[Elle8]

Hello

I have a Dell Inspiron 1525 Laptop.
It runs on Vista (service pack 2).
32-bit Operating System
Memory: 2.00GB

The other day I posted another query on this forum regarding my desktop being infected:
http://www.geekstogo...88#entry2033788
and JSntGRvr saved my life!

That's all cleared up now, but I'm concerned that my laptop might have similar issues and wonder if it has been infected, even though Malwarebytes showed nothing.

Every so often when I am using the internet, it freezes for maybe 15-20 seconds. If I go from one web page to another in the same window and then close that window, I often see the previous web page come up briefly. It takes longer than normal for me to move from one web page to another in a new window. Also when I click from one web page to another, the window goes black for a few seconds.

This only started happening recently, probably about the same time that my desktop started playing up, so I’m wondering if one infected the other.

Please can you help.

Thank you very much in advance!

Elle

This is my OTL.txt:

OTL logfile created on: 09/07/2011 20:33:43 - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Owner\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

1.99 Gb Total Physical Memory | 0.50 Gb Available Physical Memory | 25.24% Memory free
4.21 Gb Paging File | 2.40 Gb Available in Paging File | 56.98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 136.45 Gb Total Space | 83.55 Gb Free Space | 61.23% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 4.16 Gb Free Space | 41.57% Space Free | Partition Type: NTFS

Computer Name: OWNER-PC | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/07/09 20:16:25 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\Owner\Desktop\OTL.exe
PRC - [2011/06/18 13:47:09 | 000,240,288 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10t_ActiveX.exe
PRC - [2011/06/17 06:39:19 | 000,107,000 | ---- | M] (Siber Systems) -- C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
PRC - [2011/05/10 13:10:58 | 003,459,712 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011/05/10 13:10:57 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2010/11/30 13:20:36 | 000,997,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2010/11/11 12:26:42 | 000,226,984 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe
PRC - [2010/11/11 12:26:42 | 000,206,360 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
PRC - [2010/11/11 12:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2009/04/11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/05/13 16:33:10 | 001,058,088 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DellDock.exe
PRC - [2008/05/04 10:25:32 | 000,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\hidfind.exe
PRC - [2008/05/04 10:25:26 | 000,167,936 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\Apoint.exe
PRC - [2008/05/04 10:25:26 | 000,050,736 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe
PRC - [2008/05/04 10:25:26 | 000,049,152 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApntEx.exe
PRC - [2008/04/28 16:56:28 | 000,161,048 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe
PRC - [2007/12/21 10:58:06 | 000,184,320 | ---- | M] (CyberLink Corp.) -- C:\Program Files\Dell\MediaDirect\PCMService.exe
PRC - [2007/03/21 13:00:04 | 000,355,096 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2007/03/21 13:00:00 | 000,174,872 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe


========== Modules (SafeList) ==========

[Advertisements]

This is the Extra.txt in case it's of any relevance:

OTL Extras logfile created on: 09/07/2011 20:33:43 - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Owner\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

1.99 Gb Total Physical Memory | 0.50 Gb Available Physical Memory | 25.24% Memory free
4.21 Gb Paging File | 2.40 Gb Available in Paging File | 56.98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 136.45 Gb Total Space | 83.55 Gb Free Space | 61.23% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 4.16 Gb Free Space | 41.57% Space Free | Partition Type: NTFS

Computer Name: OWNER-PC | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{6DA17AAA-D3BA-4F49-919B-5B869F889128}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A59B9E49-ADC3-4867-B648-AD8575365F49}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{186CDD9E-873B-4C5A-A133-9ADFB6E6B161}" = protocol=6 | dir=in | app=c:\program files\opera 11.10 beta\opera.exe |
"{9FDCCC14-633E-4AFD-99B4-4F69F5215140}" = dir=in | app=c:\program files\dell\mediadirect\pcmservice.exe |
"{AC1F4FAC-70B1-49EE-8D1E-CF62978270E9}" = protocol=17 | dir=in | app=c:\program files\opera 11.10 beta\opera.exe |
"TCP Query User{F6015B5B-0DF6-405C-B2F5-B3121C9A8925}C:\program files\opera 11.10 beta\opera.exe" = protocol=6 | dir=in | app=c:\program files\opera 11.10 beta\opera.exe |
"UDP Query User{76A55E11-3AD8-4E11-A2E2-7EBBE2B798BE}C:\program files\opera 11.10 beta\opera.exe" = protocol=17 | dir=in | app=c:\program files\opera 11.10 beta\opera.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0090A87C-3E0E-43D4-AA71-A71B06563A4A}" = Dell Support Center
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{1D10C273-3F95-42A2-8371-AB6B1F59821B}" = WOT for Internet Explorer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 26
"{294EAADF-E50F-4DD8-AD8D-19587EA10512}" = Modem Diagnostic Tool
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B6AD248-D3BF-426A-8D64-847288154F13}" = QuickSet
"{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}" = EDocs
"{6FFB40A5-7F7D-4A32-8905-3CDF962EE1E4}" = Internet From BT
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{774088D4-0777-4D78-904D-E435B318F5D2}" = Microsoft Antimalware
"{77A776C4-D10F-416D-88F0-53F2D9DCD9B3}" = Microsoft Security Client
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}" = OutlookAddinSetup
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}" = MediaDirect
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A81000000003}" = Adobe Reader 8.1.0
"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
"{B047FB66-A183-461B-BA07-4BEF29E9B914}" = Simple Adblock
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B935C985-A17F-484B-8470-09E4FC27DC26}" = Dell-eBay
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AI RoboForm" = RoboForm 7-3-2 (All Users)
"avast" = avast! Free Antivirus
"Broadcom 802.11b Network Adapter" = Dell Wireless WLAN Card
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C06&SUBSYS_14F1000F" = Conexant HDA D330 MDC V.92 Modem
"Coupon Printer2.0" = Coupon Printer
"Dell Support Center" = Dell Support Center
"ESET Online Scanner" = ESET Online Scanner v3
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.0.1200
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft Security Client" = Microsoft Security Essentials
"MiniTool Power Data Recovery_is1" = MiniTool Power Data Recovery
"Mozilla Firefox (3.6.18)" = Mozilla Firefox (3.6.18)
"Opera 11.50.1074" = Opera 11.50
"Revo Uninstaller" = Revo Uninstaller 1.92
"WhoCrashed_is1" = WhoCrashed 3.01

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"f031ef6ac137efc5" = Dell Driver Download Manager

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 04/07/2011 11:18:46 | Computer Name = Owner-PC | Source = Perflib | ID = 1008
Description =

Error - 04/07/2011 11:36:33 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (5748) Asapi: (16:36:33:6350)(5748) libCommon.System.Windows - Error
-- 629 readFromPipeTimed(3352) timed out after 119985 totalBytes: 0

Error - 04/07/2011 11:36:33 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (5748) Asapi: (16:36:33:7890)(5748) libCommon.System.Windows - Error
-- 720 execAndGetPipeData(./pcdrsysinfosoftware.p5x) readFromPipeTimed failed,
killing: 5216

Error - 04/07/2011 11:36:33 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (5748) Asapi: (16:36:33:8190)(5748) Matrix.ModuleImp - Error -- 52
Unable to get information from module due to failed exec.

Error - 04/07/2011 11:36:33 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (5748) Asapi: (16:36:33:8960)(5748) enumerator - Error -- 118 pcdrsysinfosoftware:
Module timed out after 137774 milliseconds and was terminated

Error - 04/07/2011 12:00:33 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (4124) Asapi: (17:00:33:9100)(4124) libCommon.System.Windows - Error
-- 629 readFromPipeTimed(3448) timed out after 119988 totalBytes: 0

Error - 04/07/2011 12:00:34 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (4124) Asapi: (17:00:34:0210)(4124) libCommon.System.Windows - Error
-- 720 execAndGetPipeData(./pcdrsysinfosoftware.p5x) readFromPipeTimed failed,
killing: 5692

Error - 04/07/2011 12:00:34 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (4124) Asapi: (17:00:34:0940)(4124) Matrix.ModuleImp - Error -- 52
Unable to get information from module due to failed exec.

