro
[2011/02/17 04:23:08 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\DesktopCockpit
[2010/06/01 10:50:41 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Dragon Age Toolset
[2010/08/01 23:03:14 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Druide
[2011/02/08 21:32:47 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\e-on software
[2010/11/09 01:28:25 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Embarcadero
[2011/03/06 16:39:26 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Epson
[2011/02/10 15:58:46 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\eyeon
[2010/04/26 10:12:49 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Fallout 3
[2010/08/19 15:56:10 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Farm Mania 2
[2010/10/06 14:48:18 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Firaxis
[2011/01/29 01:39:24 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\foobar2000
[2010/12/04 17:11:59 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Foxit
[2010/12/03 17:54:04 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Free PDF Tablet
[2010/05/13 15:20:09 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Leadertech
[2011/02/10 12:09:35 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Luxology
[2010/08/24 10:26:06 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Mask Pro 4.0
[2010/09/18 19:07:17 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\MAXON
[2010/12/07 15:42:31 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\mentalimages
[2010/05/22 00:28:27 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\MusicNet
[2010/08/24 10:31:44 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\onOne Software
[2010/04/14 17:15:34 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Opera
[2011/02/19 10:41:01 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\PACE Anti-Piracy
[2011/02/19 18:13:53 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Pixar
[2010/12/02 12:17:51 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\QuickScan
[2010/07/08 10:08:30 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\ResourceCentral.E6E1B28A311BC518DB6C6883EA3757FDE0E90ADC.1
[2011/01/09 11:25:14 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Rovio
[2010/07/13 01:53:01 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\SecondLife
[2010/10/24 20:22:31 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\SmartDraw
[2011/03/20 13:25:55 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Smith Micro
[2010/05/01 21:11:26 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010/10/25 09:43:38 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\TechSmith
[2011/01/24 18:09:38 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Toon Boom Animation
[2011/02/21 22:09:46 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\TopoGun64
[2010/11/11 17:04:18 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\TuneUp Software
[2010/09/10 16:10:41 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Tunngle
[2011/02/19 10:42:39 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Unity
[2010/10/23 14:17:26 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Vso
[2010/12/17 17:54:45 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\Wacom
[2010/12/17 17:54:48 | 000,000,000 | ---D | M] -- C:\Users\Christian\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
[2010/08/03 09:28:48 | 000,000,431 | ---- | M] () -- C:\Windows\Tasks\1 Copernic Intra-Daily ~Christian-PC Christian.job
[2010/08/03 09:28:48 | 000,000,407 | ---- | M] () -- C:\Windows\Tasks\2 Copernic Daily ~Christian-PC Christian.job
[2010/08/03 09:28:48 | 000,000,412 | ---- | M] () -- C:\Windows\Tasks\3 Copernic Weekly ~Christian-PC Christian.job
[2010/08/03 09:28:48 | 000,000,417 | ---- | M] () -- C:\Windows\Tasks\4 Copernic Monthly ~Christian-PC Christian.job
[2011/03/24 11:53:18 | 000,000,312 | -HS- | M] () -- C:\Windows\Tasks\rhuaqihk.job
[2011/02/24 11:26:40 | 000,032,554 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 24 bytes -> C:\Windows:198520D0444529C2
@Alternate Data Stream - 1333 bytes -> C:\ProgramData\Microsoft:Y4I2wMyQjyb7bCgJqaBn15q
@Alternate Data Stream - 1296 bytes -> C:\ProgramData\Microsoft:e7N9jVtOAtL4Sb90xnxPDPjL
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:9857FAE3
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:C8B8CEBD
@Alternate Data Stream - 1173 bytes -> C:\Users\Christian\AppData\Local\Temp:2iCGoWPvbBDiVIB3Ny0CWFts
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:459B4633
< End of report >
Edited by christhobald, 26 March 2011 - 08:57 AM.