OTL LOG
OTL logfile created on: 1/27/2012 5:22:58 AM - Run 3 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\thumb\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 2.00 Gb Total Physical Memory | 1.35 Gb Available Physical Memory | 67.38% Memory free 3.85 Gb Paging File | 3.37 Gb Available in Paging File | 87.61% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files Drive C: | 149.05 Gb Total Space | 18.41 Gb Free Space | 12.35% Space Free | Partition Type: NTFS Computer Name: THUMBZ | User Name: thumb | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012/01/22 23:50:07 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\thumb\Desktop\OTL.exe PRC - [2011/12/30 16:59:44 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2011/12/24 17:50:18 | 000,652,872 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2009/09/29 12:03:46 | 000,735,960 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2009/09/29 12:02:52 | 002,054,360 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2008/04/29 12:25:50 | 000,671,863 | ---- | M] (E-MU Systems) -- C:\Program Files\Creative Professional\E-MU PatchMix DSP\EmuPMixDSP.exe PRC - [2008/04/14 04:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008/03/20 14:35:04 | 000,023,040 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\system32\CtHelper.exe PRC - [2007/12/10 23:56:00 | 000,709,632 | ---- | M] (Softshape Development) -- C:\Program Files\Chameleon Clock\ChamClock.exe PRC - [2007/05/21 09:51:10 | 000,135,233 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe PRC - [2007/05/21 09:50:56 | 000,065,605 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe PRC - [2007/05/15 08:53:12 | 000,020,543 | ---- | M] (Apache Software Foundation) -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011/12/30 16:59:44 | 002,124,760 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2007/05/15 08:53:12 | 000,876,544 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libeay32.dll MOD - [2007/05/15 08:53:12 | 000,159,744 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\ssleay32.dll MOD - [2007/05/15 08:53:12 | 000,024,691 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_auth.so MOD - [1996/06/11 00:01:00 | 000,014,336 | ---- | M] () -- C:\Program Files\Chameleon Clock\DelphiMM.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (swwd) SRV - File not found [Auto | Stopped] -- -- (SQLAgent$LG_LP2) SRV - File not found [Auto | Stopped] -- -- (mbackmonitor) SRV - File not found [Auto | Stopped] -- -- (kservice) SRV - File not found [Auto | Stopped] -- -- (EMSCR) SRV - File not found [Auto | Stopped] -- -- (datasvr2) SRV - File not found [Auto | Stopped] -- -- (cxusb) SRV - File not found [Auto | Stopped] -- -- (BrUsbSer) SRV - File not found [Auto | Stopped] -- -- (appnnode) SRV - File not found [Auto | Stopped] -- -- (AlKernel) SRV - File not found [Auto | Stopped] -- -- (aiclient) SRV - [2011/12/24 17:50:18 | 000,652,872 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2010/02/19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009/09/29 12:11:10 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv) SRV - [2009/09/29 12:03:46 | 000,735,960 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn) SRV - [2007/05/21 09:51:10 | 000,135,233 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe -- (nSvcIp) SRV - [2007/05/21 09:50:56 | 000,065,605 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe -- (nSvcLog) SRV - [2007/05/15 08:53:12 | 000,020,543 | ---- | M] (Apache Software Foundation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe -- (ForcewareWebInterface) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011/12/10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector) DRV - [2010/10/28 14:26:46 | 000,033,792 | ---- | M] (Novation DMS Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nvnusbaudio.sys -- (NvnUsbAudio) DRV - [2010/09/02 16:49:08 | 000,013,312 | ---- | M] (June Fabrics Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pneteth.sys -- (pneteth) DRV - [2010/08/25 01:26:39 | 000,643,072 | ---- | M] () [Kernel | Boot | Running] -- C:\windows\System32\Drivers\sptd.sys -- (sptd) DRV - [2010/06/23 17:07:06 | 000,100,736 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\windows\System32\drivers\nvatabus.sys -- (nvatabus) DRV - [2010/06/14 08:32:54 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2010/04/27 03:25:16 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2010/04/27 03:25:16 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM) DRV - [2010/04/27 03:25:16 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) DRV - [2010/03/18 10:02:08 | 000,037,328 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt) DRV - [2010/03/18 10:01:52 | 000,038,864 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt) DRV - [2010/03/18 10:01:12 | 000,010,448 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE) DRV - [2009/12/01 09:51:24 | 000,031,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\androidusb.sys -- (androidusb) DRV - [2009/10/16 12:10:10 | 000,007,168 | ---- | M] (Novation Digital Music Systems Limited) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\automap.sys -- (automap) DRV - [2009/09/29 12:05:54 | 000,096,408 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir) DRV - [2009/09/29 12:02:58 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2009/09/29 11:56:32 | 000,116,008 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2009/03/18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2008/03/20 16:55:16 | 000,802,840 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ha10kx2k.sys -- (ha10kx2k) DRV - [2008/03/20 16:54:42 | 000,095,768 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\emupia2k.sys -- (emupia) DRV - [2008/03/20 16:52:50 | 000,159,256 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k) DRV - [2008/03/20 16:52:22 | 000,014,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctprxy2k.sys -- (ctprxy2k) DRV - [2008/03/20 16:51:56 | 000,129,560 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv) DRV - [2008/03/20 16:49:30 | 000,524,824 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV - [2008/03/20 16:48:56 | 000,511,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctac32k.sys -- (ctac32k) DRV - [2008/03/20 16:40:38 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\windows\System32\drivers\CTEXFIFX.SYS -- (CTEXFIFX.SYS) DRV - [2008/03/20 16:40:38 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTEXFIFX.sys -- (CTEXFIFX) DRV - [2008/03/20 16:38:06 | 000,134,168 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\windows\System32\drivers\CTEDSPIO.SYS -- (CTEDSPIO.SYS) DRV - [2008/03/20 16:38:06 | 000,134,168 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTEDSPIO.sys -- (CTEDSPIO) DRV - [2008/03/20 16:37:36 | 000,309,784 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\windows\System32\drivers\CTEDSPSY.SYS -- (CTEDSPSY.SYS) DRV - [2008/03/20 16:37:36 | 000,309,784 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTEDSPSY.sys -- (CTEDSPSY) DRV - [2008/03/20 16:37:10 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\windows\System32\drivers\CTHWIUT.SYS -- (CTHWIUT.SYS) DRV - [2008/03/20 16:37:10 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTHWIUT.sys -- (CTHWIUT) DRV - [2008/03/20 16:36:44 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\windows\System32\drivers\CT20XUT.SYS -- (CT20XUT.SYS) DRV - [2008/03/20 16:36:44 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CT20XUT.sys -- (CT20XUT) DRV - [2008/03/20 16:36:14 | 000,099,352 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\windows\System32\drivers\CTERFXFX.SYS -- (CTERFXFX.SYS) DRV - [2008/03/20 16:36:14 | 000,099,352 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTERFXFX.sys -- (CTERFXFX) DRV - [2008/03/20 16:32:36 | 000,259,096 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\windows\System32\drivers\CTEDSPFX.SYS -- (CTEDSPFX.SYS) DRV - [2008/03/20 16:32:36 | 000,259,096 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTEDSPFX.sys -- (CTEDSPFX) DRV - [2008/03/20 16:26:30 | 000,163,352 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\windows\System32\drivers\CTEAPSFX.SYS -- (CTEAPSFX.SYS) DRV - [2008/03/20 16:26:30 | 000,163,352 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTEAPSFX.sys -- (CTEAPSFX) DRV - [2008/03/20 16:25:44 | 000,534,040 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\windows\System32\drivers\CTSBLFX.SYS -- (CTSBLFX.SYS) DRV - [2008/03/20 16:25:44 | 000,534,040 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTSBLFX.sys -- (CTSBLFX) DRV - [2008/03/20 16:23:44 | 000,528,920 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\windows\System32\drivers\CTAUDFX.SYS -- (CTAUDFX.SYS) DRV - [2008/03/20 16:23:44 | 000,528,920 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CTAUDFX.sys -- (CTAUDFX) DRV - [2008/03/20 16:23:08 | 000,098,328 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\windows\System32\drivers\COMMONFX.SYS -- (COMMONFX.SYS) DRV - [2008/03/20 16:23:08 | 000,098,328 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COMMONFX.sys -- (COMMONFX) DRV - [2007/12/25 16:08:36 | 000,014,336 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Amusbprt.sys -- (Amusbprt) DRV - [2007/05/21 03:43:12 | 000,019,968 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus) DRV - [2007/05/21 03:43:08 | 000,046,080 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD) DRV - [2007/01/24 16:46:48 | 000,008,704 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\Amfilter.sys -- (Amfilter) DRV - [2006/11/02 06:00:08 | 000,039,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\winusb.sys -- (WinUSB) DRV - [2006/10/18 09:31:38 | 000,105,472 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\windows\system32\DRIVERS\nvata.sys -- (nvata) DRV - [2005/12/18 13:18:56 | 000,033,792 | ---- | M] (Team H2O) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\cledx.sys -- (CLEDX) DRV - [2004/08/12 11:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor) DRV - [2003/12/27 19:42:12 | 000,137,216 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\windows\system32\DRIVERS\d344bus.sys -- (d344bus) DRV - [2003/12/27 01:38:10 | 000,005,248 | ---- | M] ( ) [Kernel | Boot | Running] -- C:\windows\System32\Drivers\d344prt.sys -- (d344prt) DRV - [2001/11/27 16:46:10 | 000,010,880 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DFUUsb.sys -- (DfuUsb) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.facebook.com/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: [email protected]:1.0 FF - prefs.js..extensions.enabledItems: {B17C1C5A-04B1-11DB-9804-B622A1EF5492}:1.2.1 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: [email protected]:3.2.1.3 FF - prefs.js..extensions.enabledItems: [email protected]:0.6.2 FF - prefs.js..extensions.enabledItems: {113c2360-15a3-11de-8c30-0800200c9a66}:0.9 FF - prefs.js..keyword.URL: "chrome://browser-region/locale/region.properties" FF - prefs.js..network.proxy.http: "" FF - prefs.js..network.proxy.http_port: "" FF - prefs.js..network.proxy.type: "" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@veetle.com/vbp;version=0.9.17: C:\Program Files\Veetle\VLCBroadcast\npvbp.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\thumb\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\thumb\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/30 16:59:45 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/01/24 01:31:40 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010/08/25 01:11:55 | 000,000,000 | ---D | M] [2010/08/25 00:40:41 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\thumb\Application Data\Mozilla\Extensions [2011/12/23 15:03:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\thumb\Application Data\Mozilla\Firefox\Profiles\c9tc4cg6.default\extensions [2010/08/25 14:34:55 | 000,000,000 | ---D | M] ("Vfox3") -- C:\Documents and Settings\thumb\Application Data\Mozilla\Firefox\Profiles\c9tc4cg6.default\extensions\{113c2360-15a3-11de-8c30-0800200c9a66} [2010/08/29 14:02:49 | 000,000,000 | ---D | M] (Password Exporter) -- C:\Documents and Settings\thumb\Application Data\Mozilla\Firefox\Profiles\c9tc4cg6.default\extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492} [2010/08/25 14:33:22 | 000,000,000 | ---D | M] ("Strata40") -- C:\Documents and Settings\thumb\Application Data\Mozilla\Firefox\Profiles\c9tc4cg6.default\extensions\[email protected] [2010/08/25 14:33:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\thumb\Application Data\Mozilla\Firefox\Profiles\c9tc4cg6.default\extensions\[email protected]\chrome\mozapps\extensions [2011/11/10 18:09:27 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions () (No name found) -- C:\DOCUMENTS AND SETTINGS\THUMB\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\C9TC4CG6.DEFAULT\EXTENSIONS\[email protected] [2011/12/30 16:59:45 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011/06/17 03:39:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010/08/26 14:42:09 | 000,075,208 | ---- | M] (Foxit Software Company) -- C:\Program Files\mozilla firefox\plugins\npFoxitReaderPlugin.dll [2011/08/31 11:38:58 | 000,082,944 | ---- | M] (vShare.tv ) -- C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll [2011/10/02 11:26:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2011/11/10 18:09:14 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml O1 HOSTS File: ([2012/01/27 05:18:16 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (GetRight IE Helper) - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll (Headlight Software, Inc.) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [CTHelper] C:\windows\System32\CtHelper.exe (Creative Technology Ltd) O4 - HKLM..\Run: [CTxfiHlp] C:\windows\System32\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\windows\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co.,Ltd.) O4 - HKCU..\Run: [HomeAlarm] C:\Program Files\Chameleon Clock\ChamClock.exe (Softshape Development) O4 - HKCU..\Run: [SetDefaultMIDI] C:\windows\System32\MIDIDEF.EXE (Creative Technology Ltd) O4 - HKCU..\Run: [Xvid] C:\Program Files\Xvid\CheckUpdate.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 01 00 00 00 [binary data] O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 01 00 00 00 [binary data] O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoComputersNearMe = 01 00 00 00 [binary data] O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyDocs = 01 00 00 00 [binary data] O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 01 00 00 00 [binary data] O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetworkConnections = 01 00 00 00 [binary data] O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Download with GetRight Pro - C:\Program Files\GetRight\GRDownload.htm () O8 - Extra context menu item: Open with GetRight Pro Browser - C:\Program Files\GetRight\GRBrowse.htm () O9 - Extra Button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Documents and Settings\thumb\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\thumb\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010/08/25 00:23:10 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/01/27 05:18:15 | 000,000,000 | ---D | C] -- C:\_OTL [2012/01/22 23:49:54 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\thumb\Desktop\OTL.exe [2012/01/22 13:47:51 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2012/01/22 03:29:22 | 000,000,000 | ---D | C] -- C:\Program Files\xerox [2012/01/22 03:29:21 | 000,000,000 | ---D | C] -- C:\windows\System32\xircom [2012/01/22 03:29:19 | 000,000,000 | ---D | C] -- C:\Program Files\microsoft frontpage [2012/01/22 03:04:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Application Data\Adobe [2012/01/22 03:03:08 | 000,518,144 | ---- | C] (SteelWerX) -- C:\windows\SWREG.exe [2012/01/22 03:03:08 | 000,406,528 | ---- | C] (SteelWerX) -- C:\windows\SWSC.exe [2012/01/22 03:03:08 | 000,212,480 | ---- | C] (SteelWerX) -- C:\windows\SWXCACLS.exe [2012/01/22 03:03:08 | 000,060,416 | ---- | C] (NirSoft) -- C:\windows\NIRCMD.exe [2012/01/22 03:02:58 | 000,000,000 | ---D | C] -- C:\windows\ERDNT [2012/01/22 02:24:13 | 004,713,472 | ---- | C] (AVAST Software) -- C:\Documents and Settings\thumb\Desktop\aswMBR.exe [2012/01/22 02:18:32 | 000,000,000 | ---D | C] -- C:\Qoobox [2012/01/22 02:18:29 | 000,000,000 | R--D | C] -- C:\Documents and Settings\thumb\Start Menu\Programs\Administrative Tools [2012/01/22 02:07:06 | 004,388,509 | R--- | C] (Swearware) -- C:\Documents and Settings\thumb\Desktop\ComboFix.exe [2012/01/21 19:59:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\thumb\Application Data\Malwarebytes [2012/01/21 19:59:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware [2012/01/21 19:59:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2012/01/21 19:59:12 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\windows\System32\drivers\mbam.sys [2012/01/21 19:59:12 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2012/01/21 17:36:49 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\thumb\Local Settings\Application Data\6bff5816 [2012/01/10 02:15:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Xvid [2012/01/10 02:15:32 | 000,000,000 | ---D | C] -- C:\Program Files\Xvid [2012/01/10 02:12:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\ffdshow [2012/01/10 02:12:28 | 000,000,000 | ---D | C] -- C:\Program Files\ffdshow [2012/01/08 19:32:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2012/01/08 16:42:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\NVIDIA [2012/01/08 16:39:10 | 000,000,000 | ---D | C] -- C:\windows\System32\WindowsPowerShell [2012/01/08 16:39:05 | 000,000,000 | ---D | C] -- C:\windows\$968930Uinstall_KB968930$ [2012/01/08 16:35:34 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Desktop Search [2012/01/08 16:35:34 | 000,000,000 | ---D | C] -- C:\windows\System32\GroupPolicy [2012/01/03 01:46:54 | 000,000,000 | ---D | C] -- C:\samples [2011/12/30 16:22:14 | 000,000,000 | ---D | C] -- C:\Program Files\FLAC [2011/12/30 16:22:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\FLAC [2010/08/25 02:04:04 | 000,137,216 | ---- | C] ( ) -- C:\windows\System32\drivers\d344bus.sys [2010/08/25 02:04:04 | 000,005,248 | ---- | C] ( ) -- C:\windows\System32\drivers\d344prt.sys [2008/03/20 14:35:52 | 000,034,816 | ---- | C] ( ) -- C:\windows\System32\a3d.dll [2008/03/20 14:19:40 | 000,012,800 | ---- | C] ( ) -- C:\windows\System32\killapps.exe [1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ] [1 C:\Documents and Settings\thumb\*.tmp files -> C:\Documents and Settings\thumb\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/01/27 05:19:24 | 000,002,048 | --S- | M] () -- C:\windows\bootstat.dat [2012/01/27 05:18:35 | 000,011,564 | ---- | M] () -- C:\windows\System32\DVCState-{00000001-00000000-00000006-00001102-00000008-40021102}.rfx [2012/01/27 05:18:35 | 000,001,104 | ---- | M] () -- C:\windows\System32\BMXCtrlState-{00000001-00000000-00000006-00001102-00000008-40021102}.rfx [2012/01/27 05:18:35 | 000,001,104 | ---- | M] () -- C:\windows\System32\BMXBkpCtrlState-{00000001-00000000-00000006-00001102-00000008-40021102}.rfx [2012/01/27 05:18:35 | 000,000,064 | ---- | M] () -- C:\windows\System32\BMXStateBkp-{00000001-00000000-00000006-00001102-00000008-40021102}.rfx [2012/01/27 05:18:35 | 000,000,064 | ---- | M] () -- C:\windows\System32\BMXState-{00000001-00000000-00000006-00001102-00000008-40021102}.rfx [2012/01/27 05:18:16 | 000,000,098 | ---- | M] () -- C:\windows\System32\drivers\etc\Hosts [2012/01/27 02:08:05 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\thumb\Application Data\Microsoft\Internet Explorer\Quick Launch\Skype.lnk [2012/01/25 03:04:13 | 000,037,376 | ---- | M] () -- C:\Documents and Settings\thumb\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012/01/22 23:50:07 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\thumb\Desktop\OTL.exe [2012/01/22 02:55:27 | 000,000,000 | -HS- | M] () -- C:\windows\System32\dds_log_trash.cmd [2012/01/22 02:24:19 | 004,713,472 | ---- | M] (AVAST Software) -- C:\Documents and Settings\thumb\Desktop\aswMBR.exe [2012/01/22 02:07:38 | 004,388,509 | R--- | M] (Swearware) -- C:\Documents and Settings\thumb\Desktop\ComboFix.exe [2012/01/21 21:24:57 | 003,587,696 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT [2012/01/21 20:30:06 | 000,000,021 | ---- | M] () -- C:\windows\tpcsd [2012/01/21 19:59:14 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk [2012/01/21 18:09:12 | 000,002,206 | ---- | M] () -- C:\windows\System32\wpa.dbl [2012/01/15 23:23:21 | 000,028,906 | ---- | M] () -- C:\Parks and Recreation.1.torrent [2012/01/11 02:31:45 | 000,135,256 | ---- | M] () -- C:\windows\System32\nvdrsdb0.bin [2012/01/11 02:31:45 | 000,000,001 | ---- | M] () -- C:\windows\System32\nvdrssel.bin [2012/01/10 02:09:57 | 000,135,252 | ---- | M] () -- C:\windows\System32\nvdrsdb1.bin [2012/01/08 17:15:27 | 000,525,866 | ---- | M] () -- C:\windows\System32\perfh009.dat [2012/01/08 17:15:27 | 000,095,722 | ---- | M] () -- C:\windows\System32\perfc009.dat [2012/01/08 16:40:08 | 000,000,575 | ---- | M] () -- C:\windows\imsins.BAK [2012/01/05 02:51:59 | 000,067,906 | ---- | M] () -- C:\av-61.gif [2011/12/30 23:24:19 | 000,000,000 | -H-- | M] () -- C:\descript.ion [1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ] [1 C:\Documents and Settings\thumb\*.tmp files -> C:\Documents and Settings\thumb\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/01/22 03:03:08 | 000,256,000 | ---- | C] () -- C:\windows\PEV.exe [2012/01/22 03:03:08 | 000,208,896 | ---- | C] () -- C:\windows\MBR.exe [2012/01/22 03:03:08 | 000,098,816 | ---- | C] () -- C:\windows\sed.exe [2012/01/22 03:03:08 | 000,080,412 | ---- | C] () -- C:\windows\grep.exe [2012/01/22 03:03:08 | 000,068,096 | ---- | C] () -- C:\windows\zip.exe [2012/01/21 20:30:06 | 000,000,021 | ---- | C] () -- C:\windows\tpcsd [2012/01/21 20:10:07 | 000,000,000 | -HS- | C] () -- C:\windows\System32\dds_log_trash.cmd [2012/01/21 19:59:14 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk [2012/01/17 01:15:23 | 000,028,906 | ---- | C] () -- C:\Parks and Recreation.1.torrent [2012/01/05 02:51:57 | 000,067,906 | ---- | C] () -- C:\av-61.gif [2011/12/15 05:39:42 | 000,042,392 | ---- | C] () -- C:\windows\System32\xfcodec.dll [2011/08/20 10:52:44 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\thumb\Application Data\Adobe IllExport Filter CS5 Prefs [2011/05/06 15:35:30 | 004,369,408 | ---- | C] () -- C:\windows\System32\pdftk.exe [2011/05/06 15:35:30 | 001,503,232 | ---- | C] () -- C:\windows\System32\ptj.exe [2011/05/06 15:35:30 | 001,103,360 | ---- | C] () -- C:\windows\System32\cidfont.dll [2011/04/23 16:49:08 | 000,110,592 | ---- | C] () -- C:\windows\System32\FsUsbExDevice.Dll [2011/04/23 16:49:08 | 000,036,608 | ---- | C] () -- C:\windows\System32\FsUsbExDisk.Sys [2011/03/27 23:32:42 | 000,179,713 | ---- | C] () -- C:\windows\LOOP.EXE [2011/02/02 00:07:45 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\thumb\Application Data\Adobe BMP Format CS5 Prefs [2011/01/29 02:21:29 | 000,000,062 | ---- | C] () -- C:\Documents and Settings\thumb\Application Data\VoiceSFX.ini [2011/01/29 02:21:04 | 000,000,066 | ---- | C] () -- C:\windows\System32\MASHTWTY.SYS [2011/01/16 04:06:05 | 000,000,191 | ---- | C] () -- C:\windows\wcpfrep.ini [2010/10/15 21:24:55 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\thumb\Application Data\AVSDVDPlayer.m3u [2010/10/15 18:52:36 | 000,645,632 | ---- | C] () -- C:\windows\System32\xvidcore.dll [2010/10/15 18:52:36 | 000,240,640 | ---- | C] () -- C:\windows\System32\xvidvfw.dll [2010/09/18 15:26:29 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\thumb\Application Data\$_hpcst$.hpc [2010/09/16 11:42:02 | 000,000,034 | ---- | C] () -- C:\windows\System32\mnprxpd2c.bin [2010/09/05 22:19:09 | 000,037,376 | ---- | C] () -- C:\Documents and Settings\thumb\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/08/29 23:20:22 | 000,354,816 | ---- | C] () -- C:\windows\System32\psisdecd.dll [2010/08/26 15:18:28 | 002,494,464 | ---- | C] () -- C:\windows\AF_Osc.dat [2010/08/25 15:25:34 | 000,086,016 | ---- | C] () -- C:\windows\System32\SYNSOPOS.exe [2010/08/25 13:56:04 | 000,000,016 | ---- | C] () -- C:\windows\System32\msvcsv60.dll [2010/08/25 13:56:04 | 000,000,016 | ---- | C] () -- C:\windows\msocreg32.dat [2010/08/25 13:47:20 | 000,163,840 | ---- | C] () -- C:\windows\System32\ArtFfct.dll [2010/08/25 13:36:22 | 000,002,892 | ---- | C] () -- C:\windows\System32\audcon.sys [2010/08/25 13:36:08 | 000,000,045 | ---- | C] () -- C:\windows\System32\SYNSOPOS.exe.cfg [2010/08/25 02:13:01 | 000,004,161 | ---- | C] () -- C:\windows\ODBCINST.INI [2010/08/25 02:11:39 | 003,587,696 | ---- | C] () -- C:\windows\System32\FNTCACHE.DAT [2010/08/25 01:26:39 | 000,096,384 | ---- | C] () -- C:\windows\System32\drivers\sptd3821.sys [2010/08/25 01:23:41 | 000,335,872 | ---- | C] () -- C:\windows\System32\ldf252.dll [2010/08/25 01:05:21 | 000,001,542 | ---- | C] () -- C:\windows\WINCMD.INI [2010/08/25 01:04:35 | 000,002,560 | ---- | C] () -- C:\windows\CTXFIRES.DLL [2010/08/25 01:01:29 | 000,135,256 | ---- | C] () -- C:\windows\System32\nvdrsdb0.bin [2010/08/25 01:01:27 | 000,135,252 | ---- | C] () -- C:\windows\System32\nvdrsdb1.bin [2010/08/25 01:01:27 | 000,000,001 | ---- | C] () -- C:\windows\System32\nvdrssel.bin [2010/08/25 00:42:37 | 000,049,152 | R--- | C] () -- C:\windows\System32\ChCfg.exe [2010/08/25 00:40:37 | 000,000,664 | ---- | C] () -- C:\windows\System32\d3d9caps.dat [2010/08/25 00:40:28 | 000,000,000 | ---- | C] () -- C:\windows\nsreg.dat [2010/08/25 00:37:02 | 000,001,732 | R--- | C] () -- C:\windows\System32\drivers\nvphy.bin [2010/08/25 00:36:32 | 000,015,374 | ---- | C] () -- C:\windows\Ascd_log.ini [2010/08/25 00:36:23 | 000,005,810 | R--- | C] () -- C:\windows\System32\drivers\ASACPI.sys [2010/08/25 00:36:22 | 000,015,133 | ---- | C] () -- C:\windows\Ascd_tmp.ini [2010/08/25 00:36:11 | 000,012,536 | ---- | C] () -- C:\windows\System32\drivers\ASUSHWIO.SYS [2010/08/25 00:31:22 | 000,002,048 | --S- | C] () -- C:\windows\bootstat.dat [2010/08/25 00:20:10 | 000,021,640 | ---- | C] () -- C:\windows\System32\emptyregdb.dat [2010/08/25 00:19:33 | 000,052,836 | ---- | C] () -- C:\windows\System32\zlib1.dll [2010/08/25 00:19:25 | 000,162,304 | ---- | C] () -- C:\windows\System32\libpng13.dll [2010/08/08 05:52:53 | 000,000,202 | ---- | C] () -- C:\windows\msmmdx9.ini [2010/03/10 20:53:59 | 000,000,382 | ---- | C] () -- C:\windows\System32\Oeminfo.ini [2009/03/20 18:31:36 | 004,425,326 | ---- | C] () -- C:\windows\System32\libavcodec.dll [2009/03/19 22:36:48 | 000,557,469 | ---- | C] () -- C:\windows\System32\libmplayer.dll [2009/03/02 20:10:48 | 000,079,872 | ---- | C] () -- C:\windows\System32\ff_vfw.dll [2009/03/02 20:10:22 | 000,098,304 | ---- | C] () -- C:\windows\System32\ff_wmv9.dll [2009/03/02 17:19:36 | 000,183,296 | ---- | C] () -- C:\windows\System32\ff_samplerate.dll [2009/03/02 17:19:30 | 000,178,688 | ---- | C] () -- C:\windows\System32\ff_libmad.dll [2009/03/02 17:19:14 | 000,113,152 | ---- | C] () -- C:\windows\System32\ff_unrar.dll [2009/03/02 17:18:32 | 000,257,024 | ---- | C] () -- C:\windows\System32\ff_libdts.dll [2009/03/02 17:18:28 | 000,142,848 | ---- | C] () -- C:\windows\System32\ff_liba52.dll [2009/03/02 15:54:20 | 000,328,334 | ---- | C] () -- C:\windows\System32\ff_kernelDeint.dll [2009/03/02 15:45:14 | 000,146,098 | ---- | C] () -- C:\windows\System32\libmpeg2_ff.dll [2009/03/02 15:42:54 | 000,425,040 | ---- | C] () -- C:\windows\System32\TomsMoComp_ff.dll [2009/03/02 15:35:56 | 000,898,465 | ---- | C] () -- C:\windows\System32\ff_x264.dll [2009/01/10 23:17:32 | 000,163,840 | ---- | C] () -- C:\windows\System32\ts.dll [2009/01/10 23:16:56 | 000,148,480 | ---- | C] () -- C:\windows\System32\mkx.dll [2009/01/10 23:16:50 | 000,108,032 | ---- | C] () -- C:\windows\System32\avi.dll [2009/01/10 23:16:14 | 000,141,312 | ---- | C] () -- C:\windows\System32\mp4.dll [2009/01/10 23:16:04 | 000,335,872 | ---- | C] () -- C:\windows\System32\gdsmux.exe [2009/01/10 23:15:54 | 000,120,832 | ---- | C] () -- C:\windows\System32\ogm.dll [2009/01/10 23:15:44 | 000,159,744 | ---- | C] () -- C:\windows\System32\mmfinfo.dll [2009/01/10 23:15:36 | 000,103,424 | ---- | C] () -- C:\windows\System32\dsmux.exe [2009/01/10 23:15:32 | 000,102,400 | ---- | C] () -- C:\windows\System32\avss.dll [2009/01/10 23:15:28 | 000,246,784 | ---- | C] () -- C:\windows\System32\dxr.dll [2009/01/10 23:15:12 | 000,097,280 | ---- | C] () -- C:\windows\System32\avs.dll [2009/01/10 23:15:06 | 000,135,168 | ---- | C] () -- C:\windows\System32\mkv2vfr.exe [2009/01/10 23:14:08 | 000,079,360 | ---- | C] () -- C:\windows\System32\mkzlib.dll [2009/01/10 23:14:06 | 000,023,552 | ---- | C] () -- C:\windows\System32\mkunicode.dll [2008/07/09 09:05:24 | 000,020,480 | ---- | C] () -- C:\windows\System32\ac3config.exe [2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\windows\System32\structuredqueryschematrivial.bin [2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\windows\System32\structuredqueryschema.bin [2008/04/14 04:55:28 | 000,001,804 | ---- | C] () -- C:\windows\System32\Dcache.bin [2008/03/20 15:02:24 | 000,097,461 | ---- | C] () -- C:\windows\System32\instwdm.ini [2008/03/20 15:02:24 | 000,000,054 | ---- | C] () -- C:\windows\System32\ctzapxx.ini [2008/03/20 14:36:48 | 000,043,520 | ---- | C] () -- C:\windows\System32\CTBurst.dll [2008/03/20 14:35:06 | 000,041,472 | ---- | C] () -- C:\windows\System32\psconv.exe [2008/03/20 14:25:22 | 000,325,821 | ---- | C] () -- C:\windows\System32\ctdlang.dat [2008/03/20 14:25:22 | 000,046,273 | ---- | C] () -- C:\windows\System32\ctdnlstr.dat [2008/03/20 14:22:24 | 000,016,384 | ---- | C] () -- C:\windows\System32\regplib.exe [2008/03/20 14:21:58 | 000,149,838 | ---- | C] () -- C:\windows\System32\ctbas2w.dat [2008/03/20 14:20:12 | 000,274,587 | ---- | C] () -- C:\windows\System32\ctsbas2w.dat [2008/03/20 14:20:02 | 000,115,166 | ---- | C] () -- C:\windows\System32\CTBASICW.DAT [2008/03/20 14:20:00 | 000,241,084 | ---- | C] () -- C:\windows\System32\CTSBASW.DAT [2008/03/20 14:19:44 | 000,313,207 | ---- | C] () -- C:\windows\System32\ctstatic.dat [2008/03/20 14:19:44 | 000,053,932 | ---- | C] () -- C:\windows\System32\ctdaught.dat [2008/03/20 14:19:42 | 000,007,680 | ---- | C] () -- C:\windows\System32\enlocstr.exe [2007/10/25 16:26:10 | 000,005,632 | ---- | C] () -- C:\windows\System32\drivers\StarOpen.sys [2007/10/13 10:30:20 | 000,000,137 | ---- | C] () -- C:\windows\System32\Registration.ini [2006/12/31 06:57:08 | 000,004,569 | ---- | C] () -- C:\windows\System32\secupd.dat [2006/10/02 16:25:18 | 000,000,307 | ---- | C] () -- C:\windows\System32\kill.ini [2005/06/16 17:17:16 | 000,071,680 | ---- | C] () -- C:\windows\System32\ctmmactl.dll [2001/08/23 13:00:00 | 013,107,200 | ---- | C] () -- C:\windows\System32\oembios.bin [2001/08/23 13:00:00 | 000,673,088 | ---- | C] () -- C:\windows\System32\mlang.dat [2001/08/23 13:00:00 | 000,525,866 | ---- | C] () -- C:\windows\System32\perfh009.dat [2001/08/23 13:00:00 | 000,272,128 | ---- | C] () -- C:\windows\System32\perfi009.dat [2001/08/23 13:00:00 | 000,218,003 | ---- | C] () -- C:\windows\System32\dssec.dat [2001/08/23 13:00:00 | 000,095,722 | ---- | C] () -- C:\windows\System32\perfc009.dat [2001/08/23 13:00:00 | 000,046,258 | ---- | C] () -- C:\windows\System32\mib.bin [2001/08/23 13:00:00 | 000,028,626 | ---- | C] () -- C:\windows\System32\perfd009.dat [2001/08/23 13:00:00 | 000,004,463 | ---- | C] () -- C:\windows\System32\oembios.dat [2001/08/23 13:00:00 | 000,000,741 | ---- | C] () -- C:\windows\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2010/08/25 01:24:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ACD Systems [2010/08/25 14:12:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Arturia [2011/12/27 01:54:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Badoo [2011/01/22 01:00:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Celemony Software GmbH [2010/08/25 15:25:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\eLicenser [2010/08/25 01:11:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET [2010/11/13 02:06:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GARMIN [2011/11/11 17:59:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\KORG [2010/10/18 21:31:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Locktime [2010/08/26 01:18:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PACE Anti-Piracy [2010/08/26 01:06:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe [2011/04/23 16:49:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Samsung [2011/09/30 18:33:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Slate Digital [2010/08/25 02:08:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Steinberg [2010/08/25 13:36:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Syncrosoft [2011/01/22 00:56:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Temporary [2010/08/26 02:31:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip [2010/08/25 13:30:03 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{7D55A338-9946-4B03-9D84-8FD1472DA229} [2011/01/21 18:39:42 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{C2686527-0D57-4F0B-ADAB-EE203CA30FC6} [2010/08/25 01:24:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\ACD Systems [2011/01/22 00:17:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Antares [2011/12/07 14:45:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Audacity [2011/09/04 15:45:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Azureus [2010/10/16 02:34:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\BSplayer [2010/10/16 00:45:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\BSplayer Pro [2010/10/23 14:18:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Daichi [2011/12/08 02:58:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Dropbox [2010/08/25 01:29:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\EmuPatchMixDSP [2011/01/15 02:31:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\FabFilter [2011/03/27 23:44:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\fltk.org [2010/08/26 14:42:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Foxit Software [2010/11/13 02:06:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\GARMIN [2011/10/09 22:41:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\GetRight Pro [2010/10/19 21:56:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\HateML [2010/09/19 01:55:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\iZotope [2011/11/11 18:03:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\KORG [2010/08/25 01:20:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Leadertech [2010/10/18 21:33:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Locktime [2011/03/21 03:18:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\MixVibes [2011/04/11 00:34:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Opera [2010/08/26 01:18:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\PACE Anti-Piracy [2010/08/26 23:25:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Publish Providers [2011/04/23 19:27:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Samsung [2010/12/31 21:51:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Schism Tracker [2011/05/20 14:15:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Softland [2010/08/26 23:10:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Sony [2011/06/18 04:04:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2010/08/25 02:10:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Steinberg [2010/10/15 18:47:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Thinstall [2010/11/13 19:56:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Trillian [2010/10/20 16:46:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\TS3Client [2012/01/27 03:04:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\uTorrent [2010/12/25 04:10:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\VST3 Presets [2011/01/15 02:32:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Waves [2010/08/26 01:10:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Waves Audio [2011/01/15 02:32:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\Waves Preferences [2011/10/19 12:09:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\thumb\Application Data\XnView [color=#E56717]========== Purity Check ==========[/color] < End of report >
successfully ran windows repair and device manager works now!