Error - 04/07/2011 12:00:34 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (4124) Asapi: (17:00:34:0950)(4124) enumerator - Error -- 118 pcdrsysinfosoftware:
Module timed out after 123226 milliseconds and was terminated

Error - 04/07/2011 15:06:34 | Computer Name = Owner-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 9.0.8112.16421 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Problem Reports and Solutions control panel. Process
ID: 16e0 Start Time: 01cc3a7d4dc18950 Termination Time: 88

[ System Events ]
Error - 09/07/2011 14:35:09 | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 09/07/2011 14:35:09 | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 09/07/2011 14:35:20 | Computer Name = Owner-PC | Source = Microsoft Antimalware | ID = 3002
Description = %%860 Real-Time Protection feature has encountered an error and failed.

Feature:
%%835 Error Code: 0x80004005 Error description: Unspecified error Reason: %%842

Error - 09/07/2011 14:50:10 | Computer Name = Owner-PC | Source = volsnap | ID = 393225
Description = The flush and hold writes operation on volume C: timed out while waiting
for file system cleanup.

Error - 09/07/2011 15:39:41 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =

Error - 09/07/2011 15:39:41 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =

Error - 09/07/2011 15:39:49 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =

Error - 09/07/2011 15:39:49 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =

Error - 09/07/2011 16:07:52 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =

Error - 09/07/2011 16:08:16 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =


< End of report >

[Elle8]

This is the Extra.txt in case it's of any relevance:

OTL Extras logfile created on: 09/07/2011 20:33:43 - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Owner\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

1.99 Gb Total Physical Memory | 0.50 Gb Available Physical Memory | 25.24% Memory free
4.21 Gb Paging File | 2.40 Gb Available in Paging File | 56.98% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 136.45 Gb Total Space | 83.55 Gb Free Space | 61.23% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 4.16 Gb Free Space | 41.57% Space Free | Partition Type: NTFS

Computer Name: OWNER-PC | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{6DA17AAA-D3BA-4F49-919B-5B869F889128}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A59B9E49-ADC3-4867-B648-AD8575365F49}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{186CDD9E-873B-4C5A-A133-9ADFB6E6B161}" = protocol=6 | dir=in | app=c:\program files\opera 11.10 beta\opera.exe |
"{9FDCCC14-633E-4AFD-99B4-4F69F5215140}" = dir=in | app=c:\program files\dell\mediadirect\pcmservice.exe |
"{AC1F4FAC-70B1-49EE-8D1E-CF62978270E9}" = protocol=17 | dir=in | app=c:\program files\opera 11.10 beta\opera.exe |
"TCP Query User{F6015B5B-0DF6-405C-B2F5-B3121C9A8925}C:\program files\opera 11.10 beta\opera.exe" = protocol=6 | dir=in | app=c:\program files\opera 11.10 beta\opera.exe |
"UDP Query User{76A55E11-3AD8-4E11-A2E2-7EBBE2B798BE}C:\program files\opera 11.10 beta\opera.exe" = protocol=17 | dir=in | app=c:\program files\opera 11.10 beta\opera.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0090A87C-3E0E-43D4-AA71-A71B06563A4A}" = Dell Support Center
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{1D10C273-3F95-42A2-8371-AB6B1F59821B}" = WOT for Internet Explorer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 26
"{294EAADF-E50F-4DD8-AD8D-19587EA10512}" = Modem Diagnostic Tool
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B6AD248-D3BF-426A-8D64-847288154F13}" = QuickSet
"{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}" = EDocs
"{6FFB40A5-7F7D-4A32-8905-3CDF962EE1E4}" = Internet From BT
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{774088D4-0777-4D78-904D-E435B318F5D2}" = Microsoft Antimalware
"{77A776C4-D10F-416D-88F0-53F2D9DCD9B3}" = Microsoft Security Client
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}" = OutlookAddinSetup
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}" = MediaDirect
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A81000000003}" = Adobe Reader 8.1.0
"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
"{B047FB66-A183-461B-BA07-4BEF29E9B914}" = Simple Adblock
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B935C985-A17F-484B-8470-09E4FC27DC26}" = Dell-eBay
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AI RoboForm" = RoboForm 7-3-2 (All Users)
"avast" = avast! Free Antivirus
"Broadcom 802.11b Network Adapter" = Dell Wireless WLAN Card
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C06&SUBSYS_14F1000F" = Conexant HDA D330 MDC V.92 Modem
"Coupon Printer2.0" = Coupon Printer
"Dell Support Center" = Dell Support Center
"ESET Online Scanner" = ESET Online Scanner v3
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.0.1200
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft Security Client" = Microsoft Security Essentials
"MiniTool Power Data Recovery_is1" = MiniTool Power Data Recovery
"Mozilla Firefox (3.6.18)" = Mozilla Firefox (3.6.18)
"Opera 11.50.1074" = Opera 11.50
"Revo Uninstaller" = Revo Uninstaller 1.92
"WhoCrashed_is1" = WhoCrashed 3.01

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"f031ef6ac137efc5" = Dell Driver Download Manager

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 04/07/2011 11:18:46 | Computer Name = Owner-PC | Source = Perflib | ID = 1008
Description =

Error - 04/07/2011 11:36:33 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (5748) Asapi: (16:36:33:6350)(5748) libCommon.System.Windows - Error
-- 629 readFromPipeTimed(3352) timed out after 119985 totalBytes: 0

Error - 04/07/2011 11:36:33 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (5748) Asapi: (16:36:33:7890)(5748) libCommon.System.Windows - Error
-- 720 execAndGetPipeData(./pcdrsysinfosoftware.p5x) readFromPipeTimed failed,
killing: 5216

Error - 04/07/2011 11:36:33 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (5748) Asapi: (16:36:33:8190)(5748) Matrix.ModuleImp - Error -- 52
Unable to get information from module due to failed exec.

Error - 04/07/2011 11:36:33 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (5748) Asapi: (16:36:33:8960)(5748) enumerator - Error -- 118 pcdrsysinfosoftware:
Module timed out after 137774 milliseconds and was terminated

Error - 04/07/2011 12:00:33 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (4124) Asapi: (17:00:33:9100)(4124) libCommon.System.Windows - Error
-- 629 readFromPipeTimed(3448) timed out after 119988 totalBytes: 0

Error - 04/07/2011 12:00:34 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (4124) Asapi: (17:00:34:0210)(4124) libCommon.System.Windows - Error
-- 720 execAndGetPipeData(./pcdrsysinfosoftware.p5x) readFromPipeTimed failed,
killing: 5692

Error - 04/07/2011 12:00:34 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (4124) Asapi: (17:00:34:0940)(4124) Matrix.ModuleImp - Error -- 52
Unable to get information from module due to failed exec.

Error - 04/07/2011 12:00:34 | Computer Name = Owner-PC | Source = PC-Doctor | ID = 1
Description = (4124) Asapi: (17:00:34:0950)(4124) enumerator - Error -- 118 pcdrsysinfosoftware:
Module timed out after 123226 milliseconds and was terminated

Error - 04/07/2011 15:06:34 | Computer Name = Owner-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 9.0.8112.16421 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Problem Reports and Solutions control panel. Process
ID: 16e0 Start Time: 01cc3a7d4dc18950 Termination Time: 88

[ System Events ]
Error - 09/07/2011 14:35:09 | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 09/07/2011 14:35:09 | Computer Name = Owner-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 09/07/2011 14:35:20 | Computer Name = Owner-PC | Source = Microsoft Antimalware | ID = 3002
Description = %%860 Real-Time Protection feature has encountered an error and failed.

Feature:
%%835 Error Code: 0x80004005 Error description: Unspecified error Reason: %%842

Error - 09/07/2011 14:50:10 | Computer Name = Owner-PC | Source = volsnap | ID = 393225
Description = The flush and hold writes operation on volume C: timed out while waiting
for file system cleanup.

Error - 09/07/2011 15:39:41 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =

Error - 09/07/2011 15:39:41 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =

Error - 09/07/2011 15:39:49 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =

Error - 09/07/2011 15:39:49 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =

Error - 09/07/2011 16:07:52 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =

Error - 09/07/2011 16:08:16 | Computer Name = Owner-PC | Source = DCOM | ID = 10016
Description =


< End of report >