Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Problems Booting, Crashing, and Running Programs

Started by Dom Fontana , Jun 19 2011 06:11 AM

  • Please log in to reply

#1
Dom Fontana
Posted 19 June 2011 - 06:11 AM

Dom Fontana

    Member

  • Member
  • PipPipPip
  • 170 posts
Hello.

I am having tons of problems and I believe it was caused by a virus or malware, so that's why I posted here instead of in the OS Forum.

Background:

The bottom line is I got all the problems in the blink of an eye. It started right after I downloaded something. I couldn't boot up. I then used the Windows System Repair, when prompted when booting. It took a long time and now I am able to boot, but barely. There are a lot of pauses during booting and then the Windows startup sound plays, but the screen remains black. Then about a minute later I get to the Desktop. Then there is a warning in the task bar that says, "Desktop Window Manager is not working." I click Go Online for a solution, but nothing happens. I am using Windows 7 Ultimate - 32 bit, with an Aero Theme and that is not working, so the task bar looks blurry. I never had a problem with this before, so I believe that a virus caused this.

In addition, the problem originally affected all my programs. For instance, when I ran MalwareBytes Anti-Malware, it found 12 problems and then stopped. I couldn't fix the problems because it didn't complete the scan. The same thing with Disk Doctor. It scanned, but then stopped before completing. Then, the AVG Anti-Virus program had the Anti-Virus, Anti-Malware, and Resident Shield parts of the program disabled and I was not able to reactivate them. Also, when searching in my browser (IE 8), I was always redirected, so I know there were some Trojans and/or Malware involved here. Then I wasn't able to connect to the Internet at all. Finally, the computer would continually freeze and sometimes crash with the infamous Blue Screen.

What I Did So Far:

I ran Windows System Repair and Memory Diagmostic. Then, I ran MalwareBytes Anti-Malware again and even though it stalled again, I kept it running for a few hours. It finally finished the scan and found 12 problems, which it cured. I then ran it again and it found no problems. Then I uninstalled AVG Anti-Virus and reinstalled it and it works now. I did a scan with that and it found nothing. Then I ran Disk Doctor and it found nothing. Then I checked my Browser options and apparently the virus set it to Use a Proxy Server, and that's why I couldn't connect. (I don't use a Proxy.) So I changed that and now I can connect to the Internet again.

I had a Rootkit virus last month and Essexboy, a moderator from this forum, helped me fix it. So I looked at that thread again and ran some of the programs he had suggested last time. I ran TDSSKiller and that found 1 Rootkit problem and fixed it. I have attached that log file here.

Where I Stand Now:

Things are a bit better, but I still have these problems:

1) I still have some trouble booting and sometimes have to try 2 or 3 times before it works.
2) This never happened before, but sometimes I can't even boot into Safe Mode.
3) This also never happened before, but sometimes the Task Manager won't start up and sometimes when it does, the Task Manager crashes and says Not Responding.
4) Everything on the computer is now very sluggish and it often freezes for a few minutes and then comes back to life. For instance, sometimes I will right-click on the desktop and the Context Menu will not appear. Instead, I get a busy pointer for about
2-3 minutes and can't click on anything else. Then the pointer comes back and things go back to normal.
5) Periodically, any given program that I am using, simply freezes.
6) The computer still crashes with the blue screen from time to time.
7) Desktop Window Manager does not work and I get the warning in the taskbar.
8) Sometimes, but not all the time, my browser (IE 8) gets redirected.
9) One last thing and I had this problem with Essexboy, but it was never resolved. Since the last rootkit virus, my Restore Points keep getting deleted. I used to keep a number of Restore Points, but now it only lets me keep one. I tested it and if I create a 2nd one, it overwrites the 1st one. Then, even that eventaully gets deleted. When I first got this current problem yesterday, I went to System Restore and it said I had No Restore Points. So my Restore Points keep getting deleted.

Okay, so that's the long story. I know it's a lot, but I was hoping that someone could help me with these problems.

Thanks for any help.

Attached Files


Edited by Dom Fontana, 19 June 2011 - 06:46 AM.

  • 0

Advertisements

#2
Dom Fontana
Posted 20 June 2011 - 12:22 PM

Dom Fontana

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 170 posts
I am not trying to bump this topic up. I have new information to report. Since I didn't get any responses, I figured I would reinstall Win 7 Ultimate. The problem is that I can't even do that now. First, it won't boot from the DVD, as it usually does. Second, after I am in Windows and try to install it by clicking setup.exe, it doesn't recognize any of my partitions. It asks me to insert media to find the drivers it needs. I browse to windows/system32/drivers and it says there are no drivers. This never happened before. Normally, all my partitions show by default. Now, it doesn't recognize any of them, so I can't even reinstall Win 7 to get out of this mess.

Also, the problem keeps getting worse and worse. Now, periodically in the background, I hear messages and ads even when I am not online. No windows open, but I hear advertisements.

Any help would be appreciated.

Below is my OTL log:

OTL logfile created on: 6/21/2011 2:08:36 AM - Run 2
OTL by OldTimer - Version 3.2.24.1 Folder = C:\Users\Dominick J. Fontana\Desktop\Geeks To Go 2
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.44 Gb Total Physical Memory | 2.45 Gb Available Physical Memory | 71.32% Memory free
13.74 Gb Paging File | 12.73 Gb Available in Paging File | 92.67% Paging File free
Paging file location(s): [Binary data over 100 bytes]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 45.20 Gb Total Space | 9.51 Gb Free Space | 21.04% Space Free | Partition Type: NTFS
Drive D: | 243.87 Gb Total Space | 31.32 Gb Free Space | 12.84% Space Free | Partition Type: NTFS
Drive E: | 176.69 Gb Total Space | 50.32 Gb Free Space | 28.48% Space Free | Partition Type: NTFS

Computer Name: FONTANA | User Name: Dominick J. Fontana | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/06/18 20:44:15 | 000,579,072 | ---- | M] (OldTimer Tools) -- C:\Users\Dominick J. Fontana\Desktop\Geeks To Go 2\OTL.exe
PRC - [2011/06/06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/04/21 16:54:38 | 000,352,656 | ---- | M] (IObit) -- D:\Programs\Advanced SystemCare 4\ASCService.exe
PRC - [2011/04/18 17:40:08 | 002,334,560 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Programs\AVG10\avgtray.exe
PRC - [2011/04/18 17:39:42 | 007,398,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Programs\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
PRC - [2011/04/14 05:36:42 | 001,080,672 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Programs\AVG10\avgnsx.exe
PRC - [2011/04/07 22:43:04 | 000,841,832 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
PRC - [2011/03/28 03:00:52 | 000,351,072 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Programs\AVG10\avgcsrvx.exe
PRC - [2011/03/21 17:10:00 | 001,230,704 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2011/03/16 16:05:14 | 000,656,736 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Programs\AVG10\avgchsvx.exe
PRC - [2011/02/25 01:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011/02/10 07:55:18 | 001,148,256 | ---- | M] () -- D:\Programs\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe
PRC - [2011/02/08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Programs\AVG10\avgwdsvc.exe
PRC - [2011/02/08 05:33:20 | 000,658,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- D:\Programs\AVG10\avgrsx.exe
PRC - [2010/11/20 08:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/06/14 16:10:32 | 000,153,672 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe
PRC - [2009/12/22 05:15:28 | 000,002,560 | ---- | M] () -- C:\Windows\Runservice.exe
PRC - [2009/11/17 18:15:08 | 000,087,968 | ---- | M] (Andrea Electronics Corporation) -- C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
PRC - [2009/09/26 00:32:18 | 000,189,736 | ---- | M] (Seagate Technology LLC) -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
PRC - [2009/09/26 00:31:32 | 000,185,640 | ---- | M] (Seagate LLC) -- C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe
PRC - [2009/08/28 01:40:50 | 000,606,208 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
PRC - [2008/11/02 04:38:58 | 000,167,936 | ---- | M] (PowerISO Computing, Inc.) -- D:\Programs\PowerISO\PWRISOVM.EXE
PRC - [2008/09/24 15:32:48 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2001/11/09 02:47:50 | 000,356,352 | ---- | M] () -- C:\Program Files\Mouse Driver\Mouse Driver\3.5\Mouse32A.exe


========== Modules (SafeList) ==========

MOD - [2011/06/18 20:44:15 | 000,579,072 | ---- | M] (OldTimer Tools) -- C:\Users\Dominick J. Fontana\Desktop\Geeks To Go 2\OTL.exe
MOD - [2010/11/20 07:55:09 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
MOD - [2001/11/09 08:13:56 | 000,073,728 | ---- | M] () -- C:\Program Files\Mouse Driver\Mouse Driver\3.5\MOUDL32A.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (IS360service)
SRV - [2011/06/06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/04/21 16:54:38 | 000,352,656 | ---- | M] (IObit) [Auto | Running] -- D:\Programs\Advanced SystemCare 4\ASCService.exe -- (AdvancedSystemCareService)
SRV - [2011/04/18 17:39:42 | 007,398,752 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- D:\Programs\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2011/02/08 05:33:42 | 000,269,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- D:\Programs\AVG10\avgwdsvc.exe -- (avgwd)
SRV - [2011/01/08 13:07:14 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009/12/22 05:15:28 | 000,002,560 | ---- | M] () [Auto | Running] -- C:\Windows\Runservice.exe -- (LicCtrlService)
SRV - [2009/11/17 18:15:08 | 000,087,968 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe -- (AERTFilters)
SRV - [2009/09/26 00:32:18 | 000,189,736 | ---- | M] (Seagate Technology LLC) [Auto | Running] -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe -- (FreeAgentGoNext Service)
SRV - [2009/07/13 21:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 21:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 21:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/09/24 15:32:48 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2007/05/31 10:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007/05/31 10:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [1999/12/31 22:00:00 | 000,410,624 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\System32\XAudio32.dll -- (HsfXAudioService)


