OTL logfile created on: 4/11/2011 8:16:30 AM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Steve\Desktop
Windows Vista Ultimate Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 56.00% Memory free
7.00 Gb Paging File | 5.00 Gb Available in Paging File | 76.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 454.85 Gb Total Space | 355.13 Gb Free Space | 78.08% Space Free | Partition Type: NTFS
Drive D: | 10.91 Gb Total Space | 4.13 Gb Free Space | 37.89% Space Free | Partition Type: NTFS
Drive F: | 1.69 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive Y: | 455.48 Gb Total Space | 302.26 Gb Free Space | 66.36% Space Free | Partition Type: NTFS
Drive Z: | 455.48 Gb Total Space | 302.26 Gb Free Space | 66.36% Space Free | Partition Type: NTFS
Computer Name: STEVE-PC | User Name: Steve | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/04/07 07:44:00 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Steve\Desktop\OTL.exe
PRC - [2011/03/29 12:36:10 | 002,860,800 | ---- | M] (Emsi Software GmbH) -- C:\Program Files\Emsisoft Anti-Malware\a2service.exe
PRC - [2011/03/16 17:24:21 | 002,423,752 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2011/02/24 16:18:19 | 000,304,304 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
PRC - [2010/02/18 11:43:20 | 000,490,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
PRC - [2008/10/29 01:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2007/09/13 19:22:04 | 005,252,936 | ---- | M] (SpareBackup, Inc.) -- C:\Program Files\Spare Backup\SpareBackup.exe
PRC - [2007/09/05 11:25:56 | 000,455,968 | ---- | M] () -- C:\Program Files\Pervasive Software\PSQL\bin\w3dbsmgr.exe
PRC - [2007/04/27 07:40:00 | 000,206,400 | ---- | M] (SafeNet, Inc) -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
PRC - [2007/04/27 01:00:04 | 000,316,992 | ---- | M] (SafeNet, Inc.) -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
PRC - [2007/04/26 14:55:08 | 000,023,552 | ---- | M] (Creative Technology Ltd) -- C:\Windows\System32\Ctxfihlp.exe
PRC - [2007/04/26 14:51:44 | 001,019,904 | ---- | M] (Creative Technology Ltd) -- C:\Windows\System32\CTxfispi.exe
PRC - [2007/04/17 18:22:22 | 000,184,320 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
========== Modules (SafeList) ==========
MOD - [2011/04/07 07:44:00 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Steve\Desktop\OTL.exe
MOD - [2010/08/31 10:39:57 | 001,684,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - [2011/03/29 12:36:10 | 002,860,800 | ---- | M] (Emsi Software GmbH) [Auto | Running] -- C:\Program Files\Emsisoft Anti-Malware\a2service.exe -- (a2AntiMalware)
SRV - [2008/05/14 14:45:17 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2007/09/05 11:25:56 | 000,455,968 | ---- | M] () [Auto | Running] -- C:\Program Files\Pervasive Software\PSQL\bin\w3dbsmgr.exe -- (psqlWGE)
SRV - [2007/04/27 07:40:00 | 000,206,400 | ---- | M] (SafeNet, Inc) [Auto | Running] -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe -- (SentinelProtectionServer)
SRV - [2007/04/27 01:00:04 | 000,316,992 | ---- | M] (SafeNet, Inc.) [Auto | Running] -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe -- (SentinelKeysServer)
========== Driver Services (SafeList) ==========
DRV - [2011/02/20 21:30:06 | 000,073,728 | ---- | M] (Emsi Software GmbH) [File_System | On_Demand | Running] -- C:\Program Files\Emsisoft Anti-Malware\a2accx86.sys -- (a2acc)
DRV - [2010/05/10 13:41:30 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010/02/17 13:25:48 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2009/07/23 10:38:58 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2007/10/25 16:47:00 | 008,226,016 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2007/09/17 10:17:36 | 000,098,816 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2007/09/05 09:47:28 | 000,110,112 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2007/09/05 09:47:20 | 000,131,616 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvrd32.sys -- (nvrd32)
