Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Tracking cookies, malware, some programs not working (Windows Vista)


  • Please log in to reply

#1
CicisMom

CicisMom

    New Member

  • Member
  • Pip
  • 9 posts
Tracking cookie.247 cookie.Ru4 cookie.Zedo, etc.

My laptop is a mess, and I don't know if it has a virus or just malware/spyware.

The first symptoms were that whenever I opened my internet browser (Opera) a pop-up would show up from my AVG anti-virus saying there was a tracking cookie found. Then some of my programs stopped working, like the windows media player (I managed to fix that so it opens again), it used to not open at all. The iTunes program would randomly open several times, while I was browsing the internet or using another program. Then, my Windows Live Movie Maker program began having several malfuncions. I use it a lot for projects, and up to today I can't get it to work anymore.
Windows Live movie maker problems: 1. I can only make less than 5 edits at a time to my current project, then it freezes and does not respond or crashes. 2. When I try to save my project as a movie file, it is loading and when it gets to 20-50%, it either freezes and is forced to close, or a window pops up stating that there was an error and to find missing files or remove unusable items (but I have not moved the files from their original folder or anything, and they work fine if I preview the movie, but I can only preview it for the first 5-10 seconds and then it freezes).

Every time I open my internet browser or even when I don't and I'm just using a program, I get several pop-up from my AVG anti-virus about the tracking cookie files in my computer, but there is no option to exterminate them, and I am not able to manually delete them from the folder where they are located.

What I have done: Uninstalled programs I no longer use from my computer, installed Malwarebytes (I did a complete scan and nothing was found), have done a complete scan with my anti-virus and nothing is found, I have un-installed WLMM and installed it again thinking it was just the program that was having some issues (didn't fix it), and I have done disk clean-up from System Tools.

My computer is also overall just running slow, lags too much and programs freeze even when I'm not even using the internet.

These are some screenshots or some of the issues:

Posted Image

Here at the same time that the threat pop-up showed up, the iTunes program opened also. And I was not using the internet browser.
Posted Image

Posted Image



Thanks for your time, I would really appreciate some help.

Edited by CicisMom, 30 August 2012 - 04:39 PM.

  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP
Tracking cookies are a fact of life on the internet and nothing to be worried about. Let's see if we can see what's really going on:

Download OTL from
http://www.geekstogo...timers-list-it/
and Save it to your desktop.


Copy the text in the code box:

DRIVES
nnetsvcs
%SYSTEMDRIVE%\*.exe
%systemroot%\assembly\GAC_32\*.ini
%systemroot%\assembly\GAC_64\*.ini
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.exe
%APPDATA%\*.
/md5start
pnrpnsp.dll 
nwprovau.dll
nlaapi.dll
napinsp.dll
mswsock.dll
winrnr.dll
wshelper.dll
services.exe
atapi.sys
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
csrss.exe
PrintIsolationHost.exe
consrv.dll
user32.dll
/md5stop
C:\Windows\assembly\tmp\U\*.* /s
%systemroot%\*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
CREATERESTOREPOINT

Run OTL (Vista or Win 7 => right click and Run As Administrator)

Paste (Ctrl + v) the copied text in the box where it says Custom Scan/Fixes

Select the All option in the Extra Registry group then Run Scan.

You should get two logs. Please copy and paste both of them.
  • 0

#3
CicisMom

CicisMom

    New Member

  • Topic Starter
  • Member
  • Pip
  • 9 posts
OTL.Txt:

OTL logfile created on: 8/31/2012 3:37:17 PM - Run 1
OTL by OldTimer - Version 3.2.59.1 Folder = C:\Users\Dell\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.50 Gb Total Physical Memory | 2.20 Gb Available Physical Memory | 62.99% Memory free
7.18 Gb Paging File | 5.86 Gb Available in Paging File | 81.71% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 280.49 Gb Total Space | 120.65 Gb Free Space | 43.01% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 9.31 Gb Free Space | 62.10% Space Free | Partition Type: NTFS

Computer Name: DELL-PC | User Name: Dell | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/08/31 15:33:57 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
PRC - [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2012/07/25 14:39:31 | 000,830,048 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.1.5\ToolbarUpdater.exe
PRC - [2012/07/25 14:39:30 | 001,147,488 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe
PRC - [2012/07/04 17:25:54 | 005,160,568 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgidsagent.exe
PRC - [2012/07/03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/07/03 13:46:44 | 000,462,920 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012/06/13 03:48:26 | 000,758,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgrsx.exe
PRC - [2012/06/13 03:48:24 | 001,255,544 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgnsx.exe
PRC - [2012/04/05 05:12:34 | 002,587,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgtray.exe
PRC - [2012/03/19 05:18:12 | 000,979,840 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgemcx.exe
PRC - [2012/02/14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe
PRC - [2012/02/14 04:52:38 | 000,338,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgcsrvx.exe
PRC - [2011/06/06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2010/08/20 13:53:08 | 000,689,472 | ---- | M] (SoftThinks SAS) -- C:\Program Files\Dell DataSafe Local Backup\SftService.exe
PRC - [2009/04/10 23:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/12/18 12:05:28 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe
PRC - [2008/01/01 20:44:38 | 000,405,504 | ---- | M] (IDT, Inc.) -- C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
PRC - [2008/01/01 20:44:32 | 000,102,400 | ---- | M] (IDT, Inc.) -- C:\WINDOWS\System32\stacsv.exe
PRC - [2008/01/01 20:44:26 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\AEstSrv.exe
PRC - [2007/12/21 08:58:06 | 000,184,320 | ---- | M] (CyberLink Corp.) -- C:\Program Files\Dell\MediaDirect\PCMService.exe
PRC - [2007/12/02 22:58:54 | 000,036,864 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\OEM02Mon.exe
PRC - [2006/11/03 15:55:50 | 000,703,280 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2006/11/03 15:55:48 | 001,583,920 | ---- | M] (Broadcom Corporation.) -- c:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
PRC - [2006/09/14 07:56:06 | 000,102,400 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe


========== Modules (No Company Name) ==========

MOD - [2012/07/25 14:39:31 | 000,132,704 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\12.1.5\SiteSafety.dll
MOD - [2012/07/25 14:39:30 | 001,147,488 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe
MOD - [2012/06/14 17:21:49 | 011,820,032 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\508b444db523c5cf20ff12c7f440837b\System.Web.ni.dll
MOD - [2012/05/13 19:50:31 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\846b9cf2756fdd15f704c9bab9c70b6f\System.Runtime.Remoting.ni.dll
MOD - [2012/05/13 18:00:37 | 007,953,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll
MOD - [2012/05/13 18:00:28 | 011,492,352 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll
MOD - [2011/09/27 08:23:00 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/09/27 08:22:40 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2008/12/18 02:55:28 | 000,054,784 | ---- | M] () -- C:\WINDOWS\System32\bcmwlrmt.dll
MOD - [2006/11/03 15:46:24 | 000,126,976 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll
MOD - [2006/11/03 15:25:56 | 000,389,120 | ---- | M] () -- C:\WINDOWS\System32\btwhidcs.dll


========== Services (SafeList) ==========

SRV - [2012/07/25 14:39:31 | 000,830,048 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.1.5\ToolbarUpdater.exe -- (vToolbarUpdater12.1.5)
SRV - [2012/07/04 17:25:54 | 005,160,568 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012/07/03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/02/14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2011/06/06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2010/08/20 13:53:08 | 000,689,472 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files\Dell DataSafe Local Backup\SftService.exe -- (SftService)
SRV - [2008/12/18 12:05:28 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV - [2008/01/20 19:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/01/01 20:44:32 | 000,102,400 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\WINDOWS\System32\stacsv.exe -- (STacSV)
SRV - [2008/01/01 20:44:26 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\WINDOWS\System32\AEstSrv.exe -- (AESTFilters)
SRV - [2006/09/14 07:56:06 | 000,102,400 | ---- | M] () [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor5.0)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Dell\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - [2012/07/25 14:39:32 | 000,027,496 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2012/07/03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012/04/19 04:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012/03/19 05:17:28 | 000,301,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012/02/22 05:25:32 | 000,235,216 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012/01/31 04:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/12/23 13:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/12/23 13:32:08 | 000,017,232 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2011/12/23 13:32:06 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\avgidsfilterx.sys -- (AVGIDSFilter)
DRV - [2011/12/23 13:32:00 | 000,139,856 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2009/12/23 12:32:26 | 000,086,016 | ---- | M] (PACE Anti-Piracy, Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TPkd.sys -- (TPkd)
DRV - [2009/06/16 12:59:00 | 009,768,640 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009/04/10 21:42:52 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\winusb.sys -- (winusb)
DRV - [2008/12/18 02:55:10 | 000,018,424 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\bcm42rly.sys -- (BCM42RLY)
DRV - [2008/01/20 19:23:25 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\e1e6032.sys -- (e1express)
DRV - [2008/01/01 20:44:40 | 000,330,240 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2007/12/02 22:59:06 | 000,007,424 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\OEM02Vfx.sys -- (OEM02Vfx)
DRV - [2007/12/02 22:58:50 | 000,235,648 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\OEM02Dev.sys -- (OEM02Dev)
DRV - [2007/02/28 04:25:46 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007/02/28 04:25:44 | 000,043,520 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007/02/28 04:25:44 | 000,032,256 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2006/11/02 00:36:43 | 002,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\atikmdag.sys -- (R300)
DRV - [2005/08/17 08:47:48 | 000,073,696 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\sscdserd.sys -- (sscdserd)
DRV - [2005/08/17 08:46:26 | 000,093,872 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005/08/17 08:46:20 | 000,008,272 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2005/08/17 08:45:00 | 000,058,352 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\sscdbus.sys -- (sscdbus)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{15B7D127-05D8-415C-9AAD-912D5133908F}: "URL" = http://search.live.c...ferrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search...p={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0C760271-157E-42A0-9363-F321E7771D55}: "URL" = http://www.google.co...&rlz=1I7ADSA_en
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg....fr&d=2012-07-25 14:39:32&v=12.1.0.21&sap=dsp&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\12.1.5\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\ [2012/07/25 14:38:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\12.1.0.21\ [2012/07/25 14:39:35 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.nutridiary.com/mylog.asp
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Dell\AppData\Local\Google\Chrome\Application\17.0.963.46\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Dell\AppData\Local\Google\Chrome\Application\17.0.963.46\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Dell\AppData\Local\Google\Chrome\Application\17.0.963.46\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\PFiles\Plugins\np-mswmp.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\
CHR - Extension: Google Search = C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\
CHR - Extension: Gmail = C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2011/05/07 11:18:25 | 000,000,027 | ---- | M]) - C:\WINDOWS\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.1.0.21\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.1.0.21\AVG Secure Search_toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVHotkey] C:\Windows\System32\nvHotkey.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OEM02Mon.exe] C:\WINDOWS\OEM02Mon.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [PCMService] C:\Program Files\Dell\MediaDirect\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.5.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 68.94.157.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0E59E7AF-4452-44F7-B729-5DE122B22E54}: DhcpNameServer = 24.205.1.14 4.2.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{56F003EC-191F-4AE7-ADD5-4DD33750F20F}: DhcpNameServer = 192.168.0.1 68.94.157.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\12.1.5\ViProtocol.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\WINDOWS\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Dell\Pictures\l_4212ee00c47e122d5da644a7c0f812fc.jpg
O24 - Desktop BackupWallPaper: C:\Users\Dell\Pictures\l_4212ee00c47e122d5da644a7c0f812fc.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 14:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk /p \??\F:)
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe - (Hewlett-Packard Co.)
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ImageMixer 3 SE Camera Monitor Ver.5.lnk - C:\Program Files\PIXELA\ImageMixer 3 SE Ver.5\Transfer Utility\CameraMonitor.exe - (PIXELA CORPORATION)
MsConfig - StartUpFolder: C:^Users^Dell^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dell Dock.lnk - C:\Program Files\Dell\DellDock\DellDock.exe - (Stardock Corporation)
MsConfig - StartUpFolder: C:^Users^Dell^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE - (Microsoft Corporation)
MsConfig - StartUpReg: Adobe Photo Downloader - hkey= - key= - C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - File not found
MsConfig - StartUpReg: HP Software Update - hkey= - key= - C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard)
MsConfig - StartUpReg: hpqSRMon - hkey= - key= - File not found
MsConfig - StartUpReg: Messenger (Yahoo!) - hkey= - key= - File not found
MsConfig - StartUpReg: msnmsgr - hkey= - key= - C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
MsConfig - State: "startup" - 2

SafeBootMin: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: hitmanpro35 - Reg Error: Value error.
SafeBootNet: hitmanpro35.sys - Reg Error: Value error.
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Reg Error: Value error.
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32: msacm.ac3acm - C:\Windows\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\Windows\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.XVID - C:\Windows\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\System32\yv12vfw.dll (www.helixcommunity.org)

CREATERESTOREPOINT
System Restore Service not available.

========== Files/Folders - Created Within 30 Days ==========

[2012/08/31 15:33:57 | 000,598,528 | ---- | C] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
[2012/08/30 12:28:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/08/30 12:28:37 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/08/30 12:28:37 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012/08/30 12:15:56 | 000,000,000 | ---D | C] -- C:\ProgramData\RegInOut
[2012/08/30 12:15:53 | 000,000,000 | ---D | C] -- C:\Windows\RegInOut System Utilities
[2012/08/30 11:38:03 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{8022A780-A62C-4DC8-9F80-5F75FD7D7772}
[2012/08/28 14:16:05 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{421F8392-1C10-4A80-8B10-A71919BCC980}
[2012/08/26 17:17:56 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{44405A3B-B362-485D-8B54-5E2EC3AA35E5}
[2012/08/26 17:10:10 | 000,000,000 | ---D | C] -- C:\Windows\en
[2012/08/26 17:09:11 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2012/08/26 16:10:01 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{81635705-AC04-480B-93A9-FE283738CA71}
[2012/08/25 16:20:16 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{27DC27A5-7B68-4B40-BDB3-ED3216EBDB70}
[2012/08/24 16:38:29 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{1EC2887C-EFAA-495E-9B2F-AC863BF6AFCA}
[2012/08/23 18:10:25 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{3597258C-D417-49A2-9E89-36727B3294BB}
[2012/08/22 19:25:04 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{BCCE0E22-1CAB-41D0-A97B-7AC5BF0D6C10}
[2012/08/19 15:33:26 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{F2D580F8-3BE1-4B22-AABF-105BBAB0E2A2}
[2012/08/18 14:14:37 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{10D573FE-1E89-4273-8DA4-41A247D60597}
[2012/08/18 14:14:26 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{B4CEA315-4D6E-480F-B4FD-C3DEA0B007B8}
[2012/08/17 15:18:10 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012/08/17 15:18:10 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012/08/17 15:18:09 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012/08/17 15:18:09 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012/08/17 15:18:08 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012/08/17 15:18:08 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012/08/17 15:18:08 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012/08/17 15:18:00 | 002,047,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012/08/17 15:11:29 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{07EF41AB-CD18-4725-AA74-6C1D2BE1C298}
[2012/08/17 15:11:19 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{4FD6CAA4-35E7-4A52-BFE9-1460FD763C54}
[2012/08/16 18:31:01 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{D419EA7C-DDAE-4A6B-BB94-58F00BCE4E69}
[2012/08/16 18:30:50 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{D3162CC3-0480-4CAA-B5C3-F4E9DBA8EE5A}
[2012/08/14 08:36:59 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{AD1469B5-9A4B-47F6-A4E4-D5495247A3BC}
[2012/08/14 08:36:49 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{543FAC00-7FFF-44C0-91B1-5CA2F8ADECA7}
[2012/08/13 13:56:30 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{F6169E6C-E35B-4122-8A23-5A39A26E9452}
[2012/08/13 13:56:18 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{0FA3EE77-45F8-4C59-A7FF-50F1B3D668AD}
[2012/08/12 18:26:51 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{753B59FD-266F-4899-9E2A-6D5A4ABBE460}
[2012/08/12 18:26:40 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{FEE762F4-DECF-4CFF-99E8-D87DB8066D0C}
[2012/08/11 22:53:39 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{56C47545-589C-4483-97BC-5A888AA97BF1}
[2012/08/11 22:53:28 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{CEC39232-9377-4465-9C85-A4E385BD0E45}
[2012/08/09 17:18:28 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{032A44BD-C1E0-4373-871A-494261E05068}
[2012/08/09 17:18:18 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{E405AD70-AE99-4005-8483-62F36743C33A}
[2012/08/05 20:35:40 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{86E9A7B2-2FF4-4D7F-8411-3530B663FAD8}
[2012/08/05 20:35:29 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{CFD73512-0807-4DFC-9274-BBC5FB40D44A}
[2012/08/04 23:07:06 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{0E2D9154-B785-4E30-A35D-5FFFB2ECDD19}
[2012/08/04 23:06:56 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{32E04953-F3CD-45B9-A3B8-FF66586F7E8C}
[2012/08/04 22:41:27 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{CA91A006-F57B-48E1-87C8-CCDA939ACC93}
[2012/08/04 22:41:18 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{24DC8B7D-12B1-4336-90A6-09C626FB1B89}
[2012/08/04 22:41:07 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{7FFE8826-7F28-4EDC-A008-0297826A1AEB}
[2012/08/04 22:41:03 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{969A1B8B-05DC-4B9F-8EAB-A4803585B926}
[2012/08/04 22:40:43 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{B9A429F5-3927-4AE5-8911-3BCCD67DB1CB}
[2012/08/04 22:40:33 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{50C0CBE2-F005-4108-841B-C281453826B7}
[2012/08/04 22:39:52 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{DD8A4663-A6B5-4750-8326-9C065C3DC8A9}
[2012/08/04 22:39:42 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{4516D816-C248-4D9C-8A78-FA5EE49113AE}
[2012/08/04 21:05:20 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{EB84BE11-8E24-457B-AFE5-880FC3DD2713}

========== Files - Modified Within 30 Days ==========

[2012/08/31 15:44:00 | 000,000,564 | ---- | M] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2012/08/31 15:41:00 | 000,000,506 | ---- | M] () -- C:\Windows\tasks\SystemToolsDailyTest.job
[2012/08/31 15:33:57 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
[2012/08/31 15:24:11 | 105,406,534 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012/08/31 15:23:00 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/08/31 15:22:45 | 000,604,692 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/08/31 15:22:45 | 000,108,962 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/08/31 15:20:05 | 000,062,804 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012/08/31 15:18:31 | 000,000,878 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/08/31 15:18:19 | 000,062,804 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2012/08/31 15:18:14 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/08/31 15:18:13 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/08/31 15:18:08 | 000,000,330 | ---- | M] () -- C:\Windows\tasks\RegInOut Scheduled Scan - Dell.job
[2012/08/31 15:18:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/08/31 15:18:03 | 3756,044,288 | -HS- | M] () -- C:\hiberfil.sys
[2012/08/30 22:05:22 | 000,003,204 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012/08/30 15:31:00 | 000,041,205 | ---- | M] () -- C:\Users\Dell\Documents\errror2.jpg
[2012/08/30 15:28:27 | 000,131,396 | ---- | M] () -- C:\Users\Dell\Documents\errorrrrr.jpg
[2012/08/30 15:26:07 | 000,015,894 | ---- | M] () -- C:\Users\Dell\Documents\errorrrr.jpg
[2012/08/30 15:16:34 | 000,117,588 | ---- | M] () -- C:\Users\Dell\Documents\errrorrr.jpg
[2012/08/30 12:28:38 | 000,000,908 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/08/30 12:12:56 | 000,132,656 | ---- | M] () -- C:\Users\Dell\Documents\error8-30-12.jpg
[2012/08/26 17:31:36 | 380,932,104 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012/08/26 16:25:45 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2012/08/26 16:25:45 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2012/08/24 18:17:20 | 000,022,433 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm
[2012/08/21 14:03:56 | 000,079,081 | ---- | M] () -- C:\Users\Dell\Desktop\IGETC_01.pdf
[2012/08/18 13:30:07 | 000,295,200 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/08/12 18:21:34 | 000,008,484 | ---- | M] () -- C:\Users\Dell\AppData\Local\d3d9caps.dat
[2012/08/02 20:59:32 | 000,097,792 | ---- | M] () -- C:\Users\Dell\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== Files Created - No Company Name ==========

[2012/08/30 15:16:34 | 000,117,588 | ---- | C] () -- C:\Users\Dell\Documents\errrorrr.jpg
[2012/08/30 15:16:04 | 000,015,894 | ---- | C] () -- C:\Users\Dell\Documents\errorrrr.jpg
[2012/08/30 14:38:41 | 000,041,205 | ---- | C] () -- C:\Users\Dell\Documents\errror2.jpg
[2012/08/30 13:10:20 | 000,131,396 | ---- | C] () -- C:\Users\Dell\Documents\errorrrrr.jpg
[2012/08/30 12:28:38 | 000,000,908 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/08/30 12:15:57 | 000,000,330 | ---- | C] () -- C:\Windows\tasks\RegInOut Scheduled Scan - Dell.job
[2012/08/30 12:12:55 | 000,132,656 | ---- | C] () -- C:\Users\Dell\Documents\error8-30-12.jpg
[2012/08/26 17:31:36 | 380,932,104 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012/08/26 17:09:58 | 000,001,160 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
[2012/08/26 17:09:33 | 000,001,229 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
[2012/08/26 16:25:45 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2012/08/26 16:25:45 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2011/11/19 19:34:15 | 000,004,974 | ---- | C] () -- C:\ProgramData\wzgvhopq.rtk
[2011/11/17 20:28:21 | 000,123,636 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2011/09/17 19:53:33 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2011/08/17 12:50:12 | 000,000,146 | ---- | C] () -- C:\Windows\WININIT.INI
[2011/06/03 22:01:23 | 016,247,549 | ---- | C] () -- C:\Program Files\iPhone GUI PSD 4.psd
[2011/05/17 15:25:18 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011/05/17 15:25:18 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011/05/17 15:25:17 | 000,631,808 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011/05/17 15:25:17 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011/05/17 15:25:17 | 000,080,896 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011/05/07 11:11:09 | 000,256,512 | ---- | C] () -- C:\Windows\PEV.exe
[2011/05/07 11:11:09 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011/05/07 11:11:09 | 000,089,088 | ---- | C] () -- C:\Windows\MBR.exe
[2011/05/07 11:11:09 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011/05/07 11:11:09 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011/05/07 11:06:00 | 000,017,480 | ---- | C] () -- C:\Windows\System32\drivers\hitmanpro35.sys
[2011/05/07 10:18:19 | 000,000,118 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2011/04/25 15:25:55 | 000,010,586 | -HS- | C] () -- C:\Users\Dell\AppData\Local\728d8r8641b7v7slg6xd5614lw38o
[2011/04/25 15:25:55 | 000,010,586 | -HS- | C] () -- C:\ProgramData\728d8r8641b7v7slg6xd5614lw38o
[2010/05/01 21:35:00 | 000,008,484 | ---- | C] () -- C:\Users\Dell\AppData\Local\d3d9caps.dat
[2010/03/30 16:11:46 | 000,097,792 | ---- | C] () -- C:\Users\Dell\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/29 13:18:48 | 000,062,804 | ---- | C] () -- C:\ProgramData\nvModes.001
[2010/03/29 13:18:42 | 000,062,804 | ---- | C] () -- C:\ProgramData\nvModes.dat

========== Custom Scans ==========

========== Drive Information ==========

Physical Drives
---------------

Drive: \\\\.\\PHYSICALDRIVE0 - Fixed hard disk media
Interface type: IDE
Media Type: Fixed hard disk media
Model: WDC WD3200BEVT-75ZCT2
Partitions: 4
Status: OK
Status Info: 0

Partitions
---------------

DeviceID: Disk #0, Partition #0
PartitionType: Unknown
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 0.00GB
Starting Offset: 32256
Hidden sectors: 0


DeviceID: Disk #0, Partition #1
PartitionType: Installable File System
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 15.00GB
Starting Offset: 106954752
Hidden sectors: 0


DeviceID: Disk #0, Partition #2
PartitionType: Installable File System
Bootable: True
BootPartition: True
PrimaryPartition: True
Size: 280.00GB
Starting Offset: 16213082112
Hidden sectors: 0


DeviceID: Disk #0, Partition #3
PartitionType: Extended w/Extended Int 13
Bootable: False
BootPartition: False
PrimaryPartition: False
Size: 3.00GB
Starting Offset: 317385080832
Hidden sectors: 0


< %SYSTEMDRIVE%\*.exe >

< %systemroot%\assembly\GAC_32\*.ini >

< %systemroot%\assembly\GAC_64\*.ini >

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*.exe >

< %APPDATA%\*. >
[2010/11/12 22:35:03 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\acccore
[2011/12/22 20:17:24 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Adobe
[2011/08/17 19:08:12 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Apple Computer
[2011/03/09 23:11:47 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Audacity
[2012/07/25 14:43:30 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\AVG2012
[2011/11/19 19:13:46 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\CoffeeCup Software
[2010/03/30 15:07:39 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Creative
[2011/04/26 14:28:12 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\CyberLink
[2011/05/24 21:23:34 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Dell
[2011/05/09 12:08:46 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Google
[2010/05/26 10:09:16 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\HP
[2010/03/29 08:33:03 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Identities
[2010/03/29 08:42:41 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Macromedia
[2012/02/15 20:05:45 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Malwarebytes
[2006/11/02 05:37:34 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Media Center Programs
[2012/07/26 14:08:11 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Media Player Classic
[2011/11/08 19:44:23 | 000,000,000 | --SD | M] -- C:\Users\Dell\AppData\Roaming\Microsoft
[2010/03/29 13:51:23 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\OpenOffice.org
[2012/02/27 17:59:12 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Opera
[2011/03/31 19:44:59 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\PCDr
[2010/07/25 17:09:16 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Reallusion
[2011/12/29 11:01:07 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\redsn0w
[2012/03/17 21:02:13 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Skype
[2012/03/17 17:22:22 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\skypePM
[2010/07/25 17:09:14 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\tmp
[2011/11/09 22:59:55 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Windows Live Writer
[2010/10/05 19:33:31 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\WinRAR
[2010/10/18 21:27:45 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Yahoo!

< MD5 for: ATAPI.SYS >
[2009/04/11 10:43:58 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\WINDOWS\System32\DriverStore\FileRepository\mshdc.inf_4c9c5a00\atapi.sys
[2009/04/11 10:43:58 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\WINDOWS\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18034_none_dd1bb97e219e87cb\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\WINDOWS\System32\drivers\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\WINDOWS\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\WINDOWS\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008/01/20 19:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\WINDOWS\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008/01/20 19:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\WINDOWS\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006/11/02 02:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\WINDOWS\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2009/04/11 10:43:58 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=96DC4E1A9F90CCD489950A8935425C59 -- C:\WINDOWS\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.22134_none_dda556493abc2795\atapi.sys

< MD5 for: CSRSS.EXE >
[2008/01/20 19:24:54 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=ABCA209EBA02CB59233614DB83B4F50D -- C:\WINDOWS\System32\csrss.exe
[2008/01/20 19:24:54 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=ABCA209EBA02CB59233614DB83B4F50D -- C:\WINDOWS\winsxs\x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4c\csrss.exe

< MD5 for: EXPLORER.EXE >
[2009/04/11 10:59:39 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2009/04/11 10:59:39 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2009/04/11 10:59:39 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009/04/10 23:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2009/04/10 23:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\WINDOWS\explorer.exe
[2009/04/10 23:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2009/04/11 10:59:39 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2008/01/20 19:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe

< MD5 for: MSWSOCK.DLL >
[2009/04/10 23:28:22 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=8617350C9B590B63E620881092751BCB -- C:\WINDOWS\ERDNT\cache\mswsock.dll
[2009/04/10 23:28:22 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=8617350C9B590B63E620881092751BCB -- C:\WINDOWS\System32\mswsock.dll
[2009/04/10 23:28:22 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=8617350C9B590B63E620881092751BCB -- C:\WINDOWS\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.0.6002.18005_none_ba3ed0122a6d89da\mswsock.dll
[2008/01/20 19:24:02 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=89FD0595EEA4E505CABEFCF7008F2612 -- C:\WINDOWS\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.0.6001.18000_none_b85357062d4bbe8e\mswsock.dll

< MD5 for: NAPINSP.DLL >
[2008/01/20 19:24:29 | 000,050,176 | ---- | M] (Microsoft Corporation) MD5=FC62A635063B762E1C3C60EA77279378 -- C:\WINDOWS\System32\NapiNSP.dll
[2008/01/20 19:24:29 | 000,050,176 | ---- | M] (Microsoft Corporation) MD5=FC62A635063B762E1C3C60EA77279378 -- C:\WINDOWS\winsxs\x86_microsoft-windows-n..ider-infrastructure_31bf3856ad364e35_6.0.6001.18000_none_ac1d40c88f30e6c0\NapiNSP.dll

< MD5 for: NLAAPI.DLL >
[2008/01/20 19:23:44 | 000,048,128 | ---- | M] (Microsoft Corporation) MD5=D1A84F7D4CAFCFE2A32149FF418056E5 -- C:\WINDOWS\System32\nlaapi.dll
[2008/01/20 19:23:44 | 000,048,128 | ---- | M] (Microsoft Corporation) MD5=D1A84F7D4CAFCFE2A32149FF418056E5 -- C:\WINDOWS\winsxs\x86_microsoft-windows-nlasvc_31bf3856ad364e35_6.0.6001.18000_none_6785f5c70aea4565\nlaapi.dll

< MD5 for: PNRPNSP.DLL >
[2008/01/20 19:25:26 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=690D41DF1D555F96D4898A0F54EBA065 -- C:\WINDOWS\System32\pnrpnsp.dll
[2008/01/20 19:25:26 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=690D41DF1D555F96D4898A0F54EBA065 -- C:\WINDOWS\winsxs\x86_microsoft-windows-peertopeerpnrp_31bf3856ad364e35_6.0.6001.18000_none_717f15b322749509\pnrpnsp.dll

< MD5 for: SERVICES.EXE >
[2008/01/20 19:24:48 | 000,279,040 | ---- | M] (Microsoft Corporation) MD5=2B336AB6286D6C81FA02CBAB914E3C6C -- C:\WINDOWS\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe
[2009/04/10 23:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B -- C:\WINDOWS\ERDNT\cache\services.exe
[2009/04/10 23:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B -- C:\WINDOWS\System32\services.exe
[2009/04/10 23:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B -- C:\WINDOWS\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe

< MD5 for: SVCHOST.EXE >
[2008/01/20 19:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008/01/20 19:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\WINDOWS\System32\svchost.exe
[2008/01/20 19:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\WINDOWS\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6001.18000_none_b5bb59a1054dbde5\svchost.exe
[2012/07/03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe

< MD5 for: USER32.DLL >
[2009/04/10 23:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\WINDOWS\ERDNT\cache\user32.dll
[2009/04/10 23:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\WINDOWS\System32\user32.dll
[2009/04/10 23:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\WINDOWS\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll
[2008/01/20 19:24:21 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\WINDOWS\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll

< MD5 for: USERINIT.EXE >
[2008/01/20 19:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008/01/20 19:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\WINDOWS\System32\userinit.exe
[2008/01/20 19:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\WINDOWS\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009/04/10 23:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2009/04/10 23:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\WINDOWS\System32\winlogon.exe
[2009/04/10 23:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\WINDOWS\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2012/07/03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2008/01/20 19:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\WINDOWS\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

< MD5 for: WINRNR.DLL >
[2009/04/10 23:28:25 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=C411C80F90D6732380352B98B37BBD53 -- C:\WINDOWS\System32\winrnr.dll
[2009/04/10 23:28:25 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=C411C80F90D6732380352B98B37BBD53 -- C:\WINDOWS\winsxs\x86_microsoft-windows-dns-client-winrnr_31bf3856ad364e35_6.0.6002.18005_none_5b39cbfb4d3802b6\winrnr.dll
[2006/11/02 02:46:14 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=FF78B8E67EDCE9FEED651D7858D77A04 -- C:\WINDOWS\winsxs\x86_microsoft-windows-dns-client-winrnr_31bf3856ad364e35_6.0.6000.16386_none_571790f3532b2696\winrnr.dll

< MD5 for: WSHELPER.DLL >
[2006/11/02 02:46:14 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=20614C9F12A3A09A5015C9EBBD4419D2 -- C:\WINDOWS\System32\wshelper.dll
[2006/11/02 02:46:14 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=20614C9F12A3A09A5015C9EBBD4419D2 -- C:\WINDOWS\winsxs\x86_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6000.16386_none_024e4071fa6fea95\wshelper.dll

< C:\Windows\assembly\tmp\U\*.* /s >

< %systemroot%\*. /mp /s >

< hklm\software\clients\startmenuinternet|command /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\system32\ie4uinit.exe" -hide [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\system32\ie4uinit.exe" -show [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\system32\ie4uinit.exe" -reinstall [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2012/06/28 18:00:47 | 000,748,664 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" [2012/06/28 18:00:47 | 000,748,664 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\ShowIconsCommand: "C:\Program Files\Opera\Opera.exe" /ShowIconsCommand [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\HideIconsCommand: "C:\Program Files\Opera\Opera.exe" /HideIconsCommand [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\ReinstallCommand: "C:\Program Files\Opera\Opera.exe" /ReInstallBrowser [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\shell\open\command\\: "C:\Program Files\Opera\Opera.exe" [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)

< hklm\software\clients\startmenuinternet|command /64 /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\system32\ie4uinit.exe" -hide [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\system32\ie4uinit.exe" -show [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\system32\ie4uinit.exe" -reinstall [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2012/06/28 18:00:47 | 000,748,664 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" [2012/06/28 18:00:47 | 000,748,664 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\ShowIconsCommand: "C:\Program Files\Opera\Opera.exe" /ShowIconsCommand [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\HideIconsCommand: "C:\Program Files\Opera\Opera.exe" /HideIconsCommand [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\ReinstallCommand: "C:\Program Files\Opera\Opera.exe" /ReInstallBrowser [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\shell\open\command\\: "C:\Program Files\Opera\Opera.exe" [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< End of report >






Extras.Txt:



OTL Extras logfile created on: 8/31/2012 3:37:17 PM - Run 1
OTL by OldTimer - Version 3.2.59.1 Folder = C:\Users\Dell\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.50 Gb Total Physical Memory | 2.20 Gb Available Physical Memory | 62.99% Memory free
7.18 Gb Paging File | 5.86 Gb Available in Paging File | 81.71% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 280.49 Gb Total Space | 120.65 Gb Free Space | 43.01% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 9.31 Gb Free Space | 62.10% Space Free | Partition Type: NTFS

Computer Name: DELL-PC | User Name: Dell | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (All) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- "%1" %*
.chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
.cmd [@ = cmdfile] -- "%1" %*
.com [@ = ComFile] -- "%1" %*
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.exe [@ = exefile] -- "%1" %*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] -- C:\Windows\System32\mshta.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
.inf [@ = inffile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\rundll32.exe (Microsoft Corporation)
.js [@ = JSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.pif [@ = piffile] -- "%1" %*
.reg [@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation)
.scr [@ = scrfile] -- "%1" /S
.txt [@ = txtfile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\Windows\system32\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
inffile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2900740096-1093691669-3467002836-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0D4B21DD-D485-4F8F-979C-4D9F97A95203}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1A6B6DDE-7CBE-449E-AC18-B35129EDAD06}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{762C9CBD-1186-47A7-BCFE-D244FD8FB921}" = rport=10243 | protocol=6 | dir=out | app=system |
"{86E3C416-A3EC-4F1D-A309-24995AB489AB}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A243296B-8D5F-4378-88F2-62C01E33C872}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A766F4BB-BEC7-4C6F-89A0-E4E2EA36B8E6}" = lport=10243 | protocol=6 | dir=in | app=system |
"{BA14F699-EC86-4320-A392-BE7129CD762A}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C320E7B5-ED43-4105-AABE-A0D35CB22076}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{C4991D1A-1946-4AD4-9681-3E623150C8AD}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{D0A7CD87-E5BB-42E7-B92C-A87F25BE6B37}" = lport=2869 | protocol=6 | dir=in | app=system |
"{D4DA0DD3-9AEA-4D3F-934C-2B76B2FE7422}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F7B04E2C-97C3-46B4-A11F-42644846EE42}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{FE161D78-E5AD-433F-A91B-E8B22A337C5B}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02D98730-EA34-4E4C-AD23-85153308F2AB}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{06C25B46-4FCF-456A-85A0-033F754F0FF5}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{08E79B16-E6EB-485F-AE0B-6C277F259777}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{1077FA70-78A3-4BBD-BA7D-EFCA680DC808}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{13012802-C079-462F-A409-E81D748F7F59}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{1A027C66-C0BA-4E4F-B28F-B358DF979DEC}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{2034EE73-437F-4E33-A92F-F4C6037BFDE9}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{2057972F-E513-4B88-8337-1CD85D71B836}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{20E88627-8713-4760-9881-BABC16C3B811}" = dir=in | app=c:\program files\dell\mediadirect\kernel\dmp\clbrowserengine.exe |
"{218355A7-6B12-4777-9D82-96EE2A36D889}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3391E578-0834-49F1-9AF1-6C6B863EA633}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{3BDCECAA-980E-4005-8703-95E140104F18}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{3F119D3E-5FD1-4A05-B192-47EE0E2E87ED}" = protocol=6 | dir=out | app=system |
"{42C464D4-5D25-4B91-ACBE-BD5907D289F9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4C063CA0-A7A4-4D9F-8486-EBF02572CB62}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{54877E9B-D7FC-4EBF-BA8C-9D83634B82C5}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{5579455B-6BFD-48DA-91E9-AEB2AFDBB1C6}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{5A16DB9C-8155-49FE-A112-85712F1E4EF4}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{626622A5-D598-4730-A05C-4AA5C08059F0}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{65903279-199E-4174-9BFF-A5B54255C059}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7B7DA692-2944-4BC5-84AE-FF772315911D}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{82CAE654-1DD6-4FEA-9C27-F4A4A271E97F}" = dir=in | app=c:\program files\dell\mediadirect\kernel\dms\clmsservice.exe |
"{846C5E05-C896-43B3-8387-6EE8C798BC44}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{853A5625-0861-4045-9260-56C71C7233A6}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{8845F4CD-589F-45A4-A403-A51CC6A5E0F5}" = protocol=6 | dir=in | app=c:\program files\opera\pluginwrapper\opera_plugin_wrapper.exe |
"{89028312-5867-49E5-8DAD-F429A1A71081}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{8926C113-CD57-41CF-A769-791301EA2112}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{8B8339F4-F858-44AC-B897-C759989A2202}" = dir=in | app=c:\program files\dell\mediadirect\pcmservice.exe |
"{988D32A1-E7F1-4A90-92A3-A9373B452292}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{99310787-5094-4627-96D2-DF4DD1CE6576}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{9AFBF121-B8F5-41C3-8921-17C9DFF960C5}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{A5E11483-2D15-4F9F-B361-92CEE1FD6A0E}" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |
"{A72D35D3-2B12-455A-9060-80143B31DEC7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{B151DF67-6C4E-45AE-9245-67474019BA57}" = dir=in | app=c:\program files\dell\mediadirect\mediadirect.exe |
"{B480206A-1009-423E-B4CB-50B8A23BAFD7}" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |
"{B5B003F8-0BB3-4178-8B85-AC1BE2377B50}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B95EF378-9712-43FB-996D-2913E75B3BCF}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{C0D2EB65-C453-4BB6-BA3B-72434DBEFA4B}" = protocol=17 | dir=in | app=c:\program files\opera\pluginwrapper\opera_plugin_wrapper.exe |
"{D01D934E-0E35-418C-B7B2-AC09F466EEDE}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{D2E85055-4809-41ED-9E1D-C7E963539DAA}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{DBDB89B7-F7BB-4D25-BA46-1C5957DADB88}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{DE596D55-94AD-4B10-B386-15DDFBA3A0EC}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{ECF669CB-C125-45E4-9E6B-CA4A69895F64}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F1200B39-2498-498D-B45B-5791AC24ADE0}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{F515BF07-7D2C-415B-9628-4F20F3FD8CE8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{F7BA3280-CC91-477B-82C5-6A7559FC9971}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"TCP Query User{04B6CDE2-7AED-4A0E-9BBE-75C2666BCCD4}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{0978135B-B540-4C96-BC55-01417B08F036}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"TCP Query User{194129F5-8EB4-455B-BBC3-F6C9406A1EE8}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"TCP Query User{3FCA5895-E678-45E2-964A-E0D963CE3712}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"TCP Query User{489C0D48-BC01-4749-82D9-240CE971D357}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe" = protocol=6 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe |
"TCP Query User{5EEC25B7-DA48-4584-A730-5E88C4759CBB}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b2\redsn0w.exe" = protocol=6 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b2\redsn0w.exe |
"TCP Query User{98A5EE0A-0988-467A-8AC9-2D63C4FC5226}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"TCP Query User{E7FFD349-4829-45D0-87EC-E00730C3771A}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"TCP Query User{F78A4B91-3EA0-4DFF-B7D4-8C82F47333FE}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe" = protocol=6 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe |
"UDP Query User{03E7D5ED-A694-4DD2-846D-A7147F10FEF9}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe" = protocol=17 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe |
"UDP Query User{176AA7A7-3E56-4B19-892B-61A8D819846C}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"UDP Query User{280131F3-D38F-4A1F-9AE7-A1C6A9FDFE75}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{2EE4D885-09C9-4828-A17A-AD4EE2A2B4CE}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe" = protocol=17 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe |
"UDP Query User{35723C98-5555-4E37-8704-8B4895BB2EEA}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b2\redsn0w.exe" = protocol=17 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b2\redsn0w.exe |
"UDP Query User{9465A809-0AA7-4943-AF1A-86AA3BE1E19E}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"UDP Query User{B65D9F0C-825C-455E-877D-C6DDB2F8FF52}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"UDP Query User{E8B9BE53-C3AA-4A57-9C37-47DCF271426A}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{EFF793CA-A101-4B13-B71B-5B679E324E93}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{07620C4F-0964-4086-A872-C9C12E418E52}" = DJ_SF_03_D4300_Software
"{095B1DCF-5E8B-47EC-9B18-481918A731DB}" = Microsoft Default Manager
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{11B83AD3-7A46-4C2E-A568-9505981D4C6F}" = HP Update
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995}" = Live! Cam Avatar v1.0
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{24EFA94F-F3D6-4386-8824-B54712C9DC88}" = D4300_Help
"{25569723-DC5A-4467-A639-79535BF01B71}" = Adobe Help Center 2.1
"{25613C10-27D2-410B-942B-D922D5C3A7BE}" = Interlok driver setup x32
"{26A24AE4-039D-4CA4-87B4-2F83216025FF}" = Java™ 6 Update 26
"{26A24AE4-039D-4CA4-87B4-2F83217004FF}" = Java™ 7 Update 5
"{29ED20C9-5E15-4969-9279-25BF3727A3DA}" = iTunes
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{3138EAD3-700B-4A10-B617-B3F8096EE30D}" = Dell Edoc Viewer
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{387D9916-BD27-480f-8CF0-3228832BBAA2}" = HP Deskjet D4300 Printer Driver Software 10.0 Rel .3
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module
"{42C7C4D8-033E-44F9-BF34-43808A0686CC}" = D4300
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}" = DeviceDiscovery
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5ACE69F0-A3E8-44eb-88C1-0A841E700180}" = TrayApp
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm
"{6D12EC75-E7D3-4EAD-AB10-E1F3AFF94AA6}" = AVG 2012
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport
"{8B0A7592-2AE0-48EA-A327-6EB7DAB25E4A}" = DJ_SF_03_D4300_Software_Min
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{903679E8-44C8-4C07-9600-05C92654FC50}" = QualXServ Service Agreement
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}" = OutlookAddinSetup
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}" = MediaDirect
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}" = Apple Mobile Device Support
"{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}" = Status
"{A13E07E1-A423-44FB-9DEE-B24C75C1BAF2}" = WIDCOMM Bluetooth Software 6.0.1.3100
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7B609FB-83D8-4FC3-8477-1BC65ECFE85B}" = Adobe Photoshop Elements 5.0
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.0)
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B143D835-EBAF-4A39-8B31-1868FF4166C1}" = AVG 2012
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B674F947-56D6-4793-B465-7D7C87E04D0C}" = ImageMixer 3 SE Ver.5 Video Tools
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C99C0593-3B48-41D9-B42F-6E035B320449}" = Broadcom Management Programs
"{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DFE492C4-A9F5-413E-A2CC-6F5F3ACC229F}" = ImageMixer 3 SE Ver.5 Transfer Utility
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E60A3FF1-856E-4DD2-BFC6-FD9B976FE1C5}" = DJ_SF_03_D4300_ProductContext
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 5" = Adobe Photoshop Elements 5.0
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Advanced Video FX Engine" = Advanced Video FX Engine
"AVG" = AVG 2012
"Broadcom 802.11 Application" = Dell Wireless WLAN Card Utility
"CoffeeCup HTML Editor" = CoffeeCup HTML Editor
"Creative OEM002" = Laptop Integrated Webcam Driver (1.04.01.1011)
"Dell Webcam Center" = Dell Webcam Center
"Dell Webcam Manager" = Dell Webcam Manager
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HP Imaging Device Functions" = HP Imaging Device Functions 10.0
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 7.1.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.62.0.1300
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Drivers" = NVIDIA Drivers
"Opera 12.01.1532" = Opera 12.01
"SynTPDeinstKey" = Dell Touchpad
"WinLiveSuite" = Windows Live Essentials
"YTdetect" = Yahoo! Detect

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 5/29/2012 6:01:06 PM | Computer Name = Dell-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 5538

Error - 5/29/2012 6:01:06 PM | Computer Name = Dell-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 5538

Error - 5/30/2012 8:05:53 PM | Computer Name = Dell-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 5/30/2012 8:05:53 PM | Computer Name = Dell-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 93892649

Error - 5/30/2012 8:05:53 PM | Computer Name = Dell-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 93892649

Error - 5/30/2012 8:05:54 PM | Computer Name = Dell-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 5/30/2012 8:05:54 PM | Computer Name = Dell-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 93893710

Error - 5/30/2012 8:05:54 PM | Computer Name = Dell-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 93893710

Error - 5/31/2012 9:09:50 PM | Computer Name = Dell-PC | Source = WinMgmt | ID = 10
Description =

Error - 6/1/2012 4:38:46 PM | Computer Name = Dell-PC | Source = WinMgmt | ID = 10
Description =

[ Dell Events ]
Error - 11/3/2010 6:22:27 PM | Computer Name = Dell-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 2/24/2011 10:15:31 PM | Computer Name = Dell-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 2/24/2011 10:15:31 PM | Computer Name = Dell-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 8/4/2011 10:57:25 PM | Computer Name = Dell-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

[ Media Center Events ]
Error - 5/25/2011 12:12:22 AM | Computer Name = Dell-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

[ System Events ]
Error - 8/27/2012 11:09:44 PM | Computer Name = Dell-PC | Source = Service Control Manager | ID = 7022
Description =

Error - 8/28/2012 5:15:42 PM | Computer Name = Dell-PC | Source = Service Control Manager | ID = 7022
Description =

Error - 8/29/2012 11:51:56 AM | Computer Name = Dell-PC | Source = Service Control Manager | ID = 7022
Description =

Error - 8/29/2012 9:49:16 PM | Computer Name = Dell-PC | Source = Service Control Manager | ID = 7022
Description =

Error - 8/30/2012 2:19:16 PM | Computer Name = Dell-PC | Source = Service Control Manager | ID = 7022
Description =

Error - 8/31/2012 6:19:57 PM | Computer Name = Dell-PC | Source = Service Control Manager | ID = 7022
Description =

Error - 8/31/2012 6:50:56 PM | Computer Name = Dell-PC | Source = Service Control Manager | ID = 7011
Description =


< End of report >


  • 0

#4
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP
Uninstall MalwareBytes Anti-Malware as it will cause OTL to hang.
Also Uninstall:
Yahoo Detect
Clear the Java Cache by following the instructions on
http://www.java.com/...lugin_cache.xml

You do not have the latest Java.
First go into Control Panel, Add/Remove Software and remove any old versions (which may call themselves: Java Runtime, Runtime Environment, Runtime, JRE, Java Virtual Machine, Virtual Machine, Java VM, JVM, VM, J2RE, J2SE)
I see:
Java™ 6 Update 26
Java™ 7 Update 5

Get the latest Java at:
http://www.java.com/en/

Save it to your PC then close all browsers and install it. Do not let it install the yahoo toolbar, ask toolbar, McAfee Security Scan or other foistware.

Stop here if you are missing the (All) Programs links to your installed programs and tell me. Otherwise go on with the rest. IF something doesn't work just skip it.

Copy the text in the code box by highlighting and Ctrl + c


:OTL
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.5.1)
[2011/11/19 19:34:15 | 000,004,974 | ---- | C] () -- C:\ProgramData\wzgvhopq.rtk
[2011/04/25 15:25:55 | 000,010,586 | -HS- | C] () -- C:\Users\Dell\AppData\Local\728d8r8641b7v7slg6xd5614lw38o
[2011/04/25 15:25:55 | 000,010,586 | -HS- | C] () -- C:\ProgramData\728d8r8641b7v7slg6xd5614lw38o

:files
xcopy %Temp%\smtmp\1 "%AllUsersProfile%\Start Menu" /H /I /S /Y /C
xcopy %Temp%\smtmp\2 "%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch" /H /I /S /Y /C
xcopy %Temp%\smtmp\3 "%AppData%\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar" /H /I /S /Y /C
xcopy %Temp%\smtmp\4 "%AllUsersProfile%\Desktop" /H /I /S /Y /C
C:\Windows\assembly\GAC_32\Desktop.ini
C:\Windows\assembly\GAC_64\Desktop.ini

:reg
[HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32]
""="%systemroot%\system32\wbem\wbemess.dll"

:Commands
[EMPTYTEMP]
[purity]
[Reboot]


then Rightclick on OTL and select Run As Administrator to start. Under the Custom Scans/Fixes box at the bottom, paste (ctrl +v) the text. Verify that you got it all and Then click the RUN FIX button (NOT THE QUICK SCAN button!) at the top
Let the program run unhindered, OTL will reboot the PC when it is done. