dOTL logfile created on: 11/17/2011 1:24:22 PM - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Zach\Desktop
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.75 Gb Total Physical Memory | 1.91 Gb Available Physical Memory | 69.37% Memory free
5.49 Gb Paging File | 4.51 Gb Available in Paging File | 82.12% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465.66 Gb Total Space | 76.08 Gb Free Space | 16.34% Space Free | Partition Type: NTFS
Drive D: | 4.16 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive E: | 1.86 Gb Total Space | 1.38 Gb Free Space | 74.15% Space Free | Partition Type: FAT
Computer Name: ZACH-PC | User Name: Zach | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Zach\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Users\Zach\My Documents\Oblivion\Oblivion.exe (Bethesda Softworks)
========== Modules (No Company Name) ==========
MOD - C:\Program Files\Yahoo!\Messenger\yui.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
MOD - C:\Users\Zach\My Documents\Oblivion\binkw32.dll ()
========== Win32 Services (SafeList) ==========
SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (npggsvc) -- C:\Windows\System32\GameMon.des (INCA Internet Co., Ltd.)
SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (HiPatchService) -- C:\Program Files\Hi-Rez Studios\HiPatchService.exe (Hi-Rez Studios)
SRV - (NAUpdate) -- C:\Program Files\Nero\Update\NASvc.exe (Nero AG)
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (Amazon Download Agent) -- C:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe (Amazon.com)
SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (YahooAUService) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
========== Driver Services (SafeList) ==========
DRV - (30925288) -- C:\Windows\System32\drivers\03342164.sys (Kaspersky Lab, GERT)
DRV - (aswSnx) -- C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) -- C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswRdr) -- C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswMonFlt) -- C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (dc3d) MS Hardware Device Detection Driver (USB) -- C:\Windows\System32\drivers\dc3d.sys (Microsoft Corporation)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (AgereSoftModem) -- C:\Windows\System32\drivers\AGRSM.sys (LSI Corp)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ya...939,16897,0,6,0
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "jZip Web Search"
FF - prefs.js..browser.search.order.1: "jZip Web Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "reddit.com"
FF - prefs.js..keyword.URL: "http://search.jzip.c...ystemid=102&q="
FF - prefs.js..network.proxy.type: 4
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@hulu.com/Hulu Desktop: C:\Users\Zach\AppData\Local\HuluDesktop\instances\0.9.14.1\npHDPlg.dll (Hulu LLC)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Zach\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Zach\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Zach\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Zach\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files\Mozilla Firefox 4.0 Beta 10\components [2011/11/03 17:04:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox 4.0 Beta 10\plugins
[2011/11/05 17:01:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Zach\AppData\Roaming\Mozilla\Extensions
[2011/10/29 06:52:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Zach\AppData\Roaming\Mozilla\Firefox\Profiles\64q7r4mr.default\extensions
[2011/10/09 09:38:37 | 000,000,000 | ---D | M] (FoxyTunes) -- C:\Users\Zach\AppData\Roaming\Mozilla\Firefox\Profiles\64q7r4mr.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}
[2011/09/03 07:54:25 | 000,000,000 | ---D | M] (Roomy Bookmarks Toolbarv) -- C:\Users\Zach\AppData\Roaming\Mozilla\Firefox\Profiles\64q7r4mr.default\extensions\[email protected]
() (No name found) -- C:\USERS\ZACH\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\64Q7R4MR.DEFAULT\EXTENSIONS\{AE93811A-5C9A-4D34-8462-F7B864FC4696}.XPI
() (No name found) -- C:\USERS\ZACH\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\64Q7R4MR.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
() (No name found) -- C:\USERS\ZACH\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\64Q7R4MR.DEFAULT\EXTENSIONS\[email protected]
() (No name found) -- C:\USERS\ZACH\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\64Q7R4MR.DEFAULT\EXTENSIONS\[email protected]
O1 HOSTS File: ([2011/11/15 16:30:09 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [NBAgent] C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe (Nero AG)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Reg Error: Key error. File not found
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Reg Error: Key error. File not found
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefi...er_5.0.31.0.cab (Battlefield Heroes Updater)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zon...nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 16:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2005/11/21 12:26:21 | 000,000,057 | R--- | M] () - D:\autorun.inf -- [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/11/17 13:23:56 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Zach\Desktop\OTL.exe
[2011/11/15 16:38:51 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011/11/15 16:28:14 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\temp
[2011/11/15 15:56:16 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2011/11/15 15:56:16 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2011/11/15 15:56:16 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2011/11/15 15:56:10 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011/11/15 15:54:35 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/11/14 15:58:20 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Roaming\IObit
[2011/11/13 20:55:13 | 000,000,000 | ---D | C] -- C:\Windows\Sysnative
[2011/11/13 11:34:16 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Roaming\Nicalis
[2011/11/13 11:34:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NightSky
[2011/11/13 11:33:44 | 000,000,000 | ---D | C] -- C:\Program Files\NightSky
[2011/11/13 11:11:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplay
[2011/11/13 11:08:36 | 000,000,000 | ---D | C] -- C:\Program Files\BulletCandyPerfectWinFull
[2011/11/13 11:01:37 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Roaming\Irukandji
[2011/11/10 23:47:41 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\PackageAware
[2011/11/10 16:38:19 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{22D86729-8785-4FDD-BF38-E95C7171168F}
[2011/11/10 16:07:39 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{A6CEF56E-42CB-46E5-BC9E-AC2E1CA03964}
[2011/11/09 16:09:46 | 000,000,000 | ---D | C] -- C:\Windows\PIF
[2011/11/09 14:18:10 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{C99D3951-E36C-4264-84F1-90F87B40F14D}
[2011/11/09 06:42:27 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{1B43E571-BFFB-4702-AB30-C1954269A0AC}
[2011/11/08 23:02:21 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{D15E8201-B7E3-4BC8-BFC3-A3C7D45A8592}
[2011/11/08 22:06:33 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{BAA61F81-287E-41DF-B609-6038394AD82A}
[2011/11/08 17:10:31 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\Oblivion
[2011/11/08 14:28:55 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{AFE03FA1-AFA0-4CF6-A09E-5F90920F25FD}
[2011/11/08 14:19:24 | 000,094,896 | ---- | C] (Kaspersky Lab, GERT) -- C:\Windows\System32\drivers\03342164.sys
[2011/11/08 14:15:47 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{724B5CCF-E860-43F6-B660-9427D2CF3A8E}
[2011/11/08 13:12:16 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{1EB6C57C-A410-4856-BBDB-503C8383F6AA}
[2011/11/07 22:14:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/11/07 21:19:44 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{D29767BB-393A-444A-BA8C-6A4B56220137}
[2011/11/07 16:12:22 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Roaming\Malwarebytes
[2011/11/07 16:11:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/11/07 16:11:18 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/11/07 06:41:15 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{FA4D8DC8-F42A-4D7C-B403-47DCDF0192A5}
[2011/11/06 17:59:46 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{41621874-D7F4-4DC1-9AFA-B6F49C9E7563}
[2011/11/06 16:06:59 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
[2011/11/06 16:04:24 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2011/11/05 22:36:28 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{7927995C-91D0-43D8-BE3C-5972BE5FCCD1}
[2011/11/05 17:53:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2011/11/05 17:53:20 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2011/11/05 17:47:28 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{9A0B123E-21D7-48D4-BF90-706798A0E11D}
[2011/11/05 17:13:43 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{2B5C8BC1-DA55-4CD2-B024-2BE19A209480}
[2011/11/05 16:59:21 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{598488D2-A6E9-4299-B41C-DEEE9626FDB3}
[2011/11/05 16:36:36 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{B611A4AF-9153-420F-BCA9-8D1E98ED2016}
[2011/11/05 15:23:25 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{BC7D9049-6223-4D8C-BAD7-1C6F82F97223}
[2011/11/04 09:33:55 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{3499925D-6EAF-4F3B-9F73-8A37B1B3EAFD}
[2011/11/03 19:40:16 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{100E62A1-FDF4-4297-8171-1769F9FBEB88}
[2011/11/03 19:39:17 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{99202D6F-2316-4B53-9D51-4FE948C26727}
[2011/11/02 17:50:22 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{16AA7A42-1455-4952-A8A0-7D93ABD84B4C}
[2011/11/02 05:49:53 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{92FF604A-065F-4133-AC69-0BF49F09335A}
[2011/11/01 17:54:17 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Monolith Productions
[2011/11/01 17:44:09 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{95837734-7184-4BF1-8665-4CD965588D3C}
[2011/11/01 17:43:54 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{1A685458-9A3F-4458-8CE4-9032D0322484}
[2011/11/01 15:04:41 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\EA Games
[2011/11/01 05:43:22 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{D84A6002-2845-4192-A2AE-EF95FC27C44F}
[2011/11/01 05:42:14 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{AD5047EA-33FD-4418-9771-F5AB50204D62}
[2011/10/31 18:37:30 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Roaming\Voxatron
[2011/10/31 18:37:00 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Voxatron
[2011/10/31 18:36:54 | 000,000,000 | ---D | C] -- C:\Program Files\Voxatron
[2011/10/31 18:25:35 | 000,000,000 | ---D | C] -- C:\Users\Zach\Documents\SavedGames
[2011/10/31 05:45:24 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{61842BD3-CEE5-4525-8B12-133DAFC2F47C}
[2011/10/31 05:45:09 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{4A79EFF9-93C1-414A-8CF5-D2A6C21932D6}
[2011/10/29 06:54:35 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{25C9AA9E-D007-404E-8D29-BFBA6EE360EE}
[2011/10/29 06:53:47 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{090C1001-250C-4BCC-877C-1EA79437140B}
[2011/10/28 15:07:54 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\Chromium
[2011/10/28 14:54:08 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{0ACB45E8-9759-4E06-B0C4-20E8B2C34D4C}
[2011/10/28 14:53:53 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{E9B12F6C-D8A9-46F7-964A-6C0CB0979FD9}
[2011/10/27 21:52:10 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{FC1C5F37-1FA1-4156-8C0C-E281F86BAE7D}
[2011/10/27 21:50:32 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{74BB7919-AB9B-41BC-80B9-675F44026C07}
[2011/10/26 17:52:14 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{E09A2CD7-30DB-493C-8468-AA878D34B9E8}
[2011/10/26 05:51:38 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{9997306E-EEE9-4E8F-9187-2B6D73A35E45}
[2011/10/26 05:50:39 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{38FDC8C8-A0A0-4A48-8DF2-BBA2B37C3BED}
[2011/10/22 07:44:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\id Software
[2011/10/22 07:44:51 | 000,000,000 | ---D | C] -- C:\ProgramData\id Software
[2011/10/20 21:05:19 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\NCSoft
[2011/10/20 15:12:54 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{3DAC3333-F588-401E-8AC5-984DC6C2BD96}
[2011/10/20 15:11:59 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{D2411C10-F5D1-4654-803D-8C75E6A14D81}
[2011/10/19 17:14:03 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\assembly
[2011/10/19 17:13:01 | 000,000,000 | ---D | C] -- C:\Program Files\NCSoft
[2011/10/19 17:09:15 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Roaming\GetRightToGo
[2011/10/18 19:38:06 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{2CA04467-299A-4487-9FBB-E594A1BFAEAC}
[2011/10/18 19:37:55 | 000,000,000 | ---D | C] -- C:\Users\Zach\AppData\Local\{F14ECD6E-DA4C-4249-A8A7-265E96B29DF8}
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/11/17 13:26:50 | 000,009,584 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/11/17 13:26:50 | 000,009,584 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/11/17 13:05:36 | 000,000,023 | ---- | M] () -- C:\Windows\BlendSettings.ini
[2011/11/17 12:55:12 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-522766664-563094020-1905292786-1001UA.job
[2011/11/17 10:19:48 | 000,000,852 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-522766664-563094020-1905292786-1001Core.job
[2011/11/17 10:08:00 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/11/16 22:22:03 | 2211,602,432 | -HS- | M] () -- C:\hiberfil.sys
[2011/11/15 16:30:09 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2011/11/14 18:26:39 | 000,015,360 | ---- | M] () -- C:\Windows\System32\umstartup.etl
[2011/11/13 11:47:24 | 000,001,025 | ---- | M] () -- C:\Users\Zach\Desktop\Bullet Candy 3D.lnk
[2011/11/13 11:34:10 | 000,000,913 | ---- | M] () -- C:\Users\Public\Desktop\NightSky.lnk
[2011/11/11 22:05:09 | 000,000,193 | ---- | M] () -- C:\Windows\WORDPAD.INI
[2011/11/10 23:50:44 | 000,003,994 | ---- | M] () -- C:\Users\Zach\Documents\cc_20111110_235023.reg
[2011/11/10 23:34:29 | 000,000,933 | ---- | M] () -- C:\Users\Zach\Desktop\BitTorrent.lnk
[2011/11/10 23:33:47 | 000,001,078 | ---- | M] () -- C:\Users\Zach\Desktop\OpenOffice.org 3.3.lnk
[2011/11/10 10:01:56 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Zach\Desktop\OTL.exe
[2011/11/09 23:05:33 | 000,216,310 | ---- | M] () -- C:\Users\Zach\Documents\cc_20111109_230501.reg
[2011/11/09 21:22:02 | 000,001,324 | ---- | M] () -- C:\Users\Zach\Desktop\iTunes.lnk
[2011/11/09 17:57:58 | 000,001,269 | ---- | M] () -- C:\Users\Zach\Desktop\Oblivion.lnk
[2011/11/08 14:19:24 | 000,094,896 | ---- | M] (Kaspersky Lab, GERT) -- C:\Windows\System32\drivers\03342164.sys
[2011/11/08 06:47:51 | 000,001,091 | ---- | M] () -- C:\Users\Zach\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk
[2011/11/07 16:11:28 | 000,001,067 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/11/06 17:58:36 | 000,001,407 | ---- | M] () -- C:\Users\Zach\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/11/06 16:41:18 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2011/11/06 11:25:27 | 000,000,031 | ---- | M] () -- C:\Windows\progress
[2011/11/06 09:12:25 | 000,001,125 | ---- | M] () -- C:\Users\Zach\Desktop\Advent Rising.lnk
[2011/10/31 18:37:01 | 000,000,952 | ---- | M] () -- C:\Users\Zach\Desktop\Voxatron.lnk
[2011/10/31 18:30:38 | 000,659,818 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/10/31 18:30:38 | 000,120,714 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/10/31 17:54:31 | 000,000,215 | ---- | M] () -- C:\Users\Zach\Desktop\F.E.A.R. Perseus Mandate.url
[2011/10/31 17:54:30 | 000,000,216 | ---- | M] () -- C:\Users\Zach\Desktop\Cthulhu Saves the World .url
[2011/10/31 17:54:30 | 000,000,216 | ---- | M] () -- C:\Users\Zach\Desktop\Breath of Death VII .url
[2011/10/31 17:54:30 | 000,000,215 | ---- | M] () -- C:\Users\Zach\Desktop\F.E.A.R..url
[2011/10/31 17:54:30 | 000,000,215 | ---- | M] () -- C:\Users\Zach\Desktop\F.E.A.R. Extraction Point.url
[2011/10/31 17:54:30 | 000,000,215 | ---- | M] () -- C:\Users\Zach\Desktop\Dead Space 2.url
[2011/10/31 17:54:30 | 000,000,214 | ---- | M] () -- C:\Users\Zach\Desktop\Vampire The Masquerade - Bloodlines.url
[2011/10/28 14:56:22 | 000,000,214 | ---- | M] () -- C:\Users\Zach\Desktop\Bloodline Champions.url
[2011/10/22 07:43:17 | 000,000,214 | ---- | M] () -- C:\Users\Zach\Desktop\Hitman Codename 47.url
[2011/10/21 22:02:48 | 000,000,216 | ---- | M] () -- C:\Users\Zach\Desktop\Terraria.url
[4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/11/15 15:56:16 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2011/11/15 15:56:16 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011/11/15 15:56:16 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011/11/15 15:56:16 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011/11/15 15:56:16 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011/11/13 11:47:24 | 000,001,025 | ---- | C] () -- C:\Users\Zach\Desktop\Bullet Candy 3D.lnk
[2011/11/13 11:34:10 | 000,000,913 | ---- | C] () -- C:\Users\Public\Desktop\NightSky.lnk
[2011/11/13 11:02:01 | 015,602,176 | ---- | C] () -- C:\Users\Zach\Desktop\Irukandji.exe
[2011/11/11 22:04:39 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2011/11/10 23:50:26 | 000,003,994 | ---- | C] () -- C:\Users\Zach\Documents\cc_20111110_235023.reg
[2011/11/10 23:34:29 | 000,000,933 | ---- | C] () -- C:\Users\Zach\Desktop\BitTorrent.lnk
[2011/11/10 23:33:47 | 000,001,078 | ---- | C] () -- C:\Users\Zach\Desktop\OpenOffice.org 3.3.lnk
[2011/11/09 23:05:09 | 000,216,310 | ---- | C] () -- C:\Users\Zach\Documents\cc_20111109_230501.reg
[2011/11/09 21:22:01 | 000,001,324 | ---- | C] () -- C:\Users\Zach\Desktop\iTunes.lnk
[2011/11/09 17:57:58 | 000,001,269 | ---- | C] () -- C:\Users\Zach\Desktop\Oblivion.lnk
[2011/11/09 17:57:06 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini
[2011/11/08 06:47:51 | 000,001,091 | ---- | C] () -- C:\Users\Zach\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes' Anti-Malware.lnk
[2011/11/07 22:14:33 | 000,001,067 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/11/06 16:41:18 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2011/11/06 11:25:27 | 000,000,031 | ---- | C] () -- C:\Windows\progress
[2011/11/06 09:12:25 | 000,001,125 | ---- | C] () -- C:\Users\Zach\Desktop\Advent Rising.lnk
[2011/10/31 18:37:01 | 000,000,952 | ---- | C] () -- C:\Users\Zach\Desktop\Voxatron.lnk
[2011/10/31 17:54:30 | 000,000,216 | ---- | C] () -- C:\Users\Zach\Desktop\Cthulhu Saves the World .url
[2011/10/31 17:54:30 | 000,000,216 | ---- | C] () -- C:\Users\Zach\Desktop\Breath of Death VII .url
[2011/10/31 17:54:30 | 000,000,215 | ---- | C] () -- C:\Users\Zach\Desktop\F.E.A.R..url
[2011/10/31 17:54:30 | 000,000,215 | ---- | C] () -- C:\Users\Zach\Desktop\F.E.A.R. Perseus Mandate.url
[2011/10/31 17:54:30 | 000,000,215 | ---- | C] () -- C:\Users\Zach\Desktop\F.E.A.R. Extraction Point.url
[2011/10/31 17:54:30 | 000,000,215 | ---- | C] () -- C:\Users\Zach\Desktop\Dead Space 2.url
[2011/10/31 17:54:30 | 000,000,214 | ---- | C] () -- C:\Users\Zach\Desktop\Vampire The Masquerade - Bloodlines.url
[2011/10/28 14:56:22 | 000,000,214 | ---- | C] () -- C:\Users\Zach\Desktop\Bloodline Champions.url
[2011/10/21 22:02:48 | 000,000,216 | ---- | C] () -- C:\Users\Zach\Desktop\Terraria.url
[2011/10/18 14:57:56 | 000,000,214 | ---- | C] () -- C:\Users\Zach\Desktop\Hitman Codename 47.url
[2011/06/14 14:57:32 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat
[2011/05/20 14:39:43 | 000,000,000 | ---- | C] () -- C:\Users\Zach\AppData\Roaming\.NANotifyHere
[2011/05/08 16:37:17 | 000,000,000 | ---- | C] () -- C:\Windows\PowerReg.dat
[2011/05/04 15:03:13 | 000,013,172 | -HS- | C] () -- C:\Users\Zach\AppData\Local\00m7424w3832ote4332pyh8
[2011/05/04 15:03:13 | 000,013,172 | -HS- | C] () -- C:\ProgramData\00m7424w3832ote4332pyh8
[2011/04/24 14:43:43 | 000,003,584 | ---- | C] () -- C:\Users\Zach\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/20 00:18:12 | 000,000,056 | ---- | C] () -- C:\Windows\System32\ezsidmv.dat
[2011/04/09 17:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011/03/12 20:00:12 | 000,000,331 | ---- | C] () -- C:\Windows\doom3.ini
[2011/02/13 20:09:45 | 002,250,024 | ---- | C] () -- C:\Windows\System32\pbsvc.exe
[2011/02/04 16:32:48 | 000,022,328 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2011/02/04 16:32:45 | 000,022,328 | ---- | C] () -- C:\Users\Zach\AppData\Roaming\PnkBstrK.sys
[2011/02/04 16:31:54 | 000,107,832 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2011/02/04 16:31:40 | 000,075,064 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2011/02/02 08:28:10 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009/07/13 23:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/13 23:33:53 | 000,296,856 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/07/13 21:05:48 | 000,659,818 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009/07/13 21:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009/07/13 21:05:48 | 000,120,714 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009/07/13 21:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009/07/13 21:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009/07/13 21:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009/07/13 18:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 18:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 18:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009/06/18 19:29:04 | 000,197,654 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2009/06/10 16:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
========== LOP Check ==========
[2011/11/12 11:21:09 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\.minecraft
[2011/06/23 09:46:32 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\AtomZombieData
[2011/05/24 20:18:14 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\Bioshock
[2011/11/14 16:04:59 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\BitTorrent
[2011/11/06 19:40:05 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\Braid
[2011/09/18 09:01:40 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\Codemasters
[2011/05/20 19:13:51 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\fltk.org
[2011/11/15 15:54:56 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\GetRightToGo
[2011/02/02 13:30:21 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\Hi-Rez Studios
[2011/11/14 15:58:20 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\IObit
[2011/11/13 19:30:37 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\Irukandji
[2011/02/20 22:17:53 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\LolClient
[2011/11/13 11:34:16 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\Nicalis
[2011/11/05 15:57:37 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\OpenOffice.org
[2011/11/05 16:34:02 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\SystemRequirementsLab
[2011/11/05 15:57:38 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\Ubisoft
[2011/11/06 11:08:50 | 000,000,000 | ---D | M] -- C:\Users\Zach\AppData\Roaming\Voxatron
[2011/10/09 10:07:18 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report >