I'm prohibited from running virus scans. So I booted up in safe mode, ran avast, and found one infection which was put into my virus chest. After starting back up regularly, my virus chest is empty and the problem remains.
Thanks in advance!
OTL Log:
OTL logfile created on: 6/24/2011 7:28:16 PM - Run 2
OTL by OldTimer - Version 3.2.24.1 Folder = C:\Documents and Settings\owner\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.50 Gb Total Physical Memory | 1.88 Gb Available Physical Memory | 75.30% Memory free
4.30 Gb Paging File | 3.75 Gb Available in Paging File | 87.15% Paging File free
Paging file location(s): C:\pagefile.sys 2000 4000 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.53 Gb Total Space | 40.18 Gb Free Space | 53.91% Space Free | Partition Type: NTFS
Computer Name: MATTHEW | User Name: owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/06/24 19:27:45 | 000,579,072 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\owner\My Documents\Downloads\OTL.exe
PRC - [2011/06/13 19:52:23 | 001,011,768 | ---- | M] (Google Inc.) -- C:\Documents and Settings\owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
PRC - [2011/05/10 08:10:58 | 003,459,712 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011/04/28 23:07:28 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2011/03/21 12:37:20 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/11/04 07:46:31 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/09/20 19:12:49 | 002,969,496 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
PRC - [2010/05/14 11:44:46 | 000,501,480 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Common Files\Java\Java Update\jucheck.exe
PRC - [2010/01/14 22:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006/03/03 22:03:10 | 000,069,632 | ---- | M] (HP) -- C:\WINDOWS\system32\HPZipm12.exe
========== Modules (SafeList) ==========
MOD - [2011/06/24 19:27:45 | 000,579,072 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\owner\My Documents\Downloads\OTL.exe
MOD - [2011/05/10 08:10:55 | 000,199,792 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\snxhk.dll
MOD - [2010/08/23 12:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - [2011/05/10 08:10:57 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011/04/28 23:07:28 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011/03/21 12:37:20 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/02/16 15:49:08 | 000,088,176 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- c:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service)
SRV - [2006/03/03 22:03:10 | 000,069,632 | ---- | M] (HP) [Unknown | Running] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
========== Driver Services (SafeList) ==========
DRV - [2011/05/10 08:03:54 | 000,441,176 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011/05/10 08:03:44 | 000,307,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011/05/10 08:02:37 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011/05/10 08:02:25 | 000,102,616 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2011/05/10 07:59:56 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011/05/10 07:59:37 | 000,030,808 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2011/05/10 07:59:35 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2011/03/21 12:37:22 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010/11/22 08:49:54 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010/09/13 16:27:24 | 000,025,680 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys -- (AVGIDSEH)
DRV - [2010/06/02 16:06:44 | 000,083,360 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\WINDOWS\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2010/01/27 12:22:02 | 000,047,640 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2009/07/21 12:30:48 | 003,565,056 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2009/05/26 17:44:55 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009/05/11 12:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/05/11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/03/27 14:23:12 | 000,023,064 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2008/06/17 16:49:22 | 004,756,992 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/02/08 10:09:24 | 000,517,632 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt2870.sys -- (rt2870)
DRV - [2007/11/29 17:35:44 | 000,163,328 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2007/02/15 20:57:04 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2005/05/13 18:27:56 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbccid.sys -- (USBCCID)
DRV - [2003/10/15 17:52:50 | 000,174,530 | R--- | M] (OmniVision Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ov519vid.sys -- (ovt519)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Secure Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.facebook.com/"
FF - prefs.js..keyword.URL: "http://search.yahoo....h?fr=mcafee&p="
FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor [2011/05/24 17:24:06 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/06/24 16:20:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox 3.6 Beta 2\components
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox 3.6 Beta 2\plugins
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/05/02 17:47:09 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/03/27 14:31:52 | 000,000,000 | ---D | M]
[2011/05/02 17:47:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\owner\Application Data\Mozilla\Extensions
[2011/05/24 10:54:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\owner\Application Data\Mozilla\Firefox\Profiles\3iyifa4w.default\extensions
[2011/05/02 17:47:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/03/27 14:31:51 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2011/03/27 14:31:51 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2011/03/27 14:31:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
File not found (No name found) --
() (No name found) -- C:\DOCUMENTS AND SETTINGS\OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\3IYIFA4W.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2010/06/04 01:56:05 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/05/24 17:24:06 | 000,000,000 | ---D | M] (McAfee SiteAdvisor) -- C:\PROGRAM FILES\MCAFEE\SITEADVISOR
[2009/08/07 16:07:37 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/04/14 12:26:02 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2010/11/12 19:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/01/01 04:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\bing.xml
[2011/05/02 17:48:03 | 000,001,949 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\McSiteAdvisor.xml
O1 HOSTS File: ([2009/11/21 21:57:49 | 000,356,633 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 12234 more lines...
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [HKLM] C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [HKCU] C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoMovingBands = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCloseDragDropBands = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarsOnTaskbar = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LockTaskbar = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\WINDOWS\system32\Svchost\svchost.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://pcpitstop.com...t/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zon...kr.cab56986.cab (Checkers Class)
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.syma...bin/AvSniff.cab (Symantec AntiVirus scanner)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.aka...vex-2.2.4.1.cab (DLM Control)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zon...1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.syma...n/bin/cabsa.cab (Symantec RuFSI Utility Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.mi...b?1219871090671 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...r/ultrashim.cab (Reg Error: Value error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://messenger.zon...ro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zon...nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} http://service.futur...ark/tc/FMSI.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} http://messenger.zon...ss.cab57176.cab (ZoneChess Object)
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} http://utilities.pcp.../pcpitstop2.dll (PCPitstop Exam)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 65.32.5.111 65.32.5.112
O18 - Protocol\Handler\cf - No CLSID value found
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\LMIinit: DllName - LMIinit.dll - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/08/27 10:46:21 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{5e9ad12d-a650-11dd-b8ec-00156050e6ff}\Shell\AutoRun\command - "" = E:\setupSNK.exe
O33 - MountPoints2\{9564dfba-746d-11dd-aa20-e5658c1b2368}\Shell - "" = AutoRun
O33 - MountPoints2\{9564dfba-746d-11dd-aa20-e5658c1b2368}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{9564dfba-746d-11dd-aa20-e5658c1b2368}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/06/24 19:23:49 | 000,039,984 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/06/24 19:23:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/06/24 19:23:43 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/06/24 19:23:43 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/06/24 16:21:30 | 000,019,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2011/06/24 16:21:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\avast! Free Antivirus
[2011/06/24 16:21:29 | 000,307,928 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2011/06/24 16:21:27 | 000,441,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2011/06/24 16:21:27 | 000,049,240 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2011/06/24 16:21:27 | 000,025,432 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2011/06/24 16:21:26 | 000,102,616 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2011/06/24 16:21:26 | 000,096,344 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2011/06/24 16:21:26 | 000,030,808 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2011/06/24 16:20:46 | 000,040,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2011/06/24 16:20:45 | 000,199,304 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2011/06/24 16:20:34 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2011/06/24 16:20:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2011/06/24 16:15:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Application Data\Sammsoft
[2011/06/24 02:10:42 | 000,517,632 | ---- | C] (Ralink Technology, Corp.) -- C:\WINDOWS\System32\drivers\rt2870.sys
[2011/06/24 01:15:04 | 000,000,000 | ---D | C] -- C:\Evilscape
[2011/06/24 01:00:40 | 000,000,000 | ---D | C] -- C:\OldSkool
[2011/06/23 23:22:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\.TRPKCachev3
[2011/06/23 22:12:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Svchost
[2011/06/23 22:12:38 | 000,000,000 | ---D | C] -- C:\soulblitzv3
[2011/06/23 22:12:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Desktop\Relentless Scape Client
[2011/06/23 21:21:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Local Settings\Application Data\OpenCandy
[2011/06/23 21:21:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Application Data\OpenCandy
[2011/06/23 21:14:29 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\owner\Recent
[2011/06/23 19:24:40 | 000,000,000 | ---D | C] -- C:\.562_cache_32v4
[2011/06/18 12:11:19 | 000,000,000 | ---D | C] -- C:\RSPK_FINAL
[2011/06/17 19:01:13 | 000,000,000 | ---D | C] -- C:\PkHonor
[2011/06/17 19:00:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documents\My Games
[2011/06/16 17:17:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\.ecl.cache
[2011/06/16 13:18:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\PwnXile
[2011/06/16 02:02:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\Application Data\Octoshape
[2011/06/15 15:06:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\SilGar
[2011/06/14 18:38:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\helixV2.2
[2011/06/14 18:30:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\.exemptionx_cache_32
[2011/06/13 00:23:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\iTunes
[2011/06/13 00:23:03 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011/06/13 00:22:59 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2011/05/30 17:16:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\owner\.SSRB2
[1 C:\Documents and Settings\owner\Desktop\*.tmp files -> C:\Documents and Settings\owner\Desktop\*.tmp -> ]
[1 C:\Documents and Settings\owner\*.tmp files -> C:\Documents and Settings\owner\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/06/24 19:23:50 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/06/24 19:20:05 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/06/24 19:19:50 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/06/24 16:21:30 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2011/06/24 16:21:27 | 000,002,625 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011/06/24 15:30:13 | 000,082,449 | -H-- | M] () -- C:\Documents and Settings\owner\Application Data\ownerlog.dat
[2011/06/24 14:36:03 | 119,383,582 | ---- | M] () -- C:\Documents and Settings\owner\Desktop\Registry back up.reg
[2011/06/24 03:17:00 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-448539723-1801674531-725345543-1003UA.job
[2011/06/23 19:48:42 | 000,000,046 | ---- | M] () -- C:\Documents and Settings\owner\jagex_runescape_preferences.dat
[2011/06/23 14:40:21 | 000,426,836 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/06/23 14:40:21 | 000,065,720 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/06/23 14:38:36 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{05B1EF5C-25BE-41F1-93C7-E176BFD2BAEE}.job
[2011/06/20 19:44:11 | 000,000,129 | ---- | M] () -- C:\Documents and Settings\owner\jagex_runescape_preferences2.dat
[2011/06/19 12:17:00 | 000,000,926 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-448539723-1801674531-725345543-1003Core.job
[2011/06/15 19:17:56 | 000,002,284 | ---- | M] () -- C:\Documents and Settings\owner\Desktop\Chrome.lnk
[2011/06/15 19:17:56 | 000,002,262 | ---- | M] () -- C:\Documents and Settings\owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/06/14 18:34:17 | 000,000,099 | ---- | M] () -- C:\Documents and Settings\owner\exemptionx_ExemptionX 634_preferences2.dat
[2011/06/14 18:33:59 | 000,000,046 | ---- | M] () -- C:\Documents and Settings\owner\exemptionx_ExemptionX 634_preferences.dat
[2011/06/14 18:33:17 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\owner\exemptionx__preferences3.dat
[2011/06/13 00:23:57 | 000,001,542 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/05/29 09:11:30 | 000,039,984 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/05/29 09:11:20 | 000,022,712 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/05/29 02:23:02 | 000,035,116 | ---- | M] () -- C:\Documents and Settings\owner\Application Data\data.dat
[2011/05/25 23:07:21 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\owner\mail.dat
[2011/05/25 23:07:20 | 000,001,517 | ---- | M] () -- C:\Documents and Settings\owner\mess.dat
[1 C:\Documents and Settings\owner\Desktop\*.tmp files -> C:\Documents and Settings\owner\Desktop\*.tmp -> ]
[1 C:\Documents and Settings\owner\*.tmp files -> C:\Documents and Settings\owner\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/06/24 19:23:50 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/06/24 16:21:30 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2011/06/24 14:35:37 | 119,383,582 | ---- | C] () -- C:\Documents and Settings\owner\Desktop\Registry back up.reg
[2011/06/24 14:19:28 | 000,176,128 | ---- | C] () -- C:\Documents and Settings\owner\Desktop\TaskbarRepairToolPlus!.exe
[2011/06/23 21:16:49 | 000,001,592 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Defraggler
[2011/06/14 18:33:17 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\owner\exemptionx__preferences3.dat
[2011/06/14 18:33:16 | 000,000,099 | ---- | C] () -- C:\Documents and Settings\owner\exemptionx_ExemptionX 634_preferences2.dat
[2011/06/14 18:30:52 | 000,000,046 | ---- | C] () -- C:\Documents and Settings\owner\exemptionx_ExemptionX 634_preferences.dat
[2011/06/13 00:23:57 | 000,001,542 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/05/23 22:01:21 | 000,035,116 | ---- | C] () -- C:\Documents and Settings\owner\Application Data\data.dat
[2010/06/18 01:19:32 | 000,200,704 | R--- | C] () -- C:\WINDOWS\sel3110.exe
[2009/11/22 21:45:58 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\owner\Local Settings\Application Data\prvlcl.dat
[2009/10/16 12:16:53 | 000,000,291 | ---- | C] () -- C:\WINDOWS\PowerReg.dat
[2009/10/16 12:16:51 | 000,045,568 | ---- | C] () -- C:\WINDOWS\UniFish3.exe
[2009/08/30 14:54:48 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2009/08/15 21:53:39 | 000,000,023 | ---- | C] () -- C:\WINDOWS\popcinfot.dat
[2009/08/03 19:42:06 | 000,000,171 | ---- | C] () -- C:\Documents and Settings\owner\Application Data\RSBot Accounts.ini
[2009/07/21 11:17:04 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2009/07/21 11:17:04 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2009/07/18 16:11:27 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2009/06/19 18:10:58 | 000,000,153 | ---- | C] () -- C:\WINDOWS\cavscan.INI
[2009/06/12 01:03:22 | 000,000,109 | ---- | C] () -- C:\WINDOWS\GMouse.ini
[2009/06/02 22:39:26 | 000,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat
[2009/05/17 10:10:32 | 001,474,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2009/05/14 16:50:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\WB.ini
[2009/04/23 17:29:16 | 000,189,051 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2009/04/18 19:01:07 | 000,000,041 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\.zreglib
[2009/04/06 15:04:16 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/04/06 12:57:04 | 000,040,960 | R--- | C] () -- C:\WINDOWS\CleanDev.exe
[2009/04/06 12:57:03 | 000,032,528 | R--- | C] () -- C:\WINDOWS\amcap.exe
[2009/03/27 23:17:14 | 000,036,724 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/03/13 20:35:55 | 000,139,152 | ---- | C] () -- C:\Documents and Settings\owner\Application Data\PnkBstrK.sys
[2009/03/09 16:47:21 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2009/03/07 19:17:12 | 000,003,636 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2009/03/07 15:00:28 | 000,000,333 | ---- | C] () -- C:\Documents and Settings\owner\Application Data\burnaware.ini
[2009/02/25 20:01:42 | 000,000,161 | ---- | C] () -- C:\WINDOWS\System32\AddPort.ini
[2009/02/25 20:01:21 | 000,000,735 | ---- | C] () -- C:\WINDOWS\hpntwksetup.ini
[2009/02/25 19:57:13 | 000,116,929 | ---- | C] () -- C:\WINDOWS\hpoins11.dat
[2009/02/11 17:56:08 | 000,100,560 | ---- | C] () -- C:\WINDOWS\System32\drivers\VBoxDrv.sys
[2008/12/30 21:03:52 | 000,131,072 | ---- | C] () -- C:\WINDOWS\System32\SpoonUninstall.exe
[2008/12/30 17:19:09 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2008/12/25 12:46:15 | 000,014,848 | ---- | C] () -- C:\Documents and Settings\owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/12/25 10:19:40 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2008/12/25 08:44:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008/08/27 16:48:50 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2008/08/27 16:48:25 | 000,001,996 | ---- | C] () -- C:\WINDOWS\System32\drivers\HDACfg.dat
[2008/08/27 10:48:16 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008/08/27 10:43:50 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008/08/27 06:38:03 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008/08/27 06:37:04 | 002,257,976 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008/05/29 22:43:54 | 000,000,018 | ---- | C] () -- C:\WINDOWS\System32\Library.Dat
[2008/05/19 19:28:36 | 000,000,002 | ---- | C] () -- C:\WINDOWS\System32\RA.ini
[2006/12/31 20:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2006/12/31 20:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2006/12/31 20:00:00 | 000,426,836 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2006/12/31 20:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2006/12/31 20:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2006/12/31 20:00:00 | 000,065,720 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2006/12/31 20:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2006/12/31 20:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2006/12/31 20:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006/12/31 20:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2006/12/31 20:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2006/12/31 20:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2006/05/05 17:18:56 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat
[2005/04/07 22:16:43 | 000,082,449 | -H-- | C] () -- C:\Documents and Settings\owner\Application Data\ownerlog.dat
[2001/07/07 04:00:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
========== LOP Check ==========
[2009/11/08 19:45:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\2DBoy
[2011/06/24 16:20:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2010/10/17 00:23:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10
[2010/10/15 18:54:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
[2010/10/15 19:27:24 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2011/05/16 20:41:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts
[2009/08/03 21:45:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Grisoft
[2010/10/15 18:43:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData
[2009/11/13 18:09:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nexon
[2009/02/07 15:36:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NexonUS
[2009/08/30 20:10:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PCPitstop
[2010/09/20 19:28:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PMB Files
[2009/07/26 16:58:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Screaming Bee
[2009/06/26 15:39:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SecTaskMan
[2010/06/30 17:05:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SwiftKit
[2009/03/16 20:32:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/08/19 17:13:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TrackMania
[2009/03/27 17:03:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2009/03/13 23:54:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\uklpr
[2009/08/23 16:46:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2009/03/14 01:22:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2010/04/05 20:27:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/03/27 17:02:58 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
[2009/09/12 21:15:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/04/10 16:28:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2011/03/27 17:19:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\.minecraft
[2009/10/25 21:56:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\.purple
[2011/05/29 03:29:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\Akerr
[2009/03/08 10:59:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\Audacity
[2010/10/15 19:29:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\AVG10
[2009/03/24 15:10:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\com.adobe.ExMan
[2009/02/21 21:07:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\Feedreader
[2011/06/24 03:32:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\FrostWire
[2009/03/07 15:50:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\Gamelab
[2010/08/19 19:45:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\GameTuts
[2009/04/18 21:51:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\GetRightToGo
[2009/08/12 08:18:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\gtk-2.0
[2009/03/13 20:40:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\id Software
[2009/06/21 22:36:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\LogMeIn Rescue
[2010/09/20 21:01:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\LolClient
[2009/07/11 16:25:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\Nettalk
[2011/06/16 11:24:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\Octoshape
[2011/01/28 20:41:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\ooVoo Details
[2011/06/23 21:21:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\OpenCandy
[2008/12/25 10:22:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\OpenOffice.org
[2009/03/28 13:12:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\Participatory Culture Foundation
[2009/03/28 13:21:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\PCF-VLC
[2011/05/28 23:49:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\Pygag
[2011/06/24 19:01:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\Sammsoft
[2009/07/26 16:58:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\Screaming Bee
[2009/09/06 10:38:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\The Creative Assembly
[2008/12/26 18:01:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\WeGame
[2010/05/23 20:10:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\WhatPulse
[2008/12/25 15:43:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\owner\Application Data\WinFF
[2009/09/12 21:31:17 | 000,000,258 | ---- | M] () -- C:\WINDOWS\Tasks\Minesweeper.job
[2011/06/23 14:38:36 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{05B1EF5C-25BE-41F1-93C7-E176BFD2BAEE}.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 487 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 24 bytes -> C:\WINDOWS:E90B3B1282958823
@Alternate Data Stream - 163 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4F0FFA06
< End of report >
Edited by FloatingBunnies, 24 June 2011 - 11:50 PM.
Sign In
Create Account
