OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Lenovo-Notebook\My Documents\Downloads
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000421 | Country: Indonesia | Language: IND | Date Format: dd/MM/yyyy
2,87 Gb Total Physical Memory | 2,07 Gb Available Physical Memory | 72,07% Memory free
4,15 Gb Paging File | 3,52 Gb Available in Paging File | 84,85% Paging File free
Paging file location(s): C:\pagefile.sys 1476 2952 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78,13 Gb Total Space | 51,97 Gb Free Space | 66,51% Space Free | Partition Type: NTFS
Drive D: | 153,67 Gb Total Space | 111,23 Gb Free Space | 72,38% Space Free | Partition Type: NTFS
Drive E: | 4,02 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive F: | 15,90 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: LENOVO | User Name: Lenovo-Notebook | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\Lenovo-Notebook\My Documents\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\WINDOWS\cdpi.exe ()
PRC - C:\Program Files\Smadav\SMΔRTP.exe (Smadsoft)
PRC - C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe (Uniblue Systems Limited)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
PRC - C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe (Seagate Technology LLC)
PRC - C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe (Seagate LLC)
PRC - C:\Program Files\Carbonite\CarbonitePreinstaller.exe (Carbonite, Inc.)
PRC - C:\Program Files\Join Air\UIMain.exe ()
PRC - C:\Program Files\Join Air\CMUpdater.exe ()
PRC - C:\Program Files\Join Air\AssistantServices.exe ()
PRC - C:\Program Files\Join Air\UIExec.exe ()
PRC - C:\Program Files\Glary Utilities\memdefrag.exe (Glarysoft Ltd)
PRC - C:\Program Files\Rainlendar2\Rainlendar2.exe ()
PRC - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
PRC - C:\Program Files\Rockwell Automation\Rockwell Automation USB CIP Driver Package\UsbCipHelper\UsbCipHelper.exe (Rockwell Automation, Inc.)
PRC - C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
PRC - C:\Program Files\Lenovo\Energy Management\utilty.exe (Lenovo(Beijing)Limited)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
PRC - C:\Program Files\ClocX\ClocX.exe (BonSoft)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Lenovo-Notebook\My Documents\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\BtMmHook.dll (Broadcom Corporation.)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (FreeAgentGoNext Service) -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe (Seagate Technology LLC)
SRV - (UI Assistant Service) -- C:\Program Files\Join Air\AssistantServices.exe ()
SRV - (szxkvys) -- C:\WINDOWS\system32\bgycuixx.dll ()
========== Driver Services (SafeList) ==========
DRV - (aswSnx) -- C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (hhdserhelp) -- C:\WINDOWS\system32\drivers\hhdserhelp.sys (HHD Software Ltd.)
DRV - (hhdserial32) -- C:\WINDOWS\system32\drivers\hhdserial32.sys (HHD Software Ltd.)
DRV - (hhdusbh32) -- C:\WINDOWS\system32\drivers\hhdusbh32.sys (HHD Software Ltd.)
DRV - (dtscsi) -- C:\WINDOWS\System32\Drivers\dtscsi.sys (DT Soft Ltd.)
DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (CSIUSB) -- C:\WINDOWS\system32\drivers\csiusb.sys (Windows ® 2000 DDK provider)
DRV - (CapFilt) -- C:\WINDOWS\System32\drivers\CapFilt.sys (ensurebit)
DRV - (funfrm) -- C:\WINDOWS\System32\drivers\funfrm.sys ()
DRV - (ZTEusbnet) -- C:\WINDOWS\system32\drivers\ZTEusbnet.sys (ZTE Corporation)
DRV - (ZTEusbnmea) -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys (ZTE Incorporated)
DRV - (ZTEusbser6k) -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys (ZTE Incorporated)
DRV - (ZTEusbmdm6k) -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys (ZTE Incorporated)
DRV - (massfilter) -- C:\WINDOWS\system32\drivers\massfilter.sys (ZTE Incorporated)
DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (ALWIL Software)
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswFsBlk) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (CnxtHdAudService) -- C:\WINDOWS\system32\drivers\CHDAU32.sys (Conexant Systems Inc.)
DRV - (JMCR) -- C:\WINDOWS\system32\drivers\jmcr.sys (JMicron Technology Corp.)
DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (ACPIVPC) -- C:\WINDOWS\system32\drivers\AcpiVpc.sys (Lenovo Corporation)
DRV - (btaudio) -- C:\WINDOWS\system32\drivers\btaudio.sys (Broadcom Corporation.)
DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.)
DRV - (BTKRNL) -- C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation.)
DRV - (BTWDNDIS) -- C:\WINDOWS\system32\drivers\btwdndis.sys (Broadcom Corporation.)
DRV - (btwhid) -- C:\WINDOWS\system32\drivers\btwhid.sys (Broadcom Corporation.)
DRV - (BTDriver) -- C:\WINDOWS\system32\drivers\btport.sys (Broadcom Corporation.)
DRV - (b57w2k) -- C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (softctrl) -- C:\WINDOWS\system32\drivers\softctrl.sys (Alcor Micro Corp.)
========== Standard Registry (All) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft...er=6&ar=msnhome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft...B_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn...st/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn...st/srchasst.htm
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - Reg Error: Value error. File not found
IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - Reg Error: Value error. File not found
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.selectedEngine: "Yahoo!"
FF - prefs.js..extensions.enabledItems: {b01bf10c-302a-11da-b67b-000d60ca027b}:2.6.2
FF - prefs.js..flock.keyword.provider: "Yahoo!"
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/08/07 02:08:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.5\extensions\\Components: C:\Program Files\Flock\components [2011/05/14 22:42:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.5\extensions\\Plugins: C:\Program Files\Flock\plugins [2011/07/29 01:23:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.5.5\extensions\\Components: C:\Program Files\Flock\components [2011/05/14 22:42:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.5.5\extensions\\Plugins: C:\Program Files\Flock\plugins [2011/07/29 01:23:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.6.1\extensions\\Components: C:\Program Files\Flock\components [2011/05/14 22:42:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.6.1\extensions\\Plugins: C:\Program Files\Flock\plugins [2011/07/29 01:23:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.6.2\extensions\\Components: C:\Program Files\Flock\components [2011/05/14 22:42:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.6.2\extensions\\Plugins: C:\Program Files\Flock\plugins [2011/07/29 01:23:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/07/12 07:58:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/12 08:56:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.11\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011/07/04 09:41:47 | 000,000,000 | ---D | M]
[2010/06/30 00:22:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Extensions
[2010/06/30 00:22:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010/06/22 22:14:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Extensions\{a463f10c-3994-11da-9945-000d60ca027b}
[2010/02/28 16:26:01 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2011/08/01 22:48:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Firefox\Profiles\kzfuiu5y.default\extensions
[2011/07/13 14:39:51 | 000,000,000 | ---D | M] (4shared.com Community Toolbar) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Firefox\Profiles\kzfuiu5y.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}
[2010/06/20 23:24:39 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Firefox\Profiles\kzfuiu5y.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2011/08/01 22:48:23 | 000,000,000 | ---D | M] (myBabylon EnglishBB Community Toolbar) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Firefox\Profiles\kzfuiu5y.default\extensions\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}
[2011/07/12 07:58:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/07/12 07:58:52 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2011/06/16 11:17:34 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2008/03/22 03:28:46 | 001,335,600 | ---- | M] (DivX,Inc.) -- C:\Program Files\mozilla firefox\plugins\npdivx32.dll
[2008/03/22 03:29:06 | 000,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll
[2006/10/26 20:12:16 | 000,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL
[2011/06/07 12:35:34 | 000,103,864 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll
[2010/04/17 01:00:00 | 000,140,864 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll
[2010/04/17 01:00:00 | 000,098,304 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprpjplug.dll
[2010/12/09 17:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2010/01/01 15:00:00 | 000,001,394 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2010/01/01 15:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2010/01/01 15:00:00 | 000,001,131 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2010/01/01 15:00:00 | 000,002,364 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2010/01/01 15:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2010/01/01 15:00:00 | 000,001,096 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.xml
O1 HOSTS File: ([2011/08/11 00:33:02 | 000,099,911 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 172.173.19.83 hahahaha.ishtiben.com
O1 - Hosts: 172.173.19.83 aaaaaaaa.ishtiben.com
O1 - Hosts: 172.173.19.83 hubs.ishtiben.com
O1 - Hosts: 172.173.19.83 ppppnipponp.r7m.us
O1 - Hosts: 172.173.19.83 ng.marketallone.com
O1 - Hosts: 172.173.19.83 ng.themarketbaby.com
O1 - Hosts: 172.173.19.83 ng.grasshopperz11.com
O1 - Hosts: 172.173.19.83 dl.ka3ek.com
O1 - Hosts: 172.173.19.83 haaaaaaa.ishtiben.com
O1 - Hosts: 172.173.19.83 dq.javagames7.com
O1 - Hosts: 172.173.19.83 us3.tefgame.com
O1 - Hosts: 172.173.19.83 ng.lighthousez11.com
O1 - Hosts: 172.173.19.83 ng.coachloan.com
O1 - Hosts: 172.173.19.83 sword.holdbaby.com
O1 - Hosts: 172.173.19.83 p34s3.hmarhelo.com
O1 - Hosts: 172.173.19.83 peas.compunass.org
O1 - Hosts: 172.173.19.83 mails.joo3.com
O1 - Hosts: 172.173.19.83 tf18.tefgame.com
O1 - Hosts: 172.173.19.83 tf50.tefgame.com
O1 - Hosts: 172.173.19.83 tf98.tefgame.com
O1 - Hosts: 172.173.19.83 tf122.tefgame.com
O1 - Hosts: 172.173.19.83 tf130.tefgame.com
O1 - Hosts: 172.173.19.83 tf209.tefgame.com
O1 - Hosts: 172.173.19.83 tf120.tefgame.com
O1 - Hosts: 172.173.19.83 mix.tefgame.com
O1 - Hosts: 8 more lines...
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - File not found
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - Reg Error: Value error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ac32] C:\WINDOWS\system32\ac32.exe ()
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CarboniteSetupLite] C:\Program Files\Carbonite\CarbonitePreinstaller.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [ClocX] C:\Program Files\ClocX\ClocX.exe (BonSoft)
O4 - HKLM..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4 - HKLM..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utilty.exe (Lenovo(Beijing)Limited)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [HornetMonitor] File not found
O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Co.)
O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [Intel Data Management] C:\WINDOWS\system32\igfxmd32.exe (Ennui Throw)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe (Macrovision Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [Microsoft Config Setup] File not found
O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [RE.exe] C:\Program Files\Registry Easy\RE.exe ()
O4 - HKLM..\Run: [SMΔRT-Protection] C:\Program Files\Smadav\SMΔRTP.exe (Smadsoft)
O4 - HKLM..\Run: [UIExec] C:\Program Files\Join Air\UIExec.exe ()
O4 - HKLM..\Run: [UsbCipHelper] C:\Program Files\Rockwell Automation\Rockwell Automation USB CIP Driver Package\UsbCipHelper\UsbCipHelper.exe (Rockwell Automation, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [12CFG214-K641-12SF-N85P] C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe ()
O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Glary Memory Optimizer] C:\Program Files\Glary Utilities\memdefrag.exe (Glarysoft Ltd)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [MSConfig] C:\Documents and Settings\Lenovo-Notebook\vim.exe ()
O4 - HKCU..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe ()
O4 - HKCU..\Run: [RegistryBooster] C:\Program Files\Uniblue\RegistryBooster\launcher.exe (Uniblue Systems Limited)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\Lenovo-Notebook\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: TaskMan - (c:\RECYCLER\kos-2-3-41-0000010000-0000010000-0000010000-0100\wincache.exe) - File not found
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\winggb32: DllName - winggb32.dll - File not found
O20 - Winlogon\Notify\winhqg32: DllName - winhqg32.dll - File not found
O20 - Winlogon\Notify\winkfq32: DllName - winkfq32.dll - File not found
O20 - Winlogon\Notify\winrso32: DllName - winrso32.dll - File not found
O20 - Winlogon\Notify\winulo32: DllName - winulo32.dll - File not found
O20 - Winlogon\Notify\winult32: DllName - winult32.dll - File not found
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/07/31 02:12:15 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/07/15 23:48:16 | 000,000,644 | R--- | M] () - F:\AutoRun.dat -- [ CDFS ]
O32 - AutoRun File - [2009/05/23 00:18:08 | 000,000,044 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{1dc0569e-40ec-11e0-a792-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{1dc0569e-40ec-11e0-a792-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{1dc0569f-40ec-11e0-a792-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{1dc0569f-40ec-11e0-a792-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{45df6aa2-2e64-11df-a5aa-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{45df6aa2-2e64-11df-a5aa-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{45df6aa5-2e64-11df-a5aa-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{45df6aa5-2e64-11df-a5aa-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{7308671a-2ef8-11e0-a76e-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{7308671a-2ef8-11e0-a76e-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c311a728-2f90-11e0-a76f-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{c311a728-2f90-11e0-a76f-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c311a72b-2f90-11e0-a76f-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{c311a72b-2f90-11e0-a76f-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d89056be-2e68-11df-a5ab-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{d89056be-2e68-11df-a5ab-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d89056bf-2e68-11df-a5ab-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{d89056bf-2e68-11df-a5ab-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d89056c2-2e68-11df-a5ab-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{d89056c2-2e68-11df-a5ab-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d89056c3-2e68-11df-a5ab-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{d89056c3-2e68-11df-a5ab-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun - "" = Auto&Play
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/08/11 01:45:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Registry Easy
[2011/08/11 01:45:07 | 000,000,000 | ---D | C] -- C:\Program Files\Registry Easy
[2011/08/11 00:51:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Uniblue
[2011/08/11 00:51:18 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
[2011/08/11 00:51:18 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2011/08/11 00:51:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Uniblue
[2011/08/11 00:51:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\PackageAware
[2011/08/07 02:09:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\avast! Free Antivirus
[2011/08/07 02:09:05 | 000,441,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2011/08/07 02:07:18 | 000,040,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2011/08/07 02:06:44 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2011/08/07 02:06:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2011/08/07 01:51:39 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2011/08/07 01:51:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2011/08/06 21:02:23 | 000,000,000 | ---D | C] -- C:\Program Files\Allmyapps
[2011/08/06 20:39:43 | 000,020,560 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2011/08/06 20:39:42 | 000,114,768 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2011/08/06 20:39:42 | 000,094,032 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2011/08/06 20:39:42 | 000,093,296 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2011/08/06 20:39:28 | 001,256,296 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2011/08/06 20:38:50 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2011/08/06 20:23:07 | 000,786,432 | ---- | C] (Ufasoft) -- C:\Documents and Settings\Lenovo-Notebook\bm.exe
[2011/08/02 22:01:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo-Notebook\My Documents\foto strainer Bontang
[2011/07/29 01:24:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2011/07/29 01:24:21 | 000,045,392 | R--- | C] (Adobe Systems Inc) -- C:\WINDOWS\System32\AdobePDF.dll
[2011/07/29 01:24:21 | 000,022,872 | R--- | C] (Adobe Systems Inc.) -- C:\WINDOWS\System32\AdobePDFUI.dll
[2011/07/25 19:10:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo-Notebook\My Documents\nita
[2011/07/25 16:48:01 | 000,000,000 | RHSD | C] -- C:\sandbox
[2011/07/25 16:48:01 | 000,000,000 | RHSD | C] -- C:\cwsandbox
[2011/07/25 16:48:01 | 000,000,000 | ---D | C] -- C:\Program Files\Wireshark
[2011/07/25 16:47:56 | 000,282,624 | RHS- | C] (Ennui Throw) -- C:\WINDOWS\System32\igfxmd32.exe
[2011/07/14 19:08:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Smadav
[2011/07/12 08:27:45 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/07/12 07:34:05 | 013,683,064 | ---- | C] (Mozilla) -- C:\Documents and Settings\Lenovo-Notebook\My Documents\Firefox Setup 5.0.exe
[2011/07/12 07:32:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox
[2010/04/27 22:33:20 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\pcouffin.sys
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/08/11 01:58:03 | 000,000,042 | ---- | M] () -- C:\WINDOWS\System32\RegistryEasy.lie
[2011/08/11 01:45:16 | 000,000,414 | ---- | M] () -- C:\WINDOWS\tasks\Schedule Task Weekly.job
[2011/08/11 01:45:09 | 000,000,699 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Registry Easy.lnk
[2011/08/11 01:45:09 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Registry Easy.lnk
[2011/08/11 01:44:47 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/08/11 00:51:25 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011/08/11 00:51:18 | 000,001,493 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Uniblue RegistryBooster.lnk
[2011/08/11 00:51:18 | 000,001,477 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk
[2011/08/11 00:36:52 | 000,060,928 | ---- | M] () -- C:\WINDOWS\cdpi.exe
[2011/08/11 00:36:47 | 000,456,872 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/08/11 00:36:47 | 000,075,646 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/08/11 00:32:32 | 000,000,332 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2011/08/11 00:32:24 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/08/11 00:32:22 | 000,283,720 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/08/11 00:16:55 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/08/07 17:12:25 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2011/08/07 17:12:25 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm
[2011/08/07 14:31:34 | 000,045,573 | -H-- | M] () -- C:\WINDOWS\System32\userdiff.sav
[2011/08/07 14:31:34 | 000,045,573 | -H-- | M] () -- C:\Documents and Settings\Lenovo-Notebook\userdiff.sav
[2011/08/07 14:31:34 | 000,033,792 | -H-- | M] () -- C:\Documents and Settings\Lenovo-Notebook\vim.exe
[2011/08/07 14:04:03 | 000,131,072 | ---- | M] () -- C:\ndo32.exe
[2011/08/07 04:45:30 | 000,002,625 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011/08/07 04:12:06 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2011/08/07 04:12:06 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm
[2011/08/07 02:32:01 | 000,000,256 | ---- | M] () -- C:\WINDOWS\System32\pool.bin
[2011/08/07 02:25:25 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
[2011/08/07 02:25:25 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm
[2011/08/07 02:09:06 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2011/08/07 01:27:34 | 000,060,928 | ---- | M] () -- C:\WINDOWS\System32\ac32.exe
[2011/08/06 21:18:56 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm
[2011/08/06 21:18:56 | 000,000,232 | -H-- | M] () -- C:\sqmdata19.sqm
[2011/08/06 20:23:07 | 000,786,432 | ---- | M] (Ufasoft) -- C:\Documents and Settings\Lenovo-Notebook\bm.exe
[2011/08/05 04:05:27 | 000,154,112 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/08/02 22:11:23 | 000,591,043 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\foto pemasangan strainer Bontang.pdf
[2011/08/02 22:07:42 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Word 2007.lnk
[2011/07/31 13:17:44 | 000,050,703 | ---- | M] () -- C:\WINDOWS\System32\lpdd.exe
[2011/07/31 02:13:32 | 000,001,863 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Seagate Manager.lnk
[2011/07/31 02:12:48 | 000,001,732 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Carbonite Online Backup Setup.lnk
[2011/07/31 02:12:17 | 000,002,320 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Home movies made easy!.lnk
[2011/07/31 02:12:16 | 000,001,167 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Home movies made easy!.lnk
[2011/07/31 02:12:15 | 000,000,050 | ---- | M] () -- C:\AUTOEXEC.BAT
[2011/07/31 01:17:03 | 000,105,272 | ---- | M] () -- C:\WINDOWS\System32\asr_03837.exe
[2011/07/31 01:13:52 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_zznlv
[2011/07/30 23:31:34 | 000,115,664 | ---- | M] () -- C:\WINDOWS\System32\asr_65537.exe
[2011/07/30 23:30:57 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_hsohe
[2011/07/30 22:10:32 | 000,020,480 | ---- | M] () -- C:\WINDOWS\System32\asr_68350.exe
[2011/07/30 22:07:16 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_pihbx
[2011/07/30 21:52:14 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_07372.exe
[2011/07/30 21:52:00 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_rsgly
[2011/07/30 21:10:07 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_xisvhu
[2011/07/30 21:09:28 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_wbvlpj
[2011/07/30 20:30:27 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_17116.exe
[2011/07/30 20:29:09 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_qkhfq
[2011/07/30 19:26:43 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_snxie
[2011/07/30 17:52:12 | 000,171,795 | ---- | M] () -- C:\WINDOWS\System32\asr_36115.exe
[2011/07/30 17:52:04 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_xxqoz
[2011/07/30 17:17:56 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_smstd
[2011/07/30 13:59:26 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_30070.exe
[2011/07/30 13:59:20 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_nekrv
[2011/07/30 13:47:58 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_66845.exe
[2011/07/30 13:47:53 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_ndnux
[2011/07/30 11:13:58 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_48617.exe
[2011/07/30 11:13:51 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_oitcm
[2011/07/30 10:50:18 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_okpbq
[2011/07/30 10:50:03 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_ostgf
[2011/07/30 10:49:43 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_inxfh
[2011/07/30 10:49:39 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_sxvoy
[2011/07/30 10:44:23 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_18114.exe
[2011/07/30 10:44:15 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_btzkp
[2011/07/30 09:55:37 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_ytolcz
[2011/07/30 03:23:30 | 000,000,485 | ---- | M] () -- C:\WINDOWS\videofilter.dlc
[2011/07/29 22:47:13 | 000,131,072 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\ois.exe
[2011/07/29 22:01:09 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_51057.exe
[2011/07/29 22:00:55 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_wmats
[2011/07/29 21:22:50 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_15468.exe
[2011/07/29 21:22:36 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_eotlr
[2011/07/29 18:11:10 | 000,053,248 | ---- | M] () -- C:\WINDOWS\System32\68.exe
[2011/07/29 13:10:39 | 000,002,101 | ---- | M] () -- C:\NetworkCfg.xml
[2011/07/29 12:19:31 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm
[2011/07/29 12:19:31 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm
[2011/07/29 11:07:45 | 000,000,279 | ---- | M] () -- C:\Shortcut to Data (D).lnk
[2011/07/29 01:23:19 | 000,001,736 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Acrobat 9 Pro.lnk
[2011/07/28 19:19:19 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm
[2011/07/28 19:19:19 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm
[2011/07/26 12:23:21 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm
[2011/07/26 12:23:21 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm
[2011/07/25 19:10:33 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm
[2011/07/25 19:10:33 | 000,000,232 | -H-- | M] () -- C:\sqmdata15.sqm
[2011/07/25 18:46:47 | 000,053,000 | ---- | M] () -- C:\WINDOWS\D4S.MID
[2011/07/25 17:33:31 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm
[2011/07/25 17:33:31 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm
[2011/07/25 17:00:11 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm
[2011/07/25 17:00:11 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm
[2011/07/25 16:54:31 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm
[2011/07/25 16:54:31 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm
[2011/07/25 16:47:52 | 000,282,624 | RHS- | M] (Ennui Throw) -- C:\WINDOWS\System32\igfxmd32.exe
[2011/07/25 12:33:46 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\prvlcl.dat
[2011/07/25 11:02:42 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\ui41.exe
[2011/07/15 08:45:06 | 000,002,336 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/07/15 08:45:05 | 000,002,358 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Google Chrome.lnk
[2011/07/14 12:09:15 | 000,563,944 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\calibration with fluke.pdf
[2011/07/14 11:35:58 | 000,670,579 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\PV211.pdf
[2011/07/12 09:57:00 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_oeahdb
[2011/07/12 09:05:29 | 000,175,020 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\GTA San Andreas Cheats.htm
[2011/07/12 09:04:57 | 000,037,667 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\PCS_convert_Stick.png
[2011/07/12 08:56:45 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/07/12 07:58:55 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/07/12 07:58:54 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/07/12 07:55:00 | 013,683,064 | ---- | M] (Mozilla) -- C:\Documents and Settings\Lenovo-Notebook\My Documents\Firefox Setup 5.0.exe
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/08/11 01:58:03 | 000,000,042 | ---- | C] () -- C:\WINDOWS\System32\RegistryEasy.lie
[2011/08/11 01:45:15 | 000,000,414 | ---- | C] () -- C:\WINDOWS\tasks\Schedule Task Weekly.job
[2011/08/11 01:45:09 | 000,000,699 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Registry Easy.lnk
[2011/08/11 01:45:09 | 000,000,681 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Registry Easy.lnk
[2011/08/11 00:51:24 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011/08/11 00:51:18 | 000,001,493 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Uniblue RegistryBooster.lnk
[2011/08/11 00:51:18 | 000,001,477 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk
[2011/08/07 14:31:34 | 000,033,792 | -H-- | C] () -- C:\Documents and Settings\Lenovo-Notebook\vim.exe
[2011/08/07 02:59:53 | 000,060,928 | ---- | C] () -- C:\WINDOWS\cdpi.exe
[2011/08/07 02:09:06 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2011/08/06 21:18:56 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt19.sqm
[2011/08/06 21:18:56 | 000,000,232 | -H-- | C] () -- C:\sqmdata19.sqm
[2011/08/06 20:39:28 | 000,380,928 | ---- | C] () -- C:\WINDOWS\System32\actskin4.ocx
[2011/08/05 02:12:59 | 000,000,256 | ---- | C] () -- C:\WINDOWS\System32\pool.bin
[2011/08/02 22:11:08 | 000,591,043 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\foto pemasangan strainer Bontang.pdf
[2011/07/31 02:12:16 | 000,002,320 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Home movies made easy!.lnk
[2011/07/31 02:11:42 | 000,001,167 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Home movies made easy!.lnk
[2011/07/31 01:13:56 | 000,105,272 | ---- | C] () -- C:\WINDOWS\System32\asr_03837.exe
[2011/07/31 01:13:52 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_zznlv
[2011/07/30 23:30:59 | 000,115,664 | ---- | C] () -- C:\WINDOWS\System32\asr_65537.exe
[2011/07/30 23:30:57 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_hsohe
[2011/07/30 22:07:22 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\asr_68350.exe
[2011/07/30 22:07:16 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_pihbx
[2011/07/30 21:52:02 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_07372.exe
[2011/07/30 21:52:00 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_rsgly
[2011/07/30 21:10:07 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_xisvhu
[2011/07/30 21:09:28 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_wbvlpj
[2011/07/30 20:29:10 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_17116.exe
[2011/07/30 20:29:09 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_qkhfq
[2011/07/30 19:26:43 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_snxie
[2011/07/30 17:52:05 | 000,171,795 | ---- | C] () -- C:\WINDOWS\System32\asr_36115.exe
[2011/07/30 17:52:04 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_xxqoz
[2011/07/30 17:17:56 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_smstd
[2011/07/30 13:59:21 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_30070.exe
[2011/07/30 13:59:20 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_nekrv
[2011/07/30 13:47:54 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_66845.exe
[2011/07/30 13:47:53 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_ndnux
[2011/07/30 11:13:52 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_48617.exe
[2011/07/30 11:13:51 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_oitcm
[2011/07/30 10:50:18 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_okpbq
[2011/07/30 10:50:03 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_ostgf
[2011/07/30 10:49:43 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_inxfh
[2011/07/30 10:49:39 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_sxvoy
[2011/07/30 10:44:16 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_18114.exe
[2011/07/30 10:44:15 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_btzkp
[2011/07/30 09:55:37 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_ytolcz
[2011/07/29 22:47:09 | 000,131,072 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\ois.exe
[2011/07/29 22:45:50 | 000,060,928 | ---- | C] () -- C:\WINDOWS\System32\ac32.exe
[2011/07/29 22:01:01 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_51057.exe
[2011/07/29 22:00:55 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_wmats
[2011/07/29 21:25:26 | 000,050,703 | ---- | C] () -- C:\WINDOWS\System32\lpdd.exe
[2011/07/29 21:22:37 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_15468.exe
[2011/07/29 21:22:36 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_eotlr
[2011/07/29 21:03:23 | 000,131,072 | ---- | C] () -- C:\ndo32.exe
[2011/07/29 18:11:07 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\68.exe
[2011/07/29 17:31:11 | 000,045,573 | -H-- | C] () -- C:\WINDOWS\System32\userdiff.sav
[2011/07/29 17:31:11 | 000,045,573 | -H-- | C] () -- C:\Documents and Settings\Lenovo-Notebook\userdiff.sav
[2011/07/29 12:19:31 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt18.sqm
[2011/07/29 12:19:31 | 000,000,232 | -H-- | C] () -- C:\sqmdata18.sqm
[2011/07/29 11:07:45 | 000,000,279 | ---- | C] () -- C:\Shortcut to Data (D).lnk
[2011/07/29 01:23:19 | 000,001,736 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Acrobat 9 Pro.lnk
[2011/07/29 01:23:18 | 000,002,327 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Acrobat Distiller 9.lnk
[2011/07/29 01:23:18 | 000,002,317 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Acrobat 9 Pro.lnk
[2011/07/29 01:23:18 | 000,001,880 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe LiveCycle Designer ES 8.2.lnk
[2011/07/28 19:19:19 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt17.sqm
[2011/07/28 19:19:19 | 000,000,232 | -H-- | C] () -- C:\sqmdata17.sqm
[2011/07/26 12:23:21 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt16.sqm
[2011/07/26 12:23:21 | 000,000,232 | -H-- | C] () -- C:\sqmdata16.sqm
[2011/07/25 19:10:33 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt15.sqm
[2011/07/25 19:10:33 | 000,000,232 | -H-- | C] () -- C:\sqmdata15.sqm
[2011/07/25 18:46:47 | 000,053,000 | ---- | C] () -- C:\WINDOWS\D4S.MID
[2011/07/25 17:33:31 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt14.sqm
[2011/07/25 17:33:31 | 000,000,232 | -H-- | C] () -- C:\sqmdata14.sqm
[2011/07/25 17:00:11 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt13.sqm
[2011/07/25 17:00:11 | 000,000,232 | -H-- | C] () -- C:\sqmdata13.sqm
[2011/07/25 16:54:31 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt12.sqm
[2011/07/25 16:54:31 | 000,000,232 | -H-- | C] () -- C:\sqmdata12.sqm
[2011/07/25 11:02:42 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\ui41.exe
[2011/07/14 12:09:15 | 000,563,944 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\calibration with fluke.pdf
[2011/07/14 11:35:58 | 000,670,579 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\PV211.pdf
[2011/07/12 09:57:00 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_oeahdb
[2011/07/12 09:05:28 | 000,175,020 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\GTA San Andreas Cheats.htm
[2011/07/12 09:04:56 | 000,037,667 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\PCS_convert_Stick.png
[2011/07/12 07:58:54 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011/07/12 07:32:31 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/07/12 07:32:31 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/11 20:10:33 | 000,160,592 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2010/09/23 23:07:50 | 000,000,046 | ---- | C] () -- C:\WINDOWS\QTW.INI
[2010/08/23 00:59:44 | 000,000,017 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2010/07/07 20:15:23 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/07/07 20:15:20 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/07/07 20:15:20 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/07/07 20:15:19 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2010/07/07 20:15:14 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/06/15 22:19:23 | 000,096,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd1325.sys
[2010/06/07 01:53:33 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\prvlcl.dat
[2010/05/22 23:32:38 | 000,000,372 | ---- | C] () -- C:\WINDOWS\EMICLOCK.INI
[2010/05/16 21:17:03 | 000,000,086 | ---- | C] () -- C:\WINDOWS\scmate.ini
[2010/05/05 23:52:31 | 000,000,162 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/04/29 22:48:38 | 000,141,149 | ---- | C] () -- C:\WINDOWS\hpoins14.dat
[2010/04/29 22:48:37 | 000,002,000 | ---- | C] () -- C:\WINDOWS\hpomdl14.dat
[2010/04/29 02:45:02 | 000,000,144 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\MagicPlayDVD.ini
[2010/04/27 22:33:20 | 000,081,920 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\ezpinst.exe
[2010/04/27 22:33:20 | 000,007,176 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\pcouffin.cat
[2010/04/27 22:33:20 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\pcouffin.inf
[2010/03/26 11:52:13 | 000,000,184 | ---- | C] () -- C:\WINDOWS\GECKOS.INI
[2010/03/23 20:25:47 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2010/03/15 23:32:14 | 000,154,112 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/12 15:52:19 | 000,057,344 | ---- | C] () -- C:\WINDOWS\AsfHelper.dll
[2010/03/12 15:52:19 | 000,022,528 | ---- | C] () -- C:\WINDOWS\ScrSav.dll
[2010/03/12 15:41:00 | 001,991,464 | ---- | C] () -- C:\WINDOWS\System32\igkrng500.bin
[2010/03/12 15:40:58 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4950.dll
[2010/03/12 15:40:57 | 000,432,400 | ---- | C] () -- C:\WINDOWS\System32\igcompkrng500.bin
[2010/03/12 15:34:39 | 000,319,488 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe
[2010/02/28 23:03:55 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/02/28 23:02:41 | 000,283,720 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/02/28 16:51:23 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\{EC4C8FCB-8A0D-47f6-8F3E-2A34527102F5}.dat
[2010/02/28 16:49:17 | 000,043,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\funfrm.sys
[2010/02/28 16:49:05 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/02/28 16:49:04 | 000,241,664 | ---- | C] () -- C:\WINDOWS\System32\3DImageRenderer.dll
[2010/02/28 16:25:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/02/28 16:15:01 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/02/28 16:09:40 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/01 04:25:46 | 000,831,488 | ---- | C] () -- C:\WINDOWS\System32\divx_xx0a.dll
[2008/03/22 03:28:20 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2008/01/18 14:16:00 | 002,842,624 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2007/09/27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2004/08/04 06:07:22 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2004/08/04 05:56:44 | 000,165,405 | ---- | C] () -- C:\WINDOWS\System32\bgycuixx.dll
[2004/08/04 05:56:44 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004/08/02 19:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2001/11/14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
[2001/08/23 18:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 18:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 18:00:00 | 000,456,872 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 18:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 18:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 18:00:00 | 000,075,646 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 18:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 18:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 18:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 18:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== LOP Check ==========
[2010/03/15 23:31:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems
[2010/06/16 18:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Autodesk
[2011/08/07 02:06:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2011/08/06 20:28:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
[2011/04/07 02:11:06 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2010/02/28 16:49:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EasyCapture
[2010/03/14 12:09:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Fugazo
[2011/07/31 02:10:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2010/03/25 12:35:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\n7-89-o9-3r-4t-r9
[2011/02/11 20:17:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Seagate
[2011/06/15 17:35:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2011/08/11 00:51:18 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
[2010/03/12 16:38:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\ACD Systems
[2010/03/30 01:58:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Autodesk
[2010/07/07 18:34:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/06/07 09:43:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Emerson Process Management
[2010/06/22 22:14:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Flock
[2010/04/21 21:22:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\GlarySoft
[2011/02/11 20:04:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Leadertech
[2011/05/12 22:47:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\muvee Technologies
[2010/08/23 19:02:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Sahmon Games
[2011/07/14 19:08:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Smadav
[2011/02/14 21:54:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Softland
[2010/03/14 22:51:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Thinstall
[2010/06/30 00:22:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Thunderbird
[2011/08/11 00:51:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Uniblue
[2010/12/12 16:41:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Vso
[2011/06/16 00:25:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Windows Desktop Search
[2011/06/16 00:25:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Windows Search
[2011/08/11 00:32:32 | 000,000,332 | ---- | M] () -- C:\WINDOWS\Tasks\GlaryInitialize.job
[2011/08/11 00:51:25 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\RegistryBooster.job
[2011/08/11 01:45:16 | 000,000,414 | ---- | M] () -- C:\WINDOWS\Tasks\Schedule Task Weekly.job
========== Purity Check ==========
========== Files - Unicode (All) ==========
[2011/07/14 19:08:08 | 000,000,439 | ---- | M] ()(C:\Documents and Settings\All Users\Desktop\SMAD?V.lnk) -- C:\Documents and Settings\All Users\Desktop\SMADΔV.lnk
[2011/07/14 19:08:08 | 000,000,439 | ---- | C] ()(C:\Documents and Settings\All Users\Desktop\SMAD?V.lnk) -- C:\Documents and Settings\All Users\Desktop\SMADΔV.lnk
========== Alternate Data Streams ==========
@Alternate Data Stream - 553604 bytes -> C:\WINDOWS\Temp:temp
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C5760A8B
< End of report >