Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Slow [Solved]

Started by the_mckees , Jan 16 2012 07:03 PM

  • This topic is locked This topic is locked

#1
the_mckees
Posted 16 January 2012 - 07:03 PM

the_mckees

    Member

  • Member
  • PipPip
  • 23 posts
Hello all,

Just started to have some issues with our computer. It has just recently started to run slowly and with many error messages (Blue screen of death). Below is my OTL log, i hope this helsp. Any help is and will be greatly appreciated

OTL logfile created on: 16/01/2012 3:40:27 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Ryno\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

3.00 Gb Total Physical Memory | 1.27 Gb Available Physical Memory | 42.48% Memory free
6.19 Gb Paging File | 4.10 Gb Available in Paging File | 66.20% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 287.94 Gb Total Space | 35.86 Gb Free Space | 12.45% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 5.75 Gb Free Space | 57.47% Space Free | Partition Type: NTFS
Drive H: | 1.91 Gb Total Space | 1.67 Gb Free Space | 87.55% Space Free | Partition Type: FAT

Computer Name: RYNO-PC | User Name: Ryno | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/01/16 15:39:54 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Ryno\Desktop\OTL.exe
PRC - [2011/09/05 04:52:42 | 000,243,360 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10w_ActiveX.exe
PRC - [2011/07/28 16:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2011/06/05 19:25:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/04/22 05:21:14 | 000,097,712 | ---- | M] (Mozilla Foundation) -- C:\Program Files\TomTom HOME 2\xulrunner\TomTomHOMERuntime.exe
PRC - [2011/04/22 05:21:10 | 000,247,728 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
PRC - [2011/04/22 05:21:10 | 000,092,592 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2010/11/08 09:40:56 | 000,715,440 | ---- | M] () -- C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
PRC - [2010/09/14 06:46:26 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2010/09/14 06:46:16 | 000,508,264 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2010/01/26 00:40:32 | 001,020,248 | ---- | M] () -- C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe
PRC - [2010/01/11 02:04:36 | 000,689,416 | ---- | M] () -- C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
PRC - [2010/01/11 02:04:36 | 000,497,008 | ---- | M] () -- C:\Program Files\Trend Micro\Internet Security\TmPfw.exe
PRC - [2010/01/11 02:04:35 | 000,345,352 | ---- | M] () -- C:\Program Files\Trend Micro\BM\TMBMSRV.exe
PRC - [2009/11/09 16:44:38 | 000,443,728 | ---- | M] (LeapFrog Enterprises, Inc.) -- C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe
PRC - [2009/11/09 15:58:06 | 001,131,808 | ---- | M] (LeapFrog Enterprises, Inc.) -- C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe
PRC - [2009/09/22 20:08:18 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2009/07/26 19:10:00 | 001,983,816 | ---- | M] (CANON INC.) -- C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
PRC - [2009/05/11 19:40:00 | 000,525,640 | R--- | M] (WinZip Computing, S.L.) -- C:\Program Files\WinZip\WZQKPICK.EXE
PRC - [2009/04/10 23:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/04/09 01:48:00 | 000,208,328 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Pro\DTProShellHlp.exe
PRC - [2009/02/10 09:01:49 | 000,116,104 | ---- | M] () -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe
PRC - [2008/09/11 19:05:04 | 000,072,704 | ---- | M] (Creative Labs) -- C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
PRC - [2008/06/30 03:28:24 | 000,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\hidfind.exe
PRC - [2008/06/30 03:28:14 | 000,196,608 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\Apoint.exe
PRC - [2008/06/30 03:28:12 | 000,049,152 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApntEx.exe
PRC - [2008/06/30 03:28:12 | 000,046,376 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe
PRC - [2008/06/25 04:56:34 | 000,442,467 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe
PRC - [2008/06/25 04:56:30 | 000,221,273 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\stacsv.exe
PRC - [2008/06/25 04:56:24 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\AEstSrv.exe
PRC - [2008/06/12 22:56:54 | 002,498,560 | ---- | M] () -- C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
PRC - [2008/05/01 23:57:00 | 001,211,472 | ---- | M] (Dell Inc.) -- C:\Program Files\Dell\QuickSet\quickset.exe
PRC - [2008/02/08 00:18:16 | 001,804,840 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
PRC - [2008/02/08 00:18:16 | 000,752,168 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2007/11/13 03:12:48 | 000,386,560 | ---- | M] (Conexant Systems, Inc.) -- C:\Windows\System32\drivers\ACFXAU32.exe
PRC - [2007/10/03 00:45:02 | 000,358,936 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2007/10/03 00:44:58 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2007/09/12 23:05:08 | 001,261,568 | ---- | M] () -- C:\Program Files\NETGEAR\WG111v2\WG111v2.exe
PRC - [2007/08/26 20:36:34 | 000,111,912 | ---- | M] (SingleClick Systems) -- C:\Program Files\Dell Network Assistant\hnm_svc.exe
PRC - [2007/08/05 14:29:32 | 000,135,568 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\VPTray.exe
PRC - [2007/08/05 14:29:20 | 001,966,480 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe
PRC - [2007/08/05 14:29:12 | 000,030,608 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\DefWatch.exe
PRC - [2007/07/16 22:18:16 | 000,180,224 | ---- | M] () -- C:\Windows\System32\WinService.exe
PRC - [2006/12/07 17:25:24 | 000,107,112 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe
PRC - [2006/12/07 17:25:06 | 000,107,624 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe


========== Modules (No Company Name) ==========

MOD - [2011/12/26 19:51:23 | 005,251,072 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
MOD - [2011/09/26 13:53:00 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/09/26 13:52:40 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/07/28 16:09:42 | 000,096,112 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011/07/28 16:08:12 | 001,259,376 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2011/07/08 04:53:06 | 004,550,656 | ---- | M] () -- C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
MOD - [2011/05/04 04:53:15 | 003,182,592 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
MOD - [2011/04/22 05:20:58 | 001,327,104 | ---- | M] () -- C:\Program Files\TomTom HOME 2\xulrunner\wxbase28u_vc_custom.dll
MOD - [2011/03/29 03:53:25 | 005,025,792 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
MOD - [2009/09/04 05:01:52 | 002,076,672 | ---- | M] () -- C:\Program Files\LeapFrog\LeapFrog Connect\QtCore4.dll
MOD - [2009/06/19 04:24:40 | 007,745,536 | ---- | M] () -- C:\Program Files\LeapFrog\LeapFrog Connect\QtGui4.dll
MOD - [2009/05/07 14:43:00 | 000,355,840 | ---- | M] () -- C:\Program Files\Celebrity Toolbar\tbhelper.dll
MOD - [2009/03/29 21:42:20 | 002,048,000 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll
MOD - [2009/03/29 21:42:19 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2009/03/29 21:42:18 | 000,626,688 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
MOD - [2009/03/29 21:42:10 | 000,010,752 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
MOD - [2008/09/11 19:13:46 | 001,679,360 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3019.36912__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
MOD - [2008/09/11 19:13:46 | 000,253,952 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3019.36870__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:46 | 000,196,608 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3019.36924__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
MOD - [2008/09/11 19:13:46 | 000,077,824 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3019.37100__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:46 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3019.36904__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
MOD - [2008/09/11 19:13:46 | 000,036,864 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3019.37022__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:46 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3019.36890__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:45 | 000,483,328 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3019.37131__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
MOD - [2008/09/11 19:13:45 | 000,065,536 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3019.37065__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:33 | 000,352,256 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3019.37072__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:33 | 000,147,456 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3019.37130__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:33 | 000,135,168 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3019.37137__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:33 | 000,090,112 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3019.37079__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
MOD - [2008/09/11 19:13:33 | 000,073,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3019.36884__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:33 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3019.37071__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:33 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3019.37129__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:32 | 000,802,816 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3019.37030__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:32 | 000,585,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3019.36936__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:32 | 000,479,232 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3019.37023__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:32 | 000,446,464 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3019.37015__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:32 | 000,438,272 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3019.36891__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:32 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3019.37092__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
MOD - [2008/09/11 19:13:32 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3019.37058__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:32 | 000,307,200 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3019.36943__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll
MOD - [2008/09/11 19:13:32 | 000,217,088 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3019.36930__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:32 | 000,118,784 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3019.37044__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
MOD - [2008/09/11 19:13:32 | 000,073,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3019.37029__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:32 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3019.37022__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:32 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3019.36942__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:32 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3019.37029__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:32 | 000,036,864 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3019.37044__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:32 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3019.37058__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
MOD - [2008/09/11 19:13:32 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2939.23687__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
MOD - [2008/09/11 19:13:32 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2939.23679__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
MOD - [2008/09/11 19:13:32 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2939.23767__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
MOD - [2008/09/11 19:13:32 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2939.23710__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
MOD - [2008/09/11 19:13:32 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2939.23768__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
MOD - [2008/09/11 19:13:32 | 000,006,656 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
MOD - [2008/09/11 19:13:31 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.2939.23668__90ba9c70f846762e\CLI.Foundation.dll
MOD - [2008/09/11 19:13:31 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
MOD - [2008/09/11 19:13:31 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.2939.23662__90ba9c70f846762e\LOG.Foundation.dll
MOD - [2008/09/11 19:13:31 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2939.23802__90ba9c70f846762e\CLI.Foundation.XManifest.dll
MOD - [2008/09/11 19:13:31 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2939.23667__90ba9c70f846762e\NEWAEM.Foundation.dll
MOD - [2008/09/11 19:13:31 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2939.23717__90ba9c70f846762e\DEM.OS.I0602.dll
MOD - [2008/09/11 19:13:31 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2939.23693__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
MOD - [2008/09/11 19:13:31 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2939.23687__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
MOD - [2008/09/11 19:13:31 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2939.23679__90ba9c70f846762e\CLI.Component.Client.Shared.dll
MOD - [2008/09/11 19:13:31 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.2939.23707__90ba9c70f846762e\MOM.Foundation.dll
MOD - [2008/09/11 19:13:31 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.OS\2.0.2939.23717__90ba9c70f846762e\DEM.OS.dll
MOD - [2008/09/11 19:13:31 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
MOD - [2008/09/11 19:13:31 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.2939.23718__90ba9c70f846762e\DEM.Graphics.dll
MOD - [2008/09/11 19:13:31 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
MOD - [2008/09/11 19:13:31 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2939.23688__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
MOD - [2008/09/11 19:13:31 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2939.23734__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,065,536 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2965.22300__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2939.23689__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2939.23743__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,049,152 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2939.23740__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2939.23738__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2939.23764__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2939.23708__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.2939.23763__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2939.23735__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2939.23719__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2939.23741__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2939.23719__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
MOD - [2008/09/11 19:13:30 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2939.23718__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
MOD - [2008/09/11 19:13:29 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2939.23739__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
MOD - [2008/09/11 19:13:29 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2939.23742__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
MOD - [2008/09/11 19:13:29 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2939.23711__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
MOD - [2008/09/11 19:13:29 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Foundation\2.0.2939.23665__90ba9c70f846762e\AEM.Foundation.dll
MOD - [2008/09/11 19:13:29 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll
MOD - [2008/09/11 19:13:29 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.2939.23709__90ba9c70f846762e\APM.Foundation.dll
MOD - [2008/09/11 19:13:29 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2939.23687__90ba9c70f846762e\AEM.Server.Shared.dll
MOD - [2008/09/11 19:13:25 | 000,491,520 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3019.36897__90ba9c70f846762e\CLI.Component.Wizard.dll
MOD - [2008/09/11 19:13:25 | 000,102,400 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3019.37122__90ba9c70f846762e\MOM.Implementation.dll
MOD - [2008/09/11 19:13:25 | 000,073,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3019.36862__90ba9c70f846762e\CLI.Component.Runtime.dll
MOD - [2008/09/11 19:13:25 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3019.37121__90ba9c70f846762e\LOG.Foundation.Implementation.dll
MOD - [2008/09/11 19:13:25 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2939.23713__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
MOD - [2008/09/11 19:13:25 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2939.23678__90ba9c70f846762e\CLI.Foundation.Private.dll
MOD - [2008/09/11 19:13:25 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3019.37147__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
MOD - [2008/09/11 19:13:25 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2939.23679__90ba9c70f846762e\LOG.Foundation.Private.dll
MOD - [2008/09/11 19:13:25 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2939.23694__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
MOD - [2008/09/11 19:13:25 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2939.23712__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
MOD - [2008/09/11 19:13:25 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOCALIZATION.Foundation.Private\2.0.2939.23677__90ba9c70f846762e\LOCALIZATION.Foundation.Private.dll
MOD - [2008/09/11 19:13:25 | 000,006,656 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3019.36862__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
MOD - [2008/09/11 19:13:24 | 001,511,424 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3019.36878__90ba9c70f846762e\CLI.Component.Dashboard.dll
MOD - [2008/09/11 19:13:24 | 000,065,536 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ATIDEMOS\2.0.3019.36863__90ba9c70f846762e\ATIDEMOS.dll
MOD - [2008/09/11 19:13:24 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3019.36861__90ba9c70f846762e\APM.Server.dll
MOD - [2008/09/11 19:13:24 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3019.36862__90ba9c70f846762e\AEM.Server.dll
MOD - [2008/09/11 19:13:24 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2939.23689__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
MOD - [2008/09/11 19:13:24 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3019.37122__90ba9c70f846762e\CCC.Implementation.dll
MOD - [2008/09/11 19:13:24 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
MOD - [2008/09/11 19:13:24 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2939.23711__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
MOD - [2008/09/11 19:13:24 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2939.23746__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
MOD - [2008/06/12 22:56:54 | 002,498,560 | ---- | M] () -- C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
MOD - [2008/05/04 01:42:20 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll
MOD - [2008/03/11 22:37:52 | 000,055,808 | ---- | M] () -- C:\Windows\System32\bcmwlrmt.dll
MOD - [2008/02/07 23:44:32 | 000,126,976 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll
MOD - [2008/02/03 22:29:02 | 000,688,128 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
MOD - [2007/09/12 23:05:08 | 001,261,568 | ---- | M] () -- C:\Program Files\NETGEAR\WG111v2\WG111v2.exe


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter)
SRV - [2011/06/13 23:09:22 | 000,267,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Fix it Center\Matsvc.exe -- (MatSvc)
SRV - [2011/06/05 19:25:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/04/22 05:21:10 | 000,092,592 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2010/11/08 09:40:56 | 000,715,440 | ---- | M] () [Auto | Running] -- C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe -- (SfCtlCom)
SRV - [2010/09/14 06:46:26 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2010/09/14 06:46:16 | 000,508,264 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2010/01/11 02:04:36 | 000,689,416 | ---- | M] () [On_Demand | Running] -- C:\Program Files\Trend Micro\Internet Security\TmProxy.exe -- (TmProxy)
SRV - [2010/01/11 02:04:36 | 000,497,008 | ---- | M] () [On_Demand | Running] -- C:\Program Files\Trend Micro\Internet Security\TmPfw.exe -- (TmPfw)
SRV - [2010/01/11 02:04:35 | 000,345,352 | ---- | M] () [On_Demand | Running] -- C:\Program Files\Trend Micro\BM\TMBMSRV.exe -- (TMBMServer)
SRV - [2009/11/09 15:58:06 | 001,131,808 | ---- | M] (LeapFrog Enterprises, Inc.) [Auto | Running] -- C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe -- (LeapFrog Connect Device Service)
SRV - [2009/09/22 20:08:18 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2009/02/10 09:01:49 | 000,116,104 | ---- | M] () [Auto | Running] -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2008/09/11 19:23:52 | 000,016,680 | ---- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe -- (GoToAssist)
SRV - [2008/09/11 19:05:04 | 000,072,704 | ---- | M] (Creative Labs) [Auto | Running] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe -- (Creative Labs Licensing Service)
SRV - [2008/06/25 04:56:30 | 000,221,273 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\stacsv.exe -- (STacSV)
SRV - [2008/06/25 04:56:24 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_238116a1\AEstSrv.exe -- (AESTFilters)
SRV - [2008/01/20 19:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/11/13 03:12:48 | 000,386,560 | ---- | M] (Conexant Systems, Inc.) [Auto | Running] -- C:\Windows\System32\drivers\ACFXAU32.exe -- (XAudioService)
SRV - [2007/10/03 00:45:02 | 000,358,936 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel®
SRV - [2007/08/26 20:36:34 | 000,111,912 | ---- | M] (SingleClick Systems) [Auto | Running] -- C:\Program Files\Dell Network Assistant\hnm_svc.exe -- (hnmsvc)
SRV - [2007/08/05 14:29:24 | 000,121,744 | ---- | M] (symantec) [On_Demand | Stopped] -- C:\Program Files\Symantec AntiVirus\SavRoam.exe -- (SavRoam)
SRV - [2007/08/05 14:29:20 | 001,966,480 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe -- (Symantec AntiVirus)
SRV - [2007/08/05 14:29:12 | 000,030,608 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec AntiVirus\DefWatch.exe -- (DefWatch)
SRV - [2007/07/16 22:18:16 | 000,180,224 | ---- | M] () [Auto | Running] -- C:\Windows\System32\WinService.exe -- (SCM_Service)
SRV - [2006/12/07 17:25:06 | 000,107,624 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2006/12/07 17:25:06 | 000,107,624 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2006/10/30 23:02:09 | 002,541,248 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2005/02/25 11:49:52 | 000,466,944 | ---- | M] (Lexmark International, Inc.) [On_Demand | Stopped] -- C:\Windows\System32\lxcecoms.exe -- (lxce_device)


========== Driver Services (SafeList) ==========

DRV - [2011/11/15 02:00:00 | 000,106,104 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2011/11/10 02:00:00 | 000,374,392 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2011/08/18 01:00:00 | 001,576,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20120113.003\NAVEX15.SYS -- (NAVEX15)
DRV - [2011/08/18 01:00:00 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20120113.003\NAVENG.SYS -- (NAVENG)
DRV - [2011/07/12 03:44:10 | 000,262,416 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\tmxpflt.sys -- (tmxpflt)
DRV - [2011/07/12 03:43:58 | 000,036,624 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\tmpreflt.sys -- (tmpreflt)
DRV - [2011/07/12 03:09:32 | 001,405,720 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\vsapint.sys -- (vsapint)
DRV - [2011/05/09 15:36:14 | 000,018,432 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netaapl.sys -- (Netaapl)
DRV - [2010/09/14 06:46:26 | 000,019,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
DRV - [2010/09/14 06:46:22 | 000,021,864 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
DRV - [2010/09/14 06:46:18 | 000,194,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
DRV - [2010/09/14 06:46:14 | 000,577,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
DRV - [2010/07/19 11:03:10 | 000,059,472 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\DRIVERS\tmactmon.sys -- (tmactmon)
DRV - [2010/07/19 11:03:00 | 000,051,792 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\DRIVERS\tmevtmgr.sys -- (tmevtmgr)
DRV - [2010/07/19 11:02:54 | 000,163,408 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\DRIVERS\tmcomm.sys -- (tmcomm)
DRV - [2010/03/07 16:32:58 | 000,062,496 | ---- | M] (ITE Tech. Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\itecir.sys -- (itecir)
DRV - [2010/01/11 02:04:43 | 000,283,152 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\tmwfp.sys -- (tmwfp)
DRV - [2010/01/11 02:04:43 | 000,146,448 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\tmlwf.sys -- (tmlwf)
DRV - [2010/01/11 02:04:43 | 000,089,872 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\tmtdi.sys -- (tmtdi)
DRV - [2009/11/09 15:57:06 | 000,019,456 | ---- | M] (LeapFrog) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\FlyUsb.sys -- (FlyUsb)
DRV - [2009/06/14 04:39:52 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009/03/08 00:36:00 | 000,280,096 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OA001Vid.sys -- (OA001Vid)
DRV - [2009/03/05 15:00:08 | 000,133,632 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OA001Ufd.sys -- (OA001Ufd)
DRV - [2008/12/04 14:32:40 | 000,049,904 | R--- | M] (Avanquest Software) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BVRPMPR5.SYS -- (BVRPMPR5)
DRV - [2008/11/16 02:57:27 | 000,109,744 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2008/06/30 03:28:10 | 000,170,032 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2008/06/25 04:56:36 | 000,380,928 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2008/05/04 01:42:18 | 003,548,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2008/05/04 01:42:18 | 003,548,672 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2008/03/13 04:41:12 | 000,203,264 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\k57nd60x.sys -- (k57nd60x) Broadcom NetLink ™
DRV - [2008/03/13 04:34:40 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2008/03/13 04:34:38 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2008/03/13 04:34:36 | 000,043,008 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2008/03/11 22:37:46 | 000,018,424 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bcm42rly.sys -- (BCM42RLY)
DRV - [2008/01/20 19:23:25 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel®
DRV - [2007/12/27 22:28:30 | 000,289,280 | ---- | M] (NETGEAR Inc. ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wg111v3.sys -- (RTL8187B)
DRV - [2007/12/25 17:16:00 | 000,288,768 | ---- | M] (NETGEAR Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wg111v2.sys -- (RTL8187)
DRV - [2007/11/13 03:12:48 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\ACFXAU32.sys -- (XAudio)
DRV - [2007/11/13 03:12:46 | 000,086,656 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ACFVA32.sys -- (acfva)
DRV - [2007/11/13 03:12:46 | 000,028,928 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ACFDCP32.sys -- (dgcfltr)
DRV - [2007/11/13 03:12:46 | 000,012,672 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\ACFSDK32.sys -- (mdmxsdk)
DRV - [2007/08/24 02:14:54 | 000,101,504 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2007/07/03 00:28:20 | 000,106,792 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2007/07/03 00:27:24 | 000,011,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2007/07/03 00:24:24 | 000,080,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2007/04/22 18:20:50 | 000,025,896 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | System | Running] -- C:\Windows\System32\drivers\RtlProt.sys -- (RtlProt)
DRV - [2007/01/18 09:50:54 | 000,021,728 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\scmndisp.sys -- (SCMNdisP)
DRV - [2007/01/12 18:01:42 | 000,276,792 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2007/01/12 18:01:42 | 000,247,608 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\srtsp.sys -- (SRTSP)
DRV - [2007/01/12 18:01:42 | 000,025,400 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2007/01/08 21:52:28 | 000,006,144 | ---- | M] (Chic) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\moufiltr.sys -- (moufiltr)
DRV - [2006/12/18 04:01:20 | 000,012,672 | ---- | M] (SingleClick Systems) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\packet.sys -- (Packet)
DRV - [2006/12/11 15:56:28 | 000,407,640 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2006/10/26 00:31:34 | 000,185,744 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2006/10/26 00:31:34 | 000,026,384 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.myheritage.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co...=au&ibd=6080912
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {1C4AB6A5-595F-4e86-B15F-F93CCE2BBD48} - C:\Program Files\Celebrity Toolbar\tbhelper.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=192.168.2.11:80;https=192.168.2.11:80;ftp=192.168.2.11:80;socks=192.168.2.11:1080

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Search"
FF - prefs.js..browser.startup.homepage: "http://search.myheritage.com/"
FF - prefs.js..extensions.enabledItems: {FD2FD708-1F6F-4B68-B141-C5778F0C19BB}:1.0.3
FF - prefs.js..extensions.enabledItems: {39124730-0779-11de-8c30-0800200c9a66}:2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "http://search.myheri...om/?orig=ds&q="

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@unity3d.com/UnityPlayer: C:\Program Files\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Ryno\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Ryno\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011/12/26 15:04:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2012/01/13 12:04:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2012/01/13 12:04:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/11/15 01:38:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.5.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/11/15 01:38:12 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{ddb7e7f0-96e4-11dd-ad8b-0800200c9a66}: C:\Users\Ryno\AppData\Roaming\Mozilla\Firefox\Profiles\0u7rmyjd.default\extensions\{ddb7e7f0-96e4-11dd-ad8b-0800200c9a66}

[2011/12/07 13:56:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ryno\AppData\Roaming\Mozilla\Extensions
[2011/12/07 13:56:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ryno\AppData\Roaming\Mozilla\Extensions\[email protected]
[2009/05/27 02:42:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ryno\AppData\Roaming\Mozilla\Extensions\[email protected]
[2011/04/30 09:44:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ryno\AppData\Roaming\Mozilla\Firefox\Profiles\0u7rmyjd.default\extensions
[2009/09/24 04:12:10 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Ryno\AppData\Roaming\Mozilla\Firefox\Profiles\0u7rmyjd.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/09/25 20:08:15 | 000,000,000 | ---D | M] (FFComponent) -- C:\Users\Ryno\AppData\Roaming\Mozilla\Firefox\Profiles\0u7rmyjd.default\extensions\{39124730-0779-11de-8c30-0800200c9a66}
[2011/04/30 09:44:55 | 000,000,000 | ---D | M] (BitTorrentBar Community Toolbar) -- C:\Users\Ryno\AppData\Roaming\Mozilla\Firefox\Profiles\0u7rmyjd.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}
[2011/04/30 09:44:58 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Ryno\AppData\Roaming\Mozilla\Firefox\Profiles\0u7rmyjd.default\extensions\[email protected]
[2011/12/20 01:04:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/12/20 01:05:00 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2009/09/25 20:07:32 | 000,000,000 | ---D | M] (Findbasic) -- C:\Program Files\Mozilla Firefox\extensions\{C3F23840-B14B-4B61-AAEF-6BCC3621FA63}
[2010/06/09 02:23:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/08/08 03:36:33 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/11/06 06:42:41 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/01/11 00:32:28 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/03/06 02:27:36 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/07/13 05:17:24 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011/11/07 04:03:19 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2010/02/06 16:54:31 | 000,000,000 | ---D | M] (Celebrity Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}
[2009/12/06 05:59:08 | 000,192,512 | ---- | M] () -- C:\Program Files\mozilla firefox\components\mhxpcom.dll
[2011/10/02 11:36:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009/08/24 12:10:36 | 000,001,538 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2009/08/24 12:10:36 | 000,000,947 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2009/08/24 12:10:36 | 000,000,769 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2009/09/25 20:07:33 | 000,002,393 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\findbasic120.xml
[2010/02/06 16:54:07 | 000,003,803 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\MyHeritage.xml
[2009/08/24 12:10:36 | 000,000,831 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2006/09/18 14:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (MHTBPos00 Class) - {0C37B053-FD68-456a-82E1-D788EE342E6F} - C:\Program Files\Celebrity Toolbar\tbcore3.dll ()
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (CMySite Class) - {D62EC836-BF1E-4CAC-81BE-FB9179835D8E} - C:\Program Files\Celebrity Toolbar\mhxpcomi.dll ()
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (Celebrity Toolbar) - {FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - C:\Program Files\Celebrity Toolbar\tbcore3.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKCU\..\Toolbar\WebBrowser: (Celebrity Toolbar) - {FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - C:\Program Files\Celebrity Toolbar\tbcore3.dll ()
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter File not found
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [Monitor] C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe (LeapFrog Enterprises, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [UfSeAgnt.exe] C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe ()
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\SBAudigy\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [vptray] C:\Program Files\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DAEMON Tools Pro Agent] C:\Program Files\DAEMON Tools Pro\DTProAgent.exe (DT Soft Ltd)
O4 - HKCU..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter File not found
O4 - HKCU..\Run: [Facebook Update] C:\Users\Ryno\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKCU..\Run: [TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {00000130-9980-0010-8000-00AA00389B71} http://codecs.micros...86/ACELPACM.CAB (Reg Error: Key error.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.ma...r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 205.171.3.25
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{32204391-6EAD-4B32-B958-90C6C0CC6A1D}: DhcpNameServer = 192.168.0.1 205.171.3.25
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8E6B19CD-146E-4F73-A7C8-4646478832C8}: NameServer = 198.142.0.51,211.29.132.12
O18 - Protocol\Handler\mhtb {669A2A3A-F19C-452D-800D-1240299756C1} - C:\Program Files\Celebrity Toolbar\mhxpcomi.dll ()
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL) -C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll) - C:\Program Files\Citrix\GoToAssist\514\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
O24 - Desktop WallPaper: C:\Users\Ryno\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Ryno\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 14:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2009/09/23 09:58:52 | 000,000,186 | ---- | M] () - H:\autorun.inf -- [ FAT ]
O33 - MountPoints2\{1abcda42-6334-11e0-b3cf-0021707f30fb}\Shell - "" = AutoRun
O33 - MountPoints2\{1abcda42-6334-11e0-b3cf-0021707f30fb}\Shell\AutoRun\command - "" = "H:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{86e59676-f69e-11de-a3f9-0021707f30fb}\Shell - "" = AutoRun
O33 - MountPoints2\{86e59676-f69e-11de-a3f9-0021707f30fb}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{86e59686-f69e-11de-a3f9-001fe1be51c1}\Shell - "" = AutoRun
O33 - MountPoints2\{86e59686-f69e-11de-a3f9-001fe1be51c1}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{86e5968d-f69e-11de-a3f9-0021707f30fb}\Shell - "" = AutoRun
O33 - MountPoints2\{86e5968d-f69e-11de-a3f9-0021707f30fb}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{86e59691-f69e-11de-a3f9-0021707f30fb}\Shell - "" = AutoRun
O33 - MountPoints2\{86e59691-f69e-11de-a3f9-0021707f30fb}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{86e59692-f69e-11de-a3f9-0021707f30fb}\Shell - "" = AutoRun
O33 - MountPoints2\{86e59692-f69e-11de-a3f9-0021707f30fb}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{8954a7af-58d8-11de-a053-0021707f30fb}\Shell - "" = AutoRun
O33 - MountPoints2\{8954a7af-58d8-11de-a053-0021707f30fb}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{8ce72e56-9874-11dd-ae8a-0021707f30fb}\Shell\AutoRun\command - "" = F:\WD_Windows_Tools\Setup.exe
O33 - MountPoints2\{a1f67fb7-b45c-11dd-8024-0021707f30fb}\Shell\AutoRun\command - "" = G:\wdsync.exe
O33 - MountPoints2\{d705c785-34bc-11df-b00a-001fe1be51c1}\Shell\AutoRun\command - "" = WDSetup.exe
O33 - MountPoints2\{d72f1542-9aad-11de-8b9e-0021707f30fb}\Shell\AutoRun\command - "" = H:\PhotoViewerAP_V207.exe
O33 - MountPoints2\{d9a3c830-95ed-11dd-b869-0021707f30fb}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe nar.vbs
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/01/16 15:39:34 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Ryno\Desktop\OTL.exe
[2012/01/16 15:29:59 | 000,000,000 | ---D | C] -- C:\Windows\Hewlett-Packard
[2012/01/16 15:23:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012/01/16 10:54:24 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{0443DA2F-D4D7-415C-BC7F-7C3A1B58D651}
[2012/01/16 10:54:12 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{86BA71FB-69E6-4304-817D-DB43B650CECA}
[2012/01/16 10:33:48 | 000,000,000 | ---D | C] -- C:\ProgramData\TomTom
[2012/01/16 10:33:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/01/16 10:30:31 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012/01/15 22:53:57 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{A30C5307-4572-4304-AC73-2BD712609F77}
[2012/01/15 22:53:44 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{31AF6B15-2DCF-41B8-A5A1-04C7C796B364}
[2012/01/15 10:53:28 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{6B8C266F-E234-44D3-BA96-765A006E4F63}
[2012/01/15 10:53:15 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{33A184F6-613E-4418-9981-30E24983669D}
[2012/01/14 22:52:59 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{7EC81B2F-3A1B-45DC-9391-4F675525A12E}
[2012/01/14 22:52:46 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{092118EF-C74E-47C3-93AC-4CA5966960E8}
[2012/01/14 10:52:30 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{F44BB3CA-8B39-4245-9E55-011106CE6B8F}
[2012/01/14 10:52:18 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{0A8B46E5-6C95-4C69-8E7F-F2A1D8C8F992}
[2012/01/13 22:52:02 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{555962CB-B822-4E25-890F-16A0B62E1C5C}
[2012/01/13 22:51:49 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{4AC7CDE1-190C-47F5-8DA2-92691CE20DE0}
[2012/01/13 12:04:25 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft
[2012/01/13 12:04:21 | 000,000,000 | ---D | C] -- C:\Program Files\MSN Toolbar
[2012/01/13 12:03:55 | 000,000,000 | ---D | C] -- C:\Program Files\Bing Bar Installer
[2012/01/13 12:03:35 | 000,000,000 | ---D | C] -- C:\Program Files\Hewlett-Packard
[2012/01/13 12:00:50 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Roaming\HpUpdate
[2012/01/13 11:59:23 | 000,527,208 | ---- | C] (Hewlett-Packard Co.) -- C:\Windows\System32\HPDiscoPM5412.dll
[2012/01/13 11:59:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
[2012/01/13 11:56:51 | 000,000,000 | ---D | C] -- C:\Windows\LastGood
[2012/01/13 11:53:01 | 000,000,000 | ---D | C] -- C:\ProgramData\HP
[2012/01/13 11:52:30 | 000,000,000 | ---D | C] -- C:\Program Files\HP
[2012/01/13 11:51:42 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\HP
[2012/01/13 11:31:55 | 000,000,000 | ---D | C] -- C:\Users\Ryno\Desktop\America Paper Work
[2012/01/13 11:16:11 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonIJEGV
[2012/01/13 10:51:30 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{D425DCDE-2F80-4C43-9D1D-6F842B752B16}
[2012/01/13 10:51:15 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{7A440408-020B-4416-B11F-D8745A716B9B}
[2012/01/12 16:51:46 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{4E887C03-76EA-4768-A7A6-A53B990B3FD2}
[2012/01/12 16:51:30 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{8C521704-AAF2-45A6-ACDF-9D8965FE705A}
[2012/01/11 23:42:10 | 000,000,000 | ---D | C] -- C:\dade6f6040217d4b1e2e63
[2012/01/11 20:40:34 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{D0116C55-AF80-4721-AE76-7EE3E1B5BAA4}
[2012/01/11 20:40:20 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{1DC260FB-C979-4215-98F5-674E0FD988F6}
[2012/01/11 08:50:54 | 000,376,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2012/01/11 08:50:52 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciseq.dll
[2012/01/11 08:50:47 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2012/01/11 08:50:43 | 001,314,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2012/01/11 08:50:43 | 000,497,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2012/01/11 08:39:59 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{F39D60A4-F567-4EDF-9098-8FD7BD3DFFA1}
[2012/01/11 08:39:42 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{947FFDF7-E45F-40EC-AD9D-51FACF582FEA}
[2012/01/10 20:26:34 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{FA249244-714B-4B16-93E5-9D89897A9761}
[2012/01/10 20:26:17 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{4611A9B5-22B8-4B85-BA6D-DF33D275E74B}
[2012/01/10 08:25:43 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{B8C0F708-306B-47FB-94F2-067046116FA9}
[2012/01/10 08:25:09 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{5A347521-9470-443C-A00B-67C952A24FC9}
[2012/01/09 13:06:52 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{D912B65C-3C1C-4018-9A3A-DD3D220CD37D}
[2012/01/09 13:05:55 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{CE98069B-1E48-4469-AFF5-E98FDA4105FD}
[2012/01/08 19:46:47 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{51F2CF51-FE16-4699-BBD7-71A48FAE97C8}
[2012/01/08 19:46:33 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{C8EE9591-61AA-41CC-8F9E-788A53CA781F}
[2012/01/08 07:45:11 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{53BF1A24-6326-4EE7-9D7C-2A78FC21F82E}
[2012/01/08 07:44:52 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{48E54161-3C07-4C5F-892C-4D3B75104C3C}
[2012/01/07 16:03:39 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{04BC20C7-B7C7-4065-8428-A6F353D29620}
[2012/01/07 16:03:25 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{AE462A5E-BB29-43CE-8F21-88DA12EB5CA8}
[2012/01/06 22:43:40 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{C8B66022-7FD5-4BD6-89B8-354730606A61}
[2012/01/06 22:43:09 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{A083DFCE-2530-47F9-BFF1-D7382392B278}
[2012/01/06 10:42:00 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{4050E91A-D83B-4E96-AF04-59DE7AA8245D}
[2012/01/05 11:51:02 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{02548D19-B414-4324-9894-50D13ECE4684}
[2012/01/05 11:50:38 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{E7264FD3-5701-4856-812D-4924DFE41FBA}
[2012/01/04 23:50:22 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{2D5FCD72-0F0E-4C68-8BC1-8D6C9AA79097}
[2012/01/04 23:50:09 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{B51FF322-77AD-43BA-A4DB-A737A38C5C96}
[2012/01/04 11:49:04 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{22F270E3-93FE-4FD1-A41C-0D8798D36478}
[2012/01/04 11:48:52 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{2FA9F206-E04F-470E-BEBE-65F668A28A23}
[2012/01/03 23:48:30 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{8E32510A-4517-44E0-8521-85398F1BD76C}
[2012/01/03 23:48:17 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{3D2B14F4-22F1-4BD2-8C60-82143EC1B4CC}
[2012/01/03 11:48:01 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{0AD39DF4-C1C1-48D8-9706-31ACB77EC051}
[2012/01/03 11:47:50 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{DB0786DB-8855-4575-AA86-991D1B35385F}
[2012/01/02 23:47:34 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{CCBB946F-2F29-4D81-BB33-7EBEEA5EB87D}
[2012/01/02 23:47:20 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{78A2CFF2-4817-4D34-9390-716168D2B376}
[2012/01/02 11:37:24 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{CD0E0490-8158-4B66-AA9C-6812744EE787}
[2012/01/02 11:37:12 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{41D90184-E1F0-4E10-899E-D07D91FDECE1}
[2012/01/01 23:36:39 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{AD7F9212-78D3-463D-AA61-C2D3AE7BF99C}
[2012/01/01 23:36:23 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{5C99A62E-3E9B-4762-8CC6-BBFDE155C70F}
[2011/12/31 20:31:10 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{C88A2F1C-A5B7-4668-B7C5-032A7CB3021B}
[2011/12/31 20:30:57 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{0B98195F-6967-4D35-A357-F15B53FC8AC4}
[2011/12/31 08:30:42 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{9EAA34B7-FD74-43D2-9BC1-67A4A0242588}
[2011/12/31 08:30:27 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{8C631259-D2AE-4FBD-A502-27E9BCAC15C2}
[2011/12/30 20:29:58 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{B046B9DC-B747-4C8D-B676-2C089305B49E}
[2011/12/30 20:29:42 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{4D919B02-3234-4C8A-A35C-DFE1743359BA}
[2011/12/30 08:29:26 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{5A78564B-F4C6-4A42-A559-1053C5F404A5}
[2011/12/30 08:29:13 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{9B411679-D730-4241-B3E2-CD2DCB60EACD}
[2011/12/29 20:28:58 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{189D92F6-7873-46A9-B604-4D556EF0A73E}
[2011/12/29 20:28:45 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{C15C1AC1-2222-4EF5-8953-1AFF410C6FB5}
[2011/12/29 08:28:16 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{E531D642-A81C-4490-9087-F1C6BD50AF7A}
[2011/12/29 08:28:01 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{9B4558B5-B740-490E-B99F-C975A6C781E8}
[2011/12/28 20:27:32 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{0C9A10B1-367E-4D99-90DB-203979A67483}
[2011/12/28 20:27:19 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{88A7DFA8-BA7C-469A-898D-726A720EB3E2}
[2011/12/28 08:26:43 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{ABF68C1B-FF8B-4193-A524-2F522ECD38BE}
[2011/12/28 08:26:17 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{BBDBBF84-34B0-47E9-B8E1-D17D84E2F912}
[2011/12/27 19:29:27 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{BF886D18-D02F-4504-BE12-981BF487BBB2}
[2011/12/27 19:29:13 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{B702D765-99A4-4030-8E22-0A8C99934730}
[2011/12/27 07:27:44 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{A1694300-161B-443E-A1B1-AC8BB0BA604D}
[2011/12/27 07:27:30 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{56D744BF-EF35-41AE-AB61-B3B9B07E5CAC}
[2011/12/26 15:06:56 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\DDMSettings
[2011/12/26 13:59:51 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{D3CF1038-791E-455B-8705-5352FDF64A40}
[2011/12/26 13:59:28 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{7CF1E4CD-9AF5-4ACC-A174-0633628E2292}
[2011/12/25 21:21:40 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{9539448C-8540-4A89-8C59-953EF5B34FA6}
[2011/12/25 21:21:27 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{0DB9BB09-5BC0-4FFD-B12B-67F83FE26730}
[2011/12/25 09:20:57 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{A8E3D6DB-5FB7-4853-A35D-57157C3F0974}
[2011/12/25 09:20:45 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{F2E13E23-F01D-4312-8F17-7B02634F554F}
[2011/12/24 21:20:15 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{1223954E-CBE4-4526-B7E0-D323C96F8B10}
[2011/12/24 21:20:03 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{F2254F10-708D-494C-876E-D5DC8AC97C11}
[2011/12/24 09:19:34 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{EA27122B-F05D-431C-98FB-5D64254868F6}
[2011/12/24 09:19:22 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{63BCE393-4E7B-4997-978D-7B517D5663B8}
[2011/12/23 21:18:08 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{EE4B5B54-E98F-4F0A-9236-18B56A16CB1D}
[2011/12/23 21:17:56 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{82A67D83-111D-467F-B002-D800F4699964}
[2011/12/23 09:17:36 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{A66E3F85-8EC5-4E84-BC36-0AF6C86217BA}
[2011/12/23 09:17:21 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{BB28712B-AC11-4B9E-B0BB-43529DC21DCC}
[2011/12/22 21:16:51 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{0FA5EFFA-2FF9-41CD-9D9D-35FF3D5E3FE4}
[2011/12/22 21:15:50 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{BB1DBB41-818C-4CBB-81C0-FC6184289D02}
[2011/12/22 09:15:32 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{86760824-221C-4F45-A08C-7843C39A2B47}
[2011/12/22 09:15:20 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{F8BEE78F-99BC-4DD0-BF3B-A6AE3BC3CAAF}
[2011/12/21 20:49:02 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{3A9B529A-14E2-4234-AB1A-85D083C97B8B}
[2011/12/21 20:48:47 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{669D9C76-DD99-4B40-931C-B0C5B194E266}
[2011/12/21 08:48:32 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{6BCD8E35-A552-4180-87D4-7C5C44E6BA38}
[2011/12/21 08:48:19 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{1D5462B4-02EE-46EC-BAA9-90F7AAC7016B}
[2011/12/20 20:49:07 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{9675D8B7-BA69-4213-93EC-6E1F8E29D38D}
[2011/12/20 01:49:16 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011/12/20 01:49:12 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\FixItCenter
[2011/12/20 01:30:39 | 000,000,000 | ---D | C] -- C:\Windows\MATS
[2011/12/20 01:30:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Fix it Center
[2011/12/20 01:26:17 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\ElevatedDiagnostics
[2011/12/20 01:02:39 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Roaming\Skype
[2011/12/20 01:02:05 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2011/12/20 01:01:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2011/12/19 23:54:33 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{928D45DF-CAB4-4C50-A32B-1CE7C7C79366}
[2011/12/19 23:54:09 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{5D59A183-7310-4B2F-B187-DF91047CC61A}
[2011/12/19 10:23:00 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{0A33F1DB-4110-4F03-90ED-E889C65C5216}
[2011/12/18 22:22:40 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{730DFF00-F1E7-4A3E-AE63-F5B8C1842307}
[2011/12/18 22:22:28 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{53171169-EF9D-45CA-86E0-274DFB268DB0}
[2011/12/18 02:34:38 | 000,000,000 | ---D | C] -- C:\Users\Ryno\Desktop\blogger pics
[2011/12/17 23:43:57 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{0B1C91EE-2388-4345-9787-EDDF59E5FAFA}
[2011/12/17 23:43:52 | 000,000,000 | ---D | C] -- C:\Users\Ryno\AppData\Local\{6EB41999-6F97-4904-A9CC-26709BFA18CA}
[2009/12/22 03:20:15 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Ryno\AppData\Roaming\pcouffin.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/01/16 16:48:14 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/01/16 16:48:14 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/01/16 15:39:54 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Ryno\Desktop\OTL.exe
[2012/01/16 15:12:20 | 000,016,690 | ---- | M] () -- C:\Users\Ryno\AppData\Roaming\wklnhst.dat
[2012/01/16 15:12:08 | 000,220,422 | ---- | M] () -- C:\Users\Ryno\Documents\Scan0001.pdf
[2012/01/16 15:03:54 | 000,382,744 | ---- | M] () -- C:\Users\Ryno\Documents\Double Tree Invoice.pdf
[2012/01/16 15:00:57 | 000,587,456 | ---- | M] () -- C:\Users\Ryno\Documents\PRIMROSE.pdf
[2012/01/16 10:37:08 | 000,609,640 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/01/16 10:37:08 | 000,108,858 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/01/16 10:33:36 | 000,001,666 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/01/15 17:53:00 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/01/15 17:44:02 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-312680850-3850484109-1182297021-1000UA.job
[2012/01/15 14:53:00 | 000,000,878 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/01/14 23:44:01 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-312680850-3850484109-1182297021-1000Core.job
[2012/01/13 11:59:21 | 000,002,117 | ---- | M] () -- C:\Users\Public\Desktop\HP Officejet 6500 E710n-z.lnk
[2012/01/13 11:59:21 | 000,001,085 | ---- | M] () -- C:\Users\Public\Desktop\Shop for Supplies - HP Officejet 6500 E710n-z.lnk
[2012/01/13 11:59:21 | 000,001,080 | ---- | M] () -- C:\Users\Public\Desktop\HP Officejet 6500 E710n-z Scan.lnk
[2012/01/13 11:59:20 | 000,001,795 | ---- | M] () -- C:\Users\Public\Desktop\HP ePrintCenter - HP Officejet 6500 E710n-z.lnk
[2012/01/13 10:46:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/01/13 08:40:19 | 000,002,140 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012/01/08 17:36:26 | 000,240,128 | ---- | M] () -- C:\Users\Ryno\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/12/26 15:05:03 | 000,001,899 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2011/12/26 15:05:03 | 000,001,395 | ---- | M] () -- C:\Users\Ryno\Desktop\DivX Movies.lnk
[2011/12/26 15:03:52 | 000,000,919 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk
[2011/12/25 20:33:43 | 000,007,052 | ---- | M] () -- C:\Users\Ryno\AppData\Local\d3d9caps.dat
[2011/12/20 01:30:45 | 000,000,844 | ---- | M] () -- C:\Users\Public\Desktop\Microsoft Fix it Center.lnk
[2011/12/17 21:56:51 | 000,330,984 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/01/16 15:12:07 | 000,220,422 | ---- | C] () -- C:\Users\Ryno\Documents\Scan0001.pdf
[2012/01/16 15:03:53 | 000,382,744 | ---- | C] () -- C:\Users\Ryno\Documents\Double Tree Invoice.pdf
[2012/01/16 15:00:55 | 000,587,456 | ---- | C] () -- C:\Users\Ryno\Documents\PRIMROSE.pdf
[2012/01/16 10:33:36 | 000,001,666 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/01/13 12:04:48 | 000,001,243 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Default Manager.lnk
[2012/01/13 12:01:10 | 000,000,767 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR Registration.lnk
[2012/01/13 11:59:21 | 000,002,117 | ---- | C] () -- C:\Users\Public\Desktop\HP Officejet 6500 E710n-z.lnk
[2012/01/13 11:59:21 | 000,001,085 | ---- | C] () -- C:\Users\Public\Desktop\Shop for Supplies - HP Officejet 6500 E710n-z.lnk
[2012/01/13 11:59:21 | 000,001,080 | ---- | C] () -- C:\Users\Public\Desktop\HP Officejet 6500 E710n-z Scan.lnk
[2012/01/13 11:59:20 | 000,001,795 | ---- | C] () -- C:\Users\Public\Desktop\HP ePrintCenter - HP Officejet 6500 E710n-z.lnk
[2011/12/26 15:03:52 | 000,000,919 | ---- | C] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk
[2011/12/20 01:30:45 | 000,000,856 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Fix it Center.lnk
[2011/12/20 01:30:45 | 000,000,844 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft Fix it Center.lnk
[2011/07/28 01:44:03 | 000,000,148 | ---- | C] () -- C:\Windows\OPHD.INI
[2010/05/08 04:48:48 | 000,000,736 | ---- | C] () -- C:\Windows\SamsungMaster.INI
[2010/05/08 04:32:49 | 000,765,952 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010/05/08 04:32:49 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010/05/08 04:32:49 | 000,008,704 | ---- | C] () -- C:\Windows\System32\vidccleaner.exe
[2010/01/11 02:04:43 | 000,163,408 | ---- | C] () -- C:\Windows\System32\drivers\tmcomm.sys
[2010/01/11 02:04:43 | 000,059,472 | ---- | C] () -- C:\Windows\System32\drivers\tmactmon.sys
[2010/01/10 02:00:57 | 000,000,110 | ---- | C] () -- C:\Windows\{7E7D778E-121D-4BBD-BA29-FAA81B9FBD8C}_WiseFW.ini
[2009/12/22 03:23:29 | 000,001,044 | ---- | C] () -- C:\Users\Ryno\AppData\Roaming\vso_ts_preview.xml
[2009/12/22 03:20:15 | 000,087,608 | ---- | C] () -- C:\Users\Ryno\AppData\Roaming\inst.exe
[2009/12/22 03:20:15 | 000,007,887 | ---- | C] () -- C:\Users\Ryno\AppData\Roaming\pcouffin.cat
[2009/12/22 03:20:15 | 000,001,144 | ---- | C] () -- C:\Users\Ryno\AppData\Roaming\pcouffin.inf
[2009/12/22 03:00:36 | 002,255,360 | ---- | C] () -- C:\Windows\System32\libavcodec.dll
[2009/12/22 03:00:36 | 000,395,776 | ---- | C] () -- C:\Windows\System32\libmplayer.dll
[2009/12/22 03:00:36 | 000,262,144 | ---- | C] () -- C:\Windows\System32\TomsMoComp_ff.dll
[2009/12/22 03:00:36 | 000,112,640 | ---- | C] () -- C:\Windows\System32\libmpeg2_ff.dll
[2009/10/20 21:23:54 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/10/20 21:23:54 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009/08/02 21:37:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009/08/02 21:37:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe
[2009/04/19 07:15:30 | 000,012,307 | ---- | C] () -- C:\Users\Ryno\AppData\Roaming\UserTile.png
[2009/03/28 18:35:38 | 000,180,224 | ---- | C] () -- C:\Windows\System32\WinService.exe
[2008/09/24 02:19:35 | 000,016,690 | ---- | C] () -- C:\Users\Ryno\AppData\Roaming\wklnhst.dat
[2008/09/22 21:12:08 | 000,007,052 | ---- | C] () -- C:\Users\Ryno\AppData\Local\d3d9caps.dat
[2008/09/22 04:05:39 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/09/16 03:49:45 | 000,000,628 | ---- | C] () -- C:\Windows\System32\PCI_VEN_1102&DEV_FF05&SUBSYS_00001102.ini
[2008/09/16 03:49:44 | 000,101,376 | ---- | C] () -- C:\Windows\System32\APOMngr.dll
[2008/09/16 03:49:44 | 000,066,560 | ---- | C] () -- C:\Windows\System32\CmdRtr.dll
[2008/09/16 03:48:48 | 000,240,128 | ---- | C] () -- C:\Users\Ryno\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/09/12 10:47:26 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2008/09/12 10:47:26 | 000,168,883 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2008/09/12 10:47:26 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2008/09/12 10:47:26 | 000,090,112 | ---- | C] () -- C:\Windows\System32\atibrtmon.exe
[2008/09/12 02:53:12 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2008/09/11 19:23:16 | 000,000,074 | RHS- | C] () -- C:\Windows\CT4CET.bin
[2008/09/11 19:17:44 | 000,000,859 | ---- | C] () -- C:\Windows\{0240BDFB-2995-4A3F-8C96-18D41282B716}_WiseFW.ini
[2008/09/11 19:17:04 | 000,002,140 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2008/09/11 19:13:59 | 000,055,808 | ---- | C] () -- C:\Windows\System32\bcmwlrmt.dll
[2008/09/11 19:13:58 | 000,024,064 | ---- | C] () -- C:\Windows\System32\WLTRYSVC.EXE
[2007/04/15 11:24:16 | 000,023,752 | ---- | C] () -- C:\Windows\System32\providers.bin
[2006/11/02 05:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 05:47:37 | 000,330,984 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 05:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 03:33:01 | 000,609,640 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 03:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 03:33:01 | 000,108,858 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 03:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 03:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 01:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 01:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 00:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 00:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2004/07/02 05:42:38 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxcevs.dll
[2001/11/13 21:56:00 | 001,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 144 bytes -> C:\ProgramData\TEMP:BEB71B81

< End of report >

Again Thank you
  • 0

Advertisements

#2
the_mckees
Posted 18 January 2012 - 08:23 PM

the_mckees

    Member

  • Topic Starter
  • Member
  • PipPip
  • 23 posts
Have I done something wrong?
  • 0

#3
the_mckees
Posted 21 January 2012 - 04:16 PM

the_mckees

    Member

  • Topic Starter
  • Member
  • PipPip
  • 23 posts
Is anybody able to help?
  • 0

#4
Gammo
Posted 25 January 2012 - 12:01 PM

Gammo

    Member 2k

  • Malware Removal
  • 2,299 posts
Hello and welcome to Geekstogo!

We apologize for the delay in responding to your request for help.
If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

Please include a clear description of the problems you're having, along with any steps you may have performed so far.

Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

If you haven't done so yet, please go to Malware and Spyware Cleaning Guide and follow the steps instructed there. If you have already done this, we still need a new log to see what has changed since you originally posted your problem.

We need to create an OTL Report
Download OTL to your Desktop
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • Check the box that says Scan All Users.
  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. I suggest you do this and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.
  • 0

#5
the_mckees
Posted 25 January 2012 - 10:21 PM

the_mckees

    Member

  • Topic Starter
  • Member
  • PipPip
  • 23 posts
I am currently away on a training course and will not be able to add the file till i get back home. I am sending this from my good laptop. I will try get my wife to do it tonight or over the next few days. If not are you able to wait a couple weeks till i am back home.

Regards

Ryan Mckee
  • 0

#6
Gammo
Posted 26 January 2012 - 07:35 AM

Gammo

    Member 2k

  • Malware Removal
  • 2,299 posts
I'm gonna close this topic and you can start a new one in a couple of weeks when you're back home. :)

Someone (might be me again) will help you then in your new topic.
  • 0

#7
the_mckees
Posted 26 January 2012 - 02:02 PM

the_mckees

    Member

  • Topic Starter
  • Member
  • PipPip
  • 23 posts
Thanks heaps for that
  • 0

#8
Gammo
Posted 07 April 2012 - 08:05 AM

Gammo

    Member 2k

  • Malware Removal
  • 2,299 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP