ok, this is what OTL logged:
(also, before I reset my computer, there were 3 users/names associated with my computer: Diana, meta knight and rangiku, but since the reboot rangiku and rangikudoug)
OTL logfile created on: 30/04/2012 23:25:35 - Run 2
OTL by OldTimer - Version 3.2.42.2 Folder = C:\Users\rangikudoug\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
1.75 Gb Total Physical Memory | 1.30 Gb Available Physical Memory | 74.40% Memory free
3.73 Gb Paging File | 3.41 Gb Available in Paging File | 91.30% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 286.09 Gb Total Space | 22.50 Gb Free Space | 7.87% Space Free | Partition Type: NTFS
Computer Name: RANGIKUDOUG-PC | User Name: rangikudoug | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ========== PRC - [2012/04/30 23:24:13 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Users\rangikudoug\Desktop\OTL.exe
PRC - [2008/10/29 07:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/01/21 03:24:02 | 000,498,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
========== Modules (No Company Name) ========== ========== Win32 Services (SafeList) ========== SRV - [2008/06/25 14:01:02 | 001,245,064 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe -- (Symantec Core LC)
SRV - [2008/02/09 18:06:00 | 003,220,856 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE -- (LiveUpdate)
SRV - [2008/02/09 18:06:00 | 000,238,968 | ---- | M] (Symantec Corporation) [Disabled | Stopped] -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe -- (Automatic LiveUpdate Scheduler)
SRV - [2008/02/06 20:48:00 | 000,149,864 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (LiveUpdate Notice)
SRV - [2008/02/06 20:48:00 | 000,149,864 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService)
SRV - [2008/02/06 20:48:00 | 000,149,864 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2008/02/06 20:48:00 | 000,149,864 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2008/01/21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/08/22 02:21:00 | 000,055,640 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe -- (comHost)
SRV - [2007/01/12 14:12:50 | 000,083,512 | ---- | M] (Packard Bell BV) [Auto | Stopped] -- C:\Program Files\Packard Bell\SAXO27\HidService.exe -- (GenericHidService)
========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - [2008/06/25 14:02:50 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2008/02/19 19:06:00 | 000,024,112 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\SymIMV.sys -- (SymIM)
DRV - [2008/02/05 13:34:00 | 000,188,464 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\symtdi.sys -- (SYMTDI)
DRV - [2008/02/05 13:34:00 | 000,022,320 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\symredrv.sys -- (SYMREDRV)
DRV - [2008/01/31 19:51:00 | 000,317,616 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2008/01/31 19:51:00 | 000,279,088 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtsp.sys -- (SRTSP)
DRV - [2008/01/31 19:51:00 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2008/01/22 03:00:00 | 000,895,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20080122.037\NAVEX15.SYS -- (NAVEX15)
DRV - [2008/01/22 03:00:00 | 000,082,256 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20080122.037\NAVENG.SYS -- (NAVENG)
DRV - [2008/01/16 22:05:00 | 000,447,024 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2007/11/06 18:07:00 | 000,180,272 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20071204.002\IDSvix86.sys -- (IDSvix86)
DRV - [2007/10/31 10:23:22 | 000,124,960 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvrd32.sys -- (nvrd32)
DRV - [2007/10/31 10:23:20 | 000,115,744 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2007/10/04 16:14:00 | 007,625,088 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2007/09/10 18:17:40 | 001,035,168 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvmfdx32.sys -- (NVENETFD)
DRV - [2007/08/08 18:39:00 | 000,036,056 | ---- | M] (Symantec Corporation) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\CO_Mon.sys -- (CO_Mon)
DRV - [2007/07/07 13:13:10 | 000,012,032 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvsmu.sys -- (nvsmu)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://search.live.c...ferrer:source?}IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" =
http://www.google.co...age={startPage} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.packardbell.com/?id=9067IE - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
http://www.google.com/ieIE - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.comIE - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com/IE - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://search.live.c...ferrer:source?}IE - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" =
http://www.google.co...PBEA_en-GBGB481IE - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 2.0.0.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/04/26 23:14:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 2.0.0.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2008/06/25 14:11:20 | 000,000,000 | ---D | M]
[2008/06/25 13:53:16 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/03/28 07:07:38 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2010/11/06 19:07:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/04/26 12:59:04 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/07/29 07:49:16 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2012/03/02 20:56:18 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
[2011/05/04 23:45:28 | 000,000,000 | ---D | M] (ScanQuery) -- C:\Program Files\Mozilla Firefox\extensions\{DE9265D8-D55D-4286-9DC4-F8D8A0CA2F64}
[2008/06/25 13:53:15 | 000,000,000 | ---D | M] (Packard Bell Settings) -- C:\Program Files\Mozilla Firefox\extensions\
[email protected][2008/06/25 13:53:16 | 000,000,000 | ---D | M] (Talkback) -- C:\Program Files\Mozilla Firefox\extensions\
[email protected][2008/02/06 22:05:00 | 000,324,976 | ---- | M] (Symantec Corporation) -- C:\Program Files\mozilla firefox\components\coFFPlgn.dll
[2007/11/28 20:31:59 | 000,067,696 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jar50.dll
[2007/11/28 20:31:59 | 000,054,376 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jsd3250.dll
[2007/11/28 20:31:59 | 000,034,952 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\myspell.dll
[2007/11/28 20:31:59 | 000,046,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\spellchk.dll
[2007/11/28 20:31:59 | 000,172,144 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\xpinstal.dll
[2012/03/02 20:55:41 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2008/03/24 20:21:20 | 002,889,088 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\NPSWF32.dll
[2009/10/23 15:01:34 | 000,102,400 | ---- | M] (Zylom) -- C:\Program Files\mozilla firefox\plugins\npzylomgamesplayer.dll
[2006/06/15 11:24:15 | 000,001,538 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2006/06/15 11:24:15 | 000,000,947 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2006/06/15 11:24:15 | 000,001,077 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2006/09/11 15:39:34 | 000,000,831 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml
O1 HOSTS File: ([2006/09/18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Reg Error: Value error.) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll (Packard Bell)
O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.5\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [CarboniteSetupLite] C:\Program Files\Packard Bell\Carbonite\CarboniteSetupLitePBPreInstaller.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [isCfgWiz] C:\Program Files\Common Files\Symantec Shared\OPC\{C86EA115-FACD-4aa8-BFA2-398C677D0936}\SYMCUW.exe (Symantec Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe ( )
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1384766853-3730318048-2777797473-1001\..Trusted Ranges: GD ([http] in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{87E5E782-4A29-4C00-B50B-B57BC76F960D}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\Packard Bell\Wallpaper\Lounge_1900x1440.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\Packard Bell\Wallpaper\Lounge_1900x1440.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
========== Files/Folders - Created Within 30 Days ========== [2012/04/30 23:24:07 | 000,595,456 | ---- | C] (OldTimer Tools) -- C:\Users\rangikudoug\Desktop\OTL.exe
[2012/04/28 10:46:38 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell
[2012/04/28 09:21:05 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2012/04/27 10:32:26 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012/04/27 00:13:32 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Local\MigWiz
[2012/04/26 23:45:30 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Roaming\Macromedia
[2012/04/26 23:43:25 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Roaming\Adobe
[2012/04/26 23:42:34 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Roaming\Google
[2012/04/26 23:31:03 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Roaming\Symantec
[2012/04/26 23:31:02 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\Documents\My Google Gadgets
[2012/04/26 23:30:55 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Local\Google
[2012/04/26 23:30:46 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012/04/26 23:30:46 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Searches
[2012/04/26 23:30:46 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012/04/26 23:30:37 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Roaming\Identities
[2012/04/26 23:30:33 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Contacts
[2012/04/26 23:30:27 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Local\VirtualStore
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\AppData\Local\Temporary Internet Files
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\Templates
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\Start Menu
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\SendTo
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\Recent
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\PrintHood
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\NetHood
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\Documents\My Videos
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\Documents\My Pictures
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\Documents\My Music
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\My Documents
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\Local Settings
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\AppData\Local\History
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\Cookies
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\Application Data
[2012/04/26 23:30:01 | 000,000,000 | -HSD | C] -- C:\Users\rangikudoug\AppData\Local\Application Data
[2012/04/26 23:30:00 | 000,000,000 | --SD | C] -- C:\Users\rangikudoug\AppData\Roaming\Microsoft
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Videos
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Saved Games
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Pictures
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Music
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Links
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Favorites
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Downloads
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Documents
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\Desktop
[2012/04/26 23:30:00 | 000,000,000 | R--D | C] -- C:\Users\rangikudoug\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012/04/26 23:30:00 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Local\Temp
[2012/04/26 23:30:00 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Local\Microsoft
[2012/04/26 23:30:00 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData\Roaming\Media Center Programs
[2012/04/26 23:30:00 | 000,000,000 | ---D | C] -- C:\Users\rangikudoug\AppData
[2012/04/26 21:40:42 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2012/04/24 22:49:00 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2012/04/24 22:48:50 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2012/04/18 15:55:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro
[2012/04/18 15:55:34 | 000,000,000 | ---D | C] -- C:\Program Files\Optimizer Pro
[2012/04/18 15:55:24 | 000,000,000 | ---D | C] -- C:\ProgramData\SweetIM
[2012/04/18 15:55:24 | 000,000,000 | ---D | C] -- C:\Program Files\SweetIM
[2012/04/18 15:54:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codecv
[2012/04/18 15:54:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Codecv
[2012/04/18 15:53:58 | 000,000,000 | ---D | C] -- C:\codec-info
========== Files - Modified Within 30 Days ========== [2012/04/30 23:24:13 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Users\rangikudoug\Desktop\OTL.exe
[2012/04/30 22:41:03 | 000,598,782 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/04/30 22:41:03 | 000,104,658 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/04/30 22:36:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/04/30 22:35:20 | 000,003,216 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/04/30 22:35:20 | 000,003,216 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/04/30 22:30:00 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\Recovery DVD Creator-Rangiku.job
[2012/04/30 07:05:00 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/04/30 06:56:40 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/04/28 14:24:51 | 000,001,589 | ---- | M] () -- C:\Users\Public\Desktop\Browser Choice.lnk
[2012/04/28 10:51:28 | 000,297,104 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/04/27 16:42:47 | 000,022,016 | ---- | M] () -- C:\Users\rangikudoug\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/04/27 10:32:26 | 288,732,519 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012/04/26 23:42:33 | 000,000,943 | ---- | M] () -- C:\Users\rangikudoug\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/04/26 23:18:02 | 000,047,092 | ---- | M] () -- C:\Windows\System32\license.rtf
========== Files Created - No Company Name ========== [2012/04/28 14:24:51 | 000,001,589 | ---- | C] () -- C:\Users\Public\Desktop\Browser Choice.lnk
[2012/04/28 10:46:57 | 000,000,886 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/04/28 10:46:55 | 000,000,882 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/04/28 09:57:12 | 000,106,605 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2012/04/28 09:57:12 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2012/04/28 09:57:09 | 011,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex
[2012/04/28 09:18:16 | 000,201,184 | ---- | C] () -- C:\Windows\System32\winrm.vbs
[2012/04/28 09:18:16 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml
[2012/04/28 09:18:16 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl
[2012/04/27 16:12:51 | 000,022,016 | ---- | C] () -- C:\Users\rangikudoug\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/04/27 10:31:29 | 288,732,519 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012/04/27 10:07:22 | 002,501,921 | ---- | C] () -- C:\Windows\System32\wlan.tmf
[2012/04/26 23:42:33 | 000,000,943 | ---- | C] () -- C:\Users\rangikudoug\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/04/26 23:30:51 | 000,000,949 | ---- | C] () -- C:\Users\rangikudoug\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012/04/26 23:30:41 | 000,000,944 | ---- | C] () -- C:\Users\rangikudoug\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2012/04/26 23:30:33 | 000,000,915 | ---- | C] () -- C:\Users\rangikudoug\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
[2012/04/26 23:30:00 | 000,000,258 | ---- | C] () -- C:\Users\rangikudoug\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2012/04/26 23:30:00 | 000,000,240 | ---- | C] () -- C:\Users\rangikudoug\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2012/04/26 23:28:18 | 000,000,344 | ---- | C] () -- C:\Windows\tasks\Recovery DVD Creator-Rangiku.job
[2012/04/19 11:14:58 | 000,002,425 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2011/03/21 14:38:32 | 000,000,056 | ---- | C] () -- C:\ProgramData\ezsidmv.dat
========== LOP Check ========== [2012/04/30 22:30:00 | 000,000,344 | ---- | M] () -- C:\Windows\Tasks\Recovery DVD Creator-Rangiku.job
[2012/04/30 22:35:31 | 000,010,804 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.exe >[2007/11/07 09:03:18 | 000,562,688 | ---- | M] (Microsoft Corporation) -- C:\install.exe
========== Alternate Data Streams ========== @Alternate Data Stream - 233 bytes -> C:\ProgramData\TEMP:CEE4A457
@Alternate Data Stream - 209 bytes -> C:\ProgramData\TEMP:A4AF8D0D
@Alternate Data Stream - 161 bytes -> C:\ProgramData\TEMP:5E9B629B
@Alternate Data Stream - 102 bytes -> C:\ProgramData\TEMP:8D09A3F7
< End of report >