Sorry about the double post
Update: I was able to figure out a way around the link problem and to run the OTL log.
OTL logfile created on: 7/16/2012 8:28:51 PM - Run 1
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Book Worm\Links
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.96 Gb Total Physical Memory | 3.25 Gb Available Physical Memory | 81.88% Memory free
7.93 Gb Paging File | 7.26 Gb Available in Paging File | 91.61% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 286.35 Gb Total Space | 190.11 Gb Free Space | 66.39% Space Free | Partition Type: NTFS
Drive D: | 3.09 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Computer Name: BOOKWORM-PC | User Name: Book Worm | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012/07/16 20:28:37 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Book Worm\Links\OTL.exe
========== Modules (No Company Name) ==========
========== Win32 Services (SafeList) ==========
SRV:64bit: - [2011/04/27 17:21:18 | 000,288,272 | -H-- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2009/04/24 13:40:26 | 000,242,176 | -H-- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\TOSHIBA\TECO\TecoService.exe -- (TOSHIBA eco Utility Service)
SRV:64bit: - [2009/03/17 13:48:54 | 000,084,480 | -H-- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
SRV:64bit: - [2009/03/06 20:30:32 | 000,488,288 | -H-- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV:64bit: - [2009/02/19 16:53:28 | 000,055,808 | -H-- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files\TOSHIBA\rselect\RSelSvc.exe -- (RSELSVC)
SRV:64bit: - [2008/08/22 12:26:52 | 000,535,608 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Windows\SysNative\ThpSrv.exe -- (Thpsrv)
SRV:64bit: - [2007/11/21 18:53:16 | 000,135,168 | ---- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv)
SRV - [2010/03/18 13:16:28 | 000,130,384 | -H-- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 16:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/04/16 20:42:58 | 000,020,544 | -H-- | M] (TOSHIBA) [Auto | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCameraSrv.exe -- (camsvc)
SRV - [2009/03/30 18:57:22 | 000,083,312 | -H-- | M] (TOSHIBA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv)
SRV - [2009/03/10 20:51:20 | 000,046,448 | -H-- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
SRV - [2009/03/06 19:27:10 | 000,036,864 | -H-- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFProcSRVC.exe -- (ConfigFree Gadget Service)
SRV - [2008/11/09 15:48:14 | 000,602,392 | -H-- | M] (Yahoo! Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2008/11/03 18:15:32 | 000,242,424 | -H-- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe -- (GameConsoleService)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2011/04/27 15:25:24 | 000,084,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2011/03/11 01:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 01:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/11/20 22:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 22:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010/11/20 22:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 22:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/06/23 10:21:34 | 000,318,568 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rtlh64.sys -- (RTL8169)
DRV:64bit: - [2009/08/18 13:59:44 | 000,031,280 | R--- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\SymIMV.sys -- (SymIM)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/09 13:48:00 | 000,573,440 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtl819xp.sys -- (rtl819xpn64) Realtek RTL8190\RTL8192E 802.11n Wireless LAN (Mini-)
DRV:64bit: - [2009/06/10 16:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:64bit: - [2009/06/10 15:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009/04/03 04:39:42 | 000,234,032 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:64bit: - [2009/03/25 19:23:26 | 000,035,392 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\thpdrv.sys -- (Thpdrv)
DRV:64bit: - [2009/03/19 15:52:02 | 000,016,392 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\PMCF.sys -- (PMCF)
DRV:64bit: - [2009/03/18 13:46:44 | 000,032,832 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect)
DRV:64bit: - [2009/02/12 17:28:00 | 000,057,344 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimspe64.sys -- (rimspci)
DRV:64bit: - [2009/02/11 19:26:18 | 000,407,576 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2009/01/14 15:50:50 | 000,055,296 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rixdpe64.sys -- (rixdpcie)
DRV:64bit: - [2007/12/11 16:03:36 | 000,027,272 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV:64bit: - [2007/11/09 16:00:30 | 000,026,968 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ)
DRV:64bit: - [2007/09/04 12:29:04 | 000,014,872 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Thpevm.sys -- (Thpevm)
DRV:64bit: - [2007/04/23 15:15:48 | 000,031,016 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\RtlProt.sys -- (RtlProt)
DRV - [2009/07/13 20:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.co...=TSHB&bmod=TSHB
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {D9FF2B7C-515B-4143-A51E-EFF739B0B122}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{D9FF2B7C-515B-4143-A51E-EFF739B0B122}: "URL" = http://www.google.co...ng}&rlz=1I7TSHB
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.co...ng}&rlz=1I7TSHB
IE - HKLM\..\SearchScopes\{7CC94BCA-8E5E-4FAD-ACE5-798C208642BC}: "URL" = http://www.google.co...age={startPage}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/
IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{11D7C32B-22AB-0D04-AB2E-9B7673A21173}: "URL" = http://www.bing.com/...UGO&form=ZGAIDF
IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask...s}&locale=en_US
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.co...1I7TSHB_enUS337
IE - HKCU\..\SearchScopes\{7CC94BCA-8E5E-4FAD-ACE5-798C208642BC}: "URL" = http://www.google.co...age={startPage}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - user.js - File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@emusic.com/dlm-plugin: C:\Program Files (x86)\eMusic Download Manager\plugin\npemusic.dll (eMusic.com)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa2,version=2.0.0: C:\Program Files (x86)\Picasa2\npPicasa2.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@emusic.com/dlm-plugin: C:\Program Files (x86)\eMusic Download Manager\plugin\npemusic.dll (eMusic.com)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKEY_LOCAL_MACHINE\software\mozilla\eMusic Download Manager\Extensions\\Components: C:\Program Files (x86)\eMusic Download Manager\xulrunner\components [2011/09/20 15:33:48 | 000,000,000 | -H-D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\eMusic Download Manager\Extensions\\Plugins: C:\Program Files (x86)\eMusic Download Manager\xulrunner\plugins [2011/09/20 15:33:48 | 000,000,000 | -H-D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2011/09/20 15:34:24 | 000,000,000 | -H-D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011/09/20 15:34:23 | 000,000,000 | -H-D | M]
[2011/09/20 15:50:30 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Book Worm\AppData\Roaming\Mozilla\Extensions
[2010/07/29 14:37:43 | 000,000,000 | -H-D | M] (No name found) -- C:\Users\Book Worm\AppData\Roaming\Mozilla\Extensions\[email protected]
[2011/09/20 15:33:48 | 000,000,000 | -H-D | M] (eMusic - Apple iTunes Support) -- C:\PROGRAM FILES (X86)\EMUSIC DOWNLOAD MANAGER\XULRUNNER\EXTENSIONS\[email protected]
[2011/09/20 15:33:48 | 000,000,000 | -H-D | M] (eMusic - Nullsoft Winamp Support) -- C:\PROGRAM FILES (X86)\EMUSIC DOWNLOAD MANAGER\XULRUNNER\EXTENSIONS\[email protected]
[2011/09/20 15:33:48 | 000,000,000 | -H-D | M] (eMusic - Microsoft Media Player Support) -- C:\PROGRAM FILES (X86)\EMUSIC DOWNLOAD MANAGER\XULRUNNER\EXTENSIONS\[email protected]
O1 HOSTS File: ([2011/09/03 08:24:00 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4:64bit: - HKLM..\Run: [SmartFaceVWatcher] C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatcher.exe (TOSHIBA Corporation)
O4:64bit: - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [hOHHphGoNe.exe] C:\ProgramData\hOHHphGoNe.exe (GFW)
O4 - HKLM..\Run: [TUSBSleepChargeSrv] "%ProgramFiles(x86)%\TOSHIBA\TOSHIBA USB Sleep and Charge Utility\TUSBSleepChargeSrv.exe" File not found
O4 - HKLM..\Run: [TWebCamera] "%ProgramFiles(x86)%\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun File not found
O4 - HKCU..\Run: [Google] C:\Windows\SysWow64\config\systemprofile\AppData\Local\Microsoft\Google\ccsjzu.dll (Microsoft Corporation)
O4 - HKCU..\Run: [Oqrybysom] C:\Users\Book Worm\AppData\Roaming\Ytumk\aziv.exe ()
O4 - HKCU..\Run: [VvunMOI7lABmpv] C:\ProgramData\VvunMOI7lABmpv.exe (GFW)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000009 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000010 - mmswsock.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - %SystemRoot%\System32\winrnr.dll File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{29E1443A-312E-43AA-8A69-EA08E720E14C}: DhcpNameServer = 192.168.1.254
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O24 - Desktop WallPaper:
O24 - Desktop BackupWallPaper:
O30:64bit: - LSA: Security Packages - (s) - File not found
O30 - LSA: Security Packages - (s) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/04/12 04:38:58 | 000,000,122 | R--- | M] () - D:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{9ad0be05-e3c6-11e0-9715-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{9ad0be05-e3c6-11e0-9715-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe -- [2011/04/12 04:38:58 | 000,106,768 | R--- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2012/07/16 20:36:05 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2012/07/16 19:52:05 | 000,000,000 | ---D | C] -- C:\Users\Book Worm\AppData\Local\ElevatedDiagnostics
[2012/07/13 13:51:11 | 000,000,000 | ---D | C] -- C:\Users\Book Worm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Recovery
[2012/07/13 13:51:03 | 000,249,344 | ---- | C] (GFW) -- C:\ProgramData\VvunMOI7lABmpv.exe
[2012/07/12 22:46:43 | 000,339,968 | -H-- | C] (GFW) -- C:\ProgramData\hOHHphGoNe.exe
[2012/07/11 21:00:58 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Ymwufo
[2012/07/11 21:00:58 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Uqpoov
[2012/07/11 21:00:58 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Olery
[2012/07/11 19:01:57 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Uwudh
[2012/07/11 19:01:57 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Uhikky
[2012/07/11 19:01:57 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Izatho
[2012/07/08 22:27:32 | 000,000,000 | -HSD | C] -- C:\found.002
[2012/07/08 18:57:25 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Vuuve
[2012/07/08 18:57:25 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Oncuu
[2012/07/08 18:57:25 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Hace
[2012/07/07 21:16:18 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Tyzobe
[2012/07/07 21:16:18 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Kayt
[2012/07/07 21:16:18 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Dyavxo
[2012/07/07 09:14:32 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\%APPDATA%
[2012/07/06 19:47:11 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Ytumk
[2012/07/06 19:47:11 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Laop
[2012/07/06 19:47:11 | 000,000,000 | -H-D | C] -- C:\Users\Book Worm\AppData\Roaming\Baemoh
========== Files - Modified Within 30 Days ==========
[2012/07/16 20:36:14 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/07/16 20:05:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/07/16 20:05:22 | 3192,262,656 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/16 19:50:12 | 345,390,196 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012/07/16 19:48:02 | 000,000,368 | ---- | M] () -- C:\ProgramData\VvunMOI7lABmpv
[2012/07/16 19:47:46 | 000,000,072 | ---- | M] () -- C:\ProgramData\-VvunMOI7lABmpvr
[2012/07/16 19:47:46 | 000,000,072 | ---- | M] () -- C:\ProgramData\-VvunMOI7lABmpv
[2012/07/16 19:46:38 | 000,000,894 | -H-- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/07/15 10:53:35 | 000,011,104 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/07/15 10:53:35 | 000,011,104 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/07/13 13:51:12 | 000,000,691 | ---- | M] () -- C:\Users\Book Worm\Application Data\Microsoft\Internet Explorer\Quick Launch\File_Recovery.lnk
[2012/07/13 13:51:12 | 000,000,667 | ---- | M] () -- C:\Users\Book Worm\Desktop\File_Recovery.lnk
[2012/07/13 13:51:03 | 000,249,344 | ---- | M] (GFW) -- C:\ProgramData\VvunMOI7lABmpv.exe
[2012/07/13 13:37:10 | 000,000,898 | -H-- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/07/13 11:25:17 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At12.job
[2012/07/13 11:25:17 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At11.job
[2012/07/13 11:25:17 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At10.job
[2012/07/13 11:25:13 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At36.job
[2012/07/13 11:25:13 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At35.job
[2012/07/13 11:25:13 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At34.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At9.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At8.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At7.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At6.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At5.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At4.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At3.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At2.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At1.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At33.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At32.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At31.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At30.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At29.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At28.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At27.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At26.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At25.job
[2012/07/12 23:06:34 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At24.job
[2012/07/12 23:00:01 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At48.job
[2012/07/12 22:44:28 | 000,339,968 | -H-- | M] (GFW) -- C:\ProgramData\hOHHphGoNe.exe
[2012/07/12 22:13:12 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At47.job
[2012/07/12 22:13:12 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At46.job
[2012/07/12 22:13:12 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At45.job
[2012/07/12 22:13:12 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At23.job
[2012/07/12 22:13:12 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At22.job
[2012/07/12 22:13:12 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At21.job
[2012/07/12 19:00:05 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At20.job
[2012/07/12 19:00:00 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At44.job
[2012/07/12 18:57:19 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At19.job
[2012/07/12 18:57:15 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At43.job
[2012/07/12 17:01:53 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At18.job
[2012/07/12 17:00:01 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At42.job
[2012/07/12 14:02:27 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At15.job
[2012/07/12 14:00:00 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At39.job
[2012/07/12 12:28:44 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At13.job
[2012/07/12 12:28:41 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At37.job
[2012/07/11 16:51:39 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At17.job
[2012/07/11 16:51:39 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At16.job
[2012/07/11 16:51:35 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At41.job
[2012/07/11 16:51:35 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At40.job
[2012/07/11 13:51:41 | 000,000,340 | -H-- | M] () -- C:\Windows\tasks\At14.job
[2012/07/11 13:51:36 | 000,000,342 | -H-- | M] () -- C:\Windows\tasks\At38.job
[2012/07/06 19:47:10 | 000,085,504 | -H-- | M] () -- C:\ProgramData\8PABgDkh.exe
========== Files Created - No Company Name ==========
[2012/07/13 13:51:12 | 000,000,691 | ---- | C] () -- C:\Users\Book Worm\Application Data\Microsoft\Internet Explorer\Quick Launch\File_Recovery.lnk
[2012/07/13 13:51:12 | 000,000,667 | ---- | C] () -- C:\Users\Book Worm\Desktop\File_Recovery.lnk
[2012/07/13 13:51:12 | 000,000,072 | ---- | C] () -- C:\ProgramData\-VvunMOI7lABmpvr
[2012/07/13 13:51:12 | 000,000,072 | ---- | C] () -- C:\ProgramData\-VvunMOI7lABmpv
[2012/07/13 13:51:05 | 000,000,368 | ---- | C] () -- C:\ProgramData\VvunMOI7lABmpv
[2012/07/06 19:47:46 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At48.job
[2012/07/06 19:47:46 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At47.job
[2012/07/06 19:47:45 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At46.job
[2012/07/06 19:47:44 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At45.job
[2012/07/06 19:47:44 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At44.job
[2012/07/06 19:47:44 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At43.job
[2012/07/06 19:47:43 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At42.job
[2012/07/06 19:47:42 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At41.job
[2012/07/06 19:47:42 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At40.job
[2012/07/06 19:47:42 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At39.job
[2012/07/06 19:47:42 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At38.job
[2012/07/06 19:47:41 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At37.job
[2012/07/06 19:47:41 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At36.job
[2012/07/06 19:47:41 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At35.job
[2012/07/06 19:47:40 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At34.job
[2012/07/06 19:47:40 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At33.job
[2012/07/06 19:47:40 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At32.job
[2012/07/06 19:47:40 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At31.job
[2012/07/06 19:47:39 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At30.job
[2012/07/06 19:47:38 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At29.job
[2012/07/06 19:47:38 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At28.job
[2012/07/06 19:47:38 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At27.job
[2012/07/06 19:47:37 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At26.job
[2012/07/06 19:47:36 | 000,000,342 | -H-- | C] () -- C:\Windows\tasks\At25.job
[2012/07/06 19:47:36 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At24.job
[2012/07/06 19:47:35 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At23.job
[2012/07/06 19:47:35 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At22.job
[2012/07/06 19:47:35 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At21.job
[2012/07/06 19:47:34 | 000,232,960 | -H-- | C] () -- C:\Windows\Installer\{2d2acad4-c402-2a72-e034-af3f329b8048}\U\00000008.@
[2012/07/06 19:47:34 | 000,095,744 | ---- | C] () -- C:\Windows\Installer\{2d2acad4-c402-2a72-e034-af3f329b8048}\U\80000032.@
[2012/07/06 19:47:34 | 000,080,896 | ---- | C] () -- C:\Windows\Installer\{2d2acad4-c402-2a72-e034-af3f329b8048}\U\80000064.@
[2012/07/06 19:47:34 | 000,000,804 | -H-- | C] () -- C:\Windows\Installer\{2d2acad4-c402-2a72-e034-af3f329b8048}\L\00000004.@
[2012/07/06 19:47:34 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At20.job
[2012/07/06 19:47:34 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At19.job
[2012/07/06 19:47:33 | 000,001,632 | -H-- | C] () -- C:\Windows\Installer\{2d2acad4-c402-2a72-e034-af3f329b8048}\U\000000cb.@
[2012/07/06 19:47:33 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At18.job
[2012/07/06 19:47:32 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At17.job
[2012/07/06 19:47:32 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At16.job
[2012/07/06 19:47:30 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At15.job
[2012/07/06 19:47:30 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At14.job
[2012/07/06 19:47:29 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At13.job
[2012/07/06 19:47:29 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At12.job
[2012/07/06 19:47:28 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At11.job
[2012/07/06 19:47:28 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At10.job
[2012/07/06 19:47:27 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At9.job
[2012/07/06 19:47:27 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At8.job
[2012/07/06 19:47:26 | 000,016,896 | -H-- | C] () -- C:\Windows\Installer\{2d2acad4-c402-2a72-e034-af3f329b8048}\U\80000000.@
[2012/07/06 19:47:26 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At7.job
[2012/07/06 19:47:26 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At6.job
[2012/07/06 19:47:25 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At5.job
[2012/07/06 19:47:24 | 000,002,048 | -H-- | C] () -- C:\Windows\Installer\{2d2acad4-c402-2a72-e034-af3f329b8048}\U\00000004.@
[2012/07/06 19:47:22 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At4.job
[2012/07/06 19:47:21 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At3.job
[2012/07/06 19:47:20 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At2.job
[2012/07/06 19:47:14 | 000,085,504 | -H-- | C] () -- C:\ProgramData\8PABgDkh.exe
[2012/07/06 19:47:14 | 000,000,340 | -H-- | C] () -- C:\Windows\tasks\At1.job
[2012/01/11 13:30:54 | 000,002,048 | -HS- | C] () -- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\{2d2acad4-c402-2a72-e034-af3f329b8048}\@
[2012/01/11 13:30:54 | 000,002,048 | -HS- | C] () -- C:\Windows\System32\config\systemprofile\AppData\Local\{2d2acad4-c402-2a72-e034-af3f329b8048}\@
[2012/01/11 13:30:54 | 000,002,048 | -HS- | C] () -- C:\Windows\Installer\{2d2acad4-c402-2a72-e034-af3f329b8048}\@
[2011/09/03 08:03:09 | 000,256,000 | -H-- | C] () -- C:\Windows\PEV.exe
[2011/09/03 08:03:09 | 000,208,896 | -H-- | C] () -- C:\Windows\MBR.exe
[2011/09/03 08:03:09 | 000,098,816 | -H-- | C] () -- C:\Windows\sed.exe
[2011/09/03 08:03:09 | 000,080,412 | -H-- | C] () -- C:\Windows\grep.exe
[2011/09/03 08:03:09 | 000,068,096 | -H-- | C] () -- C:\Windows\zip.exe
[2010/11/08 10:23:49 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2010/08/25 17:02:55 | 000,000,000 | -H-- | C] () -- C:\Users\Book Worm\jagex__preferences3.dat
[2010/08/25 17:02:47 | 000,000,099 | -H-- | C] () -- C:\Users\Book Worm\jagex_runescape_preferences2.dat
[2010/08/25 17:01:26 | 000,000,046 | -H-- | C] () -- C:\Users\Book Worm\jagex_runescape_preferences.dat
========== LOP Check ==========
[2012/07/13 11:25:17 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Baemoh
[2012/07/07 21:16:18 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Dyavxo
[2011/09/20 15:50:22 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\eMusic
[2012/07/08 18:57:25 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Hace
[2012/07/11 19:01:57 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Izatho
[2012/07/07 21:16:18 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Kayt
[2012/07/06 19:47:11 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Laop
[2011/09/20 15:50:24 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Merscom
[2012/07/11 21:00:58 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Olery
[2012/07/08 18:57:25 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Oncuu
[2011/09/20 15:50:30 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\PowerCinema
[2011/09/20 15:50:32 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\toshiba
[2012/07/07 21:16:18 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Tyzobe
[2012/07/11 19:01:57 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Uhikky
[2012/07/11 21:00:58 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Uqpoov
[2012/07/11 19:01:57 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Uwudh
[2012/07/08 18:57:25 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Vuuve
[2011/09/20 15:50:32 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\WildTangent
[2011/09/20 15:50:32 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\WinBatch
[2011/09/20 15:50:32 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Xilisoft
[2012/07/11 21:00:58 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Ymwufo
[2012/07/06 19:47:11 | 000,000,000 | -H-D | M] -- C:\Users\Book Worm\AppData\Roaming\Ytumk
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At1.job
[2012/07/13 11:25:17 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At10.job
[2012/07/13 11:25:17 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At11.job
[2012/07/13 11:25:17 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At12.job
[2012/07/12 12:28:44 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At13.job
[2012/07/11 13:51:41 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At14.job
[2012/07/12 14:02:27 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At15.job
[2012/07/11 16:51:39 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At16.job
[2012/07/11 16:51:39 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At17.job
[2012/07/12 17:01:53 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At18.job
[2012/07/12 18:57:19 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At19.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At2.job
[2012/07/12 19:00:05 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At20.job
[2012/07/12 22:13:12 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At21.job
[2012/07/12 22:13:12 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At22.job
[2012/07/12 22:13:12 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At23.job
[2012/07/12 23:06:34 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At24.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At25.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At26.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At27.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At28.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At29.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At3.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At30.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At31.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At32.job
[2012/07/13 08:34:46 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At33.job
[2012/07/13 11:25:13 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At34.job
[2012/07/13 11:25:13 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At35.job
[2012/07/13 11:25:13 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At36.job
[2012/07/12 12:28:41 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At37.job
[2012/07/11 13:51:36 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At38.job
[2012/07/12 14:00:00 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At39.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At4.job
[2012/07/11 16:51:35 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At40.job
[2012/07/11 16:51:35 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At41.job
[2012/07/12 17:00:01 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At42.job
[2012/07/12 18:57:15 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At43.job
[2012/07/12 19:00:00 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At44.job
[2012/07/12 22:13:12 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At45.job
[2012/07/12 22:13:12 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At46.job
[2012/07/12 22:13:12 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At47.job
[2012/07/12 23:00:01 | 000,000,342 | -H-- | M] () -- C:\Windows\Tasks\At48.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At5.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At6.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At7.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At8.job
[2012/07/13 08:34:48 | 000,000,340 | -H-- | M] () -- C:\Windows\Tasks\At9.job
[2012/05/05 22:18:24 | 000,032,538 | -H-- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report >
Edited by Bobcat Bob, 16 July 2012 - 08:17 PM.