DRV - [2007/09/05 01:40:56 | 000,039,408 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4C74-92FE-5B863F82066B})
DRV - [2007/05/28 20:06:00 | 001,174,312 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ha20x2k.sys -- (ha20x2k)
DRV - [2007/05/28 20:05:52 | 000,096,040 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\emupia2k.sys -- (emupia)
DRV - [2007/05/28 20:05:48 | 000,159,016 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2007/05/28 20:05:46 | 000,014,632 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2007/05/28 20:05:42 | 000,129,320 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2007/05/28 20:05:30 | 000,525,608 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2007/05/28 20:05:24 | 000,518,952 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2007/05/28 20:05:08 | 000,073,000 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\CTHWIUT.DLL -- (CTHWIUT.DLL)
DRV - [2007/05/28 20:05:04 | 000,171,304 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\CT20XUT.DLL -- (CT20XUT.DLL)
DRV - [2007/05/28 20:05:00 | 001,324,328 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\CTEXFIFX.dll -- (CTEXFIFX.DLL)
DRV - [2007/04/27 07:40:00 | 000,090,688 | ---- | M] (SafeNet, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\Drivers\SENTINEL.SYS -- (Sentinel)
DRV - [2007/04/27 07:40:00 | 000,035,328 | ---- | M] (SafeNet, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SNTNLUSB.SYS -- (SNTNLUSB)
DRV - [2006/11/02 02:41:50 | 000,983,552 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2005/07/28 08:18:40 | 000,685,056 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hardlock.sys -- (Hardlock)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.c...=DTP&M=2905989R
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.c...=DTP&M=2905989R
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.gateway.c...=DTP&M=2905989R
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.c...=DTP&M=2905989R
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://my.yahoo.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: {9CE11043-9A15-4207-A565-0C94C42D590D}:2.0
FF - prefs.js..extensions.enabledItems: {3EC9C995-8072-4fc0-953E-4F30620D17F3}:2.0.0.4
[2010/09/15 07:33:41 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Steve\AppData\Roaming\Mozilla\Extensions
[2010/09/15 08:40:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Steve\AppData\Roaming\Mozilla\Firefox\Profiles\ruc2swoe.default\extensions
[2011/04/06 19:09:23 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Steve\AppData\Roaming\Mozilla\Firefox\Profiles\ruc2swoe.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/04/06 19:09:23 | 000,000,000 | ---D | M] (WeatherBug) -- C:\Users\Steve\AppData\Roaming\Mozilla\Firefox\Profiles\ruc2swoe.default\extensions\{3EC9C995-8072-4fc0-953E-4F30620D17F3}
[2010/09/15 07:42:28 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Steve\AppData\Roaming\Mozilla\Firefox\Profiles\ruc2swoe.default\extensions\{4176DFF4-4698-11DE-BEEB-45DA55D89593}
[2011/02/07 07:43:36 | 000,000,000 | -H-D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{9CE11043-9A15-4207-A565-0C94C42D590D}
O1 HOSTS File: ([2011/04/09 08:59:58 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Windows\System32\BAE.dll (Gateway Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O4 - HKLM..\Run: [a-squared] C:\Program Files\Emsisoft Anti-Malware\a2guard.exe (Emsi Software GmbH)
O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\System32\Ctxfihlp.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [PeachtreePrefetcher.exe] C:\Program Files\Sage Software\Peachtree\PeachtreePrefetcher.exe (Sage Software, Inc.)
O4 - HKLM..\Run: [Spare Backup] C:\Program Files\Spare Backup\SpareBackup.exe (SpareBackup, Inc.)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - Startup: C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll (Google Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.micros...n/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.appl...ex/qtplugin.cab (QuickTime Plugin Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} file:///C:/Program%20Files/AutoCAD%20LT%202002/InstBanr.ocx (NOXLATE-BANR)
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} file:///C:/Program%20Files/AutoCAD%20LT%202002/InstFred.ocx (InstaFred)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} file:///C:/Program%20Files/AutoCAD%20LT%202002/AcPreview.ocx (AcPreview Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 68.94.156.1 68.94.157.1
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Steve\Pictures\IMG00046.jpg
O24 - Desktop BackupWallPaper: C:\Users\Steve\Pictures\IMG00046.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | -H-- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2004/04/30 04:01:00 | 000,000,053 | -HS- | M] () - D:\Autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2002/02/22 12:35:36 | 000,000,043 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2011/03/11 11:32:09 | 000,000,000 | ---D | M] - Y:\AutoCad Drawings -- [ NTFS ]
O32 - AutoRun File - [2010/01/26 16:16:47 | 000,041,432 | ---- | M] () - Y:\AutoCAD_Symbols.zip -- [ NTFS ]
O33 - MountPoints2\{040c6d2f-e0ac-11dc-bb16-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{040c6d2f-e0ac-11dc-bb16-806e6f6e6963}\Shell\AutoRun\command - "" = F:\setup.exe -- [2008/02/10 02:22:52 | 000,053,400 | R--- | M] (Autodesk, Inc.)
O33 - MountPoints2\{ad7de42d-eb5b-11df-b772-00e0b8e6df66}\Shell - "" = AutoRun
O33 - MountPoints2\{ad7de42d-eb5b-11df-b772-00e0b8e6df66}\Shell\AutoRun\command - "" = L:\LaunchU3.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (sh4native Sh4Removal) - C:\Windows\System32\sh4native.exe ()
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O35 - HKCU\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKCU\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/04/10 12:38:18 | 000,000,000 | ---D | C] -- C:\Rooter$
[2011/04/10 09:55:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
[2011/04/10 09:55:29 | 000,000,000 | ---D | C] -- C:\Program Files\Emsisoft Anti-Malware
[2011/04/10 09:55:29 | 000,000,000 | ---D | C] -- C:\Users\Steve\Documents\Anti-Malware
[2011/04/10 09:55:02 | 099,965,256 | ---- | C] (Emsi Software GmbH ) -- C:\Users\Steve\Desktop\EmsisoftAntiMalwareSetup.exe
[2011/04/10 09:36:54 | 001,917,592 | ---- | C] (Trend Micro Inc.) -- C:\Users\Steve\Desktop\HousecallLauncher.exe
[2011/04/10 09:31:07 | 012,502,472 | ---- | C] (Microsoft Corporation) -- C:\Users\Steve\Desktop\windows-kb890830-v3.17.exe
[2011/04/09 14:19:56 | 000,000,000 | ---D | C] -- C:\Users\Steve\AppData\Roaming\SUPERAntiSpyware.com
[2011/04/09 14:19:56 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2011/04/09 14:19:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2011/04/09 14:19:52 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2011/04/09 14:19:09 | 010,846,616 | ---- | C] (SUPERAntiSpyware.com) -- C:\Users\Steve\Desktop\SUPERAntiSpyware.exe
[2011/04/09 14:01:12 | 001,377,112 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Steve\Desktop\tdsskiller.exe
[2011/04/09 13:57:46 | 000,000,000 | ---D | C] -- C:\Users\Steve\Desktop\tdsskiller
[2011/04/09 13:44:28 | 000,000,000 | ---D | C] -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2011/04/09 08:59:58 | 000,000,000 | ---D | C] -- C:\_OTM
[2011/04/08 15:05:26 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2011/04/08 13:38:19 | 000,173,119 | ---- | C] (Eric_71) -- C:\Users\Steve\Desktop\Rooter.exe
[2011/04/07 17:24:43 | 000,000,000 | ---D | C] -- C:\Users\Steve\Desktop\GooredFix Backups
[2011/04/07 17:24:35 | 000,071,398 | ---- | C] (jpshortstuff) -- C:\Users\Steve\Desktop\GooredFix.exe
[2011/04/07 16:56:55 | 000,519,680 | ---- | C] (OldTimer Tools) -- C:\Users\Steve\Desktop\OTM.exe
[2011/04/07 16:55:39 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011/04/07 16:51:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2011/04/07 16:51:14 | 000,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2011/04/07 07:43:55 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Steve\Desktop\OTL.exe
[2011/04/07 07:38:42 | 001,484,376 | ---- | C] (SpeedingUpMyPC ) -- C:\Users\Steve\Desktop\speedingupmypc.exe
[2008/05/04 18:35:53 | 000,060,928 | ---- | C] ( ) -- C:\Windows\System32\a3d.dll
[2008/02/21 14:20:00 | 000,012,800 | ---- | C] ( ) -- C:\Windows\System32\KILLAPPS.EXE
========== Files - Modified Within 30 Days ==========
[2011/04/11 08:18:00 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/11 08:16:40 | 000,004,736 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/04/11 08:16:40 | 000,004,736 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/04/11 07:43:29 | 000,002,523 | ---- | M] () -- C:\Users\Steve\Desktop\HiJackThis.lnk
[2011/04/11 06:31:38 | 000,143,872 | ---- | M] () -- C:\Users\Steve\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/11 06:21:29 | 000,599,286 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/04/11 06:21:29 | 000,102,522 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/04/11 06:17:00 | 008,405,015 | ---- | M] () -- C:\Windows\TempFile
[2011/04/11 06:16:54 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/11 06:16:41 | 000,000,304 | -HS- | M] () -- C:\Windows\tasks\bxmztccn.job
[2011/04/11 06:16:39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/04/11 06:16:36 | 3488,858,112 | -HS- | M] () -- C:\hiberfil.sys
[2011/04/10 17:52:11 | 000,064,752 | ---- | M] () -- C:\Windows\System32\DVCState-{00000004-00000000-00000009-00001102-00000005-60071102}.rfx
[2011/04/10 17:52:11 | 000,054,408 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000004-00000000-00000009-00001102-00000005-60071102}.rfx
[2011/04/10 17:52:11 | 000,054,408 | ---- | M] () -- C:\Windows\System32\BMXState-{00000004-00000000-00000009-00001102-00000005-60071102}.rfx
[2011/04/10 16:06:37 | 000,002,633 | ---- | M] () -- C:\Users\Steve\Desktop\Microsoft Office Outlook 2007.lnk
[2011/04/10 09:55:42 | 000,000,912 | ---- | M] () -- C:\Users\Steve\Application Data\Microsoft\Internet Explorer\Quick Launch\Emsisoft Anti-Malware.lnk
[2011/04/10 09:55:42 | 000,000,888 | ---- | M] () -- C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
[2011/04/10 09:55:01 | 099,965,256 | ---- | M] (Emsi Software GmbH ) -- C:\Users\Steve\Desktop\EmsisoftAntiMalwareSetup.exe
[2011/04/10 09:46:07 | 000,327,523 | ---- | M] () -- C:\Users\Steve\AppData\Local\census.cache
[2011/04/10 09:45:42 | 000,202,848 | ---- | M] () -- C:\Users\Steve\AppData\Local\ars.cache
[2011/04/10 09:37:10 | 000,000,036 | ---- | M] () -- C:\Users\Steve\AppData\Local\housecall.guid.cache
[2011/04/10 09:37:02 | 001,917,592 | ---- | M] (Trend Micro Inc.) -- C:\Users\Steve\Desktop\HousecallLauncher.exe
[2011/04/10 09:31:07 | 012,502,472 | ---- | M] (Microsoft Corporation) -- C:\Users\Steve\Desktop\windows-kb890830-v3.17.exe
[2011/04/09 14:19:54 | 000,001,800 | ---- | M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/04/09 14:19:09 | 010,846,616 | ---- | M] (SUPERAntiSpyware.com) -- C:\Users\Steve\Desktop\SUPERAntiSpyware.exe
[2011/04/09 14:01:20 | 001,377,112 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Steve\Desktop\tdsskiller.exe
[2011/04/09 13:57:31 | 001,263,721 | ---- | M] () -- C:\Users\Steve\Desktop\tdsskiller.zip
[2011/04/09 13:44:06 | 001,402,880 | ---- | M] () -- C:\Users\Steve\Desktop\HijackThis.msi
[2011/04/09 09:04:32 | 000,573,834 | ---- | M] () -- C:\Users\Steve\Desktop\333_6319_DOF%20v2.1.4%20Catalog%2012.1%20LIVE%20New.pdf
[2011/04/09 08:59:58 | 000,000,098 | ---- | M] () -- C:\Windows\System32\drivers\etc\Hosts
[2011/04/08 13:38:20 | 000,173,119 | ---- | M] (Eric_71) -- C:\Users\Steve\Desktop\Rooter.exe
[2011/04/08 06:45:59 | 000,011,506 | -HS- | M] () -- C:\Users\Steve\AppData\Local\o0117nc2nv5tpb633d15bq765wo1
[2011/04/08 06:45:59 | 000,011,506 | -HS- | M] () -- C:\ProgramData\o0117nc2nv5tpb633d15bq765wo1
[2011/04/07 17:24:35 | 000,071,398 | ---- | M] (jpshortstuff) -- C:\Users\Steve\Desktop\GooredFix.exe
[2011/04/07 17:08:51 | 000,465,520 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/04/07 16:56:40 | 000,519,680 | ---- | M] (OldTimer Tools) -- C:\Users\Steve\Desktop\OTM.exe
[2011/04/07 16:51:22 | 000,000,913 | ---- | M] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2011/04/07 16:51:14 | 000,000,733 | ---- | M] () -- C:\Users\Steve\Desktop\NTREGOPT.lnk
[2011/04/07 16:51:14 | 000,000,714 | ---- | M] () -- C:\Users\Steve\Desktop\ERUNT.lnk
[2011/04/07 07:44:00 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Steve\Desktop\OTL.exe
[2011/04/07 07:38:50 | 001,484,376 | ---- | M] (SpeedingUpMyPC ) -- C:\Users\Steve\Desktop\speedingupmypc.exe
[2011/04/06 17:12:34 | 000,000,128 | -H-- | M] () -- C:\ProgramData\~45473544r
[2011/04/06 17:12:34 | 000,000,104 | -H-- | M] () -- C:\ProgramData\~45473544
[2011/04/06 17:01:05 | 000,000,128 | -H-- | M] () -- C:\ProgramData\~45211400r
[2011/04/06 17:01:05 | 000,000,104 | -H-- | M] () -- C:\ProgramData\~45211400
[2011/04/01 13:27:00 | 000,001,757 | ---- | M] () -- C:\Users\Public\Desktop\Peachtree Complete Accounting 2009.lnk
[2011/04/01 11:37:52 | 000,126,562 | ---- | M] () -- C:\Windows\PeachWLog.XML
[2011/04/01 11:36:38 | 000,001,762 | ---- | M] () -- C:\Windows\PCW160.ini
[2011/04/01 11:33:34 | 000,066,560 | ---- | M] (Smithware, Inc.) -- C:\Windows\System32\s2dtconv.dll
[2011/04/01 11:33:34 | 000,024,576 | ---- | M] (Smithware, Inc.) -- C:\Windows\System32\Sbtrvd32.dll
[2011/03/30 08:04:29 | 000,469,472 | -H-- | M] () -- C:\Users\Steve\Documents\stevehousetdwg.dwg
[2011/03/16 09:07:25 | 000,004,237 | -H-- | M] () -- C:\Users\Steve\Documents\HANLEY.pdf
========== Files Created - No Company Name ==========
[2011/04/10 16:01:26 | 3488,858,112 | -HS- | C] () -- C:\hiberfil.sys
[2011/04/10 09:55:42 | 000,000,912 | ---- | C] () -- C:\Users\Steve\Application Data\Microsoft\Internet Explorer\Quick Launch\Emsisoft Anti-Malware.lnk
[2011/04/10 09:55:42 | 000,000,888 | ---- | C] () -- C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
[2011/04/10 09:46:07 | 000,327,523 | ---- | C] () -- C:\Users\Steve\AppData\Local\census.cache
[2011/04/10 09:45:42 | 000,202,848 | ---- | C] () -- C:\Users\Steve\AppData\Local\ars.cache
[2011/04/10 09:37:10 | 000,000,036 | ---- | C] () -- C:\Users\Steve\AppData\Local\housecall.guid.cache
[2011/04/09 14:19:54 | 000,001,800 | ---- | C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/04/09 13:57:19 | 001,263,721 | ---- | C] () -- C:\Users\Steve\Desktop\tdsskiller.zip
[2011/04/09 13:44:28 | 000,002,523 | ---- | C] () -- C:\Users\Steve\Desktop\HiJackThis.lnk
[2011/04/08 15:04:36 | 001,402,880 | ---- | C] () -- C:\Users\Steve\Desktop\HijackThis.msi
[2011/04/07 18:09:23 | 000,011,506 | -HS- | C] () -- C:\Users\Steve\AppData\Local\o0117nc2nv5tpb633d15bq765wo1
[2011/04/07 18:09:23 | 000,011,506 | -HS- | C] () -- C:\ProgramData\o0117nc2nv5tpb633d15bq765wo1
[2011/04/07 16:51:22 | 000,000,913 | ---- | C] () -- C:\Users\Steve\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2011/04/07 16:51:14 | 000,000,733 | ---- | C] () -- C:\Users\Steve\Desktop\NTREGOPT.lnk
[2011/04/07 16:51:14 | 000,000,714 | ---- | C] () -- C:\Users\Steve\Desktop\ERUNT.lnk
[2011/04/06 17:12:34 | 000,000,128 | -H-- | C] () -- C:\ProgramData\~45473544r
[2011/04/06 17:12:34 | 000,000,104 | -H-- | C] () -- C:\ProgramData\~45473544
[2011/04/06 17:01:05 | 000,000,128 | -H-- | C] () -- C:\ProgramData\~45211400r
[2011/04/06 17:01:05 | 000,000,104 | -H-- | C] () -- C:\ProgramData\~45211400
[2011/03/16 09:07:25 | 000,004,237 | -H-- | C] () -- C:\Users\Steve\Documents\HANLEY.pdf
[2011/02/05 17:21:45 | 000,000,120 | -H-- | C] () -- C:\Users\Steve\AppData\Local\Bxizinohaz.dat
[2011/02/05 17:21:45 | 000,000,000 | -H-- | C] () -- C:\Users\Steve\AppData\Local\Ixoyox.bin
[2011/01/28 18:04:12 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2010/09/15 07:33:30 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010/08/12 17:44:41 | 000,014,232 | ---- | C] () -- C:\Windows\System32\sh4native.exe
[2010/08/12 15:51:49 | 000,000,680 | -H-- | C] () -- C:\Users\Steve\AppData\Local\d3d9caps.dat
[2010/08/12 14:23:01 | 000,000,036 | -H-- | C] () -- C:\Users\Steve\AppData\Roaming\skynet.dat
[2010/08/12 14:22:53 | 000,000,074 | -H-- | C] () -- C:\Users\Steve\AppData\Roaming\sh4.dat
[2010/08/12 14:22:53 | 000,000,001 | -H-- | C] () -- C:\Users\Steve\AppData\Roaming\sh3.dat
[2010/04/09 18:55:47 | 000,000,495 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2010/03/23 10:23:23 | 000,839,680 | ---- | C] () -- C:\Windows\System32\AxEImage.dll
[2010/03/23 10:23:23 | 000,663,552 | ---- | C] () -- C:\Windows\System32\FreeImage.dll
[2010/03/23 10:23:23 | 000,491,520 | ---- | C] () -- C:\Windows\System32\pdfimages.exe
[2010/03/23 10:23:23 | 000,006,139 | ---- | C] () -- C:\Windows\System32\code1.dat
[2009/07/23 10:38:58 | 000,000,383 | ---- | C] () -- C:\Windows\System32\haspdos.sys
[2009/05/07 16:13:27 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009/05/07 16:13:27 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/10/20 09:29:34 | 000,002,560 | ---- | C] () -- C:\Windows\System32\drivers\mchInjDrv.sys
[2008/06/30 11:46:24 | 000,143,872 | ---- | C] () -- C:\Users\Steve\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/05/05 10:59:41 | 000,079,360 | ---- | C] () -- C:\Windows\System32\acdbres.dll
[2008/05/05 10:30:42 | 000,013,608 | R--- | C] () -- C:\Windows\System32\srvany.exe
[2008/05/04 18:35:53 | 000,321,512 | -H-- | C] () -- C:\Windows\System32\ctdlang.dat
[2008/05/04 18:35:53 | 000,321,512 | ---- | C] () -- C:\Windows\System32\ctdlang(18978).dat
[2008/05/04 18:35:53 | 000,056,405 | -H-- | C] () -- C:\Windows\System32\ctdnlstr.dat
[2008/05/04 18:35:53 | 000,056,405 | ---- | C] () -- C:\Windows\System32\ctdnlstr(18979).dat
[2008/05/04 18:35:53 | 000,046,604 | ---- | C] () -- C:\Windows\System32\instwdm.ini
[2008/05/04 18:35:53 | 000,016,384 | ---- | C] () -- C:\Windows\System32\regplib.exe
[2008/05/04 18:35:53 | 000,000,054 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini
[2008/05/04 17:52:02 | 000,021,316 | ---- | C] () -- C:\Windows\System32\emptyregdb.dat
[2008/04/18 18:10:00 | 000,001,762 | ---- | C] () -- C:\Windows\PCW160.ini
[2008/02/21 14:20:00 | 000,007,680 | ---- | C] () -- C:\Windows\System32\ENLOCSTR.EXE
[2008/02/21 14:20:00 | 000,000,307 | ---- | C] () -- C:\Windows\System32\KILL.INI
[2008/02/21 13:56:48 | 000,002,560 | ---- | C] () -- C:\Windows\CTXFIRES.DLL
[2008/02/21 13:56:42 | 000,105,472 | ---- | C] () -- C:\Windows\System32\APOMngr.dll
[2008/02/21 13:56:42 | 000,067,072 | ---- | C] () -- C:\Windows\System32\CmdRtr.dll
[2008/01/20 21:23:41 | 000,081,158 | ---- | C] () -- C:\Windows\System32\manage-bde.ini.en
[2008/01/20 21:23:38 | 000,062,976 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2007/08/29 02:07:32 | 000,001,714 | ---- | C] () -- C:\Windows\PCW150.INI_upg2009
[2007/03/21 07:28:50 | 000,000,106 | ---- | C] () -- C:\Windows\System32\mmc.exe.config
[2006/11/22 17:16:18 | 000,003,612 | ---- | C] () -- C:\Windows\ReaderString.ini
[2006/11/21 13:50:06 | 000,000,037 | ---- | C] () -- C:\Windows\sunkist.ini
[2006/11/02 07:55:52 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 07:46:27 | 000,465,520 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 07:34:20 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 05:33:01 | 000,599,286 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 05:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 05:33:01 | 000,102,522 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 05:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 05:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 03:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 03:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 02:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 02:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006/06/11 19:01:15 | 000,352,256 | ---- | C] () -- C:\Windows\System32\HotlineClient.exe
========== Alternate Data Streams ==========
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:DFC5A2B2
< End of report >