========== Driver Services (SafeList) ==========

DRV - [2011/04/14 21:28:30 | 000,134,480 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2011/04/08 07:14:00 | 010,690,024 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011/04/05 00:59:56 | 000,297,168 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2011/03/16 16:03:20 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\system32\DRIVERS\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/03/01 14:25:18 | 000,034,896 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/02/22 08:12:50 | 000,022,992 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)
DRV - [2011/02/10 07:53:42 | 000,021,968 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2011/02/10 07:53:40 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2011/01/28 06:22:41 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011/01/07 06:41:46 | 000,248,656 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2010/11/20 08:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 08:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 08:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 06:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 06:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/20 05:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 05:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/08/12 13:07:48 | 000,298,216 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmf6232.sys -- (NVNET)
DRV - [2010/04/27 16:57:28 | 000,066,632 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmXlCore.sys -- (WmXlCore)
DRV - [2010/04/27 16:57:28 | 000,015,048 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2010/04/27 16:57:22 | 000,022,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2010/04/27 14:01:26 | 000,037,704 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmFilter.sys -- (WmFilter)
DRV - [2010/04/08 15:32:36 | 000,215,656 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\nvstor32.sys -- (nvstor32)
DRV - [2010/02/24 06:22:10 | 000,185,472 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\acedrv11.sys -- (acedrv11)
DRV - [2010/02/13 08:23:00 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2010/02/13 08:23:00 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009/07/13 18:13:47 | 000,266,752 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VSTBS23.SYS -- (VSTHWBS2)
DRV - [2009/07/13 18:02:52 | 000,347,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvm62x32.sys -- (NVENETFD)
DRV - [2009/02/25 21:22:12 | 000,009,728 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv)
DRV - [2009/02/25 21:22:12 | 000,003,072 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2008/11/02 04:44:10 | 000,056,572 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2008/03/19 08:10:54 | 000,310,016 | ---- | M] (Marvell Semiconductor, Inc) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\MRVW24B.sys -- (MRV6X32U) Marvell TOPDOG 802.11n WLAN Driver for Vista x86 (USB8x)
DRV - [2007/09/26 16:58:54 | 000,461,952 | ---- | M] (Marvell Semiconductor, Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\MRVW245.sys -- (MRVW245)
DRV - [2007/08/12 22:48:45 | 000,005,120 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\SSPORT.SYS -- (SSPORT)
DRV - [2007/02/20 18:36:24 | 000,020,352 | ---- | M] (CASIO COMPUTER CO.,LTD.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CGY012.sys -- (CGY012)
DRV - [2004/10/26 12:22:50 | 000,002,410 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\Programs\Fresh Devices\Fresh Diagnose\FreshIO.sys -- (FreshIO)
DRV - [2004/10/18 15:02:20 | 000,049,152 | ---- | M] (DeviceGuys, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\DgiVecp.sys -- (DgiVecp)
DRV - [1999/12/31 22:00:00 | 000,266,752 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSXHWBS2.sys -- (HSXHWBS2)
DRV - [1999/12/31 22:00:00 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio32.sys -- (XAudio)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://us.mc28.mail.....rand=447897399
IE - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F0 7B 18 41 E6 5A CA 01 [binary data]
IE - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:49899

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://us.mc1108.mai...and=1734340455"
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 49899


FF - HKLM\software\mozilla\Firefox\Extensions\\{000a9d1c-beef-4f90-9363-039d445309b8}: C:\Program Files\Google\Google Gears\Firefox\ [2011/01/08 11:53:07 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: D:\Programs\AVG10\Firefox\ [2011/06/18 19:01:16 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: D:\Programs\AVG10\Firefox4\ [2011/06/18 19:02:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Components: D:\Programs\Firefox\components [2011/04/26 12:46:45 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.10\extensions\\Plugins: D:\Programs\Firefox\plugins [2011/06/18 04:53:32 | 000,000,000 | ---D | M]

[2011/01/08 12:03:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dominick J. Fontana\AppData\Roaming\Mozilla\Extensions
[2010/01/10 03:39:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dominick J. Fontana\AppData\Roaming\Mozilla\Extensions\[email protected]
[2011/04/28 06:13:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dominick J. Fontana\AppData\Roaming\Mozilla\Firefox\Profiles\an03h0zq.default\extensions
[2011/01/08 12:03:19 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Dominick J. Fontana\AppData\Roaming\Mozilla\Firefox\Profiles\an03h0zq.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/01/08 12:03:19 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Dominick J. Fontana\AppData\Roaming\Mozilla\Firefox\Profiles\an03h0zq.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/01/08 12:03:19 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Dominick J. Fontana\AppData\Roaming\Mozilla\Firefox\Profiles\an03h0zq.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2009/07/28 04:28:25 | 000,001,620 | ---- | M] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\Mozilla\Firefox\Profiles\an03h0zq.default\searchplugins\mozilla-add-ons.xml

Hosts file not found
O2 - BHO: () - {206E52E0-D52E-11D4-AD54-0000E86C26F6} - D:\Programs\Fresh Devices\FreshDownload\fdcatch.dll (FreshDevices Corp.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - D:\Programs\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Google Gears Helper) - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (FreshDownload Bar) - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - D:\Programs\Fresh Devices\FreshDownload\fdiebar.dll (FreshDevices Corp.)
O4 - HKLM..\Run: [AVG_TRAY] D:\Programs\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [LWBMOUSE] C:\Program Files\Mouse Driver\Mouse Driver\3.5\Mouse32A.exe ()
O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [PWRISOVM.EXE] D:\Programs\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.)
O4 - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000..\Run: [DAEMON Tools Pro Agent] D:\Programs\Daemon Tools Pro\DTAgent.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000..\Run: [DriverMax_RESTART] D:\Programs\DriverMax\devices.exe (Innovative Solutions)
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\System32\cmd.exe (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-2694720615-2016804693-2388961291-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O9 - Extra 'Tools' menuitem : &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: FreshDownload - {55058DA0-D957-449D-8E5C-BFBA08E46B3F} - D:\Programs\Fresh Devices\FreshDownload\fd.exe (FreshDevices.com.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programs\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.appl...ex/qtplugin.cab (QuickTime Plugin Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ent/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Value error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - D:\Programs\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 17:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2009/05/03 09:38:31 | 000,000,000 | R--D | M] - C:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2010/10/18 21:32:16 | 000,200,524 | ---- | M] () - D:\AUTO.pat -- [ NTFS ]
O32 - AutoRun File - [2010/10/18 21:32:16 | 000,019,488 | ---- | M] () - D:\AUTO.pst -- [ NTFS ]
O32 - AutoRun File - [2009/04/25 08:05:20 | 000,000,000 | R--D | M] - D:\autorun.inf -- [ NTFS ]
O32 - AutoRun File - [2009/03/23 09:54:29 | 000,000,000 | R--D | M] - E:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (D:\Programs\AVG10\avgchsvx.exe /sync) - D:\Programs\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
O34 - HKLM BootExecute: (D:\Programs\AVG10\avgrsx.exe /sync /restart) - D:\Programs\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/06/19 12:37:20 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Happy Muffin Top
[2011/06/19 12:34:48 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\fallenShadowsStrategyGuide
[2011/06/19 11:23:56 | 000,000,000 | ---D | C] -- C:\ProgramData\PlayFirst
[2011/06/19 10:31:58 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\Desktop\2011 Pizza Contest Applications
[2011/06/19 10:24:05 | 000,000,000 | -HSD | C] -- C:\found.001
[2011/06/18 20:57:14 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/06/18 20:49:18 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\Desktop\Geeks To Go 2
[2011/06/18 19:02:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2011
[2011/06/18 19:01:12 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\AVG
[2011/06/18 13:32:45 | 000,000,000 | -HSD | C] -- C:\found.000
[2011/06/18 04:53:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2011/06/17 10:24:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Flood Light Games
[2011/06/17 10:18:04 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Agatha Christie - Dead Man's Folly
[2011/06/17 07:01:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Floodlight Games
[2011/06/16 11:45:46 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\FloodLightGames
[2011/06/16 11:45:46 | 000,000,000 | ---D | C] -- C:\ProgramData\FloodLightGames
[2011/06/15 08:50:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ODBC
[2011/06/13 23:53:47 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\LegacyInteractive
[2011/06/11 22:51:29 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Local\Astar Games
[2011/06/07 12:15:41 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\VendelGAMES
[2011/06/05 11:19:49 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\DragonsEye Studios
[2011/06/05 11:19:49 | 000,000,000 | ---D | C] -- C:\ProgramData\DragonsEye Studios
[2011/06/05 09:46:12 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\ValuSoft
[2011/06/02 13:57:34 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\MumboJumbo
[2011/06/02 11:33:18 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2011/06/02 09:13:29 | 000,000,000 | ---D | C] -- C:\Downloads
[2011/06/01 06:30:37 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Lazy Turtle Games
[2011/05/31 12:25:44 | 000,000,000 | ---D | C] -- C:\Windows\Lost Chronicles 2 Fall of Caesar
[2011/05/28 11:42:04 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\DailyMagic
[2011/05/28 10:40:01 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Monkey Barrel Games
[2011/05/28 10:27:20 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\setup
[2011/05/28 09:06:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Alawar Stargaze
[2011/05/26 07:24:57 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\InstallShield
[2011/05/26 06:52:31 | 000,310,016 | ---- | C] (Marvell Semiconductor, Inc) -- C:\Windows\System32\drivers\MRVW24B.sys
[2011/05/26 06:52:30 | 000,000,000 | ---D | C] -- C:\Marvell - Network - Wireless-N USB Network Adapter
[2011/05/25 14:48:48 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Gogii
[2011/05/24 06:21:32 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Princess Isabella
[2011/05/23 08:44:36 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\AppData\Roaming\TrickySoftware
[2011/05/23 06:47:34 | 000,000,000 | ---D | C] -- C:\Users\Dominick J. Fontana\Documents\The Secrets Of Hildegard
[2010/09/29 20:17:03 | 000,129,024 | ---- | C] (Fp6t7DQi84YsPx2m1S0) -- C:\Program Files\Common Files\Uninstall.exe
[3 C:\Users\Dominick J. Fontana\AppData\Local\*.tmp files -> C:\Users\Dominick J. Fontana\AppData\Local\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/06/21 02:08:49 | 000,022,976 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/06/21 02:08:49 | 000,022,976 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/06/21 02:01:38 | 000,000,577 | -HS- | M] () -- C:\Windows\System32\mmf.sys
[2011/06/21 02:01:25 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/06/21 02:00:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/06/21 02:00:23 | 2767,052,800 | -HS- | M] () -- C:\hiberfil.sys
[2011/06/21 01:51:00 | 000,000,912 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/06/21 01:23:16 | 000,001,908 | ---- | M] () -- C:\Windows\diagwrn.xml
[2011/06/21 01:23:16 | 000,001,908 | ---- | M] () -- C:\Windows\diagerr.xml
[2011/06/21 01:06:45 | 000,000,000 | ---- | M] () -- C:\Users\Dominick J. Fontana\AppData\Local\{126D5BFE-B3DE-418D-B914-D700CF159643}
[2011/06/21 00:33:04 | 000,000,444 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Update Version2.job
[2011/06/21 00:02:17 | 000,000,000 | ---- | M] () -- C:\Users\Dominick J. Fontana\AppData\Local\{354EF1B0-C687-4F8C-BB51-43F8EBB20444}
[2011/06/20 23:29:49 | 000,000,000 | ---- | M] () -- C:\Users\Dominick J. Fontana\AppData\Local\{B9D3DDE9-60D7-4294-94C1-B0B6C1B0D6F6}
[2011/06/20 18:33:37 | 000,000,376 | ---- | M] () -- C:\Windows\ODBC.INI
[2011/06/20 18:20:09 | 005,276,412 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/06/20 18:20:09 | 001,678,486 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/06/19 19:19:14 | 000,000,000 | ---- | M] () -- C:\Users\Dominick J. Fontana\AppData\Local\{4E8D9471-595D-4127-881C-14A20A454F77}
[2011/06/19 10:18:09 | 000,000,020 | ---- | M] () -- C:\Windows\System32\SYSTEM
[2011/06/18 21:10:02 | 000,000,000 | ---- | M] () -- C:\Users\Dominick J. Fontana\AppData\Local\{639154BF-D932-49E6-ADCC-5B920DBC4096}
[2011/06/18 19:27:19 | 119,179,087 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2011/06/18 18:00:00 | 000,000,470 | ---- | M] () -- C:\Windows\tasks\ParetoLogic Registration.job
[2011/06/18 17:02:35 | 000,010,440 | ---- | M] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\97EE.E17
[2011/06/18 10:01:42 | 000,009,864 | ---- | M] () -- C:\bootsqm.dat
[2011/06/18 07:04:41 | 000,000,000 | ---- | M] () -- C:\Users\Dominick J. Fontana\AppData\Local\{C36569C2-518C-4FEB-BED2-3DD7999B196A}
[2011/06/18 07:00:05 | 000,000,000 | ---- | M] () -- C:\Users\Dominick J. Fontana\AppData\Local\{80E197F8-A284-41BB-8DAC-D1BEB0B6B59A}
[2011/06/17 10:54:38 | 000,121,371 | ---- | M] () -- C:\Windows\System32\e63e9ea7.exe
[2011/06/10 07:37:26 | 000,000,130 | ---- | M] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\default.rss
[2011/06/10 07:37:14 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2011/06/08 02:01:25 | 000,410,456 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/05/29 20:36:23 | 000,000,757 | ---- | M] () -- C:\Users\Dominick J. Fontana\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Office Outlook.lnk
[2011/05/29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011/05/29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011/05/28 10:27:21 | 000,050,327 | ---- | M] () -- C:\Windows\System32\.exe
[2011/05/26 07:24:56 | 000,001,044 | ---- | M] () -- C:\Windows\System32\WLAN.INI
[3 C:\Users\Dominick J. Fontana\AppData\Local\*.tmp files -> C:\Users\Dominick J. Fontana\AppData\Local\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/06/21 01:06:45 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{126D5BFE-B3DE-418D-B914-D700CF159643}
[2011/06/21 00:02:17 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{354EF1B0-C687-4F8C-BB51-43F8EBB20444}
[2011/06/20 23:29:27 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{B9D3DDE9-60D7-4294-94C1-B0B6C1B0D6F6}
[2011/06/19 19:18:59 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{4E8D9471-595D-4127-881C-14A20A454F77}
[2011/06/19 10:18:09 | 000,000,020 | ---- | C] () -- C:\Windows\System32\SYSTEM
[2011/06/18 21:10:02 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{639154BF-D932-49E6-ADCC-5B920DBC4096}
[2011/06/18 19:27:19 | 119,179,087 | ---- | C] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2011/06/18 10:01:42 | 000,009,864 | ---- | C] () -- C:\bootsqm.dat
[2011/06/18 07:04:25 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{C36569C2-518C-4FEB-BED2-3DD7999B196A}
[2011/06/18 06:59:31 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{80E197F8-A284-41BB-8DAC-D1BEB0B6B59A}
[2011/06/18 04:53:32 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011/05/28 10:25:49 | 000,121,371 | ---- | C] () -- C:\Windows\System32\e63e9ea7.exe
[2011/05/28 10:25:49 | 000,050,327 | ---- | C] () -- C:\Windows\System32\.exe
[2011/05/26 07:24:56 | 000,001,044 | ---- | C] () -- C:\Windows\System32\WLAN.INI
[2011/05/25 14:39:20 | 000,010,440 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\97EE.E17
[2011/05/07 05:06:51 | 000,000,127 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2011/05/03 10:31:58 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{AA929FF7-AB04-4EBC-A30B-F25A21B3CCCF}
[2011/05/01 10:40:24 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{BE154226-6A66-426C-B5EB-DA00C357B697}
[2011/05/01 10:37:29 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{14BE0015-3DE5-46FA-8CF8-B5B9AD41E19D}
[2011/05/01 10:33:48 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{F4C64607-DFA3-4164-8F7C-DFB8D1CB7009}
[2011/05/01 07:38:50 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{5B2706D3-6C8B-40A1-A725-41DCE4EC8BB4}
[2011/04/28 07:06:31 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{BCB474FC-D103-4EF6-8B01-E1CF4D974FE1}
[2011/04/28 07:00:14 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{6F99D313-4154-4D02-8272-EA10137A95EB}
[2011/04/28 06:58:15 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{21C4BCFF-D0FC-4375-996F-78C2E2781F07}
[2011/04/28 06:09:21 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{FA75906E-C9AE-47D7-811F-170D5C78D589}
[2011/04/28 06:07:23 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{22250DF1-3370-46FF-B651-EB32C243CC66}
[2011/04/28 05:26:31 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{4A60DA9A-A907-4A8F-BFEA-BD80ED8CB54E}
[2011/04/28 05:16:37 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{FAFCCB5F-E4AB-415B-A51F-CF0A8F2C87A8}
[2011/04/28 05:12:16 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{82393E06-D0F6-4733-A203-9741E4F663FC}
[2011/04/28 05:01:36 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{5F0735F4-0781-4297-8E20-0135555A1C5F}
[2011/04/27 23:59:43 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{816A3B21-6B98-43D2-AD1E-0EFE0D269468}
[2011/04/27 06:31:26 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{52CAB3BA-8EE1-45DE-B664-34D40402BDE7}
[2011/04/27 06:29:26 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\{9004940B-3679-4A95-83BB-A525E55B75B5}
[2011/04/18 14:48:21 | 000,008,704 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011/03/19 10:21:29 | 000,000,000 | ---- | C] () -- C:\Windows\Secrets.INI
[2011/02/23 06:40:15 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011/02/23 06:39:09 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011/01/22 12:05:19 | 000,152,064 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011/01/22 12:05:19 | 000,019,968 | ---- | C] () -- C:\Windows\System32\cpuinf32.dll
[2011/01/22 12:05:18 | 000,761,856 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011/01/22 11:37:52 | 000,000,040 | ---- | C] () -- C:\Windows\RUNAWAY.INI
[2011/01/21 12:34:44 | 000,000,145 | ---- | C] () -- C:\Windows\game.INI
[2010/11/12 08:11:22 | 000,071,484 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\ClassicFTP.dmp
[2010/08/20 07:00:31 | 004,098,560 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\btbar.msi
[2010/08/20 07:00:31 | 000,013,207 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\MyTestToolbar.xpi
[2010/08/20 07:00:31 | 000,000,054 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\setup.dat
[2010/07/19 06:19:40 | 000,022,723 | ---- | C] () -- C:\Windows\System32\cl31cl3.dll
[2010/07/17 05:30:44 | 000,482,408 | ---- | C] () -- C:\Windows\ssndii.exe
[2010/07/16 22:38:47 | 000,011,164 | ---- | C] () -- C:\Windows\System32\drivers\nvphy.bin
[2010/07/04 06:58:49 | 000,000,803 | ---- | C] () -- C:\Windows\CoDUO.INI
[2010/07/04 06:47:50 | 000,000,733 | ---- | C] () -- C:\Windows\CoD.INI
[2010/04/07 06:12:26 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SI.bin
[2010/03/09 05:10:40 | 000,000,130 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\default.rss
[2010/03/09 05:10:32 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2010/03/06 07:28:14 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll
[2010/02/18 07:36:04 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2010/02/18 03:11:25 | 000,000,158 | ---- | C] () -- C:\Windows\TSDataEx.ini
[2010/02/17 08:06:48 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\FileOut.cns
[2010/02/17 08:06:48 | 000,000,000 | ---- | C] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\FileIn.cns
[2010/02/13 08:18:30 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2010/02/13 08:18:25 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2010/02/07 05:13:14 | 000,000,190 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2010/01/21 05:15:17 | 000,070,656 | ---- | C] () -- C:\Windows\RSetupCE.exe
[2009/12/22 05:15:29 | 000,000,577 | -HS- | C] () -- C:\Windows\System32\mmf.sys
[2009/12/22 05:15:28 | 000,048,640 | ---- | C] () -- C:\Windows\mmfs.dll
[2009/12/22 05:15:28 | 000,002,560 | ---- | C] () -- C:\Windows\Runservice.exe
[2009/11/15 19:38:16 | 000,000,058 | ---- | C] () -- C:\Windows\System32\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2009/11/15 19:33:25 | 000,024,575 | ---- | C] () -- C:\Windows\System32\Mpwinapppiobas69.dat
[2009/11/15 19:32:27 | 000,112,156 | ---- | C] () -- C:\Windows\System32\Msdts325.dat
[2009/11/15 18:50:31 | 000,004,767 | ---- | C] () -- C:\Windows\Irremote.ini
[2009/11/02 05:41:36 | 000,091,648 | ---- | C] () -- C:\Windows\System32\Mros416.dll
[2009/11/01 22:58:39 | 000,000,000 | ---- | C] () -- C:\Windows\wincmd.ini
[2009/11/01 19:20:54 | 001,907,712 | ---- | C] () -- C:\Windows\System32\BootMan.exe
[2009/11/01 19:20:54 | 000,086,408 | ---- | C] () -- C:\Windows\System32\setupempdrv03.exe
[2009/11/01 19:20:54 | 000,014,848 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll
[2009/11/01 19:20:54 | 000,009,728 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys
[2009/11/01 19:20:54 | 000,003,072 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys
[2009/11/01 09:04:04 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2009/11/01 07:50:58 | 000,022,068 | ---- | C] () -- C:\Windows\System32\emptyregdb.dat
[2009/07/14 00:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/14 00:33:53 | 000,410,456 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/07/13 22:05:48 | 005,276,412 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009/07/13 22:05:48 | 001,678,486 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009/07/13 22:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009/07/13 22:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009/07/13 22:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009/07/13 22:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009/07/13 19:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 19:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 19:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009/06/10 17:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2007/07/23 10:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2007/07/23 10:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2007/07/23 10:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2007/07/23 10:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2007/07/23 10:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2007/07/23 10:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2007/07/23 10:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2007/07/23 10:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2007/07/23 10:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2005/10/15 15:25:20 | 000,028,672 | ---- | C] () -- C:\Windows\System32\myodbc3i.exe
[2005/10/15 15:25:20 | 000,011,776 | ---- | C] () -- C:\Windows\System32\myodbc3m.exe
[2003/04/09 05:28:44 | 000,233,472 | R--- | C] () -- C:\Windows\System32\MafiaSetup.exe
[2003/04/09 05:28:44 | 000,233,472 | R--- | C] () -- C:\Users\Dominick J. Fontana\AppData\Roaming\MafiaSetup.exe
[2003/01/07 16:05:08 | 000,002,695 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI

========== LOP Check ==========

[2011/05/05 07:33:08 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\IObit
[2011/05/05 07:33:08 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\IObit
[2011/03/30 00:25:14 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\.minecraft
[2011/01/08 12:03:06 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\2K Sports
[2011/01/08 12:03:06 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\6EA5E0D4CF863867DCEF28FC4C867231
[2011/01/08 12:03:06 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\acccore
[2011/02/13 07:48:46 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Alawar
[2011/01/08 12:03:06 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\AnvSoft
[2011/01/08 12:03:06 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Any Audio Converter
[2011/01/08 12:03:07 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Any Video Converter
[2011/03/27 11:57:46 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Artogon
[2011/01/08 12:03:07 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\AVG10
[2011/01/08 12:03:07 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\AVG9
[2011/06/18 06:38:56 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Awem
[2011/05/21 10:40:35 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Az-Art
[2011/06/08 00:58:36 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Big Fish Games
[2011/06/19 12:30:48 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\BitTorrent
[2011/02/26 14:19:35 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Blue Tea Games
[2011/04/18 08:29:33 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Boomzap
[2011/04/17 05:40:21 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Camel101
[2011/01/08 12:03:07 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\CoreFTP
[2011/03/16 00:17:54 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\CursedOnboard
[2011/01/08 12:03:07 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\DAEMON Tools Lite
[2011/01/20 06:15:15 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\DAEMON Tools Pro
[2011/05/28 11:42:04 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\DailyMagic
[2011/03/30 12:37:53 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\DarkParablesBriarRose_BFG
[2011/02/06 12:37:09 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\DivoGames
[2011/01/08 12:03:07 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\DonationCoder
[2011/03/27 11:21:38 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Dragon Altar Games
[2011/06/05 11:19:49 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\DragonsEye Studios
[2011/04/27 09:47:14 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\DriverCure
[2011/02/18 14:27:17 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Dying for Daylight
[2011/02/17 11:33:47 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Dying for Daylight Shared
[2011/02/15 07:15:23 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\EleFun Games
[2011/05/30 08:21:24 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Elephant Games
[2011/04/12 06:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Enki Games
[2011/03/16 10:52:39 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Enlightenus2_BFG
[2011/03/29 00:31:23 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\ERS G-Studio
[2011/04/24 11:21:27 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\ERS Game Studios
[2011/06/19 12:34:48 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\fallenShadowsStrategyGuide
[2011/06/17 10:31:35 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Flood Light Games
[2011/06/17 07:01:39 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Floodlight Games
[2011/06/16 11:45:46 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\FloodLightGames
[2011/02/24 14:49:22 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\FlyWheelGames
[2011/03/17 13:37:42 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\ForgottenRiddles
[2011/03/25 07:17:06 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\FreshDiagnose
[2011/01/08 12:03:07 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\FreshHTML
[2011/02/13 13:34:52 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Friday's games
[2011/06/14 06:35:58 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Frogwares
[2011/03/29 05:47:44 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\FrostWire
[2011/02/24 12:07:07 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Fugazo
[2011/03/15 08:07:33 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\funkitron
[2011/05/14 12:40:09 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Funswitch
[2011/02/26 10:30:18 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Fuzzy Bug Interactive
[2011/06/01 11:49:12 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\GameMill Entertainment
[2011/04/19 12:28:38 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Gamers Digital
[2011/06/16 07:23:57 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Games
[2011/04/17 05:40:18 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\GarageGames
[2011/04/02 13:50:35 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Gestalt Games
[2011/02/19 10:56:31 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Ghost Ship Studios
[2011/05/25 14:48:48 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Gogii
[2011/06/19 12:37:20 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Happy Muffin Top
[2011/06/16 09:26:59 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\HdO Adventure
[2011/04/02 14:01:11 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\HitPoint Studios
[2011/04/30 05:36:21 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\IObit
[2011/01/25 10:26:51 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\iShell
[2011/02/07 09:52:43 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Islands
[2011/06/01 06:30:37 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Lazy Turtle Games
[2011/06/13 22:43:35 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\LegacyInteractive
[2011/01/08 12:03:10 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\LimeWire
[2011/02/22 09:50:49 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\LittleGamesCompany
[2011/02/25 13:12:01 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\MA2
[2011/04/07 10:10:50 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\MagicIndie
[2011/03/13 22:41:35 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\margrave3_full
[2011/05/12 06:30:35 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Maximize Games
[2011/05/28 10:40:01 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Monkey Barrel Games
[2011/06/02 13:57:34 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\MumboJumbo
[2011/04/22 12:45:20 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\My Games
[2011/02/24 14:33:30 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Mystery of Mortlake Mansion
[2011/02/24 13:56:28 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Namco
[2011/06/17 23:18:05 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Orneon
[2011/01/08 12:03:19 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Out of the Park Developments
[2011/01/08 12:03:19 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\PandoraRecovery
[2011/04/27 09:47:14 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\ParetoLogic
[2011/02/07 11:02:19 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Phantasmat_bf_ce1
[2011/06/19 11:23:56 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\PlayFirst
[2011/03/02 12:42:39 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\PlayPond
[2011/05/24 06:21:32 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Princess Isabella
[2011/03/30 11:33:34 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\ProtectDISC
[2011/03/16 08:43:46 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\QB9
[2011/03/02 09:53:22 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\SerpentOfIsis
[2011/05/28 10:27:20 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\setup
[2011/01/08 12:03:19 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Seven Zip
[2011/04/01 22:49:17 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Silverback Productions
[2011/03/16 09:11:09 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Specialbit
[2011/03/15 23:24:11 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\SpinTop Games
[2011/01/08 12:03:20 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Steinberg
[2011/04/19 12:52:56 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Ten Heavens
[2011/04/06 13:54:21 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\The FoolStrategyGuide
[2011/04/08 13:13:27 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\TOMI2.THE GATES OF FATE
[2011/04/07 11:32:55 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\TOMI3
[2011/04/23 08:58:42 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Top Evidence
[2011/05/23 08:44:36 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\TrickySoftware
[2011/01/08 12:03:20 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\TuneUp Software
[2011/06/05 09:46:12 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\ValuSoft
[2011/05/31 12:29:25 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Vast Studios
[2011/06/07 12:15:41 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\VendelGAMES
[2011/03/23 13:27:23 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Vogat Interactive
[2011/02/16 11:29:52 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\WhiteBirdsProductions
[2011/04/26 12:49:00 | 000,000,000 | ---D | M] -- C:\Users\Dominick J. Fontana\AppData\Roaming\Zylom
[2011/06/18 18:00:00 | 000,000,470 | ---- | M] () -- C:\Windows\Tasks\ParetoLogic Registration.job
[2011/06/21 00:33:04 | 000,000,444 | ---- | M] () -- C:\Windows\Tasks\ParetoLogic Update Version2.job
[2011/06/20 19:03:59 | 000,032,650 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:5520ED93
@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:4D551822
@Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:62220827
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:E894A3ED
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:ED2D63E4
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:140AD176
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:2652902F
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:98DFF516
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:75798D9A

< End of report >

Edited by Dom Fontana, 20 June 2011 - 12:23 PM.

  • 0

#3
Dom Fontana
Posted 23 June 2011 - 04:35 AM

Dom Fontana

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 170 posts
I posted my problems four days ago and I did not get even one response. I wound up reinstalling Windows 7 Ultimate and things are back to normal now.

Moderator, please delete this topic.

Thank you.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Forum
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP