Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

AntiVirus Removal needed


  • This topic is locked This topic is locked

#1
lutstanza

lutstanza

    New Member

  • Member
  • Pip
  • 2 posts
OTL logfile created on: 11/08/2011 2:52:54 - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Lenovo-Notebook\My Documents\Downloads
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000421 | Country: Indonesia | Language: IND | Date Format: dd/MM/yyyy

2,87 Gb Total Physical Memory | 2,07 Gb Available Physical Memory | 72,07% Memory free
4,15 Gb Paging File | 3,52 Gb Available in Paging File | 84,85% Paging File free
Paging file location(s): C:\pagefile.sys 1476 2952 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 78,13 Gb Total Space | 51,97 Gb Free Space | 66,51% Space Free | Partition Type: NTFS
Drive D: | 153,67 Gb Total Space | 111,23 Gb Free Space | 72,38% Space Free | Partition Type: NTFS
Drive E: | 4,02 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive F: | 15,90 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: LENOVO | User Name: Lenovo-Notebook | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Lenovo-Notebook\My Documents\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\WINDOWS\cdpi.exe ()
PRC - C:\Program Files\Smadav\SMΔRTP.exe (Smadsoft)
PRC - C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe (Uniblue Systems Limited)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
PRC - C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe (Seagate Technology LLC)
PRC - C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe (Seagate LLC)
PRC - C:\Program Files\Carbonite\CarbonitePreinstaller.exe (Carbonite, Inc.)
PRC - C:\Program Files\Join Air\UIMain.exe ()
PRC - C:\Program Files\Join Air\CMUpdater.exe ()
PRC - C:\Program Files\Join Air\AssistantServices.exe ()
PRC - C:\Program Files\Join Air\UIExec.exe ()
PRC - C:\Program Files\Glary Utilities\memdefrag.exe (Glarysoft Ltd)
PRC - C:\Program Files\Rainlendar2\Rainlendar2.exe ()
PRC - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
PRC - C:\Program Files\Rockwell Automation\Rockwell Automation USB CIP Driver Package\UsbCipHelper\UsbCipHelper.exe (Rockwell Automation, Inc.)
PRC - C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
PRC - C:\Program Files\Lenovo\Energy Management\utilty.exe (Lenovo(Beijing)Limited)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
PRC - C:\Program Files\ClocX\ClocX.exe (BonSoft)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Lenovo-Notebook\My Documents\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\BtMmHook.dll (Broadcom Corporation.)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (FreeAgentGoNext Service) -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe (Seagate Technology LLC)
SRV - (UI Assistant Service) -- C:\Program Files\Join Air\AssistantServices.exe ()
SRV - (szxkvys) -- C:\WINDOWS\system32\bgycuixx.dll ()


========== Driver Services (SafeList) ==========

DRV - (aswSnx) -- C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (hhdserhelp) -- C:\WINDOWS\system32\drivers\hhdserhelp.sys (HHD Software Ltd.)
DRV - (hhdserial32) -- C:\WINDOWS\system32\drivers\hhdserial32.sys (HHD Software Ltd.)
DRV - (hhdusbh32) -- C:\WINDOWS\system32\drivers\hhdusbh32.sys (HHD Software Ltd.)
DRV - (dtscsi) -- C:\WINDOWS\System32\Drivers\dtscsi.sys (DT Soft Ltd.)
DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (CSIUSB) -- C:\WINDOWS\system32\drivers\csiusb.sys (Windows ® 2000 DDK provider)
DRV - (CapFilt) -- C:\WINDOWS\System32\drivers\CapFilt.sys (ensurebit)
DRV - (funfrm) -- C:\WINDOWS\System32\drivers\funfrm.sys ()
DRV - (ZTEusbnet) -- C:\WINDOWS\system32\drivers\ZTEusbnet.sys (ZTE Corporation)
DRV - (ZTEusbnmea) -- C:\WINDOWS\system32\drivers\ZTEusbnmea.sys (ZTE Incorporated)
DRV - (ZTEusbser6k) -- C:\WINDOWS\system32\drivers\ZTEusbser6k.sys (ZTE Incorporated)
DRV - (ZTEusbmdm6k) -- C:\WINDOWS\system32\drivers\ZTEusbmdm6k.sys (ZTE Incorporated)
DRV - (massfilter) -- C:\WINDOWS\system32\drivers\massfilter.sys (ZTE Incorporated)
DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (ALWIL Software)
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswFsBlk) -- C:\WINDOWS\system32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (CnxtHdAudService) -- C:\WINDOWS\system32\drivers\CHDAU32.sys (Conexant Systems Inc.)
DRV - (JMCR) -- C:\WINDOWS\system32\drivers\jmcr.sys (JMicron Technology Corp.)
DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (ACPIVPC) -- C:\WINDOWS\system32\drivers\AcpiVpc.sys (Lenovo Corporation)
DRV - (btaudio) -- C:\WINDOWS\system32\drivers\btaudio.sys (Broadcom Corporation.)
DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.)
DRV - (BTKRNL) -- C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation.)
DRV - (BTWDNDIS) -- C:\WINDOWS\system32\drivers\btwdndis.sys (Broadcom Corporation.)
DRV - (btwhid) -- C:\WINDOWS\system32\drivers\btwhid.sys (Broadcom Corporation.)
DRV - (BTDriver) -- C:\WINDOWS\system32\drivers\btport.sys (Broadcom Corporation.)
DRV - (b57w2k) -- C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (softctrl) -- C:\WINDOWS\system32\drivers\softctrl.sys (Alcor Micro Corp.)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft...er=6&ar=msnhome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft...B_PVER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn...st/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn...st/srchasst.htm
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - Reg Error: Value error. File not found

IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - Reg Error: Value error. File not found
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Yahoo!"
FF - prefs.js..extensions.enabledItems: {b01bf10c-302a-11da-b67b-000d60ca027b}:2.6.2
FF - prefs.js..flock.keyword.provider: "Yahoo!"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/08/07 02:08:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.5\extensions\\Components: C:\Program Files\Flock\components [2011/05/14 22:42:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.5\extensions\\Plugins: C:\Program Files\Flock\plugins [2011/07/29 01:23:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.5.5\extensions\\Components: C:\Program Files\Flock\components [2011/05/14 22:42:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.5.5\extensions\\Plugins: C:\Program Files\Flock\plugins [2011/07/29 01:23:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.6.1\extensions\\Components: C:\Program Files\Flock\components [2011/05/14 22:42:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.6.1\extensions\\Plugins: C:\Program Files\Flock\plugins [2011/07/29 01:23:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.6.2\extensions\\Components: C:\Program Files\Flock\components [2011/05/14 22:42:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Flock 2.6.2\extensions\\Plugins: C:\Program Files\Flock\plugins [2011/07/29 01:23:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/07/12 07:58:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/12 08:56:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.11\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011/07/04 09:41:47 | 000,000,000 | ---D | M]

[2010/06/30 00:22:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Extensions
[2010/06/30 00:22:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010/06/22 22:14:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Extensions\{a463f10c-3994-11da-9945-000d60ca027b}
[2010/02/28 16:26:01 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2011/08/01 22:48:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Firefox\Profiles\kzfuiu5y.default\extensions
[2011/07/13 14:39:51 | 000,000,000 | ---D | M] (4shared.com Community Toolbar) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Firefox\Profiles\kzfuiu5y.default\extensions\{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}
[2010/06/20 23:24:39 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Firefox\Profiles\kzfuiu5y.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2011/08/01 22:48:23 | 000,000,000 | ---D | M] (myBabylon EnglishBB Community Toolbar) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Mozilla\Firefox\Profiles\kzfuiu5y.default\extensions\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}
[2011/07/12 07:58:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/07/12 07:58:52 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2011/06/16 11:17:34 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2008/03/22 03:28:46 | 001,335,600 | ---- | M] (DivX,Inc.) -- C:\Program Files\mozilla firefox\plugins\npdivx32.dll
[2008/03/22 03:29:06 | 000,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll
[2006/10/26 20:12:16 | 000,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL
[2011/06/07 12:35:34 | 000,103,864 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\mozilla firefox\plugins\nppdf32.dll
[2010/04/17 01:00:00 | 000,140,864 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll
[2010/04/17 01:00:00 | 000,098,304 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprpjplug.dll
[2010/12/09 17:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2010/01/01 15:00:00 | 000,001,394 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2010/01/01 15:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2010/01/01 15:00:00 | 000,001,131 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2010/01/01 15:00:00 | 000,002,364 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2010/01/01 15:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2010/01/01 15:00:00 | 000,001,096 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.xml

O1 HOSTS File: ([2011/08/11 00:33:02 | 000,099,911 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 172.173.19.83 hahahaha.ishtiben.com
O1 - Hosts: 172.173.19.83 aaaaaaaa.ishtiben.com
O1 - Hosts: 172.173.19.83 hubs.ishtiben.com
O1 - Hosts: 172.173.19.83 ppppnipponp.r7m.us
O1 - Hosts: 172.173.19.83 ng.marketallone.com
O1 - Hosts: 172.173.19.83 ng.themarketbaby.com
O1 - Hosts: 172.173.19.83 ng.grasshopperz11.com
O1 - Hosts: 172.173.19.83 dl.ka3ek.com
O1 - Hosts: 172.173.19.83 haaaaaaa.ishtiben.com
O1 - Hosts: 172.173.19.83 dq.javagames7.com
O1 - Hosts: 172.173.19.83 us3.tefgame.com
O1 - Hosts: 172.173.19.83 ng.lighthousez11.com
O1 - Hosts: 172.173.19.83 ng.coachloan.com
O1 - Hosts: 172.173.19.83 sword.holdbaby.com
O1 - Hosts: 172.173.19.83 p34s3.hmarhelo.com
O1 - Hosts: 172.173.19.83 peas.compunass.org
O1 - Hosts: 172.173.19.83 mails.joo3.com
O1 - Hosts: 172.173.19.83 tf18.tefgame.com
O1 - Hosts: 172.173.19.83 tf50.tefgame.com
O1 - Hosts: 172.173.19.83 tf98.tefgame.com
O1 - Hosts: 172.173.19.83 tf122.tefgame.com
O1 - Hosts: 172.173.19.83 tf130.tefgame.com
O1 - Hosts: 172.173.19.83 tf209.tefgame.com
O1 - Hosts: 172.173.19.83 tf120.tefgame.com
O1 - Hosts: 172.173.19.83 mix.tefgame.com
O1 - Hosts: 8 more lines...
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - File not found
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - Reg Error: Value error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ac32] C:\WINDOWS\system32\ac32.exe ()
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CarboniteSetupLite] C:\Program Files\Carbonite\CarbonitePreinstaller.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [ClocX] C:\Program Files\ClocX\ClocX.exe (BonSoft)
O4 - HKLM..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4 - HKLM..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utilty.exe (Lenovo(Beijing)Limited)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [HornetMonitor] File not found
O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Co.)
O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [Intel Data Management] C:\WINDOWS\system32\igfxmd32.exe (Ennui Throw)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe (Macrovision Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [Microsoft Config Setup] File not found
O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [RE.exe] C:\Program Files\Registry Easy\RE.exe ()
O4 - HKLM..\Run: [SMΔRT-Protection] C:\Program Files\Smadav\SMΔRTP.exe (Smadsoft)
O4 - HKLM..\Run: [UIExec] C:\Program Files\Join Air\UIExec.exe ()
O4 - HKLM..\Run: [UsbCipHelper] C:\Program Files\Rockwell Automation\Rockwell Automation USB CIP Driver Package\UsbCipHelper\UsbCipHelper.exe (Rockwell Automation, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [12CFG214-K641-12SF-N85P] C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe ()
O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Glary Memory Optimizer] C:\Program Files\Glary Utilities\memdefrag.exe (Glarysoft Ltd)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [MSConfig] C:\Documents and Settings\Lenovo-Notebook\vim.exe ()
O4 - HKCU..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe ()
O4 - HKCU..\Run: [RegistryBooster] C:\Program Files\Uniblue\RegistryBooster\launcher.exe (Uniblue Systems Limited)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\Lenovo-Notebook\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: HP Clipbook - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: HP Smart Select - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: TaskMan - (c:\RECYCLER\kos-2-3-41-0000010000-0000010000-0000010000-0100\wincache.exe) - File not found
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\winggb32: DllName - winggb32.dll - File not found
O20 - Winlogon\Notify\winhqg32: DllName - winhqg32.dll - File not found
O20 - Winlogon\Notify\winkfq32: DllName - winkfq32.dll - File not found
O20 - Winlogon\Notify\winrso32: DllName - winrso32.dll - File not found
O20 - Winlogon\Notify\winulo32: DllName - winulo32.dll - File not found
O20 - Winlogon\Notify\winult32: DllName - winult32.dll - File not found
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/07/31 02:12:15 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009/07/15 23:48:16 | 000,000,644 | R--- | M] () - F:\AutoRun.dat -- [ CDFS ]
O32 - AutoRun File - [2009/05/23 00:18:08 | 000,000,044 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{1dc0569e-40ec-11e0-a792-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{1dc0569e-40ec-11e0-a792-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{1dc0569f-40ec-11e0-a792-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{1dc0569f-40ec-11e0-a792-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{45df6aa2-2e64-11df-a5aa-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{45df6aa2-2e64-11df-a5aa-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{45df6aa5-2e64-11df-a5aa-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{45df6aa5-2e64-11df-a5aa-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{7308671a-2ef8-11e0-a76e-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{7308671a-2ef8-11e0-a76e-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c311a728-2f90-11e0-a76f-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{c311a728-2f90-11e0-a76f-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c311a72b-2f90-11e0-a76f-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{c311a72b-2f90-11e0-a76f-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d89056be-2e68-11df-a5ab-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{d89056be-2e68-11df-a5ab-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d89056bf-2e68-11df-a5ab-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{d89056bf-2e68-11df-a5ab-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d89056c2-2e68-11df-a5ab-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{d89056c2-2e68-11df-a5ab-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{d89056c3-2e68-11df-a5ab-0021009012df}\Shell - "" = AutoRun
O33 - MountPoints2\{d89056c3-2e68-11df-a5ab-0021009012df}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun - "" = Auto&Play
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/08/11 01:45:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Registry Easy
[2011/08/11 01:45:07 | 000,000,000 | ---D | C] -- C:\Program Files\Registry Easy
[2011/08/11 00:51:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Uniblue
[2011/08/11 00:51:18 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
[2011/08/11 00:51:18 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2011/08/11 00:51:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Uniblue
[2011/08/11 00:51:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\PackageAware
[2011/08/07 02:09:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\avast! Free Antivirus
[2011/08/07 02:09:05 | 000,441,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2011/08/07 02:07:18 | 000,040,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2011/08/07 02:06:44 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2011/08/07 02:06:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2011/08/07 01:51:39 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2011/08/07 01:51:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Avira
[2011/08/06 21:02:23 | 000,000,000 | ---D | C] -- C:\Program Files\Allmyapps
[2011/08/06 20:39:43 | 000,020,560 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2011/08/06 20:39:42 | 000,114,768 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2011/08/06 20:39:42 | 000,094,032 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2011/08/06 20:39:42 | 000,093,296 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2011/08/06 20:39:28 | 001,256,296 | ---- | C] (ALWIL Software) -- C:\WINDOWS\System32\aswBoot.exe
[2011/08/06 20:38:50 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2011/08/06 20:23:07 | 000,786,432 | ---- | C] (Ufasoft) -- C:\Documents and Settings\Lenovo-Notebook\bm.exe
[2011/08/02 22:01:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo-Notebook\My Documents\foto strainer Bontang
[2011/07/29 01:24:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2011/07/29 01:24:21 | 000,045,392 | R--- | C] (Adobe Systems Inc) -- C:\WINDOWS\System32\AdobePDF.dll
[2011/07/29 01:24:21 | 000,022,872 | R--- | C] (Adobe Systems Inc.) -- C:\WINDOWS\System32\AdobePDFUI.dll
[2011/07/25 19:10:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo-Notebook\My Documents\nita
[2011/07/25 16:48:01 | 000,000,000 | RHSD | C] -- C:\sandbox
[2011/07/25 16:48:01 | 000,000,000 | RHSD | C] -- C:\cwsandbox
[2011/07/25 16:48:01 | 000,000,000 | ---D | C] -- C:\Program Files\Wireshark
[2011/07/25 16:47:56 | 000,282,624 | RHS- | C] (Ennui Throw) -- C:\WINDOWS\System32\igfxmd32.exe
[2011/07/14 19:08:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Smadav
[2011/07/12 08:27:45 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/07/12 07:34:05 | 013,683,064 | ---- | C] (Mozilla) -- C:\Documents and Settings\Lenovo-Notebook\My Documents\Firefox Setup 5.0.exe
[2011/07/12 07:32:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox
[2010/04/27 22:33:20 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Lenovo-Notebook\Application Data\pcouffin.sys
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/08/11 01:58:03 | 000,000,042 | ---- | M] () -- C:\WINDOWS\System32\RegistryEasy.lie
[2011/08/11 01:45:16 | 000,000,414 | ---- | M] () -- C:\WINDOWS\tasks\Schedule Task Weekly.job
[2011/08/11 01:45:09 | 000,000,699 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Registry Easy.lnk
[2011/08/11 01:45:09 | 000,000,681 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Registry Easy.lnk
[2011/08/11 01:44:47 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/08/11 00:51:25 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011/08/11 00:51:18 | 000,001,493 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Uniblue RegistryBooster.lnk
[2011/08/11 00:51:18 | 000,001,477 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk
[2011/08/11 00:36:52 | 000,060,928 | ---- | M] () -- C:\WINDOWS\cdpi.exe
[2011/08/11 00:36:47 | 000,456,872 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/08/11 00:36:47 | 000,075,646 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/08/11 00:32:32 | 000,000,332 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2011/08/11 00:32:24 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/08/11 00:32:22 | 000,283,720 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/08/11 00:16:55 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/08/07 17:12:25 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2011/08/07 17:12:25 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm
[2011/08/07 14:31:34 | 000,045,573 | -H-- | M] () -- C:\WINDOWS\System32\userdiff.sav
[2011/08/07 14:31:34 | 000,045,573 | -H-- | M] () -- C:\Documents and Settings\Lenovo-Notebook\userdiff.sav
[2011/08/07 14:31:34 | 000,033,792 | -H-- | M] () -- C:\Documents and Settings\Lenovo-Notebook\vim.exe
[2011/08/07 14:04:03 | 000,131,072 | ---- | M] () -- C:\ndo32.exe
[2011/08/07 04:45:30 | 000,002,625 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011/08/07 04:12:06 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2011/08/07 04:12:06 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm
[2011/08/07 02:32:01 | 000,000,256 | ---- | M] () -- C:\WINDOWS\System32\pool.bin
[2011/08/07 02:25:25 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
[2011/08/07 02:25:25 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm
[2011/08/07 02:09:06 | 000,001,689 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2011/08/07 01:27:34 | 000,060,928 | ---- | M] () -- C:\WINDOWS\System32\ac32.exe
[2011/08/06 21:18:56 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm
[2011/08/06 21:18:56 | 000,000,232 | -H-- | M] () -- C:\sqmdata19.sqm
[2011/08/06 20:23:07 | 000,786,432 | ---- | M] (Ufasoft) -- C:\Documents and Settings\Lenovo-Notebook\bm.exe
[2011/08/05 04:05:27 | 000,154,112 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/08/02 22:11:23 | 000,591,043 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\foto pemasangan strainer Bontang.pdf
[2011/08/02 22:07:42 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Word 2007.lnk
[2011/07/31 13:17:44 | 000,050,703 | ---- | M] () -- C:\WINDOWS\System32\lpdd.exe
[2011/07/31 02:13:32 | 000,001,863 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Seagate Manager.lnk
[2011/07/31 02:12:48 | 000,001,732 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Carbonite Online Backup Setup.lnk
[2011/07/31 02:12:17 | 000,002,320 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Home movies made easy!.lnk
[2011/07/31 02:12:16 | 000,001,167 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Home movies made easy!.lnk
[2011/07/31 02:12:15 | 000,000,050 | ---- | M] () -- C:\AUTOEXEC.BAT
[2011/07/31 01:17:03 | 000,105,272 | ---- | M] () -- C:\WINDOWS\System32\asr_03837.exe
[2011/07/31 01:13:52 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_zznlv
[2011/07/30 23:31:34 | 000,115,664 | ---- | M] () -- C:\WINDOWS\System32\asr_65537.exe
[2011/07/30 23:30:57 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_hsohe
[2011/07/30 22:10:32 | 000,020,480 | ---- | M] () -- C:\WINDOWS\System32\asr_68350.exe
[2011/07/30 22:07:16 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_pihbx
[2011/07/30 21:52:14 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_07372.exe
[2011/07/30 21:52:00 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_rsgly
[2011/07/30 21:10:07 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_xisvhu
[2011/07/30 21:09:28 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_wbvlpj
[2011/07/30 20:30:27 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_17116.exe
[2011/07/30 20:29:09 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_qkhfq
[2011/07/30 19:26:43 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_snxie
[2011/07/30 17:52:12 | 000,171,795 | ---- | M] () -- C:\WINDOWS\System32\asr_36115.exe
[2011/07/30 17:52:04 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_xxqoz
[2011/07/30 17:17:56 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_smstd
[2011/07/30 13:59:26 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_30070.exe
[2011/07/30 13:59:20 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_nekrv
[2011/07/30 13:47:58 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_66845.exe
[2011/07/30 13:47:53 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_ndnux
[2011/07/30 11:13:58 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_48617.exe
[2011/07/30 11:13:51 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_oitcm
[2011/07/30 10:50:18 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_okpbq
[2011/07/30 10:50:03 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_ostgf
[2011/07/30 10:49:43 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_inxfh
[2011/07/30 10:49:39 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_sxvoy
[2011/07/30 10:44:23 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_18114.exe
[2011/07/30 10:44:15 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_btzkp
[2011/07/30 09:55:37 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_ytolcz
[2011/07/30 03:23:30 | 000,000,485 | ---- | M] () -- C:\WINDOWS\videofilter.dlc
[2011/07/29 22:47:13 | 000,131,072 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\ois.exe
[2011/07/29 22:01:09 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_51057.exe
[2011/07/29 22:00:55 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_wmats
[2011/07/29 21:22:50 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_15468.exe
[2011/07/29 21:22:36 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_eotlr
[2011/07/29 18:11:10 | 000,053,248 | ---- | M] () -- C:\WINDOWS\System32\68.exe
[2011/07/29 13:10:39 | 000,002,101 | ---- | M] () -- C:\NetworkCfg.xml
[2011/07/29 12:19:31 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm
[2011/07/29 12:19:31 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm
[2011/07/29 11:07:45 | 000,000,279 | ---- | M] () -- C:\Shortcut to Data (D).lnk
[2011/07/29 01:23:19 | 000,001,736 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Acrobat 9 Pro.lnk
[2011/07/28 19:19:19 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm
[2011/07/28 19:19:19 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm
[2011/07/26 12:23:21 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm
[2011/07/26 12:23:21 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm
[2011/07/25 19:10:33 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm
[2011/07/25 19:10:33 | 000,000,232 | -H-- | M] () -- C:\sqmdata15.sqm
[2011/07/25 18:46:47 | 000,053,000 | ---- | M] () -- C:\WINDOWS\D4S.MID
[2011/07/25 17:33:31 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm
[2011/07/25 17:33:31 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm
[2011/07/25 17:00:11 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm
[2011/07/25 17:00:11 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm
[2011/07/25 16:54:31 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm
[2011/07/25 16:54:31 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm
[2011/07/25 16:47:52 | 000,282,624 | RHS- | M] (Ennui Throw) -- C:\WINDOWS\System32\igfxmd32.exe
[2011/07/25 12:33:46 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\prvlcl.dat
[2011/07/25 11:02:42 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\ui41.exe
[2011/07/15 08:45:06 | 000,002,336 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/07/15 08:45:05 | 000,002,358 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Google Chrome.lnk
[2011/07/14 12:09:15 | 000,563,944 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\calibration with fluke.pdf
[2011/07/14 11:35:58 | 000,670,579 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\PV211.pdf
[2011/07/12 09:57:00 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_oeahdb
[2011/07/12 09:05:29 | 000,175,020 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\GTA San Andreas Cheats.htm
[2011/07/12 09:04:57 | 000,037,667 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\PCS_convert_Stick.png
[2011/07/12 08:56:45 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/07/12 07:58:55 | 000,000,742 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/07/12 07:58:54 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/07/12 07:55:00 | 013,683,064 | ---- | M] (Mozilla) -- C:\Documents and Settings\Lenovo-Notebook\My Documents\Firefox Setup 5.0.exe
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/08/11 01:58:03 | 000,000,042 | ---- | C] () -- C:\WINDOWS\System32\RegistryEasy.lie
[2011/08/11 01:45:15 | 000,000,414 | ---- | C] () -- C:\WINDOWS\tasks\Schedule Task Weekly.job
[2011/08/11 01:45:09 | 000,000,699 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Registry Easy.lnk
[2011/08/11 01:45:09 | 000,000,681 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Registry Easy.lnk
[2011/08/11 00:51:24 | 000,000,284 | ---- | C] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011/08/11 00:51:18 | 000,001,493 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Desktop\Uniblue RegistryBooster.lnk
[2011/08/11 00:51:18 | 000,001,477 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk
[2011/08/07 14:31:34 | 000,033,792 | -H-- | C] () -- C:\Documents and Settings\Lenovo-Notebook\vim.exe
[2011/08/07 02:59:53 | 000,060,928 | ---- | C] () -- C:\WINDOWS\cdpi.exe
[2011/08/07 02:09:06 | 000,001,689 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2011/08/06 21:18:56 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt19.sqm
[2011/08/06 21:18:56 | 000,000,232 | -H-- | C] () -- C:\sqmdata19.sqm
[2011/08/06 20:39:28 | 000,380,928 | ---- | C] () -- C:\WINDOWS\System32\actskin4.ocx
[2011/08/05 02:12:59 | 000,000,256 | ---- | C] () -- C:\WINDOWS\System32\pool.bin
[2011/08/02 22:11:08 | 000,591,043 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\foto pemasangan strainer Bontang.pdf
[2011/07/31 02:12:16 | 000,002,320 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Home movies made easy!.lnk
[2011/07/31 02:11:42 | 000,001,167 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Home movies made easy!.lnk
[2011/07/31 01:13:56 | 000,105,272 | ---- | C] () -- C:\WINDOWS\System32\asr_03837.exe
[2011/07/31 01:13:52 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_zznlv
[2011/07/30 23:30:59 | 000,115,664 | ---- | C] () -- C:\WINDOWS\System32\asr_65537.exe
[2011/07/30 23:30:57 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_hsohe
[2011/07/30 22:07:22 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\asr_68350.exe
[2011/07/30 22:07:16 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_pihbx
[2011/07/30 21:52:02 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_07372.exe
[2011/07/30 21:52:00 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_rsgly
[2011/07/30 21:10:07 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_xisvhu
[2011/07/30 21:09:28 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_wbvlpj
[2011/07/30 20:29:10 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_17116.exe
[2011/07/30 20:29:09 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_qkhfq
[2011/07/30 19:26:43 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_snxie
[2011/07/30 17:52:05 | 000,171,795 | ---- | C] () -- C:\WINDOWS\System32\asr_36115.exe
[2011/07/30 17:52:04 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_xxqoz
[2011/07/30 17:17:56 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_smstd
[2011/07/30 13:59:21 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_30070.exe
[2011/07/30 13:59:20 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_nekrv
[2011/07/30 13:47:54 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_66845.exe
[2011/07/30 13:47:53 | 000,000,078 | ---- | C] () -- C:\WINDOWS\System32\asr_ndnux
[2011/07/30 11:13:52 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_48617.exe
[2011/07/30 11:13:51 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_oitcm
[2011/07/30 10:50:18 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_okpbq
[2011/07/30 10:50:03 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_ostgf
[2011/07/30 10:49:43 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_inxfh
[2011/07/30 10:49:39 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_sxvoy
[2011/07/30 10:44:16 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_18114.exe
[2011/07/30 10:44:15 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_btzkp
[2011/07/30 09:55:37 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_ytolcz
[2011/07/29 22:47:09 | 000,131,072 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\ois.exe
[2011/07/29 22:45:50 | 000,060,928 | ---- | C] () -- C:\WINDOWS\System32\ac32.exe
[2011/07/29 22:01:01 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_51057.exe
[2011/07/29 22:00:55 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_wmats
[2011/07/29 21:25:26 | 000,050,703 | ---- | C] () -- C:\WINDOWS\System32\lpdd.exe
[2011/07/29 21:22:37 | 000,120,083 | ---- | C] () -- C:\WINDOWS\System32\asr_15468.exe
[2011/07/29 21:22:36 | 000,000,080 | ---- | C] () -- C:\WINDOWS\System32\asr_eotlr
[2011/07/29 21:03:23 | 000,131,072 | ---- | C] () -- C:\ndo32.exe
[2011/07/29 18:11:07 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\68.exe
[2011/07/29 17:31:11 | 000,045,573 | -H-- | C] () -- C:\WINDOWS\System32\userdiff.sav
[2011/07/29 17:31:11 | 000,045,573 | -H-- | C] () -- C:\Documents and Settings\Lenovo-Notebook\userdiff.sav
[2011/07/29 12:19:31 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt18.sqm
[2011/07/29 12:19:31 | 000,000,232 | -H-- | C] () -- C:\sqmdata18.sqm
[2011/07/29 11:07:45 | 000,000,279 | ---- | C] () -- C:\Shortcut to Data (D).lnk
[2011/07/29 01:23:19 | 000,001,736 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Acrobat 9 Pro.lnk
[2011/07/29 01:23:18 | 000,002,327 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Acrobat Distiller 9.lnk
[2011/07/29 01:23:18 | 000,002,317 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Acrobat 9 Pro.lnk
[2011/07/29 01:23:18 | 000,001,880 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Adobe LiveCycle Designer ES 8.2.lnk
[2011/07/28 19:19:19 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt17.sqm
[2011/07/28 19:19:19 | 000,000,232 | -H-- | C] () -- C:\sqmdata17.sqm
[2011/07/26 12:23:21 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt16.sqm
[2011/07/26 12:23:21 | 000,000,232 | -H-- | C] () -- C:\sqmdata16.sqm
[2011/07/25 19:10:33 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt15.sqm
[2011/07/25 19:10:33 | 000,000,232 | -H-- | C] () -- C:\sqmdata15.sqm
[2011/07/25 18:46:47 | 000,053,000 | ---- | C] () -- C:\WINDOWS\D4S.MID
[2011/07/25 17:33:31 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt14.sqm
[2011/07/25 17:33:31 | 000,000,232 | -H-- | C] () -- C:\sqmdata14.sqm
[2011/07/25 17:00:11 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt13.sqm
[2011/07/25 17:00:11 | 000,000,232 | -H-- | C] () -- C:\sqmdata13.sqm
[2011/07/25 16:54:31 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt12.sqm
[2011/07/25 16:54:31 | 000,000,232 | -H-- | C] () -- C:\sqmdata12.sqm
[2011/07/25 11:02:42 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\ui41.exe
[2011/07/14 12:09:15 | 000,563,944 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\calibration with fluke.pdf
[2011/07/14 11:35:58 | 000,670,579 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\PV211.pdf
[2011/07/12 09:57:00 | 000,000,079 | ---- | C] () -- C:\WINDOWS\System32\asr_oeahdb
[2011/07/12 09:05:28 | 000,175,020 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\GTA San Andreas Cheats.htm
[2011/07/12 09:04:56 | 000,037,667 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\My Documents\PCS_convert_Stick.png
[2011/07/12 07:58:54 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011/07/12 07:32:31 | 000,000,742 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/07/12 07:32:31 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/11 20:10:33 | 000,160,592 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2010/09/23 23:07:50 | 000,000,046 | ---- | C] () -- C:\WINDOWS\QTW.INI
[2010/08/23 00:59:44 | 000,000,017 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2010/07/07 20:15:23 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/07/07 20:15:20 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/07/07 20:15:20 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/07/07 20:15:19 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2010/07/07 20:15:14 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/06/15 22:19:23 | 000,096,256 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd1325.sys
[2010/06/07 01:53:33 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\prvlcl.dat
[2010/05/22 23:32:38 | 000,000,372 | ---- | C] () -- C:\WINDOWS\EMICLOCK.INI
[2010/05/16 21:17:03 | 000,000,086 | ---- | C] () -- C:\WINDOWS\scmate.ini
[2010/05/05 23:52:31 | 000,000,162 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/04/29 22:48:38 | 000,141,149 | ---- | C] () -- C:\WINDOWS\hpoins14.dat
[2010/04/29 22:48:37 | 000,002,000 | ---- | C] () -- C:\WINDOWS\hpomdl14.dat
[2010/04/29 02:45:02 | 000,000,144 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\MagicPlayDVD.ini
[2010/04/27 22:33:20 | 000,081,920 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\ezpinst.exe
[2010/04/27 22:33:20 | 000,007,176 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\pcouffin.cat
[2010/04/27 22:33:20 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Application Data\pcouffin.inf
[2010/03/26 11:52:13 | 000,000,184 | ---- | C] () -- C:\WINDOWS\GECKOS.INI
[2010/03/23 20:25:47 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2010/03/15 23:32:14 | 000,154,112 | ---- | C] () -- C:\Documents and Settings\Lenovo-Notebook\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/12 15:52:19 | 000,057,344 | ---- | C] () -- C:\WINDOWS\AsfHelper.dll
[2010/03/12 15:52:19 | 000,022,528 | ---- | C] () -- C:\WINDOWS\ScrSav.dll
[2010/03/12 15:41:00 | 001,991,464 | ---- | C] () -- C:\WINDOWS\System32\igkrng500.bin
[2010/03/12 15:40:58 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4950.dll
[2010/03/12 15:40:57 | 000,432,400 | ---- | C] () -- C:\WINDOWS\System32\igcompkrng500.bin
[2010/03/12 15:34:39 | 000,319,488 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe
[2010/02/28 23:03:55 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/02/28 23:02:41 | 000,283,720 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/02/28 16:51:23 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\{EC4C8FCB-8A0D-47f6-8F3E-2A34527102F5}.dat
[2010/02/28 16:49:17 | 000,043,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\funfrm.sys
[2010/02/28 16:49:05 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/02/28 16:49:04 | 000,241,664 | ---- | C] () -- C:\WINDOWS\System32\3DImageRenderer.dll
[2010/02/28 16:25:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/02/28 16:15:01 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/02/28 16:09:40 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/01 04:25:46 | 000,831,488 | ---- | C] () -- C:\WINDOWS\System32\divx_xx0a.dll
[2008/03/22 03:28:20 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2008/01/18 14:16:00 | 002,842,624 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2007/09/27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2004/08/04 06:07:22 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2004/08/04 05:56:44 | 000,165,405 | ---- | C] () -- C:\WINDOWS\System32\bgycuixx.dll
[2004/08/04 05:56:44 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004/08/02 19:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2001/11/14 12:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll
[2001/08/23 18:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 18:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 18:00:00 | 000,456,872 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 18:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 18:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 18:00:00 | 000,075,646 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 18:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 18:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 18:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 18:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

========== LOP Check ==========

[2010/03/15 23:31:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems
[2010/06/16 18:35:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Autodesk
[2011/08/07 02:06:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2011/08/06 20:28:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9
[2011/04/07 02:11:06 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2010/02/28 16:49:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EasyCapture
[2010/03/14 12:09:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Fugazo
[2011/07/31 02:10:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2010/03/25 12:35:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\n7-89-o9-3r-4t-r9
[2011/02/11 20:17:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Seagate
[2011/06/15 17:35:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2011/08/11 00:51:18 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
[2010/03/12 16:38:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\ACD Systems
[2010/03/30 01:58:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Autodesk
[2010/07/07 18:34:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/06/07 09:43:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Emerson Process Management
[2010/06/22 22:14:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Flock
[2010/04/21 21:22:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\GlarySoft
[2011/02/11 20:04:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Leadertech
[2011/05/12 22:47:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\muvee Technologies
[2010/08/23 19:02:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Sahmon Games
[2011/07/14 19:08:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Smadav
[2011/02/14 21:54:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Softland
[2010/03/14 22:51:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Thinstall
[2010/06/30 00:22:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Thunderbird
[2011/08/11 00:51:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Uniblue
[2010/12/12 16:41:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Vso
[2011/06/16 00:25:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Windows Desktop Search
[2011/06/16 00:25:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo-Notebook\Application Data\Windows Search
[2011/08/11 00:32:32 | 000,000,332 | ---- | M] () -- C:\WINDOWS\Tasks\GlaryInitialize.job
[2011/08/11 00:51:25 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\RegistryBooster.job
[2011/08/11 01:45:16 | 000,000,414 | ---- | M] () -- C:\WINDOWS\Tasks\Schedule Task Weekly.job

========== Purity Check ==========



========== Files - Unicode (All) ==========
[2011/07/14 19:08:08 | 000,000,439 | ---- | M] ()(C:\Documents and Settings\All Users\Desktop\SMAD?V.lnk) -- C:\Documents and Settings\All Users\Desktop\SMADΔV.lnk
[2011/07/14 19:08:08 | 000,000,439 | ---- | C] ()(C:\Documents and Settings\All Users\Desktop\SMAD?V.lnk) -- C:\Documents and Settings\All Users\Desktop\SMADΔV.lnk

========== Alternate Data Streams ==========

@Alternate Data Stream - 553604 bytes -> C:\WINDOWS\Temp:temp
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C5760A8B

< End of report >
  • 0

Advertisements


#2
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Hi there you appear to have a nice assortment so lets get to work

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following

    :OTL
    SRV - (szxkvys) -- C:\WINDOWS\system32\bgycuixx.dll ()
    IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - Reg Error: Value error. File not found
    IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - Reg Error: Value error. File not found
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
    O4 - HKLM..\Run: [ac32] C:\WINDOWS\system32\ac32.exe ()
    O4 - HKCU..\Run: [12CFG214-K641-12SF-N85P] C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe ()
    O20 - HKLM Winlogon: TaskMan - (c:\RECYCLER\kos-2-3-41-0000010000-0000010000-0000010000-0100\wincache.exe) - File not found
    O20 - Winlogon\Notify\winggb32: DllName - winggb32.dll - File not found
    O20 - Winlogon\Notify\winhqg32: DllName - winhqg32.dll - File not found
    O20 - Winlogon\Notify\winkfq32: DllName - winkfq32.dll - File not found
    O20 - Winlogon\Notify\winrso32: DllName - winrso32.dll - File not found
    O20 - Winlogon\Notify\winulo32: DllName - winulo32.dll - File not found
    O20 - Winlogon\Notify\winult32: DllName - winult32.dll - File not found
    [2011/08/06 20:23:07 | 000,786,432 | ---- | C] (Ufasoft) -- C:\Documents and Settings\Lenovo-Notebook\bm.exe
    [2011/08/07 14:04:03 | 000,131,072 | ---- | M] () -- C:\ndo32.exe
    [2011/08/07 01:27:34 | 000,060,928 | ---- | M] () -- C:\WINDOWS\System32\ac32.exe
    [2011/07/31 01:17:03 | 000,105,272 | ---- | M] () -- C:\WINDOWS\System32\asr_03837.exe
    [2011/07/31 01:13:52 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_zznlv
    [2011/07/30 23:31:34 | 000,115,664 | ---- | M] () -- C:\WINDOWS\System32\asr_65537.exe
    [2011/07/30 23:30:57 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_hsohe
    [2011/07/30 22:10:32 | 000,020,480 | ---- | M] () -- C:\WINDOWS\System32\asr_68350.exe
    [2011/07/30 22:07:16 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_pihbx
    [2011/07/30 21:52:14 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_07372.exe
    [2011/07/30 21:52:00 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_rsgly
    [2011/07/30 21:10:07 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_xisvhu
    [2011/07/30 21:09:28 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_wbvlpj
    [2011/07/30 20:30:27 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_17116.exe
    [2011/07/30 20:29:09 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_qkhfq
    [2011/07/30 19:26:43 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_snxie
    [2011/07/30 17:52:12 | 000,171,795 | ---- | M] () -- C:\WINDOWS\System32\asr_36115.exe
    [2011/07/30 17:52:04 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_xxqoz
    [2011/07/30 17:17:56 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_smstd
    [2011/07/30 13:59:26 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_30070.exe
    [2011/07/30 13:59:20 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_nekrv
    [2011/07/30 13:47:58 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_66845.exe
    [2011/07/30 13:47:53 | 000,000,078 | ---- | M] () -- C:\WINDOWS\System32\asr_ndnux
    [2011/07/30 11:13:58 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_48617.exe
    [2011/07/30 11:13:51 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_oitcm
    [2011/07/30 10:50:18 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_okpbq
    [2011/07/30 10:50:03 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_ostgf
    [2011/07/30 10:49:43 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_inxfh
    [2011/07/30 10:49:39 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_sxvoy
    [2011/07/30 10:44:23 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_18114.exe
    [2011/07/30 10:44:15 | 000,000,079 | ---- | M] () -- C:\WINDOWS\System32\asr_btzkp
    [2011/07/30 09:55:37 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_ytolcz
    [2011/07/29 22:47:13 | 000,131,072 | ---- | M] () -- C:\Documents and Settings\Lenovo-Notebook\ois.exe
    [2011/07/29 22:01:09 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_51057.exe
    [2011/07/29 22:00:55 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_wmats
    [2011/07/29 21:22:50 | 000,120,083 | ---- | M] () -- C:\WINDOWS\System32\asr_15468.exe
    [2011/07/29 21:22:36 | 000,000,080 | ---- | M] () -- C:\WINDOWS\System32\asr_eotlr
    [2011/07/29 18:11:10 | 000,053,248 | ---- | M] () -- C:\WINDOWS\System32\68.exe


    :Files
    ipconfig /flushdns /c

    :Commands
    [purity]
    [resethosts]
    [emptytemp]
    [EMPTYFLASH]
    [CREATERESTOREPOINT]
    [Reboot]

  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Please download Malwarebytes' Anti-Malware

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish, so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.
  • 0

#3
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP