[bettei]

I noticed as my home Yahoo page loads I see "yield Manager", and a bunch of other gibberish not normally there. Also when I am on the web, I get "Firefox has prevented page from being redirected" all the time. I have run Malware Antibytes, do not see anything. Super Antispyware picked up some tracking cookies,and that is all so far. I did see Zelkova 3 or something like that flash by on the OTL.

Anyway, here is my OTL log..I hope, and thanks!
OTL logfile created on: 5/25/2012 12:46:27 PM - Run 3
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 65.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 270.65 Gb Total Space | 222.54 Gb Free Space | 82.23% Space Free | Partition Type: NTFS
Drive D: | 8.78 Gb Total Space | 0.20 Gb Free Space | 2.24% Space Free | Partition Type: FAT32

Computer Name: BETTE | User Name: HP_Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/05/11 15:50:16 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
PRC - [2012/05/04 08:08:13 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2012/05/04 08:07:52 | 000,016,824 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\plugin-container.exe
PRC - [2012/04/12 17:12:16 | 000,918,880 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe
PRC - [2012/04/03 07:59:00 | 001,015,464 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Anti-Virus\fssm32.exe
PRC - [2012/04/03 07:58:59 | 000,548,520 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Anti-Virus\fsgk32.exe
PRC - [2012/02/27 00:15:42 | 000,055,144 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2012/02/24 16:30:04 | 000,186,760 | ---- | M] () -- C:\Program Files\Photodex\ProShowGold\scsiaccess.exe
PRC - [2011/11/08 09:13:52 | 000,488,104 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Anti-Virus\fsav32.exe
PRC - [2011/05/23 07:51:23 | 000,061,088 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\ORSP Client\fsorsp.exe
PRC - [2011/01/31 14:22:08 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Desktop\OTL.exe
PRC - [2010/04/11 15:45:23 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2010/04/07 10:40:20 | 000,199,344 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Common\FSM32.EXE
PRC - [2010/04/07 10:40:20 | 000,187,056 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Common\FSMA32.EXE
PRC - [2010/04/07 10:40:20 | 000,088,752 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Common\FSHDLL32.EXE
PRC - [2010/04/07 10:38:38 | 000,522,928 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\FWES\program\fsdfwd.exe
PRC - [2010/04/07 10:37:50 | 000,219,824 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Anti-Virus\fsgk32st.exe
PRC - [2008/08/26 20:02:24 | 000,014,336 | ---- | M] (Agere Systems) -- C:\Program Files\LSI SoftModem\agrsmsvc.exe
PRC - [2008/07/21 17:15:14 | 000,193,888 | ---- | M] (Seagate Technology LLC) -- C:\Program Files\Maxtor\Sync\SyncServices.exe
PRC - [2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005/11/08 16:51:54 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
PRC - [2005/10/12 21:30:24 | 000,086,140 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe


========== Modules (SafeList) ==========

MOD - [2011/01/31 14:22:08 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Desktop\OTL.exe
MOD - [2010/08/23 11:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2010/04/07 10:40:00 | 000,330,416 | ---- | M] (F-Secure Corporation) -- c:\Program Files\Frontier\Security\HIPS\fshook32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- -- (ACDaemon)
SRV - [2012/05/11 15:50:16 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2012/05/04 08:08:14 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/04/12 17:12:16 | 000,918,880 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe -- (vToolbarUpdater10.2.0)
SRV - [2012/02/27 00:15:42 | 000,055,144 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2012/02/24 16:30:04 | 000,186,760 | ---- | M] () [Auto | Running] -- C:\Program Files\Photodex\ProShowGold\scsiaccess.exe -- (ScsiAccess)
SRV - [2011/05/23 07:51:23 | 000,061,088 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\Frontier\Security\ORSP Client\fsorsp.exe -- (FSORSPClient)
SRV - [2010/04/07 10:40:20 | 000,187,056 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\Frontier\Security\Common\FSMA32.EXE -- (FSMA)
SRV - [2010/04/07 10:38:38 | 000,522,928 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\Frontier\Security\FWES\Program\fsdfwd.exe -- (FSDFWD)
SRV - [2010/04/07 10:37:50 | 000,219,824 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\Frontier\Security\Anti-Virus\fsgk32st.exe -- (F-Secure Gatekeeper Handler Starter)
SRV - [2008/08/26 20:02:24 | 000,014,336 | ---- | M] (Agere Systems) [Auto | Running] -- C:\Program Files\LSI SoftModem\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2008/07/21 17:15:14 | 000,193,888 | ---- | M] (Seagate Technology LLC) [Auto | Running] -- C:\Program Files\Maxtor\Sync\SyncServices.exe -- (Maxtor Sync Service)
SRV - [2005/11/08 16:51:54 | 000,180,224 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe -- (ELService)
SRV - [2005/10/12 21:30:24 | 000,086,140 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMon) Intel®


========== Driver Services (SafeList) ==========

DRV - [2012/05/11 15:50:03 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2012/05/11 15:50:03 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2012/05/09 07:49:00 | 000,044,184 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\Drivers\fsbts.sys -- (fsbts)
DRV - [2011/09/08 07:41:57 | 000,148,632 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\Frontier\Security\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper)
DRV - [2011/08/17 14:27:04 | 000,197,736 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2011/02/01 16:09:56 | 001,677,440 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\iegdmini.sys -- (iegdmini)
DRV - [2011/02/01 16:09:54 | 000,038,784 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sdvo.sys -- (sdvo)
DRV - [2011/02/01 16:09:54 | 000,036,864 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tv.sys -- (tv)
DRV - [2011/02/01 16:09:54 | 000,011,264 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\analog.sys -- (analog)
DRV - [2011/02/01 16:09:54 | 000,010,496 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lvds.sys -- (lvds)
DRV - [2010/11/04 15:18:04 | 000,102,728 | ---- | M] (Matrox Graphics Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\MxEFUF32.sys -- (MxEFUF)
DRV - [2010/04/07 10:40:00 | 000,068,144 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Program Files\Frontier\Security\HIPS\drivers\fshs.sys -- (F-Secure HIPS)
DRV - [2010/04/07 10:38:36 | 000,080,080 | ---- | M] (F-Secure Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\fsdfw.sys -- (FSFW)
DRV - [2010/04/04 11:14:00 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2009/10/15 11:05:54 | 000,016,000 | ---- | M] (SysNucleus) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\udsstub.sys -- (udsstub)
DRV - [2008/10/29 21:43:44 | 001,204,128 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2008/04/13 11:36:05 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007/05/03 13:37:08 | 000,022,152 | ---- | M] (Maxtor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mxopswd.sys -- (MXOPSWD)
DRV - [2006/12/02 13:19:30 | 000,050,688 | ---- | M] (Sonic Solutions) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\RxFilter.sys -- (RxFilter)
DRV - [2006/11/01 09:59:36 | 000,009,400 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLADResM.SYS -- (DLADResM)
DRV - [2006/11/01 09:59:10 | 000,094,648 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS -- (DLAUDFAM)
DRV - [2006/11/01 09:59:10 | 000,035,064 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLABMFSM.SYS -- (DLABMFSM)
DRV - [2006/11/01 09:59:08 | 000,098,104 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS -- (DLAUDF_M)
DRV - [2006/11/01 09:59:06 | 000,026,744 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS -- (DLAOPIOM)
DRV - [2006/11/01 09:59:04 | 000,032,472 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS -- (DLABOIOM)
DRV - [2006/11/01 09:59:02 | 000,104,760 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS -- (DLAIFS_M)
DRV - [2006/11/01 09:59:02 | 000,014,520 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS -- (DLAPoolM)
DRV - [2006/10/25 09:22:22 | 000,099,816 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\DRVMCDB.SYS -- (DRVMCDB)
DRV - [2006/09/15 10:45:24 | 000,012,920 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS -- (DLACDBHM)
DRV - [2006/09/15 10:45:22 | 000,028,184 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLARTL_M.SYS -- (DLARTL_M)
DRV - [2006/09/15 10:42:52 | 000,051,768 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DRVNDDM.SYS -- (DRVNDDM)
DRV - [2006/03/08 07:27:12 | 004,246,016 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2005/12/12 17:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PS2.sys -- (Ps2)
DRV - [2005/11/08 16:51:40 | 000,007,808 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ELacpi.sys -- (ELacpi)
DRV - [2005/11/08 16:51:38 | 000,007,040 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ELmon.sys -- (ELmon)
DRV - [2005/11/08 16:51:22 | 000,006,912 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ELkbd.sys -- (ELkbd)
DRV - [2005/11/08 16:51:20 | 000,006,400 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ELmou.sys -- (ELmou)
DRV - [2005/11/08 16:51:18 | 000,010,112 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ELhid.sys -- (ELhid)
DRV - [2005/10/12 21:07:12 | 000,874,240 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\iaStor.sys -- (iaStor)
DRV - [2005/04/14 22:00:00 | 000,273,296 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\STAC97.sys -- (STAC97) 3DP Edition v9.12 (SigmaTel C-Major Audio)
DRV - [2004/08/03 16:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [1999/09/10 12:06:00 | 000,025,244 | ---- | M] (Adaptec) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\ASPI32.SYS -- (ASPI32)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.co...ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo....fr=ytff-tyc&p="
FF - prefs.js..browser.search.param.yahoo-fr: "moz2-ytff-tyc"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "moz2-ytff-tyc"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/"
FF - prefs.js..keyword.URL: "http://search.yahoo....fr=ytff-tyc&p="

FF - HKLM\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/04/11 15:46:29 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\avg@toolbar: C:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\ [2012/04/12 17:12:23 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/05/04 08:08:14 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/04/13 09:21:19 | 000,000,000 | ---D | M]

[2008/12/20 12:56:10 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Extensions
[2012/05/18 08:31:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Firefox\Profiles\9rsjib6j.default\extensions
[2012/04/13 15:02:49 | 000,000,000 | ---D | M] (Toolbar Buttons) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Firefox\Profiles\9rsjib6j.default\extensions\{03B08592-E5B4-45ff-A0BE-C1D975458688}
[2010/04/27 08:38:18 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Firefox\Profiles\9rsjib6j.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/05/18 08:31:39 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Firefox\Profiles\9rsjib6j.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2008/12/29 09:10:53 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Firefox\Profiles\9rsjib6j.default\extensions\{f152489f-b189-4550-81fd-7d996d242be7}-trash
[2012/04/13 10:23:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) --
() (No name found) -- C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR.YOUR-4DACD0EA75\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\9RSJIB6J.DEFAULT\EXTENSIONS\{19EB90DC-A456-458B-8AAC-616D91AAFCE1}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR.YOUR-4DACD0EA75\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\9RSJIB6J.DEFAULT\EXTENSIONS\[email protected]
[2012/05/04 08:08:14 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2010/07/17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2012/04/12 17:12:11 | 000,003,749 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
[2012/03/12 23:38:32 | 000,002,252 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\bing.xml
[2012/03/12 23:38:32 | 000,002,040 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2008/12/27 15:19:28 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [capfupgrade] File not found
O4 - HKLM..\Run: [cctray] File not found
O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files\Frontier\Security\Common\FSM32.EXE (F-Secure Corporation)
O4 - HKLM..\Run: [F-Secure TNB] C:\Program Files\Frontier\Security\FSGUI\TNBUtil.exe (F-Secure Corporation)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Frontier\Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Frontier\Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Frontier\Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Frontier\Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O15 - HKCU\..Trusted Domains: msn.com ([www] * in Trusted sites)
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://support.micr...veX/MSDcode.cab (Microsoft Data Collection Control)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebo...toUploader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} http://housecall65.t...ivex/hcImpl.cab (Trend Micro ActiveX Scan Agent 6.6)
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} http://ipgweb.cce.hp...ads/sysinfo.cab (SysData Class)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onec...lscbase5483.cab (Windows Live Safety Center Base Module)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.mi...b?1210766804562 (MUWebControl Class)
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} http://www.ca.com/us...nfo/webscan.cab (WScanCtl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E6BB2089-163F-466B-812A-748096614DFD} http://cainternetsec...r/cascanner.cab (CAScanner Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.254.254 192.168.254.254
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Local Settings\Application Data\Microsoft\Wallpaper2.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Local Settings\Application Data\Microsoft\Wallpaper2.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/06/02 04:01:47 | 000,000,100 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2001/07/27 15:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2009/05/06 12:41:14 | 000,000,000 | RHSD | M] - D:\autorun.inf -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/05/24 08:29:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Audacity
[2012/05/20 12:24:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012_psdata
[2012/05/14 16:55:31 | 000,135,168 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxres.dll
[2012/05/04 08:08:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Mozilla
[2012/05/04 08:08:43 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012/05/02 11:03:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\iTunes
[2012/05/02 11:02:49 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2009/03/18 09:02:34 | 007,986,920 | ---- | C] (Xequte Software ) -- C:\Program Files\pixplay.exe
[2005/04/22 04:18:34 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Program Files\stv.dll
[2005/04/22 04:18:32 | 000,546,304 | ---- | C] (Microsoft Corporation) -- C:\Program Files\sbox.dll
[2005/04/22 04:18:20 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSVcdPublish.dll
[2005/04/22 04:18:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXWavDest.dll
[2005/04/22 04:18:18 | 000,851,968 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSAutoFix.dll
[2005/04/22 04:18:18 | 000,561,152 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSCore.dll
[2005/04/22 04:18:18 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPhotoStory.exe
[2005/04/22 04:18:18 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSTransitionFilter.dll
[2005/04/22 04:18:18 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSSourceFilter.dll
[2005/04/22 04:18:18 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXCabinet.dll
[2005/04/22 04:18:18 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSPublish.dll
[2005/04/22 04:18:16 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piwa.dll
[2005/04/22 04:18:06 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piproj.dll
[2005/04/22 04:17:40 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Program Files\ImprtWiz.exe
[2005/04/22 04:17:40 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Program Files\gtv.dll
[2005/04/22 04:17:34 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Program Files\cpitv.dll
[2005/04/22 04:17:32 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Program Files\CameraRaw.dll
[2005/04/22 04:17:28 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PodMain.dll
[2005/04/22 04:17:26 | 000,885,248 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PodData.dll
[2005/04/22 04:17:24 | 000,772,608 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piutil.dll
[2005/04/22 04:17:24 | 000,339,456 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piview.dll
[2005/04/22 04:17:22 | 002,848,256 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pitask.dll
[2005/04/22 04:17:22 | 000,654,336 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piedit.dll
[2005/04/22 04:17:22 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piphp.dll
[2005/04/22 04:17:22 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pisctv.dll
[2005/04/22 04:17:22 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pimix.dll
[2005/04/22 04:17:20 | 003,266,560 | ---- | C] (Microsoft Corporation) -- C:\Program Files\picore.dll
[2005/04/22 04:17:20 | 000,561,152 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pical.dll
[2005/04/22 04:17:20 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pibase.dll
[2005/04/22 04:14:54 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pi.exe
[2005/04/22 04:14:24 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pip.exe
[2005/04/22 04:09:46 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Pod.exe
[2005/03/30 05:10:28 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Program Files\custsat.dll
[2005/03/24 01:30:16 | 000,008,704 | ---- | C] (Microsoft® Corporation) -- C:\Program Files\workssvc.dll
[2005/03/24 01:30:08 | 000,487,424 | R--- | C] (Microsoft Corporation) -- C:\Program Files\msvcp70.dll
[2005/03/24 01:30:08 | 000,344,064 | R--- | C] (Microsoft Corporation) -- C:\Program Files\msvcr70.dll
[2005/03/24 01:27:28 | 004,112,451 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piservr5.dll
[2005/03/24 01:27:24 | 000,186,952 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dw15.exe
[2005/03/24 01:27:22 | 000,868,352 | ---- | C] (Microsoft® Corporation) -- C:\Program Files\MiniQD6.dll
[2005/03/24 01:27:20 | 000,127,033 | ---- | C] (Microsoft® Corporation) -- C:\Program Files\cpiqrtf5.dll
[2005/03/24 01:27:14 | 001,712,128 | ---- | C] (Microsoft Corporation) -- C:\Program Files\gdiplus.dll
[2005/03/24 01:26:24 | 002,945,024 | ---- | C] (Nikon Corporation) -- C:\Program Files\NkBrowseLib4.dll
[2005/03/24 01:26:24 | 000,659,456 | ---- | C] (Canon Inc.) -- C:\Program Files\RCRAPCLS.dll
[2005/03/24 01:26:24 | 000,356,352 | ---- | C] (Canon Inc.) -- C:\Program Files\RDSDK.dll
[2005/03/24 01:26:24 | 000,356,352 | ---- | C] (CANON INC.) -- C:\Program Files\rdDcd.dll
[2005/03/24 01:26:24 | 000,356,352 | ---- | C] (Canon Inc.) -- C:\Program Files\rcDcd.dll
[2005/03/24 01:26:24 | 000,327,680 | ---- | C] (Canon Inc.) -- C:\Program Files\RCSDK.dll
[2005/03/24 01:26:24 | 000,266,240 | ---- | C] (Canon Inc.) -- C:\Program Files\rcParse.dll
[2005/03/24 01:26:24 | 000,229,376 | ---- | C] (Canon Inc.) -- C:\Program Files\rdParse.dll
[2005/03/24 01:26:24 | 000,188,416 | ---- | C] (CANON INC.) -- C:\Program Files\rdDvlp.dll
[2005/03/24 01:26:24 | 000,176,128 | ---- | C] (Nikon Corporation) -- C:\Program Files\Strato4.dll
[2005/03/24 01:26:24 | 000,151,552 | ---- | C] (CANON INC.) -- C:\Program Files\rcDvlp.dll
[2005/03/24 01:26:24 | 000,110,592 | ---- | C] (Nikon Corporation) -- C:\Program Files\RCSigProc.dll
[2005/03/24 01:26:24 | 000,106,496 | ---- | C] (Nikon Corporation) -- C:\Program Files\Zelkova3.dll
[2005/03/24 01:26:22 | 000,774,144 | ---- | C] (Canon Inc.) -- C:\Program Files\CDRAPCLS.dll
[2005/03/24 01:26:22 | 000,434,176 | ---- | C] (Canon Inc.) -- C:\Program Files\psdkdll.dll
[2005/03/24 01:26:22 | 000,413,696 | ---- | C] (Canon Inc.) -- C:\Program Files\CDPTPCLT.dll
[2005/03/24 01:26:22 | 000,380,928 | ---- | C] (CANON INC.) -- C:\Program Files\deImg404.dll
[2005/03/24 01:26:22 | 000,360,448 | ---- | C] (Canon Inc.) -- C:\Program Files\RC2DVLP.dll
[2005/03/24 01:26:22 | 000,356,352 | ---- | C] (Canon Inc.) -- C:\Program Files\CDPTPCLS.dll
[2005/03/24 01:26:22 | 000,356,352 | ---- | C] (CANON INC.) -- C:\Program Files\cdDcd.dll
[2005/03/24 01:26:22 | 000,331,776 | ---- | C] (Canon Inc.) -- C:\Program Files\CDSDK.dll
[2005/03/24 01:26:22 | 000,258,048 | ---- | C] (CANON INC.) -- C:\Program Files\deImg140.dll
[2005/03/24 01:26:22 | 000,253,952 | ---- | C] (Canon Inc.) -- C:\Program Files\deImgT41.dll
[2005/03/24 01:26:22 | 000,253,952 | ---- | C] (Canon Inc.) -- C:\Program Files\deImgT40.dll
[2005/03/24 01:26:22 | 000,253,952 | ---- | C] (CANON INC.) -- C:\Program Files\deImg139.dll
[2005/03/24 01:26:22 | 000,253,952 | ---- | C] (CANON INC.) -- C:\Program Files\deImg137.dll
[2005/03/24 01:26:22 | 000,241,664 | ---- | C] (Canon Inc.) -- C:\Program Files\deImgT50.dll
[2005/03/24 01:26:22 | 000,229,376 | ---- | C] (Canon Inc.) -- C:\Program Files\cdParse.dll
[2005/03/24 01:26:22 | 000,221,184 | ---- | C] (Canon Inc.) -- C:\Program Files\pscParse.dll
[2005/03/24 01:26:22 | 000,212,992 | ---- | C] (Canon Inc) -- C:\Program Files\DeImgT31.dll
[2005/03/24 01:26:22 | 000,204,800 | ---- | C] (Canon) -- C:\Program Files\deImg131.dll
[2005/03/24 01:26:22 | 000,200,704 | ---- | C] (Canon) -- C:\Program Files\deImg129.dll
[2005/03/24 01:26:22 | 000,188,416 | ---- | C] (Canon) -- C:\Program Files\deImg121.dll
[2005/03/24 01:26:22 | 000,188,416 | ---- | C] (CANON INC.) -- C:\Program Files\cdDvlp.dll
[2005/03/24 01:26:22 | 000,180,224 | ---- | C] (CANON INC.) -- C:\Program Files\pscDevUI.dll
[2005/03/24 01:26:22 | 000,180,224 | ---- | C] (CANON INC.) -- C:\Program Files\deImgT32.dll
[2005/03/24 01:26:22 | 000,172,032 | ---- | C] (CANON INC.) -- C:\Program Files\deImg110.dll
[2005/03/24 01:26:22 | 000,167,936 | ---- | C] (Canon) -- C:\Program Files\IWrap.dll
[2005/03/24 01:26:22 | 000,155,648 | ---- | C] (CANON INC.) -- C:\Program Files\deImgT2X.dll
[2005/03/24 01:26:22 | 000,147,456 | ---- | C] (CANON INC.) -- C:\Program Files\deImgT10.dll
[2005/03/24 01:26:22 | 000,135,168 | ---- | C] (Canon Inc.) -- C:\Program Files\pscCllct.dll
[2005/03/24 01:26:22 | 000,098,304 | ---- | C] (Canon Inc.) -- C:\Program Files\pscSetup.dll
[2005/03/24 01:26:22 | 000,073,728 | ---- | C] (Canon Inc.) -- C:\Program Files\pscl2STI.dll
[2005/03/24 01:26:22 | 000,057,344 | ---- | C] (Canon Inc.) -- C:\Program Files\pscAdimg.dll
[2005/03/24 01:24:50 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Program Files\MFC71.dll
[2005/03/24 01:24:50 | 000,401,462 | ---- | C] (Microsoft Corporation) -- C:\Program Files\msvcp60.dll
[2005/03/24 01:23:06 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Program Files\SQLSE20.dll
[2005/03/24 01:23:04 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Program Files\SQLDB20.dll
[2005/03/24 00:59:42 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\Program Files\cutout.dll
[2005/03/24 00:55:08 | 013,049,856 | ---- | C] (Sonic Solutions) -- C:\Program Files\AuthorScriptLibWin.dll
[2005/03/24 00:55:06 | 000,925,696 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgvout.004
[2005/03/24 00:55:06 | 000,923,648 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgvout.003
[2005/03/24 00:55:06 | 000,923,648 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgvout.002
[2005/03/24 00:55:06 | 000,914,432 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgvout.001
[2005/03/24 00:55:06 | 000,278,528 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgaout.dll
[2005/03/24 00:55:06 | 000,057,344 | R--- | C] (Sonic Solutions) -- C:\Program Files\pxhpinst.exe
[2005/03/24 00:55:06 | 000,024,576 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgcheck.dll
[2005/03/24 00:55:06 | 000,014,848 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgvout.dll
[2005/03/24 00:55:04 | 000,114,688 | R--- | C] (Sonic Solutions) -- C:\Program Files\PrimoSDK.dll
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/05/25 07:41:38 | 000,000,562 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled scanning task.job
[2012/05/25 07:41:13 | 000,000,300 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-767200610-1056796544-3569009029-1008.job
[2012/05/25 07:41:10 | 2137,481,216 | -HS- | M] () -- C:\hiberfil.sys
[2012/05/25 07:41:10 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/05/24 16:01:50 | 373,983,444 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.pxc
[2012/05/24 16:01:47 | 000,271,287 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.psh
[2012/05/24 13:17:30 | 000,271,287 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.bak
[2012/05/24 12:25:16 | 000,271,284 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b01
[2012/05/24 11:34:15 | 000,300,089 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b02
[2012/05/24 10:55:24 | 001,319,208 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\glad end.mp3
[2012/05/24 10:54:04 | 000,727,840 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\glad split.wav
[2012/05/24 10:54:00 | 000,001,028 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\WavCodec.wff
[2012/05/24 10:47:22 | 001,319,208 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Glad You Came edit.mp3
[2012/05/24 09:24:00 | 000,300,164 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b03
[2012/05/23 20:01:11 | 000,300,054 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b04
[2012/05/23 19:44:29 | 000,300,054 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b05
[2012/05/23 19:11:49 | 000,300,054 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b06
[2012/05/23 18:57:01 | 000,299,799 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b07
[2012/05/23 17:58:33 | 000,264,389 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b08
[2012/05/23 17:08:57 | 000,265,424 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b09
[2012/05/21 15:09:22 | 000,000,308 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-767200610-1056796544-3569009029-1008.job
[2012/05/17 16:20:54 | 266,849,497 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.pxc
[2012/05/17 16:20:53 | 000,504,878 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.psh
[2012/05/16 09:38:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2012/05/15 15:18:46 | 000,504,878 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.bak
[2012/05/11 17:45:04 | 000,414,106 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.b05
[2012/05/11 17:41:17 | 000,405,657 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.b06
[2012/05/11 16:01:54 | 000,302,824 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/05/11 15:59:24 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/05/11 15:53:00 | 000,473,418 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/05/11 15:53:00 | 000,083,266 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/05/09 07:49:00 | 000,044,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\fsbts.sys
[2012/05/06 18:01:36 | 000,419,488 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/05/06 18:01:36 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/05/02 18:01:12 | 000,410,591 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.b07
[2012/05/02 17:06:43 | 000,419,221 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.b08
[2012/05/02 16:39:20 | 000,421,817 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.b09
[2012/05/02 11:03:35 | 000,001,553 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2012/04/25 14:16:20 | 000,000,795 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/05/24 10:57:52 | 001,319,208 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Glad You Came edit.mp3
[2012/05/24 10:56:51 | 001,319,208 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\glad end.mp3
[2012/05/24 10:56:33 | 000,727,840 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\glad split.wav
[2012/05/23 15:36:01 | 000,002,114 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\proshow-burn.log
[2012/05/18 12:07:02 | 373,983,444 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.pxc
[2012/05/18 12:07:02 | 000,300,164 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b03
[2012/05/18 12:07:02 | 000,300,089 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b02
[2012/05/18 12:07:02 | 000,300,054 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b06
[2012/05/18 12:07:02 | 000,300,054 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b05
[2012/05/18 12:07:02 | 000,300,054 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b04
[2012/05/18 12:07:02 | 000,299,799 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b07
[2012/05/18 12:07:02 | 000,271,287 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.psh
[2012/05/18 12:07:02 | 000,271,287 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.bak
[2012/05/18 12:07:02 | 000,271,284 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b01
[2012/05/18 12:07:02 | 000,265,424 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b09
[2012/05/18 12:07:02 | 000,264,389 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b08
[2012/05/11 15:48:38 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2012/05/02 11:03:35 | 000,001,553 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2012/04/21 16:16:01 | 000,038,784 | ---- | C] () -- C:\WINDOWS\System32\drivers\sdvo.sys
[2012/04/21 16:16:01 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\drivers\tv.sys
[2012/04/21 16:16:00 | 000,401,792 | ---- | C] () -- C:\WINDOWS\System32\iegd3dg3.dll
[2012/04/21 16:16:00 | 000,011,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\analog.sys
[2012/04/21 16:15:59 | 000,010,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\lvds.sys
[2012/04/01 14:32:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SETUP32.INI
[2012/03/02 17:11:13 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2012/02/17 15:44:08 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/05/02 11:32:40 | 000,044,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\fsbts.sys
[2010/05/20 17:32:08 | 000,005,790 | R--- | C] () -- C:\Program Files\EULA.nor
[2010/03/29 15:26:16 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2010/01/02 15:29:24 | 000,056,056 | ---- | C] () -- C:\WINDOWS\System32\DLAAPI_W.DLL
[2009/04/12 14:03:58 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009/04/12 14:03:58 | 000,383,238 | ---- | C] () -- C:\WINDOWS\System32\libmp3lame-0.dll
[2009/04/06 11:40:50 | 000,096,768 | ---- | C] () -- C:\WINDOWS\SlantAdj.dll
[2009/04/06 11:40:50 | 000,000,072 | ---- | C] () -- C:\WINDOWS\System32\epDPE.ini
[2009/01/09 20:07:22 | 000,007,547 | R--- | C] () -- C:\Program Files\EULA.ger
[2009/01/09 20:07:22 | 000,006,808 | R--- | C] () -- C:\Program Files\EULA.itn
[2009/01/09 20:07:22 | 000,006,748 | R--- | C] () -- C:\Program Files\EULA.rus
[2009/01/09 20:07:22 | 000,006,668 | R--- | C] () -- C:\Program Files\EULA.pol
[2009/01/09 20:07:22 | 000,006,300 | R--- | C] () -- C:\Program Files\EULA.spa
[2009/01/09 20:07:22 | 000,006,120 | R--- | C] () -- C:\Program Files\EULA.dut
[2009/01/09 20:07:22 | 000,005,968 | R--- | C] () -- C:\Program Files\EULA.frn
[2009/01/09 20:07:22 | 000,005,461 | R--- | C] () -- C:\Program Files\EULA.swe
[2009/01/09 20:07:22 | 000,005,452 | R--- | C] () -- C:\Program Files\EULA.brz
[2009/01/09 20:07:22 | 000,005,304 | R--- | C] () -- C:\Program Files\EULA.cze
[2009/01/09 20:07:22 | 000,005,237 | R--- | C] () -- C:\Program Files\EULA.jpn
[2009/01/09 20:07:22 | 000,004,849 | R--- | C] () -- C:\Program Files\EULA.eng
[2009/01/09 20:07:22 | 000,004,711 | R--- | C] () -- C:\Program Files\EULA.kor
[2009/01/09 20:07:22 | 000,003,380 | R--- | C] () -- C:\Program Files\EULA.cht
[2009/01/09 20:07:22 | 000,003,345 | R--- | C] () -- C:\Program Files\EULA.chs
[2008/09/02 11:38:52 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\wklnhst.dat
[2008/08/28 13:07:37 | 000,001,028 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\WavCodec.wff
[2008/05/24 20:47:28 | 000,035,328 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/05/18 06:55:30 | 000,091,600 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\PatchUpdate_HP_CounterReport_Update_HPSU.log
[2008/05/09 19:55:05 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2008/05/09 17:11:21 | 000,000,155 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Local Settings\Application Data\fusioncache.dat
[2008/03/03 13:44:31 | 000,000,227 | ---- | C] () -- C:\WINDOWS\HP_CounterReport_Update_HPSU.ini
[2008/02/24 15:54:01 | 000,000,015 | ---- | C] () -- C:\WINDOWS\smapanel.ini
[2007/09/27 11:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 11:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 11:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2007/08/15 07:51:02 | 000,001,365 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2007/05/19 08:33:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini
[2007/05/13 14:10:15 | 000,000,074 | ---- | C] () -- C:\WINDOWS\MPLAYER.INI
[2007/01/17 12:57:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2006/12/14 00:01:36 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\CddbPlaylist2Roxio.dll
[2006/12/14 00:01:36 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\CddbFileTaggerRoxio.dll
[2006/11/11 14:14:00 | 000,000,022 | ---- | C] () -- C:\WINDOWS\exchng.ini
[2006/09/13 15:39:58 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2006/09/13 15:26:26 | 000,000,162 | ---- | C] () -- C:\WINDOWS\EPSON Perfection 2400 Photo.ini
[2006/09/10 10:34:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpqEmlSz.INI
[2006/09/08 11:45:15 | 000,000,221 | ---- | C] () -- C:\WINDOWS\NCLogConfig.ini
[2006/08/07 18:23:06 | 000,000,037 | ---- | C] () -- C:\WINDOWS\Acroread.ini
[2006/08/04 15:57:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\OpPrintServer.INI
[2006/08/03 18:26:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PestPatrol5.INI
[2006/06/02 04:26:45 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/06/02 04:07:12 | 000,028,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\USBkey.sys
[2006/06/02 04:04:00 | 000,014,315 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS
[2006/06/02 04:03:49 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll
[2006/06/02 04:01:59 | 000,000,174 | ---- | C] () -- C:\WINDOWS\QUICKEN.INI
[2006/06/02 03:59:58 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/06/02 03:50:11 | 000,000,424 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2006/06/02 03:49:35 | 000,000,698 | ---- | C] () -- C:\WINDOWS\NSSetDefaultBrowser.ini
[2006/06/02 03:38:26 | 000,004,641 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2006/06/02 03:34:12 | 000,000,831 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2006/06/02 03:12:21 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\pythoncom22.dll
[2006/06/02 03:12:21 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\pywintypes22.dll
[2006/06/02 03:12:03 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll
[2005/08/30 23:01:42 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/08/05 23:01:54 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2005/04/22 04:18:06 | 000,532,283 | ---- | C] () -- C:\Program Files\piproj.its
[2005/04/22 02:44:06 | 000,165,442 | ---- | C] () -- C:\Program Files\2p.its
[2005/04/22 02:44:06 | 000,060,454 | ---- | C] () -- C:\Program Files\2t.its
[2005/04/22 02:43:48 | 005,251,072 | R--- | C] () -- C:\Program Files\PIP.GDB
[2005/03/24 01:27:48 | 000,000,318 | ---- | C] () -- C:\Program Files\removabl.ico
[2005/03/24 01:27:46 | 005,763,072 | ---- | C] () -- C:\Program Files\pi.sbc
[2005/03/24 01:27:46 | 000,458,752 | ---- | C] () -- C:\Program Files\blank.sbc
[2005/03/24 01:27:46 | 000,001,406 | ---- | C] () -- C:\Program Files\PIS2.ico
[2005/03/24 01:27:46 | 000,001,406 | ---- | C] () -- C:\Program Files\PIS1.ico
[2005/03/24 01:27:46 | 000,001,078 | ---- | C] () -- C:\Program Files\PI_Works.ico
[2005/03/24 01:27:46 | 000,000,318 | ---- | C] () -- C:\Program Files\Default.ico
[2005/03/24 01:27:30 | 000,094,208 | ---- | C] () -- C:\Program Files\firstpg.qtd
[2005/03/24 01:27:30 | 000,011,264 | ---- | C] () -- C:\Program Files\secondpg.qtd
[2005/03/24 01:27:26 | 000,593,920 | ---- | C] () -- C:\Program Files\Homepub.ibd
[2005/03/24 01:27:26 | 000,013,361 | ---- | C] () -- C:\Program Files\pipcust.dic
[2005/03/24 01:27:12 | 000,005,538 | ---- | C] () -- C:\Program Files\piaszpz.dat
[2005/03/24 01:27:12 | 000,005,494 | ---- | C] () -- C:\Program Files\podwv.dat
[2005/03/24 01:27:12 | 000,000,318 | ---- | C] () -- C:\Program Files\dipunsb.001
[2005/03/24 01:26:26 | 000,000,404 | ---- | C] () -- C:\Program Files\cdlayout.dat
[2005/03/24 01:26:24 | 000,598,016 | ---- | C] () -- C:\Program Files\RdCamDat.dll
[2005/03/24 01:26:22 | 000,598,016 | ---- | C] () -- C:\Program Files\RcCamDat.dll
[2005/03/24 01:26:22 | 000,598,016 | ---- | C] () -- C:\Program Files\psCamDat.dll
[2005/03/24 01:26:22 | 000,122,880 | ---- | C] () -- C:\Program Files\CmSelDlg.dll
[2005/03/24 01:26:22 | 000,070,580 | ---- | C] () -- C:\Program Files\StartUp.png
[2005/03/24 01:26:20 | 000,275,793 | ---- | C] () -- C:\Program Files\FlyOuts.png
[2004/08/09 23:00:00 | 001,288,192 | ---- | C] () -- C:\WINDOWS\System32\quartz(2).dll
[2004/07/26 09:51:38 | 000,000,560 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2001/07/07 00:30:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
[1996/04/03 14:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys

========== Alternate Data Streams ==========

@Alternate Data Stream - 146 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1

< End of report >

[Advertisements]

Hello and welcome to Geekstogo!

We apologize for the delay in responding to your request for help.
If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

Please include a clear description of the problems you're having, along with any steps you may have performed so far.

Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

If you haven't done so yet, please go to Malware and Spyware Cleaning Guide and follow the steps instructed there. If you have already done this, we still need a new log to see what has changed since you originally posted your problem.

We need to create an OTL Report
Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Check the box that says Scan All Users.
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. I suggest you do this and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.

[Gammo]

Hello and welcome to Geekstogo!

We apologize for the delay in responding to your request for help.
If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

Please include a clear description of the problems you're having, along with any steps you may have performed so far.

Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.

If you haven't done so yet, please go to Malware and Spyware Cleaning Guide and follow the steps instructed there. If you have already done this, we still need a new log to see what has changed since you originally posted your problem.

We need to create an OTL Report
Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Check the box that says Scan All Users.
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. I suggest you do this and select Immediate E-Mail notification and click on Proceed. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

After 5 days if a topic is not replied to we assume it has been abandoned and it is closed.

[bettei]

I already posted the log from OTL above. And as for problems I am having, I am not sure if this "yield manager" I see as an internet page loads is a virus or a normal part of a page loading. There seems to be a lot of text in that line where I used just to notice "yling" or something like that. Also when I am on Facebook, I often get a notice that "Firefox has prevented a page being redirected", or something like that. So it made me question whether I had some sort of virus hijacking my web surfing. I was hoping the OTL could tell you if I had a problem or not. Pages seem slower loading too.

I have run my antivirus program, Malware Antibytes, and Super anti spyware, nothing shows up there. Hope this helps, thanks!

[bettei]

I guess what I needed to know is if that "Firefox preventing page from being redirected" is a normal thing to happen, or is spyware or something doing it? I play a couple games on Facebook, and it happens all the time on that site. Is that anything to worry about?

Thanks!

[Gammo]

I'd like a fresh OTL look to take a look at.

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Check the box that says Scan All Users.
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic.

[bettei]

I don't quite understand what you mean about two results from OTL? I ran a quick scan, but only see one report, and that is what I am posting below. Is there something else I should post for you?
Thanks
OTL logfile created on: 5/31/2012 10:12:50 AM - Run 4
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 73.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 89.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 270.65 Gb Total Space | 222.48 Gb Free Space | 82.20% Space Free | Partition Type: NTFS
Drive D: | 8.78 Gb Total Space | 0.20 Gb Free Space | 2.24% Space Free | Partition Type: FAT32

Computer Name: BETTE | User Name: HP_Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/05/29 07:21:54 | 001,028,776 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Anti-Virus\fssm32.exe
PRC - [2012/05/29 07:21:52 | 000,561,832 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Anti-Virus\fsgk32.exe
PRC - [2012/05/11 15:50:16 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
PRC - [2012/04/12 17:12:16 | 000,918,880 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe
PRC - [2012/02/27 00:15:42 | 000,055,144 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2012/02/24 16:30:04 | 000,186,760 | ---- | M] () -- C:\Program Files\Photodex\ProShowGold\scsiaccess.exe
PRC - [2011/11/08 09:13:52 | 000,488,104 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Anti-Virus\fsav32.exe
PRC - [2011/05/23 07:51:23 | 000,061,088 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\ORSP Client\fsorsp.exe
PRC - [2011/01/31 14:22:08 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Desktop\OTL.exe
PRC - [2010/04/11 15:45:23 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2010/04/07 10:40:20 | 000,199,344 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Common\FSM32.EXE
PRC - [2010/04/07 10:40:20 | 000,187,056 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Common\FSMA32.EXE
PRC - [2010/04/07 10:40:20 | 000,088,752 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Common\FSHDLL32.EXE
PRC - [2010/04/07 10:38:38 | 000,522,928 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\FWES\program\fsdfwd.exe
PRC - [2010/04/07 10:37:50 | 000,219,824 | ---- | M] (F-Secure Corporation) -- C:\Program Files\Frontier\Security\Anti-Virus\fsgk32st.exe
PRC - [2008/08/26 20:02:24 | 000,014,336 | ---- | M] (Agere Systems) -- C:\Program Files\LSI SoftModem\agrsmsvc.exe
PRC - [2008/07/21 17:15:14 | 000,193,888 | ---- | M] (Seagate Technology LLC) -- C:\Program Files\Maxtor\Sync\SyncServices.exe
PRC - [2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2005/11/08 16:51:54 | 000,180,224 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe
PRC - [2005/10/12 21:30:24 | 000,086,140 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe


========== Modules (SafeList) ==========

MOD - [2011/01/31 14:22:08 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Desktop\OTL.exe
MOD - [2010/08/23 11:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2010/04/07 10:40:00 | 000,330,416 | ---- | M] (F-Secure Corporation) -- c:\Program Files\Frontier\Security\HIPS\fshook32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- -- (ACDaemon)
SRV - [2012/05/11 15:50:16 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2012/05/04 08:08:14 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/04/12 17:12:16 | 000,918,880 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe -- (vToolbarUpdater10.2.0)
SRV - [2012/02/27 00:15:42 | 000,055,144 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2012/02/24 16:30:04 | 000,186,760 | ---- | M] () [Auto | Running] -- C:\Program Files\Photodex\ProShowGold\scsiaccess.exe -- (ScsiAccess)
SRV - [2011/05/23 07:51:23 | 000,061,088 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\Frontier\Security\ORSP Client\fsorsp.exe -- (FSORSPClient)
SRV - [2010/04/07 10:40:20 | 000,187,056 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\Frontier\Security\Common\FSMA32.EXE -- (FSMA)
SRV - [2010/04/07 10:38:38 | 000,522,928 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files\Frontier\Security\FWES\Program\fsdfwd.exe -- (FSDFWD)
SRV - [2010/04/07 10:37:50 | 000,219,824 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files\Frontier\Security\Anti-Virus\fsgk32st.exe -- (F-Secure Gatekeeper Handler Starter)
SRV - [2008/08/26 20:02:24 | 000,014,336 | ---- | M] (Agere Systems) [Auto | Running] -- C:\Program Files\LSI SoftModem\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2008/07/21 17:15:14 | 000,193,888 | ---- | M] (Seagate Technology LLC) [Auto | Running] -- C:\Program Files\Maxtor\Sync\SyncServices.exe -- (Maxtor Sync Service)
SRV - [2005/11/08 16:51:54 | 000,180,224 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology\ELService.exe -- (ELService)
SRV - [2005/10/12 21:30:24 | 000,086,140 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMon) Intel®


========== Driver Services (SafeList) ==========

DRV - [2012/05/29 07:22:43 | 000,149,672 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\Frontier\Security\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper)
DRV - [2012/05/11 15:50:03 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2012/05/11 15:50:03 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2012/05/09 07:49:00 | 000,044,184 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\Drivers\fsbts.sys -- (fsbts)
DRV - [2011/08/17 14:27:04 | 000,197,736 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2011/02/01 16:09:56 | 001,677,440 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\iegdmini.sys -- (iegdmini)
DRV - [2011/02/01 16:09:54 | 000,038,784 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sdvo.sys -- (sdvo)
DRV - [2011/02/01 16:09:54 | 000,036,864 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tv.sys -- (tv)
DRV - [2011/02/01 16:09:54 | 000,011,264 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\analog.sys -- (analog)
DRV - [2011/02/01 16:09:54 | 000,010,496 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\lvds.sys -- (lvds)
DRV - [2010/11/04 15:18:04 | 000,102,728 | ---- | M] (Matrox Graphics Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\MxEFUF32.sys -- (MxEFUF)
DRV - [2010/04/07 10:40:00 | 000,068,144 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Program Files\Frontier\Security\HIPS\drivers\fshs.sys -- (F-Secure HIPS)
DRV - [2010/04/07 10:38:36 | 000,080,080 | ---- | M] (F-Secure Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\fsdfw.sys -- (FSFW)
DRV - [2010/04/04 11:14:00 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASENUM.SYS -- (SASENUM)
DRV - [2009/10/15 11:05:54 | 000,016,000 | ---- | M] (SysNucleus) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\udsstub.sys -- (udsstub)
DRV - [2008/10/29 21:43:44 | 001,204,128 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2008/04/13 11:36:05 | 000,144,384 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007/05/03 13:37:08 | 000,022,152 | ---- | M] (Maxtor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mxopswd.sys -- (MXOPSWD)
DRV - [2006/12/02 13:19:30 | 000,050,688 | ---- | M] (Sonic Solutions) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\RxFilter.sys -- (RxFilter)
DRV - [2006/11/01 09:59:36 | 000,009,400 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLADResM.SYS -- (DLADResM)
DRV - [2006/11/01 09:59:10 | 000,094,648 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS -- (DLAUDFAM)
DRV - [2006/11/01 09:59:10 | 000,035,064 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLABMFSM.SYS -- (DLABMFSM)
DRV - [2006/11/01 09:59:08 | 000,098,104 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS -- (DLAUDF_M)
DRV - [2006/11/01 09:59:06 | 000,026,744 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS -- (DLAOPIOM)
DRV - [2006/11/01 09:59:04 | 000,032,472 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS -- (DLABOIOM)
DRV - [2006/11/01 09:59:02 | 000,104,760 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS -- (DLAIFS_M)
DRV - [2006/11/01 09:59:02 | 000,014,520 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS -- (DLAPoolM)
DRV - [2006/10/25 09:22:22 | 000,099,816 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\DRVMCDB.SYS -- (DRVMCDB)
DRV - [2006/09/15 10:45:24 | 000,012,920 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS -- (DLACDBHM)
DRV - [2006/09/15 10:45:22 | 000,028,184 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLARTL_M.SYS -- (DLARTL_M)
DRV - [2006/09/15 10:42:52 | 000,051,768 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\DRVNDDM.SYS -- (DRVNDDM)
DRV - [2006/03/08 07:27:12 | 004,246,016 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2005/12/12 17:27:00 | 000,019,072 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PS2.sys -- (Ps2)
DRV - [2005/11/08 16:51:40 | 000,007,808 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ELacpi.sys -- (ELacpi)
DRV - [2005/11/08 16:51:38 | 000,007,040 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ELmon.sys -- (ELmon)
DRV - [2005/11/08 16:51:22 | 000,006,912 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ELkbd.sys -- (ELkbd)
DRV - [2005/11/08 16:51:20 | 000,006,400 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ELmou.sys -- (ELmou)
DRV - [2005/11/08 16:51:18 | 000,010,112 | ---- | M] (Intel Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ELhid.sys -- (ELhid)
DRV - [2005/10/12 21:07:12 | 000,874,240 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\iaStor.sys -- (iaStor)
DRV - [2005/04/14 22:00:00 | 000,273,296 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\STAC97.sys -- (STAC97) 3DP Edition v9.12 (SigmaTel C-Major Audio)
DRV - [2004/08/03 16:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [1999/09/10 12:06:00 | 000,025,244 | ---- | M] (Adaptec) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\ASPI32.SYS -- (ASPI32)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.co...ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo....fr=ytff-tyc&p="
FF - prefs.js..browser.search.param.yahoo-fr: "moz2-ytff-tyc"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "moz2-ytff-tyc"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/"
FF - prefs.js..keyword.URL: "http://search.yahoo....fr=ytff-tyc&p="

FF - HKLM\software\mozilla\Firefox\extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/04/11 15:46:29 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\avg@toolbar: C:\Documents and Settings\All Users\Application Data\AVG Secure Search\10.2.0.3\ [2012/04/12 17:12:23 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/05/04 08:08:14 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/04/13 09:21:19 | 000,000,000 | ---D | M]

[2008/12/20 12:56:10 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Extensions
[2012/05/18 08:31:39 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Firefox\Profiles\9rsjib6j.default\extensions
[2012/04/13 15:02:49 | 000,000,000 | ---D | M] (Toolbar Buttons) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Firefox\Profiles\9rsjib6j.default\extensions\{03B08592-E5B4-45ff-A0BE-C1D975458688}
[2010/04/27 08:38:18 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Firefox\Profiles\9rsjib6j.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/05/18 08:31:39 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Firefox\Profiles\9rsjib6j.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2008/12/29 09:10:53 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Mozilla\Firefox\Profiles\9rsjib6j.default\extensions\{f152489f-b189-4550-81fd-7d996d242be7}-trash
[2012/04/13 10:23:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) --
() (No name found) -- C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR.YOUR-4DACD0EA75\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\9RSJIB6J.DEFAULT\EXTENSIONS\{19EB90DC-A456-458B-8AAC-616D91AAFCE1}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR.YOUR-4DACD0EA75\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\9RSJIB6J.DEFAULT\EXTENSIONS\[email protected]
[2012/05/04 08:08:14 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2010/07/17 05:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2012/04/12 17:12:11 | 000,003,749 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
[2012/03/12 23:38:32 | 000,002,252 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\bing.xml
[2012/03/12 23:38:32 | 000,002,040 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2008/12/27 15:19:28 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [capfupgrade] File not found
O4 - HKLM..\Run: [cctray] File not found
O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files\Frontier\Security\Common\FSM32.EXE (F-Secure Corporation)
O4 - HKLM..\Run: [F-Secure TNB] C:\Program Files\Frontier\Security\FSGUI\TNBUtil.exe (F-Secure Corporation)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Frontier\Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Frontier\Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Frontier\Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Frontier\Security\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O15 - HKCU\..Trusted Domains: msn.com ([www] * in Trusted sites)
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://support.micr...veX/MSDcode.cab (Microsoft Data Collection Control)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebo...toUploader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} http://housecall65.t...ivex/hcImpl.cab (Trend Micro ActiveX Scan Agent 6.6)
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} http://ipgweb.cce.hp...ads/sysinfo.cab (SysData Class)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onec...lscbase5483.cab (Windows Live Safety Center Base Module)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.mi...b?1210766804562 (MUWebControl Class)
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} http://www.ca.com/us...nfo/webscan.cab (WScanCtl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E6BB2089-163F-466B-812A-748096614DFD} http://cainternetsec...r/cascanner.cab (CAScanner Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.254.254 192.168.254.254
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Local Settings\Application Data\Microsoft\Wallpaper2.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Local Settings\Application Data\Microsoft\Wallpaper2.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/06/02 04:01:47 | 000,000,100 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2001/07/27 15:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2009/05/06 12:41:14 | 000,000,000 | RHSD | M] - D:\autorun.inf -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/05/25 16:24:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Recent
[2012/05/24 08:29:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\Audacity
[2012/05/20 12:24:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012_psdata
[2012/05/04 08:08:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Mozilla
[2012/05/04 08:08:43 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012/05/02 11:03:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\iTunes
[2012/05/02 11:02:49 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2009/03/18 09:02:34 | 007,986,920 | ---- | C] (Xequte Software ) -- C:\Program Files\pixplay.exe
[2005/04/22 04:18:34 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Program Files\stv.dll
[2005/04/22 04:18:32 | 000,546,304 | ---- | C] (Microsoft Corporation) -- C:\Program Files\sbox.dll
[2005/04/22 04:18:20 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSVcdPublish.dll
[2005/04/22 04:18:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXWavDest.dll
[2005/04/22 04:18:18 | 000,851,968 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSAutoFix.dll
[2005/04/22 04:18:18 | 000,561,152 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSCore.dll
[2005/04/22 04:18:18 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPhotoStory.exe
[2005/04/22 04:18:18 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSTransitionFilter.dll
[2005/04/22 04:18:18 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSSourceFilter.dll
[2005/04/22 04:18:18 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXCabinet.dll
[2005/04/22 04:18:18 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PIXPSPublish.dll
[2005/04/22 04:18:16 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piwa.dll
[2005/04/22 04:18:06 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piproj.dll
[2005/04/22 04:17:40 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Program Files\ImprtWiz.exe
[2005/04/22 04:17:40 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Program Files\gtv.dll
[2005/04/22 04:17:34 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Program Files\cpitv.dll
[2005/04/22 04:17:32 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Program Files\CameraRaw.dll
[2005/04/22 04:17:28 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PodMain.dll
[2005/04/22 04:17:26 | 000,885,248 | ---- | C] (Microsoft Corporation) -- C:\Program Files\PodData.dll
[2005/04/22 04:17:24 | 000,772,608 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piutil.dll
[2005/04/22 04:17:24 | 000,339,456 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piview.dll
[2005/04/22 04:17:22 | 002,848,256 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pitask.dll
[2005/04/22 04:17:22 | 000,654,336 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piedit.dll
[2005/04/22 04:17:22 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piphp.dll
[2005/04/22 04:17:22 | 000,119,296 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pisctv.dll
[2005/04/22 04:17:22 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pimix.dll
[2005/04/22 04:17:20 | 003,266,560 | ---- | C] (Microsoft Corporation) -- C:\Program Files\picore.dll
[2005/04/22 04:17:20 | 000,561,152 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pical.dll
[2005/04/22 04:17:20 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pibase.dll
[2005/04/22 04:14:54 | 000,418,304 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pi.exe
[2005/04/22 04:14:24 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Program Files\pip.exe
[2005/04/22 04:09:46 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Pod.exe
[2005/03/30 05:10:28 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Program Files\custsat.dll
[2005/03/24 01:30:16 | 000,008,704 | ---- | C] (Microsoft® Corporation) -- C:\Program Files\workssvc.dll
[2005/03/24 01:30:08 | 000,487,424 | R--- | C] (Microsoft Corporation) -- C:\Program Files\msvcp70.dll
[2005/03/24 01:30:08 | 000,344,064 | R--- | C] (Microsoft Corporation) -- C:\Program Files\msvcr70.dll
[2005/03/24 01:27:28 | 004,112,451 | ---- | C] (Microsoft Corporation) -- C:\Program Files\piservr5.dll
[2005/03/24 01:27:24 | 000,186,952 | ---- | C] (Microsoft Corporation) -- C:\Program Files\dw15.exe
[2005/03/24 01:27:22 | 000,868,352 | ---- | C] (Microsoft® Corporation) -- C:\Program Files\MiniQD6.dll
[2005/03/24 01:27:20 | 000,127,033 | ---- | C] (Microsoft® Corporation) -- C:\Program Files\cpiqrtf5.dll
[2005/03/24 01:27:14 | 001,712,128 | ---- | C] (Microsoft Corporation) -- C:\Program Files\gdiplus.dll
[2005/03/24 01:26:24 | 002,945,024 | ---- | C] (Nikon Corporation) -- C:\Program Files\NkBrowseLib4.dll
[2005/03/24 01:26:24 | 000,659,456 | ---- | C] (Canon Inc.) -- C:\Program Files\RCRAPCLS.dll
[2005/03/24 01:26:24 | 000,356,352 | ---- | C] (Canon Inc.) -- C:\Program Files\RDSDK.dll
[2005/03/24 01:26:24 | 000,356,352 | ---- | C] (CANON INC.) -- C:\Program Files\rdDcd.dll
[2005/03/24 01:26:24 | 000,356,352 | ---- | C] (Canon Inc.) -- C:\Program Files\rcDcd.dll
[2005/03/24 01:26:24 | 000,327,680 | ---- | C] (Canon Inc.) -- C:\Program Files\RCSDK.dll
[2005/03/24 01:26:24 | 000,266,240 | ---- | C] (Canon Inc.) -- C:\Program Files\rcParse.dll
[2005/03/24 01:26:24 | 000,229,376 | ---- | C] (Canon Inc.) -- C:\Program Files\rdParse.dll
[2005/03/24 01:26:24 | 000,188,416 | ---- | C] (CANON INC.) -- C:\Program Files\rdDvlp.dll
[2005/03/24 01:26:24 | 000,176,128 | ---- | C] (Nikon Corporation) -- C:\Program Files\Strato4.dll
[2005/03/24 01:26:24 | 000,151,552 | ---- | C] (CANON INC.) -- C:\Program Files\rcDvlp.dll
[2005/03/24 01:26:24 | 000,110,592 | ---- | C] (Nikon Corporation) -- C:\Program Files\RCSigProc.dll
[2005/03/24 01:26:24 | 000,106,496 | ---- | C] (Nikon Corporation) -- C:\Program Files\Zelkova3.dll
[2005/03/24 01:26:22 | 000,774,144 | ---- | C] (Canon Inc.) -- C:\Program Files\CDRAPCLS.dll
[2005/03/24 01:26:22 | 000,434,176 | ---- | C] (Canon Inc.) -- C:\Program Files\psdkdll.dll
[2005/03/24 01:26:22 | 000,413,696 | ---- | C] (Canon Inc.) -- C:\Program Files\CDPTPCLT.dll
[2005/03/24 01:26:22 | 000,380,928 | ---- | C] (CANON INC.) -- C:\Program Files\deImg404.dll
[2005/03/24 01:26:22 | 000,360,448 | ---- | C] (Canon Inc.) -- C:\Program Files\RC2DVLP.dll
[2005/03/24 01:26:22 | 000,356,352 | ---- | C] (Canon Inc.) -- C:\Program Files\CDPTPCLS.dll
[2005/03/24 01:26:22 | 000,356,352 | ---- | C] (CANON INC.) -- C:\Program Files\cdDcd.dll
[2005/03/24 01:26:22 | 000,331,776 | ---- | C] (Canon Inc.) -- C:\Program Files\CDSDK.dll
[2005/03/24 01:26:22 | 000,258,048 | ---- | C] (CANON INC.) -- C:\Program Files\deImg140.dll
[2005/03/24 01:26:22 | 000,253,952 | ---- | C] (Canon Inc.) -- C:\Program Files\deImgT41.dll
[2005/03/24 01:26:22 | 000,253,952 | ---- | C] (Canon Inc.) -- C:\Program Files\deImgT40.dll
[2005/03/24 01:26:22 | 000,253,952 | ---- | C] (CANON INC.) -- C:\Program Files\deImg139.dll
[2005/03/24 01:26:22 | 000,253,952 | ---- | C] (CANON INC.) -- C:\Program Files\deImg137.dll
[2005/03/24 01:26:22 | 000,241,664 | ---- | C] (Canon Inc.) -- C:\Program Files\deImgT50.dll
[2005/03/24 01:26:22 | 000,229,376 | ---- | C] (Canon Inc.) -- C:\Program Files\cdParse.dll
[2005/03/24 01:26:22 | 000,221,184 | ---- | C] (Canon Inc.) -- C:\Program Files\pscParse.dll
[2005/03/24 01:26:22 | 000,212,992 | ---- | C] (Canon Inc) -- C:\Program Files\DeImgT31.dll
[2005/03/24 01:26:22 | 000,204,800 | ---- | C] (Canon) -- C:\Program Files\deImg131.dll
[2005/03/24 01:26:22 | 000,200,704 | ---- | C] (Canon) -- C:\Program Files\deImg129.dll
[2005/03/24 01:26:22 | 000,188,416 | ---- | C] (Canon) -- C:\Program Files\deImg121.dll
[2005/03/24 01:26:22 | 000,188,416 | ---- | C] (CANON INC.) -- C:\Program Files\cdDvlp.dll
[2005/03/24 01:26:22 | 000,180,224 | ---- | C] (CANON INC.) -- C:\Program Files\pscDevUI.dll
[2005/03/24 01:26:22 | 000,180,224 | ---- | C] (CANON INC.) -- C:\Program Files\deImgT32.dll
[2005/03/24 01:26:22 | 000,172,032 | ---- | C] (CANON INC.) -- C:\Program Files\deImg110.dll
[2005/03/24 01:26:22 | 000,167,936 | ---- | C] (Canon) -- C:\Program Files\IWrap.dll
[2005/03/24 01:26:22 | 000,155,648 | ---- | C] (CANON INC.) -- C:\Program Files\deImgT2X.dll
[2005/03/24 01:26:22 | 000,147,456 | ---- | C] (CANON INC.) -- C:\Program Files\deImgT10.dll
[2005/03/24 01:26:22 | 000,135,168 | ---- | C] (Canon Inc.) -- C:\Program Files\pscCllct.dll
[2005/03/24 01:26:22 | 000,098,304 | ---- | C] (Canon Inc.) -- C:\Program Files\pscSetup.dll
[2005/03/24 01:26:22 | 000,073,728 | ---- | C] (Canon Inc.) -- C:\Program Files\pscl2STI.dll
[2005/03/24 01:26:22 | 000,057,344 | ---- | C] (Canon Inc.) -- C:\Program Files\pscAdimg.dll
[2005/03/24 01:24:50 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Program Files\MFC71.dll
[2005/03/24 01:24:50 | 000,401,462 | ---- | C] (Microsoft Corporation) -- C:\Program Files\msvcp60.dll
[2005/03/24 01:23:06 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Program Files\SQLSE20.dll
[2005/03/24 01:23:04 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Program Files\SQLDB20.dll
[2005/03/24 00:59:42 | 000,299,008 | ---- | C] (Microsoft Corporation) -- C:\Program Files\cutout.dll
[2005/03/24 00:55:08 | 013,049,856 | ---- | C] (Sonic Solutions) -- C:\Program Files\AuthorScriptLibWin.dll
[2005/03/24 00:55:06 | 000,925,696 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgvout.004
[2005/03/24 00:55:06 | 000,923,648 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgvout.003
[2005/03/24 00:55:06 | 000,923,648 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgvout.002
[2005/03/24 00:55:06 | 000,914,432 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgvout.001
[2005/03/24 00:55:06 | 000,278,528 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgaout.dll
[2005/03/24 00:55:06 | 000,057,344 | R--- | C] (Sonic Solutions) -- C:\Program Files\pxhpinst.exe
[2005/03/24 00:55:06 | 000,024,576 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgcheck.dll
[2005/03/24 00:55:06 | 000,014,848 | R--- | C] (MainConcept AG (Sonic)) -- C:\Program Files\sonicmpgvout.dll
[2005/03/24 00:55:04 | 000,114,688 | R--- | C] (Sonic Solutions) -- C:\Program Files\PrimoSDK.dll
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/05/31 07:50:05 | 000,000,562 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled scanning task.job
[2012/05/31 07:49:43 | 000,000,300 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-767200610-1056796544-3569009029-1008.job
[2012/05/31 07:49:41 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/05/31 07:49:40 | 2137,481,216 | -HS- | M] () -- C:\hiberfil.sys
[2012/05/28 15:09:00 | 000,000,308 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-767200610-1056796544-3569009029-1008.job
[2012/05/28 11:24:56 | 292,382,577 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.pxc
[2012/05/28 11:24:54 | 000,565,916 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.psh
[2012/05/28 11:11:08 | 000,560,538 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.bak
[2012/05/24 16:01:50 | 373,983,444 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.pxc
[2012/05/24 16:01:47 | 000,271,287 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.psh
[2012/05/24 13:17:30 | 000,271,287 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.bak
[2012/05/24 12:25:16 | 000,271,284 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b01
[2012/05/24 11:34:15 | 000,300,089 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b02
[2012/05/24 10:55:24 | 001,319,208 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\glad end.mp3
[2012/05/24 10:54:04 | 000,727,840 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\glad split.wav
[2012/05/24 10:54:00 | 000,001,028 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\WavCodec.wff
[2012/05/24 10:47:22 | 001,319,208 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Glad You Came edit.mp3
[2012/05/24 09:24:00 | 000,300,164 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b03
[2012/05/23 20:01:11 | 000,300,054 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b04
[2012/05/23 19:44:29 | 000,300,054 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b05
[2012/05/23 19:11:49 | 000,300,054 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b06
[2012/05/23 18:57:01 | 000,299,799 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b07
[2012/05/23 17:58:33 | 000,264,389 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b08
[2012/05/23 17:08:57 | 000,265,424 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b09
[2012/05/17 16:20:53 | 000,504,878 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.b01
[2012/05/16 09:38:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2012/05/15 15:18:46 | 000,504,878 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.b02
[2012/05/11 17:45:04 | 000,414,106 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.b07
[2012/05/11 17:41:17 | 000,405,657 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.b08
[2012/05/11 16:01:54 | 000,302,824 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/05/11 15:53:00 | 000,473,418 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/05/11 15:53:00 | 000,083,266 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/05/09 07:49:00 | 000,044,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\fsbts.sys
[2012/05/02 18:01:12 | 000,410,591 | ---- | M] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Family Pictures.b09
[2012/05/02 11:03:35 | 000,001,553 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/05/25 14:27:22 | 2137,481,216 | -HS- | C] () -- C:\hiberfil.sys
[2012/05/24 10:57:52 | 001,319,208 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Glad You Came edit.mp3
[2012/05/24 10:56:51 | 001,319,208 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\glad end.mp3
[2012/05/24 10:56:33 | 000,727,840 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\glad split.wav
[2012/05/23 15:36:01 | 000,002,114 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\proshow-burn.log
[2012/05/18 12:07:02 | 373,983,444 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.pxc
[2012/05/18 12:07:02 | 000,300,164 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b03
[2012/05/18 12:07:02 | 000,300,089 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b02
[2012/05/18 12:07:02 | 000,300,054 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b06
[2012/05/18 12:07:02 | 000,300,054 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b05
[2012/05/18 12:07:02 | 000,300,054 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b04
[2012/05/18 12:07:02 | 000,299,799 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b07
[2012/05/18 12:07:02 | 000,271,287 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.psh
[2012/05/18 12:07:02 | 000,271,287 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.bak
[2012/05/18 12:07:02 | 000,271,284 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b01
[2012/05/18 12:07:02 | 000,265,424 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b09
[2012/05/18 12:07:02 | 000,264,389 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\My Documents\Girls Track 2012.b08
[2012/05/02 11:03:35 | 000,001,553 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2012/04/21 16:16:01 | 000,038,784 | ---- | C] () -- C:\WINDOWS\System32\drivers\sdvo.sys
[2012/04/21 16:16:01 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\drivers\tv.sys
[2012/04/21 16:16:00 | 000,401,792 | ---- | C] () -- C:\WINDOWS\System32\iegd3dg3.dll
[2012/04/21 16:16:00 | 000,011,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\analog.sys
[2012/04/21 16:15:59 | 000,010,496 | ---- | C] () -- C:\WINDOWS\System32\drivers\lvds.sys
[2012/04/01 14:32:59 | 000,000,000 | ---- | C] () -- C:\WINDOWS\SETUP32.INI
[2012/03/02 17:11:13 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2012/02/17 15:44:08 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/05/02 11:32:40 | 000,044,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\fsbts.sys
[2010/05/20 17:32:08 | 000,005,790 | R--- | C] () -- C:\Program Files\EULA.nor
[2010/03/29 15:26:16 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2010/01/02 15:29:24 | 000,056,056 | ---- | C] () -- C:\WINDOWS\System32\DLAAPI_W.DLL
[2009/04/12 14:03:58 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009/04/12 14:03:58 | 000,383,238 | ---- | C] () -- C:\WINDOWS\System32\libmp3lame-0.dll
[2009/04/06 11:40:50 | 000,096,768 | ---- | C] () -- C:\WINDOWS\SlantAdj.dll
[2009/04/06 11:40:50 | 000,000,072 | ---- | C] () -- C:\WINDOWS\System32\epDPE.ini
[2009/01/09 20:07:22 | 000,007,547 | R--- | C] () -- C:\Program Files\EULA.ger
[2009/01/09 20:07:22 | 000,006,808 | R--- | C] () -- C:\Program Files\EULA.itn
[2009/01/09 20:07:22 | 000,006,748 | R--- | C] () -- C:\Program Files\EULA.rus
[2009/01/09 20:07:22 | 000,006,668 | R--- | C] () -- C:\Program Files\EULA.pol
[2009/01/09 20:07:22 | 000,006,300 | R--- | C] () -- C:\Program Files\EULA.spa
[2009/01/09 20:07:22 | 000,006,120 | R--- | C] () -- C:\Program Files\EULA.dut
[2009/01/09 20:07:22 | 000,005,968 | R--- | C] () -- C:\Program Files\EULA.frn
[2009/01/09 20:07:22 | 000,005,461 | R--- | C] () -- C:\Program Files\EULA.swe
[2009/01/09 20:07:22 | 000,005,452 | R--- | C] () -- C:\Program Files\EULA.brz
[2009/01/09 20:07:22 | 000,005,304 | R--- | C] () -- C:\Program Files\EULA.cze
[2009/01/09 20:07:22 | 000,005,237 | R--- | C] () -- C:\Program Files\EULA.jpn
[2009/01/09 20:07:22 | 000,004,849 | R--- | C] () -- C:\Program Files\EULA.eng
[2009/01/09 20:07:22 | 000,004,711 | R--- | C] () -- C:\Program Files\EULA.kor
[2009/01/09 20:07:22 | 000,003,380 | R--- | C] () -- C:\Program Files\EULA.cht
[2009/01/09 20:07:22 | 000,003,345 | R--- | C] () -- C:\Program Files\EULA.chs
[2008/09/02 11:38:52 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\wklnhst.dat
[2008/08/28 13:07:37 | 000,001,028 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\WavCodec.wff
[2008/05/24 20:47:28 | 000,035,328 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/05/18 06:55:30 | 000,091,600 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Application Data\PatchUpdate_HP_CounterReport_Update_HPSU.log
[2008/05/09 19:55:05 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2008/05/09 17:11:21 | 000,000,155 | ---- | C] () -- C:\Documents and Settings\HP_Administrator.YOUR-4DACD0EA75\Local Settings\Application Data\fusioncache.dat
[2008/03/03 13:44:31 | 000,000,227 | ---- | C] () -- C:\WINDOWS\HP_CounterReport_Update_HPSU.ini
[2008/02/24 15:54:01 | 000,000,015 | ---- | C] () -- C:\WINDOWS\smapanel.ini
[2007/09/27 11:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 11:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 11:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2007/08/15 07:51:02 | 000,001,365 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2007/05/19 08:33:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini
[2007/05/13 14:10:15 | 000,000,074 | ---- | C] () -- C:\WINDOWS\MPLAYER.INI
[2007/01/17 12:57:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2006/12/14 00:01:36 | 000,520,192 | ---- | C] () -- C:\WINDOWS\System32\CddbPlaylist2Roxio.dll
[2006/12/14 00:01:36 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\CddbFileTaggerRoxio.dll
[2006/11/11 14:14:00 | 000,000,022 | ---- | C] () -- C:\WINDOWS\exchng.ini
[2006/09/13 15:39:58 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2006/09/13 15:26:26 | 000,000,162 | ---- | C] () -- C:\WINDOWS\EPSON Perfection 2400 Photo.ini
[2006/09/10 10:34:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpqEmlSz.INI
[2006/09/08 11:45:15 | 000,000,221 | ---- | C] () -- C:\WINDOWS\NCLogConfig.ini
[2006/08/07 18:23:06 | 000,000,037 | ---- | C] () -- C:\WINDOWS\Acroread.ini
[2006/08/04 15:57:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\OpPrintServer.INI
[2006/08/03 18:26:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PestPatrol5.INI
[2006/06/02 04:26:45 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/06/02 04:07:12 | 000,028,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\USBkey.sys
[2006/06/02 04:04:00 | 000,014,315 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS
[2006/06/02 04:03:49 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll
[2006/06/02 04:01:59 | 000,000,174 | ---- | C] () -- C:\WINDOWS\QUICKEN.INI
[2006/06/02 03:59:58 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/06/02 03:50:11 | 000,000,424 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2006/06/02 03:49:35 | 000,000,698 | ---- | C] () -- C:\WINDOWS\NSSetDefaultBrowser.ini
[2006/06/02 03:38:26 | 000,004,641 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2006/06/02 03:34:12 | 000,000,831 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2006/06/02 03:12:21 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\pythoncom22.dll
[2006/06/02 03:12:21 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\pywintypes22.dll
[2006/06/02 03:12:03 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll
[2005/08/30 23:01:42 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2005/08/05 23:01:54 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2005/04/22 04:18:06 | 000,532,283 | ---- | C] () -- C:\Program Files\piproj.its
[2005/04/22 02:44:06 | 000,165,442 | ---- | C] () -- C:\Program Files\2p.its
[2005/04/22 02:44:06 | 000,060,454 | ---- | C] () -- C:\Program Files\2t.its
[2005/04/22 02:43:48 | 005,251,072 | R--- | C] () -- C:\Program Files\PIP.GDB
[2005/03/24 01:27:48 | 000,000,318 | ---- | C] () -- C:\Program Files\removabl.ico
[2005/03/24 01:27:46 | 005,763,072 | ---- | C] () -- C:\Program Files\pi.sbc
[2005/03/24 01:27:46 | 000,458,752 | ---- | C] () -- C:\Program Files\blank.sbc
[2005/03/24 01:27:46 | 000,001,406 | ---- | C] () -- C:\Program Files\PIS2.ico
[2005/03/24 01:27:46 | 000,001,406 | ---- | C] () -- C:\Program Files\PIS1.ico
[2005/03/24 01:27:46 | 000,001,078 | ---- | C] () -- C:\Program Files\PI_Works.ico
[2005/03/24 01:27:46 | 000,000,318 | ---- | C] () -- C:\Program Files\Default.ico
[2005/03/24 01:27:30 | 000,094,208 | ---- | C] () -- C:\Program Files\firstpg.qtd
[2005/03/24 01:27:30 | 000,011,264 | ---- | C] () -- C:\Program Files\secondpg.qtd
[2005/03/24 01:27:26 | 000,593,920 | ---- | C] () -- C:\Program Files\Homepub.ibd
[2005/03/24 01:27:26 | 000,013,361 | ---- | C] () -- C:\Program Files\pipcust.dic
[2005/03/24 01:27:12 | 000,005,538 | ---- | C] () -- C:\Program Files\piaszpz.dat
[2005/03/24 01:27:12 | 000,005,494 | ---- | C] () -- C:\Program Files\podwv.dat
[2005/03/24 01:27:12 | 000,000,318 | ---- | C] () -- C:\Program Files\dipunsb.001
[2005/03/24 01:26:26 | 000,000,404 | ---- | C] () -- C:\Program Files\cdlayout.dat
[2005/03/24 01:26:24 | 000,598,016 | ---- | C] () -- C:\Program Files\RdCamDat.dll
[2005/03/24 01:26:22 | 000,598,016 | ---- | C] () -- C:\Program Files\RcCamDat.dll
[2005/03/24 01:26:22 | 000,598,016 | ---- | C] () -- C:\Program Files\psCamDat.dll
[2005/03/24 01:26:22 | 000,122,880 | ---- | C] () -- C:\Program Files\CmSelDlg.dll
[2005/03/24 01:26:22 | 000,070,580 | ---- | C] () -- C:\Program Files\StartUp.png
[2005/03/24 01:26:20 | 000,275,793 | ---- | C] () -- C:\Program Files\FlyOuts.png
[2004/08/09 23:00:00 | 001,288,192 | ---- | C] () -- C:\WINDOWS\System32\quartz(2).dll
[2004/07/26 09:51:38 | 000,000,560 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2001/07/07 00:30:00 | 000,003,399 | ---- | C] () -- C:\WINDOWS\System32\hptcpmon.ini
[1996/04/03 14:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS\System32\giveio.sys

========== LOP Check ==========

[2008/12/19 14:22:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Applications
[2012/04/12 17:12:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG Secure Search
[2011/05/02 11:19:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CA
[2011/05/02 11:15:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\CA-SupportBridge
[2012/04/12 17:12:02 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files
[2006/06/02 03:48:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Digital Interactive Systems Corporation
[2011/05/02 11:32:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\f-secure
[2011/05/02 11:31:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\fssg
[2012/04/01 14:19:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IBUpdaterService
[2009/04/27 13:58:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Maxtor
[2008/11/25 10:49:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2008/11/25 12:21:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2009/12/16 16:20:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Photodex
[2009/05/05 15:16:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2007/01/23 18:48:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2009/05/04 15:57:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip
[2008/08/05 13:35:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\YAHOO
[2010/11/19 15:21:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/04/26 08:22:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/11/20 14:53:28 | 000,001,202 | -H-- | M] () -- C:\WINDOWS\Tasks\DMATask 0 {D2B22905-47C9-4b82-8E74-47AA9D2DE378} 0~0.job
[2010/03/20 15:48:22 | 000,001,016 | -H-- | M] () -- C:\WINDOWS\Tasks\HubTask 0 {0E7C166E-2D2F-4269-9034-DE1898BF2B1A} 0~0.job
[2009/12/31 16:17:16 | 000,001,042 | -H-- | M] () -- C:\WINDOWS\Tasks\HubTask 1 {0E7C166E-2D2F-4269-9034-DE1898BF2B1A} 0~0.job
[2012/05/31 07:50:05 | 000,000,562 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled scanning task.job
[2010/04/10 10:35:00 | 000,000,302 | ---- | M] () -- C:\WINDOWS\Tasks\videopadShakeIcon.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 146 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1

< End of report >

[Gammo]

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

• Double click on ComboFix.exe & follow the prompts.
• Accept the disclaimer and allow to update if it asks
  
  
  
  
  
• When finished, it shall produce a log for you.
• Please include the C:\ComboFix.txt in your next reply.

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.



Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

[bettei]

I clicked on the first link and saved the file, but it did not ask me where I wanted to save it. So it is in Firefoxes downloads. I can go to My Documents/Downloads, and that is where stuff I download goes. Should I just open and run it from there? Before when I chose to download a file I have always been asked where I want to save it to, but I was not prompted with this, so I don't know how to proceed.

I decided to go to the download file and send the COmbofix file to my desktop that way. So I did that, disabled my virus program and opened combofix. I saw it run, then I got a prompt that I could not name the file combofix1 and to find another name for it. Totally confused now, because I did not try to rename anything, I just tried opening Combofix and let it run. There is not report because apparently I am not able to save it unless I name it something else. And you cautioned me about running it a second time, so I don't know how to proceed.
Thanks

Edited by bettei, 31 May 2012 - 03:08 PM.

[Gammo]

Please delete your copy of ComboFix from the Desktop.

Then download the latest version from here: http://download.blee...Bs/ComboFix.exe
Save it to your Desktop again.
And then rerun ComboFix.
Post the resulting log file in your next reply.

[bettei]

 log.txt   24.54KB   87 downloadsI think I successfully saved the combofix log to my desktop, I had to restart my computer to get my antivirus program to restart. It would not open. Now I don't know how to get the log that I saved posted to you. Not sure if this is right or not.

Attached Files

•  log.txt   24.54KB   125 downloads

Edited by bettei, 01 June 2012 - 04:48 PM.

[Gammo]

That's looking good.

How is your PC running now?

[bettei]

The pages are loading faster, and I am getting no more "preventing redirects" from Firefox. Can you tell me what Combofix found? Made me a little nervous because it told me it had to connect to the internet to set a restore point, then I watched it run and saw it delete files.

Also, if I see that same "Firefox has prevented page from being directed to another page" prompt on my laptop too, does that mean I have something on that computer also that should be removed? Because I think it happens on that computer too, but not as often as the desktop computer did.

Thanks!

[Gammo]

As far as I can tell ComboFix didn't delete any malware.

That Firefox message could mean that malware is present, but not necessarily.


Your logs appear to be clean now. There is only a bit of cleanup that we will deal with in this post, as well as prevention from future infections. ^_^

Remove Combofix now that we're done with it.

• Please press the Windows Key and R on your keyboard. This will bring up the Run... command.
• Now type in Combofix /Uninstall in the runbox and click OK. (Notice the space between the "x" and "/")
  
• Please follow the prompts to uninstall Combofix.
• You will then recieve a message saying Combofix was uninstalled successfully once it's done uninstalling itself.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

• Download OTC to your desktop and run it
• A list of tool components used in the Cleanup of malware will be downloaded.
• If your Firewall or Real Time protection attempts to block OTC to reach the Internet, please allow the application to do so.
• Click Yes to begin the Cleanup process and remove these components, including this application.
• You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Keep a backup of your important files
Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Make proper use of your anti-virus and firewall
You should keep your anti-virus and firewall guard enabled at all times, don't shut them off unless there's a specific reason to do so.

Also, regularly performing a full system scan with your anti-virus program is a good idea to make sure nothing has slipped through your protection. Once every two weeks works well for many people. You can set the scan to run during a time when you don't plan to use the computer and just leave it to complete on its own.

Keep in mind that anti-virus programs are far from perfect. They don't protect you against every piece of malware that's out there, so don't trust them blindly. If an anti-virus reports a file as 'clean' then it's doesn't necessarily has to mean it is.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Keep all your software updated
It is important to keep up on system updates from Microsoft by regularly checking their website at: http://windowsupdate.microsoft.com/, as these patch critical security vulnerabilities and help to keep you safe.

It's also important to keep programs up to date so that malware doesn't exploit any old security flaws. FileHippo Update Checker is an extremely helpful program that will tell you which of your programs need to be updated. Java and Adobe Reader are two of the main security vulnerabilities. You can find the latest version of Java here, you will want the Java SE Runtime Environment (JRE) one. You can find the latest version of Adobe Reader here.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Use a safer web browser
Internet Explorer is not the most secure tool for browsing the web. It has been known to be very susceptible to infection, and there are a couple good free alternatives: Google Chrome and Opera. Both are excellent faster, safer, more powerful and functional free alternatives to Internet Explorer. It's definitely worth the short period of adjustment to start using one of these.

The WOT add-on will nicely help to enhance your security, no matter which web browser you use. This add-on tells you whether the sites you are about to visit are safe or not. A must if you do a lot of Googling.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Some other security programs

It is wise these days to have a few security programs installed and running on your machine except from just an anti-virus and a firewall. I will list some of them.

• A good anti-spyware program installed on your pc is very important to help remove any spyware that may have gotten on your computer. I highly recommend Malwarebytes' Anti-Malware.
• MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. This prevents your computer from connecting to those sites in the future.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Be careful
Having security programs installed is very helpful to you, but none of them have the gift of human thought. The best way to make sure you don't get infected is to exercise common sense. Be careful of what websites you visit - if a site looks suspicious, trust your instincts and get out of there. Be careful of what attachments you open in emails and files you download from websites - check them over carefully to make sure that you know what you're getting.

Using peer-to-peer programs (eg: LimeWire, BitTorrent, uTorrent, Kazaa) or downloading cracks and keygens is something else to avoid. These are the most common way to get infected. Malware writers use these programs to spread infections as it is the easiest way for them. The majority of infections we see in the Malware Removal forum are due to people using p2p programs to download cracks/keygens/warez. These are not only illegal, but will always contain some form of malware. You have no way of verifying that the things you download are legitimate or that they don't contain malware. Even with an up to date anti-virus and firewall, some of these things will still infect you. It is highly recommend that you uninstall all peer-to-peer programs. It just isn't worth it.

Other common ways of getting infected are dis-reputable sites forcing you to download and install a codec. Or viruses using Instant Messaging programs (Windows Live Messenger, MSN Messenger, AIM) to send a file claiming it to be "photos" from a friend, only for it to turn out to be a virus.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Slow computer?
If your computer begins to slow down in the future for no particular reason, your first step should not be to come to the malware forum. As your computer ages and is used, it's parts wear, files and programs accumulate, and its performance can decrease. To restore your computer's performance to its best possible level, follow the steps in this page written by malware expert Miekiemoes.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I'll leave this thread open for a couple days in case you come across any lingering problems that need fixing, then I'll close it up. If you need it reopened for any reason just shoot me a PM. It's been a pleasure working with you, now best of luck!

Cheers,
Gammo

[bettei]

I uninstalled Combofix, downloaded the OTC. When I opened that, clicked "clean", it said I must reboot. So I did that, but the OTC icon still remains on my desktop. Do I run that again, or do I just right click and remove the icon from my desktop? I can't tell if it ran or not, I stepped away from the computer as it restarted. So I am not sure whether to go to add/remove programs or what to remove the OTC.

Also when I looked at my programs, I noticed something called I.R.I.S. OCR registration on that program list, and I don't remember seeing it there before. Not sure what it is and if I should just leave it there or not.

Thanks again!

Edited by bettei, 03 June 2012 - 03:30 PM.

[Gammo]

I uninstalled Combofix, downloaded the OTC. When I opened that, clicked "clean", it said I must reboot. So I did that, but the OTC icon still remains on my desktop. Do I run that again, or do I just right click and remove the icon from my desktop? I can't tell if it ran or not, I stepped away from the computer as it restarted. So I am not sure whether to go to add/remove programs or what to remove the OTC.

Just to be sure I'd run OTC again. If the icon is still present after the reboot, you can just delete the file from your desktop.

Also when I looked at my programs, I noticed something called I.R.I.S. OCR registration on that program list, and I don't remember seeing it there before. Not sure what it is and if I should just leave it there or not.

Sounds legitimate to me. http://www.irislink.com/