OTL logfile created on: 3/6/2012 11:36:57 AM - Run 2
OTL by OldTimer - Version 3.2.35.1 Folder = C:\Documents and Settings\Robin\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1023.36 Mb Total Physical Memory | 462.34 Mb Available Physical Memory | 45.18% Memory free
2.41 Gb Paging File | 1.92 Gb Available in Paging File | 79.83% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.88 Gb Total Space | 39.99 Gb Free Space | 71.56% Space Free | Partition Type: NTFS
Drive D: | 637.62 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: HOME1-20C44E28C | User Name: Robin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ========== PRC - [2012/03/05 22:53:20 | 000,584,704 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Robin\My Documents\Downloads\OTL(1).exe
PRC - [2012/02/02 02:44:30 | 003,329,824 | ---- | M] (Akamai Technologies, Inc) -- C:\Documents and Settings\Robin\Local Settings\Application Data\Akamai\netsession_win.exe
PRC - [2012/02/01 18:32:08 | 000,180,648 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.21.99\GoogleCrashHandler.exe
PRC - [2012/02/01 06:17:17 | 000,038,408 | ---- | M] (MyWebSearch.com) -- C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
PRC - [2011/12/14 07:58:12 | 002,051,472 | ---- | M] (Bandoo Media Inc.) -- C:\Program Files\Bandoo\Bandoo.exe
PRC - [2011/11/29 07:37:20 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011/11/14 04:40:17 | 001,694,608 | ---- | M] (Bandoo Media, inc) -- C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe
PRC - [2011/06/10 10:26:00 | 002,424,192 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2011/06/02 00:51:34 | 000,409,320 | ---- | M] (Exent Technologies Ltd.) -- C:\Documents and Settings\Robin\Local Settings\Temp\SDM143\Free Ride Games.exe
PRC - [2011/01/04 14:34:12 | 004,545,024 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WNA1100.exe
PRC - [2010/08/04 13:44:24 | 000,266,240 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe
PRC - [2010/07/28 16:34:02 | 000,569,752 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
PRC - [2010/07/28 16:33:58 | 006,995,864 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinSetup.exe
PRC - [2010/07/28 16:33:58 | 001,485,208 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
PRC - [2009/02/20 12:23:26 | 000,495,700 | ---- | M] (Atheros) -- C:\WINDOWS\system32\acs.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/02/27 10:18:38 | 001,736,704 | ---- | M] (Belkin) -- C:\Program Files\Belkin\F5D7010v8\Belkinwcui.exe
PRC - [2007/03/19 00:05:02 | 000,630,784 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe
PRC - [2002/09/20 15:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
========== Modules (No Company Name) ========== MOD - [2012/03/06 11:35:46 | 000,052,736 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
MOD - [2012/02/10 19:26:21 | 003,340,064 | ---- | M] () -- c:\Program Files\Common Files\Akamai\netsession_win_7de0ed9.dll
MOD - [2011/11/29 07:37:17 | 001,989,592 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011/06/18 15:09:06 | 000,063,488 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
MOD - [2011/06/18 15:09:01 | 000,052,224 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
MOD - [2011/06/18 15:08:53 | 000,117,760 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
MOD - [2011/01/04 14:34:12 | 004,545,024 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WNA1100.exe
MOD - [2010/08/04 13:44:24 | 000,266,240 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe
MOD - [2010/07/28 16:34:04 | 000,022,424 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinServicePS.dll
MOD - [2010/07/28 16:02:58 | 000,658,432 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\gateways\GenericBelkinGatewayLOC.dll
MOD - [2010/06/23 17:12:28 | 007,187,456 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtGui4.dll
MOD - [2010/06/23 17:11:52 | 000,325,632 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtXml4.dll
MOD - [2010/06/23 17:11:48 | 001,954,304 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtCore4.dll
MOD - [2010/06/23 17:11:48 | 000,847,360 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtNetwork4.dll
MOD - [2010/06/23 16:38:18 | 000,119,808 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\imageformats\qjpeg4.dll
MOD - [2010/03/10 13:50:38 | 000,204,800 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WifiLib.dll
MOD - [2009/08/28 15:50:18 | 000,282,624 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WifiSvcLib.dll
MOD - [2008/02/22 13:55:42 | 000,200,704 | ---- | M] () -- C:\Program Files\Belkin\F5D7010v8\BelkinwcuiDLL.dll
MOD - [2007/03/30 16:00:44 | 000,081,920 | ---- | M] () -- C:\Program Files\Belkin\F5D7010v8\BelkinHWStatus.dll
MOD - [2007/03/19 00:05:02 | 000,630,784 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe
MOD - [2007/03/19 00:04:22 | 000,069,632 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.dll
========== Win32 Services (SafeList) ========== SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2012/02/10 19:26:21 | 003,340,064 | ---- | M] () [Auto | Running] -- c:\program files\common files\akamai/netsession_win_7de0ed9.dll -- (Akamai)
SRV - [2012/02/01 06:17:17 | 000,034,320 | ---- | M] (MyWebSearch.com) [Auto | Stopped] -- C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE -- (MyWebSearchService)
SRV - [2011/12/14 07:58:12 | 002,051,472 | ---- | M] (Bandoo Media Inc.) [Auto | Running] -- C:\Program Files\Bandoo\Bandoo.exe -- (Bandoo Coordinator)
SRV - [2010/08/04 13:44:24 | 000,266,240 | ---- | M] () [Auto | Running] -- C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe -- (WSWNA1100)
SRV - [2010/07/28 16:34:02 | 000,569,752 | ---- | M] (Affinegy, Inc.) [Auto | Running] -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe -- (AffinegyService)
SRV - [2009/11/05 15:08:36 | 000,360,529 | ---- | M] (Atheros Communications, Inc.) [On_Demand | Stopped] -- C:\Program Files\NETGEAR\WNA1100\jswpsapi.exe -- (jswpsapi)
SRV - [2009/02/20 12:23:26 | 000,495,700 | ---- | M] (Atheros) [Auto | Running] -- C:\WINDOWS\system32\acs.exe -- (ACS)
SRV - [2002/09/20 15:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))
========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (AFGMp50)
DRV - [2010/09/30 19:15:00 | 001,759,584 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athuw.sys -- (AR9271)
DRV - [2010/06/23 17:12:50 | 000,027,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AFGSp50.sys -- (AFGSp50)
DRV - [2010/05/10 12:41:30 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010/02/17 12:25:48 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2009/01/30 16:13:20 | 000,058,208 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wsimd.sys -- (WSIMD)
DRV - [2007/10/26 04:20:36 | 000,549,184 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2007/08/28 21:46:02 | 000,057,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\jswscimd.sys -- (JSWSCIMD)
DRV - [2005/06/07 22:19:52 | 001,201,152 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2004/10/25 14:40:58 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PCASp50.sys -- (PCASp50)
DRV - [2004/08/03 16:41:36 | 000,606,684 | ---- | M] (LT) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ltmdmnt.sys -- (ltmodem5)
DRV - [2001/08/17 06:10:28 | 000,035,913 | ---- | M] (SMC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://search.live.c...ferrer:source?}IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2101}: "URL" =
http://dts.search-re...q={searchTerms}IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" =
http://search.sweeti...q={searchTerms} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.yahoo.com/?fr=fp-yie8IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page =
http://downloads.yah...xplorer/welcomeIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/IE - HKCU\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/...Box&FORM=IE8SRCIE - HKCU\..\SearchScopes\{30230760-DB59-43A1-BE27-E62C9E488E2A}: "URL" =
http://rover.ebay.co...e={searchTerms}IE - HKCU\..\SearchScopes\{3113A5FF-A480-4726-985B-181F71362C87}: "URL" =
http://delicious.com...p={searchTerms}IE - HKCU\..\SearchScopes\{3457295B-586D-4F60-8F1F-5EE449399E91}: "URL" =
http://search.yahoo....f-8&fr=chr-yie8IE - HKCU\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" =
http://search.mywebs...r={searchTerms}IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2101}: "URL" =
http://dts.search-re...q={searchTerms}IE - HKCU\..\SearchScopes\{CCD80E61-A1BC-4A2A-97FC-46948202229F}: "URL" =
http://findgala.com/...q={searchTerms}IE - HKCU\..\SearchScopes\{E88E7B31-FC91-40DB-A7D0-9CC810D95CD9}: "URL" =
http://www.flickr.co...q={searchTerms}IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" =
http://search.sweeti...q={searchTerms}IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:25462
========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "SweetIM Search"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: "Search Results"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.startup.homepage: "
http://www.yahoo.com/?ilc=21"FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems:
[email protected]:3.9.1.14019
FF - prefs.js..extensions.enabledItems:
[email protected]:1.0.0
FF - prefs.js..extensions.enabledItems:
[email protected]:1.0
FF - prefs.js..extensions.enabledItems:
[email protected]:1.2
FF - prefs.js..keyword.URL: "
http://dts.search-re...id=101&sr=0&q="FF - prefs.js..network.proxy.type: 4
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Search Results"
FF - prefs.js..browser.startup.homepage: "
http://www.yahoo.com/?ilc=1" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.3: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin: C:\Program Files\MyWebSearch\bar\1.bin\NPMyWebS.dll (MyWebSearch.com)
FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@eximion.com/KalydoPlayer3.08.01: C:\Documents and Settings\Robin\Application Data\Kalydo\KalydoPlayer\npkalydo.dll (Eximion B.V.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\
[email protected]: C:\Program Files\MyWebSearch\bar\1.bin [2012/02/01 06:17:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/11/29 07:37:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/01/26 18:14:07 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\
[email protected]: C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\
[email protected] [2012/02/02 00:57:46 | 000,000,000 | ---D | M]
[2012/02/02 01:03:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Extensions
[2012/02/02 01:08:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions
[2011/06/21 19:35:03 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/01/25 09:43:29 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2012/02/02 01:08:32 | 000,000,000 | ---D | M] (Searchqu Toolbar) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
[2012/02/02 00:57:46 | 000,000,000 | ---D | M] (Bandoo for Firefox) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\
[email protected][2012/02/01 06:17:34 | 000,000,000 | ---D | M] (My Web Search) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\
[email protected][2012/02/02 01:01:02 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\searchplugins\Search_Results.xml
[2012/02/18 23:51:54 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\searchplugins\SweetIM Search.xml
[2012/02/02 01:03:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/06/22 01:45:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\distribution\extensions
[2011/06/22 01:45:22 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Program Files\Mozilla Firefox\distribution\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/11/29 07:37:21 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/02/02 20:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011/10/06 14:15:17 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/02/02 01:01:02 | 000,002,515 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
[2011/11/29 07:37:21 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
========== Chrome ========== CHR - default_search_provider: Search Results (Enabled)
CHR - default_search_provider: search_url =
http://dts.search-re...q={searchTerms}CHR - default_search_provider: suggest_url =
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.77\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java Platform SE 6 U24 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NP32DSW.DLL
CHR - plugin: RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.77\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.77\pdf.dll
CHR - plugin: LivingPlay Textlinks Plugin (Enabled) = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\maopdgeieiiiifooolcjjfmjdlkmhfdh\nplptl.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Kalydo Player Plugin for Mozilla (Enabled) = C:\Documents and Settings\Robin\Application Data\Kalydo\KalydoPlayer\npkalydo.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Google Search = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: Bandoo = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dloejdefkancmfajekobpfoacecnhpgp\1.0.0.0_0\
CHR - Extension: GameVance = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hnhgoncokajlafhnhjmccgcmgggiehjm\
CHR - Extension: avast! WebRep = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\
CHR - Extension: Gmail = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\
O1 HOSTS File: ([2011/06/18 14:01:25 | 000,003,031 | RHS- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 89.248.160.148 www.google.com
O1 - Hosts: 178.17.165.3 www.google.com
O1 - Hosts: 89.248.160.148 www.google.com.au
O1 - Hosts: 178.17.165.3 www.google.com.au
O1 - Hosts: 89.248.160.148 www.google.be
O1 - Hosts: 178.17.165.3 www.google.be
O1 - Hosts: 89.248.160.148 www.google.com.br
O1 - Hosts: 178.17.165.3 www.google.com.br
O1 - Hosts: 89.248.160.148 www.google.ca
O1 - Hosts: 178.17.165.3 www.google.ca
O1 - Hosts: 89.248.160.148 www.google.ch
O1 - Hosts: 178.17.165.3 www.google.ch
O1 - Hosts: 89.248.160.148 www.google.de
O1 - Hosts: 178.17.165.3 www.google.de
O1 - Hosts: 89.248.160.148 www.google.dk
O1 - Hosts: 178.17.165.3 www.google.dk
O1 - Hosts: 89.248.160.148 www.google.fr
O1 - Hosts: 178.17.165.3 www.google.fr
O1 - Hosts: 89.248.160.148 www.google.ie
O1 - Hosts: 178.17.165.3 www.google.ie
O1 - Hosts: 89.248.160.148 www.google.it
O1 - Hosts: 178.17.165.3 www.google.it
O1 - Hosts: 89.248.160.148 www.google.co.jp
O1 - Hosts: 178.17.165.3 www.google.co.jp
O1 - Hosts: 30 more lines...
O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - No CLSID value found.
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O2 - BHO: (DataMngr) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc)
O2 - BHO: (BandooIEPlugin Class) - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll (Bandoo Media Inc.)
O3 - HKLM\..\Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe (Bandoo Media, inc)
O4 - HKLM..\Run: [InstaLAN] C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe (Affinegy, Inc.)
O4 - HKLM..\Run: [My Web Search Bar Search Scope Monitor] C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE (MyWebSearch.com)
O4 - HKLM..\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Documents and Settings\Robin\Local Settings\Application Data\Akamai\netsession_win.exe (Akamai Technologies, Inc)
O4 - HKCU..\Run: [Exent_SDM] C:\Documents and Settings\Robin\Local Settings\Temp\SDM143\Free Ride Games.exe (Exent Technologies Ltd.)
O4 - HKCU..\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com)
O4 - HKCU..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - HKCU..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Belkin Wireless G Cardbus Adapter Utility.lnk = C:\Program Files\Belkin\F5D7010v8\Belkinwcui.exe (Belkin)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NETGEAR WNA1100 Smart Wizard.lnk = C:\Program Files\NETGEAR\WNA1100\WNA1100.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowRun = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 0 = msseces.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 1 = MSASCui.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 2 = ekrn.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 3 = egui.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 4 = avgnt.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 5 = avcenter.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 6 = avscan.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 7 = avgfrw.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 8 = avgui.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 9 = avgtray.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 10 = avgscanx.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 11 = avgcfgex.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 12 = avgemc.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 13 = avgchsvx.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 14 = avgcmgr.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 15 = avgwdsvc.exe
O8 - Extra context menu item: &Search -
http://edits.mywebse...TQ&n=2011011020 File not found
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{66DBCDED-4B62-4E41-9E6E-749E6168BBD9}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{697BDEF8-8768-4504-A2CD-44E0E9F5B9EE}: DhcpNameServer = 192.168.2.1
O20 - AppInit_DLLs: (c:\progra~1\window~4\datamngr\datamngr.dll) - c:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (c:\progra~1\window~4\datamngr\iebho.dll) - c:\Program Files\Windows Searchqu Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (c:\progra~1\bandoo\bndhook.dll) - c:\Program Files\Bandoo\BndHook.dll (Discordia Limited)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Robin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Robin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/01/01 19:41:57 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [1998/03/03 02:05:07 | 004,429,073 | R--- | M] (Blizzard Entertainment) - D:\AUTORUN.EXE -- [ CDFS ]
O32 - AutoRun File - [1999/10/19 10:45:49 | 000,000,043 | R--- | M] () - D:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ========== [2012/03/05 19:57:35 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Robin\Recent
[2012/03/02 23:50:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\TorchED
[2012/03/02 23:28:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Datalode
[2012/03/02 23:28:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Robin\Start Menu\Programs\Torchlight
[2012/02/26 22:01:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Yahoo! Messenger
[2012/02/26 17:24:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\BBSTORE
[2012/02/26 17:21:44 | 000,000,000 | ---D | C] -- C:\Program Files\Myst
[2012/02/26 16:23:49 | 000,000,000 | ---D | C] -- C:\Mythic
[2012/02/25 13:46:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Robin\My Documents\My Received Files
[2012/02/18 02:46:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Robin\Local Settings\Application Data\WildWestStory
[2012/02/08 22:50:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Diablo II
[2012/02/08 22:50:25 | 000,094,208 | ---- | C] (Blizzard Entertainment) -- C:\WINDOWS\DIIUnin.exe
[2012/02/08 22:44:38 | 000,000,000 | ---D | C] -- C:\Program Files\Diablo II
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2012/03/06 11:38:59 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{934CBD03-08DF-4D78-9E63-09574D200FB7}.job
[2012/03/06 11:37:10 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/03/06 11:35:29 | 000,000,232 | -H-- | M] () -- C:\sqmdata19.sqm
[2012/03/06 11:35:28 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm
[2012/03/06 11:35:24 | 000,000,880 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/03/06 11:35:02 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/03/06 11:34:45 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/03/05 23:24:27 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm
[2012/03/05 23:24:27 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm
[2012/03/05 20:25:37 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm
[2012/03/05 20:25:37 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm
[2012/03/05 18:59:03 | 000,021,840 | ---- | M] () -- C:\WINDOWS\System32\SIntfNT.dll
[2012/03/05 18:59:02 | 000,017,212 | ---- | M] () -- C:\WINDOWS\System32\SIntf32.dll
[2012/03/05 18:59:02 | 000,012,067 | ---- | M] () -- C:\WINDOWS\System32\SIntf16.dll
[2012/03/05 02:07:24 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm
[2012/03/05 02:07:24 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm
[2012/03/03 20:28:25 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm
[2012/03/03 20:28:25 | 000,000,232 | -H-- | M] () -- C:\sqmdata15.sqm
[2012/03/03 20:01:51 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm
[2012/03/03 20:01:51 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm
[2012/03/03 14:35:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2012/03/03 08:40:20 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm
[2012/03/03 08:40:20 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm
[2012/03/03 01:05:43 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm
[2012/03/03 01:05:43 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm
[2012/03/02 23:28:29 | 000,001,734 | ---- | M] () -- C:\Documents and Settings\Robin\Desktop\Torchlight.lnk
[2012/03/01 22:19:11 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm
[2012/03/01 22:19:11 | 000,000,232 | -H-- | M] () -- C:\sqmdata11.sqm
[2012/03/01 13:32:21 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm
[2012/03/01 13:32:21 | 000,000,232 | -H-- | M] () -- C:\sqmdata10.sqm
[2012/02/29 10:59:15 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm
[2012/02/29 10:59:15 | 000,000,232 | -H-- | M] () -- C:\sqmdata09.sqm
[2012/02/28 19:09:11 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm
[2012/02/28 19:09:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm
[2012/02/28 18:26:29 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm
[2012/02/28 18:26:29 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm
[2012/02/28 18:21:02 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm
[2012/02/28 18:21:02 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm
[2012/02/28 14:27:38 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm
[2012/02/28 14:27:38 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm
[2012/02/28 12:09:19 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm
[2012/02/28 12:09:19 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm
[2012/02/28 12:08:38 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2012/02/27 11:57:28 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
[2012/02/27 11:57:28 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm
[2012/02/26 23:02:27 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2012/02/26 23:02:27 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm
[2012/02/26 22:01:20 | 000,000,812 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Yahoo! Messenger.lnk
[2012/02/26 22:01:19 | 000,000,830 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2012/02/26 17:35:14 | 000,000,191 | ---- | M] () -- C:\WINDOWS\QTW.INI
[2012/02/26 17:24:18 | 000,000,030 | ---- | M] () -- C:\WINDOWS\RESULT.QTW
[2012/02/26 17:24:14 | 000,000,798 | ---- | M] () -- C:\WINDOWS\WININI.QTW
[2012/02/26 17:24:14 | 000,000,435 | ---- | M] () -- C:\WINDOWS\SYSINI.QTW
[2012/02/25 13:46:54 | 000,000,208 | -H-- | M] () -- C:\sqmdata01.sqm
[2012/02/25 13:46:54 | 000,000,172 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2012/02/25 13:46:52 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
[2012/02/25 13:46:52 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm
[2012/02/25 07:42:00 | 000,000,795 | ---- | M] () -- C:\Documents and Settings\Robin\Desktop\Farm Frenzy.lnk
[2012/02/25 07:36:25 | 000,413,472 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/02/18 21:40:44 | 000,000,059 | ---- | M] () -- C:\WINDOWS\BS.INI
[2012/02/18 02:58:11 | 000,000,471 | ---- | M] () -- C:\Program Files\021820122581156.bat
[2012/02/18 02:45:57 | 000,001,098 | ---- | M] () -- C:\Documents and Settings\Robin\Desktop\Yahoo! Games - Games And Online Games.lnk
[2012/02/17 17:15:00 | 000,000,390 | ---- | M] () -- C:\WINDOWS\tasks\1-Click Maintenance.job
[2012/02/16 17:04:13 | 000,485,380 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/02/16 17:04:13 | 000,088,902 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/02/08 22:50:34 | 000,016,910 | ---- | M] () -- C:\WINDOWS\DIIUnin.dat
[2012/02/08 22:50:34 | 000,001,564 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Diablo II.lnk
[2012/02/08 22:50:26 | 000,002,829 | ---- | M] () -- C:\WINDOWS\DIIUnin.pif
[2012/02/08 22:50:25 | 000,094,208 | ---- | M] (Blizzard Entertainment) -- C:\WINDOWS\DIIUnin.exe
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ========== [2012/03/06 11:35:29 | 000,000,232 | -H-- | C] () -- C:\sqmdata19.sqm
[2012/03/06 11:35:28 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt19.sqm
[2012/03/05 23:24:27 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt18.sqm
[2012/03/05 23:24:27 | 000,000,232 | -H-- | C] () -- C:\sqmdata18.sqm
[2012/03/05 20:25:37 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt17.sqm
[2012/03/05 20:25:37 | 000,000,232 | -H-- | C] () -- C:\sqmdata17.sqm
[2012/03/05 02:07:24 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt16.sqm
[2012/03/05 02:07:24 | 000,000,232 | -H-- | C] () -- C:\sqmdata16.sqm
[2012/03/03 20:28:25 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt15.sqm
[2012/03/03 20:28:25 | 000,000,232 | -H-- | C] () -- C:\sqmdata15.sqm
[2012/03/03 20:01:51 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt14.sqm
[2012/03/03 20:01:51 | 000,000,232 | -H-- | C] () -- C:\sqmdata14.sqm
[2012/03/03 08:40:20 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt13.sqm
[2012/03/03 08:40:20 | 000,000,232 | -H-- | C] () -- C:\sqmdata13.sqm
[2012/03/03 01:05:43 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt12.sqm
[2012/03/03 01:05:43 | 000,000,232 | -H-- | C] () -- C:\sqmdata12.sqm
[2012/03/02 23:28:29 | 000,001,734 | ---- | C] () -- C:\Documents and Settings\Robin\Desktop\Torchlight.lnk
[2012/03/01 22:19:11 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt11.sqm
[2012/03/01 22:19:11 | 000,000,232 | -H-- | C] () -- C:\sqmdata11.sqm
[2012/03/01 13:32:21 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt10.sqm
[2012/03/01 13:32:21 | 000,000,232 | -H-- | C] () -- C:\sqmdata10.sqm
[2012/02/29 10:59:15 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt09.sqm
[2012/02/29 10:59:15 | 000,000,232 | -H-- | C] () -- C:\sqmdata09.sqm
[2012/02/28 19:09:11 | 000,000,232 | -H-- | C] () -- C:\sqmdata08.sqm
[2012/02/28 19:09:10 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt08.sqm
[2012/02/28 18:26:29 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt07.sqm
[2012/02/28 18:26:29 | 000,000,232 | -H-- | C] () -- C:\sqmdata07.sqm
[2012/02/28 18:21:02 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt06.sqm
[2012/02/28 18:21:02 | 000,000,232 | -H-- | C] () -- C:\sqmdata06.sqm
[2012/02/28 14:27:38 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt05.sqm
[2012/02/28 14:27:38 | 000,000,232 | -H-- | C] () -- C:\sqmdata05.sqm
[2012/02/28 12:09:19 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt04.sqm
[2012/02/28 12:09:19 | 000,000,232 | -H-- | C] () -- C:\sqmdata04.sqm
[2012/02/27 11:57:28 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt03.sqm
[2012/02/27 11:57:28 | 000,000,232 | -H-- | C] () -- C:\sqmdata03.sqm
[2012/02/26 23:02:27 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt02.sqm
[2012/02/26 23:02:27 | 000,000,232 | -H-- | C] () -- C:\sqmdata02.sqm
[2012/02/26 22:01:20 | 000,000,812 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Yahoo! Messenger.lnk
[2012/02/26 22:01:19 | 000,000,830 | ---- | C] () -- C:\Documents and Settings\Robin\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2012/02/26 17:24:14 | 000,000,798 | ---- | C] () -- C:\WINDOWS\WININI.QTW
[2012/02/26 17:24:14 | 000,000,435 | ---- | C] () -- C:\WINDOWS\SYSINI.QTW
[2012/02/26 17:24:14 | 000,000,191 | ---- | C] () -- C:\WINDOWS\QTW.INI
[2012/02/26 17:23:45 | 000,000,030 | ---- | C] () -- C:\WINDOWS\RESULT.QTW
[2012/02/26 09:32:13 | 000,256,144 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2012/02/25 13:46:54 | 000,000,208 | -H-- | C] () -- C:\sqmdata01.sqm
[2012/02/25 13:46:54 | 000,000,172 | -H-- | C] () -- C:\sqmnoopt01.sqm
[2012/02/25 13:46:52 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt00.sqm
[2012/02/25 13:46:52 | 000,000,232 | -H-- | C] () -- C:\sqmdata00.sqm
[2012/02/25 07:42:00 | 000,000,795 | ---- | C] () -- C:\Documents and Settings\Robin\Desktop\Farm Frenzy.lnk
[2012/02/18 02:58:11 | 000,000,471 | ---- | C] () -- C:\Program Files\021820122581156.bat
[2012/02/16 16:38:33 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/02/16 16:38:33 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/02/08 22:50:34 | 000,016,910 | ---- | C] () -- C:\WINDOWS\DIIUnin.dat
[2012/02/08 22:50:34 | 000,001,564 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Diablo II.lnk
[2012/02/08 22:50:26 | 000,002,829 | ---- | C] () -- C:\WINDOWS\DIIUnin.pif
[2012/01/04 09:55:08 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2012/01/04 09:55:07 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2012/01/04 09:55:07 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2011/10/23 09:21:19 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2011/08/19 14:17:10 | 000,262,216 | ---- | C] () -- C:\WINDOWS\System32\IPTests.dll
[2011/06/26 18:49:40 | 000,000,022 | ---- | C] () -- C:\WINDOWS\MVPHEART.INI
[2011/05/19 04:40:40 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\Robin\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/05/07 23:04:21 | 000,011,966 | -HS- | C] () -- C:\Documents and Settings\Robin\Local Settings\Application Data\re15525dl3y7e4hemd3d26i4u6tdmmy
[2011/05/07 23:04:21 | 000,011,966 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\re15525dl3y7e4hemd3d26i4u6tdmmy
[2011/02/07 19:40:36 | 000,000,086 | ---- | C] () -- C:\WINDOWS\MVPSPADE.INI
[2011/02/05 21:41:34 | 000,000,017 | ---- | C] () -- C:\WINDOWS\BICYCLE.INI
[2011/02/05 21:39:23 | 000,000,250 | ---- | C] () -- C:\WINDOWS\BP.INI
[2011/01/30 15:39:46 | 000,000,115 | ---- | C] () -- C:\WINDOWS\MVPCRIB.INI
[2011/01/30 15:27:59 | 000,000,087 | ---- | C] () -- C:\WINDOWS\encore_launcher.ini
[2011/01/30 15:22:05 | 000,000,059 | ---- | C] () -- C:\WINDOWS\BS.INI
[2011/01/30 14:04:10 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2011/01/30 13:12:10 | 000,015,170 | ---- | C] () -- C:\WINDOWS\DiabUnin.dat
[2011/01/30 12:29:23 | 000,000,036 | ---- | C] () -- C:\WINDOWS\Tiny_Run.ini
[2011/01/30 12:05:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\BB.INI
[2011/01/04 20:04:08 | 000,000,025 | ---- | C] () -- C:\WINDOWS\Pharaoh's Pitfalls.ini
[2011/01/04 01:32:18 | 000,000,038 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2011/01/04 00:04:58 | 000,000,442 | ---- | C] () -- C:\WINDOWS\PowerReg.dat
[2011/01/02 22:12:44 | 000,000,064 | ---- | C] () -- C:\WINDOWS\GPlrLanc.dat
[2011/01/02 13:05:26 | 000,000,752 | ---- | C] () -- C:\Documents and Settings\Robin\Application Data\ClockTraySkins.ini
[2011/01/01 22:23:19 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/01/01 22:23:19 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/01/01 22:23:18 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2011/01/01 22:23:16 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011/01/01 22:12:36 | 000,000,000 | ---- | C] () -- C:\WINDOWS\DontSort.ini
[2011/01/01 19:53:22 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\msssc.dll
[2011/01/01 19:45:08 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011/01/01 19:38:31 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
========== Alternate Data Streams ========== @Alternate Data Stream - 138 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D6125FEA
@Alternate Data Stream - 138 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2216A431
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:81F83028
< End of report >
first scan-
OTL logfile created on: 2/29/2012 10:05:59 AM - Run 1
OTL by OldTimer - Version 3.2.33.2 Folder = C:\Documents and Settings\Robin\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1023.36 Mb Total Physical Memory | 462.77 Mb Available Physical Memory | 45.22% Memory free
2.41 Gb Paging File | 1.80 Gb Available in Paging File | 74.75% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.88 Gb Total Space | 41.73 Gb Free Space | 74.68% Space Free | Partition Type: NTFS
Drive D: | 637.62 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: HOME1-20C44E28C | User Name: Robin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012/02/29 10:05:38 | 000,583,680 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Robin\My Documents\Downloads\OTL.exe
PRC - [2012/02/02 02:44:30 | 003,329,824 | ---- | M] (Akamai Technologies, Inc) -- C:\Documents and Settings\Robin\Local Settings\Application Data\Akamai\netsession_win.exe
PRC - [2012/02/01 18:32:08 | 000,180,648 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.21.99\GoogleCrashHandler.exe
PRC - [2012/02/01 06:17:17 | 000,038,408 | ---- | M] (MyWebSearch.com) -- C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
PRC - [2011/12/14 07:58:12 | 002,051,472 | ---- | M] (Bandoo Media Inc.) -- C:\Program Files\Bandoo\Bandoo.exe
PRC - [2011/11/29 07:37:20 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011/11/14 04:40:17 | 001,694,608 | ---- | M] (Bandoo Media, inc) -- C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe
PRC - [2011/06/10 10:26:00 | 002,424,192 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2011/06/02 00:51:34 | 000,409,320 | ---- | M] (Exent Technologies Ltd.) -- C:\Documents and Settings\Robin\Local Settings\Temp\SDM143\Free Ride Games.exe
PRC - [2011/01/04 14:34:12 | 004,545,024 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WNA1100.exe
PRC - [2010/08/04 13:44:24 | 000,266,240 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe
PRC - [2010/07/28 16:34:02 | 000,569,752 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe
PRC - [2010/07/28 16:33:58 | 006,995,864 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinSetup.exe
PRC - [2010/07/28 16:33:58 | 001,485,208 | ---- | M] (Affinegy, Inc.) -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe
PRC - [2009/02/20 12:23:26 | 000,495,700 | ---- | M] (Atheros) -- C:\WINDOWS\system32\acs.exe
PRC - [2008/04/14 05:42:26 | 001,414,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\mmc.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/04/14 05:42:18 | 000,015,872 | ---- | M] (Microsoft Corp.) -- C:\WINDOWS\system32\dmremote.exe
PRC - [2008/02/27 10:18:38 | 001,736,704 | ---- | M] (Belkin) -- C:\Program Files\Belkin\F5D7010v8\Belkinwcui.exe
PRC - [2007/03/19 00:05:02 | 000,630,784 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe
PRC - [2002/09/20 15:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
========== Modules (No Company Name) ==========
MOD - [2012/02/29 08:29:31 | 000,052,736 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
MOD - [2012/02/10 19:26:21 | 003,340,064 | ---- | M] () -- c:\Program Files\Common Files\Akamai\netsession_win_7de0ed9.dll
MOD - [2011/11/29 07:37:17 | 001,989,592 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011/06/18 16:23:00 | 006,271,136 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2011/06/18 15:09:06 | 000,063,488 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
MOD - [2011/06/18 15:09:01 | 000,052,224 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
MOD - [2011/06/18 15:08:53 | 000,117,760 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
MOD - [2011/01/04 14:34:12 | 004,545,024 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WNA1100.exe
MOD - [2010/08/04 13:44:24 | 000,266,240 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe
MOD - [2010/07/28 16:34:04 | 000,022,424 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinServicePS.dll
MOD - [2010/07/28 16:02:58 | 000,658,432 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\gateways\GenericBelkinGatewayLOC.dll
MOD - [2010/06/23 17:12:28 | 007,187,456 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtGui4.dll
MOD - [2010/06/23 17:11:52 | 000,325,632 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtXml4.dll
MOD - [2010/06/23 17:11:48 | 001,954,304 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtCore4.dll
MOD - [2010/06/23 17:11:48 | 000,847,360 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\QtNetwork4.dll
MOD - [2010/06/23 16:38:18 | 000,119,808 | ---- | M] () -- C:\Program Files\Belkin\Router Setup and Monitor\imageformats\qjpeg4.dll
MOD - [2010/03/10 13:50:38 | 000,204,800 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WifiLib.dll
MOD - [2009/08/28 15:50:18 | 000,282,624 | ---- | M] () -- C:\Program Files\NETGEAR\WNA1100\WifiSvcLib.dll
MOD - [2008/04/14 05:42:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2008/04/14 05:41:52 | 000,059,904 | ---- | M] () -- C:\WINDOWS\system32\devenum.dll
MOD - [2008/02/22 13:55:42 | 000,200,704 | ---- | M] () -- C:\Program Files\Belkin\F5D7010v8\BelkinwcuiDLL.dll
MOD - [2007/03/30 16:00:44 | 000,081,920 | ---- | M] () -- C:\Program Files\Belkin\F5D7010v8\BelkinHWStatus.dll
MOD - [2007/03/19 00:05:02 | 000,630,784 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.exe
MOD - [2007/03/19 00:04:22 | 000,069,632 | ---- | M] () -- C:\Program Files\RocketDock\RocketDock.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2012/02/10 19:26:21 | 003,340,064 | ---- | M] () [Auto | Running] -- c:\program files\common files\akamai/netsession_win_7de0ed9.dll -- (Akamai)
SRV - [2012/02/01 06:17:17 | 000,034,320 | ---- | M] (MyWebSearch.com) [Auto | Stopped] -- C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE -- (MyWebSearchService)
SRV - [2011/12/14 07:58:12 | 002,051,472 | ---- | M] (Bandoo Media Inc.) [Auto | Running] -- C:\Program Files\Bandoo\Bandoo.exe -- (Bandoo Coordinator)
SRV - [2010/08/04 13:44:24 | 000,266,240 | ---- | M] () [Auto | Running] -- C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe -- (WSWNA1100)
SRV - [2010/07/28 16:34:02 | 000,569,752 | ---- | M] (Affinegy, Inc.) [Auto | Running] -- C:\Program Files\Belkin\Router Setup and Monitor\BelkinService.exe -- (AffinegyService)
SRV - [2009/11/05 15:08:36 | 000,360,529 | ---- | M] (Atheros Communications, Inc.) [On_Demand | Stopped] -- C:\Program Files\NETGEAR\WNA1100\jswpsapi.exe -- (jswpsapi)
SRV - [2009/02/20 12:23:26 | 000,495,700 | ---- | M] (Atheros) [Auto | Running] -- C:\WINDOWS\system32\acs.exe -- (ACS)
SRV - [2002/09/20 15:50:10 | 000,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))
========== Driver Services (SafeList) ==========
DRV - [2010/09/30 19:15:00 | 001,759,584 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athuw.sys -- (AR9271)
DRV - [2010/06/23 17:12:50 | 000,027,072 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AFGSp50.sys -- (AFGSp50)
DRV - [2010/05/10 12:41:30 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010/02/17 12:25:48 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2009/01/30 16:13:20 | 000,058,208 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wsimd.sys -- (WSIMD)
DRV - [2007/10/26 04:20:36 | 000,549,184 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2007/08/28 21:46:02 | 000,057,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\jswscimd.sys -- (JSWSCIMD)
DRV - [2005/06/07 22:19:52 | 001,201,152 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2004/10/25 14:40:58 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PCASp50.sys -- (PCASp50)
DRV - [2004/08/03 16:41:36 | 000,606,684 | ---- | M] (LT) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ltmdmnt.sys -- (ltmodem5)
DRV - [2001/08/17 06:10:28 | 000,035,913 | ---- | M] (SMC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smcirda.sys -- (SMCIRDA)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.yahoo.com/?fr=fp-yie8IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page =
http://downloads.yah...xplorer/welcomeIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/IE - HKCU\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:25462
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "SweetIM Search"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: "Search Results"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.startup.homepage: "
http://www.yahoo.com/?ilc=21"FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems:
[email protected]:3.9.1.14019
FF - prefs.js..extensions.enabledItems:
[email protected]:1.0.0
FF - prefs.js..extensions.enabledItems:
[email protected]:1.0
FF - prefs.js..extensions.enabledItems:
[email protected]:1.2
FF - prefs.js..keyword.URL: "
http://dts.search-re...id=101&sr=0&q="FF - prefs.js..network.proxy.type: 4
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Search Results"
FF - prefs.js..browser.startup.homepage: "
http://www.yahoo.com/?ilc=1"FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.3: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin: C:\Program Files\MyWebSearch\bar\1.bin\NPMyWebS.dll (MyWebSearch.com)
FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.7\npapicomadapter.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@eximion.com/KalydoPlayer3.08.01: C:\Documents and Settings\Robin\Application Data\Kalydo\KalydoPlayer\npkalydo.dll (Eximion B.V.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\
[email protected]: C:\Program Files\MyWebSearch\bar\1.bin [2012/02/01 06:17:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/11/29 07:37:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/01/26 18:14:07 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\
[email protected]: C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\
[email protected] [2012/02/02 00:57:46 | 000,000,000 | ---D | M]
[2012/02/02 01:03:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Extensions
[2012/02/02 01:08:31 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions
[2011/06/21 19:35:03 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/01/25 09:43:29 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2012/02/02 01:08:32 | 000,000,000 | ---D | M] (Searchqu Toolbar) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
[2012/02/02 00:57:46 | 000,000,000 | ---D | M] (Bandoo for Firefox) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\
[email protected][2012/02/01 06:17:34 | 000,000,000 | ---D | M] (My Web Search) -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\extensions\
[email protected][2012/02/02 01:01:02 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\searchplugins\Search_Results.xml
[2012/02/18 23:51:54 | 000,003,915 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\Mozilla\Firefox\Profiles\d02eji8c.default\searchplugins\SweetIM Search.xml
[2012/02/02 01:03:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/06/22 01:45:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\distribution\extensions
[2011/06/22 01:45:22 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Program Files\Mozilla Firefox\distribution\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/11/29 07:37:21 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/02/02 20:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011/10/06 14:15:17 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/02/02 01:01:02 | 000,002,515 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
[2011/11/29 07:37:21 | 000,002,040 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
========== Chrome ==========
CHR - default_search_provider: Search Results (Enabled)
CHR - default_search_provider: search_url =
http://dts.search-re...q={searchTerms}CHR - default_search_provider: suggest_url =
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.77\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U24 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NP32DSW.DLL
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.77\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\16.0.912.77\pdf.dll
CHR - plugin: LivingPlay Textlinks Plugin (Enabled) = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\maopdgeieiiiifooolcjjfmjdlkmhfdh\nplptl.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Kalydo Player Plugin for Mozilla (Enabled) = C:\Documents and Settings\Robin\Application Data\Kalydo\KalydoPlayer\npkalydo.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Google Search = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\
CHR - Extension: Bandoo = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dloejdefkancmfajekobpfoacecnhpgp\1.0.0.0_0\
CHR - Extension: GameVance = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hnhgoncokajlafhnhjmccgcmgggiehjm\
CHR - Extension: avast! WebRep = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\
CHR - Extension: Gmail = C:\Documents and Settings\Robin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\
O1 HOSTS File: ([2011/06/18 14:01:25 | 000,003,031 | RHS- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 89.248.160.148 www.google.com
O1 - Hosts: 178.17.165.3 www.google.com
O1 - Hosts: 89.248.160.148 www.google.com.au
O1 - Hosts: 178.17.165.3 www.google.com.au
O1 - Hosts: 89.248.160.148 www.google.be
O1 - Hosts: 178.17.165.3 www.google.be
O1 - Hosts: 89.248.160.148 www.google.com.br
O1 - Hosts: 178.17.165.3 www.google.com.br
O1 - Hosts: 89.248.160.148 www.google.ca
O1 - Hosts: 178.17.165.3 www.google.ca
O1 - Hosts: 89.248.160.148 www.google.ch
O1 - Hosts: 178.17.165.3 www.google.ch
O1 - Hosts: 89.248.160.148 www.google.de
O1 - Hosts: 178.17.165.3 www.google.de
O1 - Hosts: 89.248.160.148 www.google.dk
O1 - Hosts: 178.17.165.3 www.google.dk
O1 - Hosts: 89.248.160.148 www.google.fr
O1 - Hosts: 178.17.165.3 www.google.fr
O1 - Hosts: 89.248.160.148 www.google.ie
O1 - Hosts: 178.17.165.3 www.google.ie
O1 - Hosts: 89.248.160.148 www.google.it
O1 - Hosts: 178.17.165.3 www.google.it
O1 - Hosts: 89.248.160.148 www.google.co.jp
O1 - Hosts: 178.17.165.3 www.google.co.jp
O1 - Hosts: 30 more lines...
O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - No CLSID value found.
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O2 - BHO: (DataMngr) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc)
O2 - BHO: (BandooIEPlugin Class) - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll (Bandoo Media Inc.)
O3 - HKLM\..\Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe (Bandoo Media, inc)
O4 - HKLM..\Run: [InstaLAN] C:\Program Files\Belkin\Router Setup and Monitor\BelkinRouterMonitor.exe (Affinegy, Inc.)
O4 - HKLM..\Run: [My Web Search Bar Search Scope Monitor] C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE (MyWebSearch.com)
O4 - HKLM..\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Documents and Settings\Robin\Local Settings\Application Data\Akamai\netsession_win.exe (Akamai Technologies, Inc)
O4 - HKCU..\Run: [Exent_SDM] C:\Documents and Settings\Robin\Local Settings\Temp\SDM143\Free Ride Games.exe (Exent Technologies Ltd.)
O4 - HKCU..\Run: [MyWebSearch Email Plugin] C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (MyWebSearch.com)
O4 - HKCU..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - HKCU..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Belkin Wireless G Cardbus Adapter Utility.lnk = C:\Program Files\Belkin\F5D7010v8\Belkinwcui.exe (Belkin)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NETGEAR WNA1100 Smart Wizard.lnk = C:\Program Files\NETGEAR\WNA1100\WNA1100.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisallowRun = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 0 = msseces.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 1 = MSASCui.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 2 = ekrn.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 3 = egui.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 4 = avgnt.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 5 = avcenter.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 6 = avscan.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 7 = avgfrw.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 8 = avgui.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 9 = avgtray.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 10 = avgscanx.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 11 = avgcfgex.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 12 = avgemc.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 13 = avgchsvx.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 14 = avgcmgr.exe
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\DisallowRun: 15 = avgwdsvc.exe
O8 - Extra context menu item: &Search -
http://edits.mywebse...TQ&n=2011011020 File not found
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{66DBCDED-4B62-4E41-9E6E-749E6168BBD9}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{697BDEF8-8768-4504-A2CD-44E0E9F5B9EE}: DhcpNameServer = 192.168.2.1
O20 - AppInit_DLLs: (c:\progra~1\window~4\datamngr\datamngr.dll) - c:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (c:\progra~1\window~4\datamngr\iebho.dll) - c:\Program Files\Windows Searchqu Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (c:\progra~1\bandoo\bndhook.dll) - c:\Program Files\Bandoo\BndHook.dll (Discordia Limited)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Robin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Robin\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/01/01 19:41:57 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [1998/03/03 02:05:07 | 004,429,073 | R--- | M] (Blizzard Entertainment) - D:\AUTORUN.EXE -- [ CDFS ]
O32 - AutoRun File - [1999/10/19 10:45:49 | 000,000,043 | R--- | M] () - D:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{24dbaec2-55f4-11bd-bc9b-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{24dbaec2-55f4-11bd-bc9b-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{24dbaec2-55f4-11bd-bc9b-806d6172696f}\Shell\AutoRun\command - "" = D:\SETUP.EXE -- [2000/10/06 06:55:47 | 000,030,208 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2012/02/26 22:01:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Yahoo! Messenger
[2012/02/26 17:24:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\BBSTORE
[2012/02/26 17:21:44 | 000,000,000 | ---D | C] -- C:\Program Files\Myst
[2012/02/26 16:23:49 | 000,000,000 | ---D | C] -- C:\Mythic
[2012/02/25 13:46:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Robin\My Documents\My Received Files
[2012/02/18 02:46:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Robin\Local Settings\Application Data\WildWestStory
[2012/02/08 22:50:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Diablo II
[2012/02/08 22:50:25 | 000,094,208 | ---- | C] (Blizzard Entertainment) -- C:\WINDOWS\DIIUnin.exe
[2012/02/08 22:44:38 | 000,000,000 | ---D | C] -- C:\Program Files\Diablo II
[2012/02/03 02:01:25 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2012/02/02 01:07:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Robin\Application Data\searchqutoolbar
[2012/02/02 00:59:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Bandoo
[2012/02/01 06:17:19 | 000,038,320 | ---- | C] (FunWebProducts.com) -- C:\WINDOWS\System32\f3PSSavr.scr
[2012/02/01 06:17:15 | 000,000,000 | ---D | C] -- C:\Program Files\MyWebSearch
[2012/02/01 06:15:11 | 000,000,000 | ---D | C] -- C:\Program Files\FunWebProducts
[2012/02/01 02:51:54 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Robin\Recent
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012/02/29 09:37:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/02/29 08:29:06 | 000,000,880 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/02/29 08:28:42 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/02/29 08:28:26 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/02/28 19:09:11 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm
[2012/02/28 19:09:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm
[2012/02/28 18:26:29 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm
[2012/02/28 18:26:29 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm
[2012/02/28 18:21:02 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm
[2012/02/28 18:21:02 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm
[2012/02/28 16:11:12 | 000,000,422 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{934CBD03-08DF-4D78-9E63-09574D200FB7}.job
[2012/02/28 14:27:38 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm
[2012/02/28 14:27:38 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm
[2012/02/28 12:09:19 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm
[2012/02/28 12:09:19 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm
[2012/02/28 12:08:38 | 000,002,577 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2012/02/27 11:57:28 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
[2012/02/27 11:57:28 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm
[2012/02/26 23:02:27 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2012/02/26 23:02:27 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm
[2012/02/26 22:01:20 | 000,000,812 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Yahoo! Messenger.lnk
[2012/02/26 22:01:19 | 000,000,830 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2012/02/26 17:53:18 | 000,021,840 | ---- | M] () -- C:\WINDOWS\System32\SIntfNT.dll
[2012/02/26 17:53:17 | 000,017,212 | ---- | M] () -- C:\WINDOWS\System32\SIntf32.dll
[2012/02/26 17:53:17 | 000,012,067 | ---- | M] () -- C:\WINDOWS\System32\SIntf16.dll
[2012/02/26 17:35:14 | 000,000,191 | ---- | M] () -- C:\WINDOWS\QTW.INI
[2012/02/26 17:24:18 | 000,000,030 | ---- | M] () -- C:\WINDOWS\RESULT.QTW
[2012/02/26 17:24:14 | 000,000,798 | ---- | M] () -- C:\WINDOWS\WININI.QTW
[2012/02/26 17:24:14 | 000,000,435 | ---- | M] () -- C:\WINDOWS\SYSINI.QTW
[2012/02/25 14:35:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2012/02/25 13:46:54 | 000,000,208 | -H-- | M] () -- C:\sqmdata01.sqm
[2012/02/25 13:46:54 | 000,000,172 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2012/02/25 13:46:52 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
[2012/02/25 13:46:52 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm
[2012/02/25 07:42:00 | 000,000,795 | ---- | M] () -- C:\Documents and Settings\Robin\Desktop\Farm Frenzy.lnk
[2012/02/25 07:36:25 | 000,413,472 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/02/18 21:40:44 | 000,000,059 | ---- | M] () -- C:\WINDOWS\BS.INI
[2012/02/18 02:58:11 | 000,000,471 | ---- | M] () -- C:\Program Files\021820122581156.bat
[2012/02/18 02:45:57 | 000,001,098 | ---- | M] () -- C:\Documents and Settings\Robin\Desktop\Yahoo! Games - Games And Online Games.lnk
[2012/02/17 17:15:00 | 000,000,390 | ---- | M] () -- C:\WINDOWS\tasks\1-Click Maintenance.job
[2012/02/16 17:04:13 | 000,485,380 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/02/16 17:04:13 | 000,088,902 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/02/16 16:51:39 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/02/08 22:50:34 | 000,016,910 | ---- | M] () -- C:\WINDOWS\DIIUnin.dat
[2012/02/08 22:50:34 | 000,001,564 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Diablo II.lnk
[2012/02/08 22:50:26 | 000,002,829 | ---- | M] () -- C:\WINDOWS\DIIUnin.pif
[2012/02/08 22:50:25 | 000,094,208 | ---- | M] (Blizzard Entertainment) -- C:\WINDOWS\DIIUnin.exe
[2012/02/03 07:14:43 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\Robin\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/02/01 06:17:16 | 000,038,320 | ---- | M] (FunWebProducts.com) -- C:\WINDOWS\System32\f3PSSavr.scr
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/02/28 19:09:11 | 000,000,232 | -H-- | C] () -- C:\sqmdata08.sqm
[2012/02/28 19:09:10 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt08.sqm
[2012/02/28 18:26:29 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt07.sqm
[2012/02/28 18:26:29 | 000,000,232 | -H-- | C] () -- C:\sqmdata07.sqm
[2012/02/28 18:21:02 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt06.sqm
[2012/02/28 18:21:02 | 000,000,232 | -H-- | C] () -- C:\sqmdata06.sqm
[2012/02/28 14:27:38 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt05.sqm
[2012/02/28 14:27:38 | 000,000,232 | -H-- | C] () -- C:\sqmdata05.sqm
[2012/02/28 12:09:19 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt04.sqm
[2012/02/28 12:09:19 | 000,000,232 | -H-- | C] () -- C:\sqmdata04.sqm
[2012/02/27 11:57:28 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt03.sqm
[2012/02/27 11:57:28 | 000,000,232 | -H-- | C] () -- C:\sqmdata03.sqm
[2012/02/26 23:02:27 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt02.sqm
[2012/02/26 23:02:27 | 000,000,232 | -H-- | C] () -- C:\sqmdata02.sqm
[2012/02/26 22:01:20 | 000,000,812 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Yahoo! Messenger.lnk
[2012/02/26 22:01:19 | 000,000,830 | ---- | C] () -- C:\Documents and Settings\Robin\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk
[2012/02/26 17:24:14 | 000,000,798 | ---- | C] () -- C:\WINDOWS\WININI.QTW
[2012/02/26 17:24:14 | 000,000,435 | ---- | C] () -- C:\WINDOWS\SYSINI.QTW
[2012/02/26 17:24:14 | 000,000,191 | ---- | C] () -- C:\WINDOWS\QTW.INI
[2012/02/26 17:23:45 | 000,000,030 | ---- | C] () -- C:\WINDOWS\RESULT.QTW
[2012/02/26 09:32:13 | 000,256,144 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2012/02/25 13:46:54 | 000,000,208 | -H-- | C] () -- C:\sqmdata01.sqm
[2012/02/25 13:46:54 | 000,000,172 | -H-- | C] () -- C:\sqmnoopt01.sqm
[2012/02/25 13:46:52 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt00.sqm
[2012/02/25 13:46:52 | 000,000,232 | -H-- | C] () -- C:\sqmdata00.sqm
[2012/02/25 07:42:00 | 000,000,795 | ---- | C] () -- C:\Documents and Settings\Robin\Desktop\Farm Frenzy.lnk
[2012/02/18 02:58:11 | 000,000,471 | ---- | C] () -- C:\Program Files\021820122581156.bat
[2012/02/16 16:38:33 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/02/16 16:38:33 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/02/08 22:50:34 | 000,016,910 | ---- | C] () -- C:\WINDOWS\DIIUnin.dat
[2012/02/08 22:50:34 | 000,001,564 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Diablo II.lnk
[2012/02/08 22:50:26 | 000,002,829 | ---- | C] () -- C:\WINDOWS\DIIUnin.pif
[2012/02/01 14:15:49 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\Robin\Start Menu\Programs\Internet Explorer.lnk
[2012/02/01 05:55:46 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2012/01/04 09:55:08 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2012/01/04 09:55:07 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2012/01/04 09:55:07 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2011/10/23 09:21:19 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2011/08/19 14:17:10 | 000,262,216 | ---- | C] () -- C:\WINDOWS\System32\IPTests.dll
[2011/06/26 18:49:40 | 000,000,022 | ---- | C] () -- C:\WINDOWS\MVPHEART.INI
[2011/05/19 04:40:40 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\Robin\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/05/07 23:04:21 | 000,011,966 | -HS- | C] () -- C:\Documents and Settings\Robin\Local Settings\Application Data\re15525dl3y7e4hemd3d26i4u6tdmmy
[2011/05/07 23:04:21 | 000,011,966 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\re15525dl3y7e4hemd3d26i4u6tdmmy
[2011/02/07 19:40:36 | 000,000,086 | ---- | C] () -- C:\WINDOWS\MVPSPADE.INI
[2011/02/05 21:41:34 | 000,000,017 | ---- | C] () -- C:\WINDOWS\BICYCLE.INI
[2011/02/05 21:39:23 | 000,000,250 | ---- | C] () -- C:\WINDOWS\BP.INI
[2011/01/30 15:39:46 | 000,000,115 | ---- | C] () -- C:\WINDOWS\MVPCRIB.INI
[2011/01/30 15:27:59 | 000,000,087 | ---- | C] () -- C:\WINDOWS\encore_launcher.ini
[2011/01/30 15:22:05 | 000,000,059 | ---- | C] () -- C:\WINDOWS\BS.INI
[2011/01/30 14:04:10 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2011/01/30 13:12:10 | 000,015,170 | ---- | C] () -- C:\WINDOWS\DiabUnin.dat
[2011/01/30 12:29:23 | 000,000,036 | ---- | C] () -- C:\WINDOWS\Tiny_Run.ini
[2011/01/30 12:05:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\BB.INI
[2011/01/04 20:04:08 | 000,000,025 | ---- | C] () -- C:\WINDOWS\Pharaoh's Pitfalls.ini
[2011/01/04 01:32:18 | 000,000,038 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2011/01/04 00:04:58 | 000,000,442 | ---- | C] () -- C:\WINDOWS\PowerReg.dat
[2011/01/02 22:12:44 | 000,000,064 | ---- | C] () -- C:\WINDOWS\GPlrLanc.dat
[2011/01/02 13:05:26 | 000,000,752 | ---- | C] () -- C:\Documents and Settings\Robin\Application Data\ClockTraySkins.ini
[2011/01/01 22:23:19 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/01/01 22:23:19 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/01/01 22:23:18 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2011/01/01 22:23:16 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2011/01/01 22:12:36 | 000,000,000 | ---- | C] () -- C:\WINDOWS\DontSort.ini
[2011/01/01 19:53:22 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\msssc.dll
[2011/01/01 19:45:08 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011/01/01 19:38:31 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
========== Alternate Data Streams ==========
@Alternate Data Stream - 138 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D6125FEA
@Alternate Data Stream - 138 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2216A431
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:81F83028
< End of report >