Hi SweetTech. Fortunately I don't seem to be noticing any glaring issues, so everything looks to be good right now, thanks.
OTL Fix:
All processes killed
========== SERVICES/DRIVERS ==========
========== OTL ==========
========== REGISTRY ==========
========== FILES ==========
< ipconfig /flushdns /c >Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Josh Lira\Desktop\cmd.bat deleted successfully.
C:\Users\Josh Lira\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore point Set: OTL Restore Point
[EMPTYTEMP]
User: Administrator
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Josh Lira
->Temp folder emptied: 2656945 bytes
->Temporary Internet Files folder emptied: 19750319 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 1145512577 bytes
->Google Chrome cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 4618 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 66016 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 10211317 bytes
Total Files Cleaned = 1,124.00 mb
[EMPTYFLASH]
User: Administrator
User: All Users
User: Default
User: Default User
User: Josh Lira
->Flash cache emptied: 0 bytes
User: Public
Total Flash Files Cleaned = 0.00 mb
OTL by OldTimer - Version 3.2.29.1 log created on 09252011_211632
Files\Folders moved on Reboot...
C:\Users\Josh Lira\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\Josh Lira\AppData\Local\Temp\~DF165DA947CA022B3F.TMP not found!
File\Folder C:\Users\Josh Lira\AppData\Local\Temp\~DF97A2DA8901E8B9A8.TMP not found!
File\Folder C:\Users\Josh Lira\AppData\Local\Temp\~DFA1B5C015D82BE09A.TMP not found!
File\Folder C:\Users\Josh Lira\AppData\Local\Temp\~DFD8ED814E9987C100.TMP not found!
File\Folder C:\Users\Josh Lira\AppData\Local\Temp\~DFF478C973F38EB509.TMP not found!
File\Folder C:\Users\Josh Lira\AppData\Local\Temp\~DFFF431A5AE82E4818.TMP not found!
C:\Users\Josh Lira\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TP4ZZNSJ\like[2].htm moved successfully.
C:\Users\Josh Lira\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QZAAR5BU\307836-unable-to-use-anything-powered-by-google[2].htm moved successfully.
C:\Users\Josh Lira\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6OCCHB73\fastbutton[1].htm moved successfully.
C:\Users\Josh Lira\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6OCCHB73\login_status[1].htm moved successfully.
C:\Users\Josh Lira\AppData\Local\Microsoft\Windows\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
Registry entries deleted on Reboot...
OTL Custom Scan
OTL logfile created on: 9/25/2011 9:25:27 PM - Run 2
OTL by OldTimer - Version 3.2.29.1 Folder = C:\Users\Josh Lira\Desktop
64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.67 Gb Total Physical Memory | 2.28 Gb Available Physical Memory | 62.12% Memory free
7.34 Gb Paging File | 5.80 Gb Available in Paging File | 79.06% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 454.08 Gb Total Space | 366.75 Gb Free Space | 80.77% Space Free | Partition Type: NTFS
Computer Name: JOSHLIRA-PC | User Name: Josh Lira | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ========== PRC - [2011/09/21 22:59:51 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\Josh Lira\Desktop\OTL.exe
PRC - [2011/07/07 19:16:18 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011/06/06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/04/27 21:09:26 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2011/01/17 19:37:40 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2011/01/17 19:37:40 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2010/12/13 09:39:54 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2009/11/20 16:25:24 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2009/11/20 16:25:22 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
========== Modules (No Company Name) ========== MOD - [2011/09/18 09:58:22 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\6124dbbfd45927c4a6226d6e6bca6253\WindowsBase.ni.dll
MOD - [2011/09/18 09:57:33 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\e3e3b399b69c569ab1ed3b0ace2c8c20\System.Runtime.Remoting.ni.dll
MOD - [2011/09/18 09:56:58 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\0d43c5e77ee7b8466700b16d7e7d4bb7\System.Windows.Forms.ni.dll
MOD - [2011/09/18 09:56:48 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\9e87dd8fe5d0f925d80a6a6eaf74fdb9\System.Drawing.ni.dll
MOD - [2011/09/18 09:56:39 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\16d2854bf69d59d94e64a918365705f1\System.Xml.ni.dll
MOD - [2011/09/18 09:56:34 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\36d0ed3f2a65b9d67933ed46dfcd2ccb\System.Configuration.ni.dll
MOD - [2011/09/18 09:56:32 | 007,963,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\3da7c6c1a0f26ae91883fd8b03ec192d\System.ni.dll
MOD - [2011/09/18 09:56:23 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\16b68fcaff063835ae0ee348a1201f2a\mscorlib.ni.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/01/26 23:29:33 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MOD - [2011/01/05 03:10:48 | 000,988,480 | ---- | M] () -- C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
========== Win32 Services (SafeList) ========== SRV:
64bit: - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:
64bit: - [2010/01/19 18:26:58 | 001,420,560 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:
64bit: - [2010/01/19 18:08:16 | 000,315,664 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:
64bit: - [2010/01/19 18:05:22 | 000,831,760 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:
64bit: - [2009/07/13 20:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:
64bit: - [2009/07/13 20:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2011/07/07 19:16:18 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/06/06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/04/27 21:09:26 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/11/20 16:25:24 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel®
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
========== Driver Services (SafeList) ========== DRV:
64bit: - [2011/07/07 19:16:25 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:
64bit: - [2011/07/07 19:16:25 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:
64bit: - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:
64bit: - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:
64bit: - [2011/02/18 16:36:58 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:
64bit: - [2010/11/20 08:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:
64bit: - [2010/11/20 06:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:
64bit: - [2010/11/20 04:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:
64bit: - [2010/08/25 20:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:
64bit: - [2010/07/21 17:59:28 | 000,045,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
DRV:
64bit: - [2010/07/21 17:59:28 | 000,023,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nuidfltr.sys -- (NuidFltr)
DRV:
64bit: - [2010/07/01 18:52:18 | 000,051,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d)
DRV:
64bit: - [2010/04/27 13:40:58 | 000,388,448 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr7064.sys -- (rt70x64)
DRV:
64bit: - [2010/01/13 09:37:18 | 007,675,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5s64.sys -- (NETw5s64) Intel®
DRV:
64bit: - [2009/12/11 13:32:10 | 000,395,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:
64bit: - [2009/12/11 12:50:44 | 000,093,696 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimssne64.sys -- (rimspci)
DRV:
64bit: - [2009/11/20 16:09:48 | 000,537,112 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:
64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:
64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:
64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:
64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:
64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:
64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:
64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:
64bit: - [2009/05/18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:
64bit: - [2007/08/03 06:35:54 | 000,011,392 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SFEP.sys -- (SFEP)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2004/10/05 11:40:18 | 000,015,872 | ---- | M] (Interlex Inc.) [Kernel | Auto | Stopped] -- C:\Program Files (x86)\VMLaunch\BuddyVM.sys -- ({09BB444F-B2E2-4009-BAF2-7B727681223E})
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
http://www.msn.com/IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 4A 27 E8 27 A4 AF CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ========== FF:
64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF:
64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0146CAF7-E501-4F3A-B3DA-9677FEAC8355}: C:\Users\Josh Lira\AppData\Local\{0146CAF7-E501-4F3A-B3DA-9677FEAC8355} [2011/07/24 01:13:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/09/06 20:40:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/09/16 20:34:08 | 000,000,000 | ---D | M]
[2011/09/06 19:29:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Josh Lira\AppData\Roaming\Mozilla\Extensions
[2011/09/23 16:35:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/09/03 01:01:45 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010/11/12 19:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011/09/02 18:25:59 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
========== Chrome ========== CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\12.0.742.100\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.230.5 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java Platform SE 6 U23 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Chrome NaCl (Disabled) = C:\Program Files (x86)\Google\Chrome\Application\12.0.742.100\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\12.0.742.100\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.57\npGoogleUpdate3.dll
CHR - plugin: VLC Multimedia Plug-in (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
O1 HOSTS File: ([2011/09/25 21:16:33 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:
64bit: - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll File not found
O3:
64bit: - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3:
64bit: - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O4:
64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:
64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:
64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - Startup: C:\Users\Josh Lira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:
64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13
64bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/...indows-i586.cab (Java Plug-in 10.0.0)
O16 - DPF: {CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5}
http://download.eset...lineScanner.cab (OnlineScanner Control)
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9}
http://ax.emsisoft.com/asquared.cab (a-squared Scanner)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{088AC087-7EEB-448E-B087-D2C7D02BA3C8}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BA98D9D6-5E4C-4F30-8743-10075FBA6C9D}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C5E152FE-D09C-44A7-89CD-5E0AF269A937}: DhcpNameServer = 192.168.1.1
O18:
64bit: - Protocol\Handler\livecall - No CLSID value found
O18:
64bit: - Protocol\Handler\msnim - No CLSID value found
O18:
64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:
64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:
64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:
64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:
64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:
64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:
64bit: - HKLM\..comfile [open] -- "%1" %*
O35:
64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:
64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:
64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs:
64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
Drivers32:
64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
========== Files/Folders - Created Within 30 Days ========== [2011/09/25 21:24:40 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{5C8E3574-9DA0-4C13-810C-B748A43D1DB2}
[2011/09/25 21:24:27 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{ED06EB12-853F-4EF7-8827-670F8D3FFFDB}
[2011/09/25 21:11:15 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2011/09/25 21:09:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2011/09/25 20:09:47 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{D4EEE0AC-9EB3-48D6-87A8-C12A100D51B8}
[2011/09/25 20:09:33 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{468DE888-73AC-487E-9303-F5CEB000BF14}
[2011/09/25 12:31:57 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{8412C2AA-5419-4627-9BE6-6A689703F119}
[2011/09/25 12:31:46 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{D679427A-2568-41E1-9AC3-357929D610EC}
[2011/09/24 18:52:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2011/09/24 18:50:36 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{F32394D9-E182-4F74-8341-92C14CC67999}
[2011/09/24 18:50:24 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{78B57B5A-A566-40FB-A568-7446465116D3}
[2011/09/24 18:42:02 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{3DD49866-707E-4E5C-8432-77CA864D7879}
[2011/09/24 18:41:33 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{FDEC023E-65B9-44E8-9465-A8FBEC91722B}
[2011/09/24 16:08:36 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{1A88DE48-4336-457C-8788-7C50F6D105C8}
[2011/09/24 16:08:04 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{71852108-F5A2-4E10-A8DB-D3DDC4BB93A8}
[2011/09/23 19:55:12 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{316C5019-925E-4059-A32F-32602B3E3EF7}
[2011/09/23 17:02:38 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{0E6E948C-DE59-41B2-9374-4EB946CBDC69}
[2011/09/23 17:02:15 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{B440AE53-D2EE-41DF-8DD1-27C4EA790D59}
[2011/09/23 16:52:30 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Roaming\Malwarebytes
[2011/09/23 16:51:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/09/23 16:51:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/09/23 16:51:11 | 000,025,416 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011/09/23 16:51:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/09/23 16:47:10 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{EF18EFBC-52A9-4C1A-AB16-B25E2A866DD7}
[2011/09/23 16:46:48 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{ADC4657A-50AF-43DB-9674-096A7262033C}
[2011/09/23 16:35:29 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/09/23 15:58:01 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{3C50E727-242F-4874-8F62-65D8F5A508F2}
[2011/09/23 15:57:50 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{924D5C35-F871-4844-A8EF-ED5270137013}
[2011/09/22 15:18:01 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{0363F766-D694-4159-BFAA-734C9058E655}
[2011/09/22 15:17:50 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\{30B048B7-BD2D-4E93-84D7-CB0585610658}
[2011/09/21 22:59:44 | 000,582,656 | ---- | C] (OldTimer Tools) -- C:\Users\Josh Lira\Desktop\OTL.exe
[2011/09/19 16:53:43 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\Desktop\Daedalus%
[2011/09/19 16:53:43 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\Desktop\Daedalus
[2011/09/18 12:11:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2011/09/18 12:10:53 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\Google
[2011/09/18 12:10:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2011/09/17 20:39:57 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Local\Adobe
[2011/09/17 13:28:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Safari
[2011/09/17 13:27:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2011/09/16 20:33:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2011/09/16 20:33:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2011/09/16 20:32:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2011/09/16 20:32:34 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Roaming\Free PDF Tablet
[2011/09/16 20:32:33 | 000,000,000 | ---D | C] -- C:\Users\Josh Lira\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreePDFTablet
[2011/09/16 20:32:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FreePDFTablet
========== Files - Modified Within 30 Days ========== [2011/09/25 21:28:13 | 000,014,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/09/25 21:28:13 | 000,014,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/09/25 21:27:00 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/09/25 21:26:31 | 000,726,316 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011/09/25 21:26:31 | 000,624,178 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011/09/25 21:26:31 | 000,106,522 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011/09/25 21:22:44 | 000,000,900 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/09/25 21:20:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/09/25 21:20:38 | 2955,485,184 | -HS- | M] () -- C:\hiberfil.sys
[2011/09/25 21:16:33 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts
[2011/09/23 21:45:59 | 000,027,795 | ---- | M] () -- C:\Users\Josh Lira\Desktop\Mercury Orbit lab.pdf
[2011/09/23 16:51:17 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/09/21 22:59:51 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\Josh Lira\Desktop\OTL.exe
[2011/09/21 09:30:48 | 000,002,344 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2011/09/19 17:52:14 | 000,089,436 | ---- | M] () -- C:\Users\Josh Lira\Desktop\Gmail error message on Firefox.jpg
[2011/09/19 17:50:34 | 000,090,869 | ---- | M] () -- C:\Users\Josh Lira\Desktop\Gmail error message on IE.jpg
[2011/09/19 16:56:43 | 007,103,055 | ---- | M] () -- C:\Users\Josh Lira\Desktop\quest 64 (u) [b1].zip
[2011/09/19 16:53:36 | 000,442,388 | ---- | M] () -- C:\Users\Josh Lira\Desktop\daedalus_psp_R13_v150.zip
[2011/09/19 16:38:21 | 000,016,384 | ---- | M] () -- C:\Users\Josh Lira\Desktop\Computer Chess (1984) (Sony) (J).rom
[2011/09/19 16:37:36 | 000,131,940 | ---- | M] () -- C:\Users\Josh Lira\Desktop\Battle Chess (U).zip
[2011/09/18 12:11:13 | 000,002,243 | ---- | M] () -- C:\Users\Josh Lira\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/09/17 13:28:43 | 000,002,515 | ---- | M] () -- C:\Users\Josh Lira\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2011/09/17 13:28:43 | 000,002,491 | ---- | M] () -- C:\Users\Public\Desktop\Safari.lnk
[2011/09/16 20:34:09 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011/09/16 20:32:34 | 000,001,071 | ---- | M] () -- C:\Users\Josh Lira\Desktop\Free PDF Tablet.lnk
[2011/09/16 20:26:51 | 000,064,608 | ---- | M] () -- C:\Users\Josh Lira\Desktop\Approximate_Measurement_Inst.pdf
[2011/09/06 19:12:32 | 000,001,142 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/08/31 17:00:50 | 000,025,416 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
========== Files Created - No Company Name ========== [2011/09/23 21:45:59 | 000,027,795 | ---- | C] () -- C:\Users\Josh Lira\Desktop\Mercury Orbit lab.pdf
[2011/09/23 16:51:17 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/09/19 17:52:14 | 000,089,436 | ---- | C] () -- C:\Users\Josh Lira\Desktop\Gmail error message on Firefox.jpg
[2011/09/19 17:50:34 | 000,090,869 | ---- | C] () -- C:\Users\Josh Lira\Desktop\Gmail error message on IE.jpg
[2011/09/19 16:56:42 | 007,103,055 | ---- | C] () -- C:\Users\Josh Lira\Desktop\quest 64 (u) [b1].zip
[2011/09/19 16:53:32 | 000,442,388 | ---- | C] () -- C:\Users\Josh Lira\Desktop\daedalus_psp_R13_v150.zip
[2011/09/19 16:38:21 | 000,016,384 | ---- | C] () -- C:\Users\Josh Lira\Desktop\Computer Chess (1984) (Sony) (J).rom
[2011/09/19 16:37:34 | 000,131,940 | ---- | C] () -- C:\Users\Josh Lira\Desktop\Battle Chess (U).zip
[2011/09/18 12:11:13 | 000,002,344 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2011/09/18 12:11:13 | 000,002,243 | ---- | C] () -- C:\Users\Josh Lira\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/09/18 12:10:58 | 000,000,904 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/09/18 12:10:58 | 000,000,900 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/09/17 13:28:43 | 000,002,515 | ---- | C] () -- C:\Users\Josh Lira\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2011/09/17 13:28:43 | 000,002,503 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
[2011/09/17 13:28:43 | 000,002,491 | ---- | C] () -- C:\Users\Public\Desktop\Safari.lnk
[2011/09/16 20:34:09 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011/09/16 20:34:09 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011/09/16 20:32:33 | 000,001,071 | ---- | C] () -- C:\Users\Josh Lira\Desktop\Free PDF Tablet.lnk
[2011/09/16 20:26:50 | 000,064,608 | ---- | C] () -- C:\Users\Josh Lira\Desktop\Approximate_Measurement_Inst.pdf
[2011/09/06 19:12:32 | 000,001,142 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/09/06 19:12:31 | 000,001,154 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011/01/21 02:04:39 | 000,000,233 | ---- | C] () -- C:\Windows\ACTIVEJP.INI
[2011/01/09 20:17:30 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010/08/25 20:34:30 | 000,870,560 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin
[2010/08/25 20:34:30 | 000,127,868 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin
[2010/08/25 20:34:30 | 000,104,796 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin
[2010/08/25 19:52:00 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll
[2010/08/25 19:52:00 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll
[2009/07/14 00:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
========== LOP Check ========== [2011/01/17 05:27:40 | 000,000,000 | ---D | M] -- C:\Users\Josh Lira\AppData\Roaming\DAEMON Tools Lite
[2011/09/16 20:33:29 | 000,000,000 | ---D | M] -- C:\Users\Josh Lira\AppData\Roaming\Free PDF Tablet
[2011/09/20 13:00:12 | 000,000,000 | ---D | M] -- C:\Users\Josh Lira\AppData\Roaming\go
[2011/01/26 23:31:34 | 000,000,000 | ---D | M] -- C:\Users\Josh Lira\AppData\Roaming\OpenOffice.org
[2011/01/18 23:04:38 | 000,000,000 | ---D | M] -- C:\Users\Josh Lira\AppData\Roaming\RenPy
[2011/08/14 14:11:23 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ========== ========== Custom Scans ========== < > < hklm\software\clients\startmenuinternet|command /rs >HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2011/09/03 01:01:45 | 000,713,016 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2011/09/03 01:01:45 | 000,713,016 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2011/09/03 01:01:45 | 000,713,016 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: C:\Program Files (x86)\Mozilla Firefox\firefox.exe [2011/09/03 01:01:45 | 000,924,632 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -preferences [2011/09/03 01:01:45 | 000,924,632 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -safe-mode [2011/09/03 01:01:45 | 000,924,632 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --show-icons [2011/09/19 22:07:40 | 001,030,200 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --hide-icons [2011/09/19 22:07:40 | 001,030,200 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --make-default-browser [2011/09/19 22:07:40 | 001,030,200 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" [2011/09/19 22:07:40 | 001,030,200 | ---- | M] (Google Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\System32\ie4uinit.exe" -show [2010/11/20 07:17:13 | 000,176,128 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\System32\ie4uinit.exe" -reinstall [2010/11/20 07:17:13 | 000,176,128 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\System32\ie4uinit.exe" -hide [2010/11/20 07:17:13 | 000,176,128 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -extoff [2010/11/20 07:22:51 | 000,673,040 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files (x86)\Internet Explorer\iexplore.exe [2010/11/20 07:22:51 | 000,673,040 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\InstallInfo\\ReinstallCommand: "C:\Program Files (x86)\Safari\Safari.exe" /reinstall [2011/07/05 20:04:50 | 002,388,848 | ---- | M] (Apple Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\InstallInfo\\HideIconsCommand: "C:\Program Files (x86)\Safari\Safari.exe" /hideicons [2011/07/05 20:04:50 | 002,388,848 | ---- | M] (Apple Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\InstallInfo\\ShowIconsCommand: "C:\Program Files (x86)\Safari\Safari.exe" /showicons [2011/07/05 20:04:50 | 002,388,848 | ---- | M] (Apple Inc.)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Safari.exe\shell\open\command\\: "C:\Program Files (x86)\Safari\Safari.exe" [2011/07/05 20:04:50 | 002,388,848 | ---- | M] (Apple Inc.)
< %USERPROFILE%\AppData\Local\Google\Chrome\User Data\*.* /s >[2011/09/18 15:34:52 | 000,000,004 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt
[2011/09/18 12:12:03 | 000,000,000 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\First Run
[2011/09/18 15:34:52 | 000,010,216 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Local State
[2011/09/18 15:27:56 | 005,669,120 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom
[2011/09/18 15:27:58 | 001,488,997 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Safe Browsing Bloom Filter 2
[2011/09/18 15:27:56 | 000,243,688 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Safe Browsing Download
[2011/09/18 12:12:03 | 000,053,248 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Archived History
[2011/09/18 12:12:03 | 000,000,505 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Bookmarks
[2011/09/18 12:12:03 | 000,000,505 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Bookmarks.bak
[2011/09/18 15:34:52 | 000,025,600 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Cookies
[2011/09/18 15:34:52 | 000,145,845 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Current Session
[2011/09/18 15:34:52 | 000,141,254 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Current Tabs
[2011/09/18 15:04:49 | 000,028,672 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Favicons
[2011/09/18 15:34:52 | 000,380,928 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\History
[2011/09/18 15:34:52 | 000,479,232 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\History Index 2011-09
[2011/09/18 12:26:01 | 000,074,344 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Last Session
[2011/09/18 12:26:01 | 000,068,301 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Last Tabs
[2011/09/18 14:50:44 | 000,012,288 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Login Data
[2011/09/18 15:34:52 | 000,014,213 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Preferences
[2011/09/18 14:56:26 | 000,045,056 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Top Sites
[2011/09/18 15:34:52 | 000,131,072 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Visited Links
[2011/09/18 14:55:11 | 000,067,584 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\Web Data
[4 C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\*.tmp files -> C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\JumpListIcons\*.tmp -> ]
[3 C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\*.tmp files -> C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\JumpListIconsOld\*.tmp -> ]
[2011/09/18 12:12:03 | 000,000,000 | ---- | M] () -- C:\Users\Josh Lira\AppData\Local\Google\Chrome\User Data\Default\User StyleSheets\Custom.css
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs > < > < > < >< End of report >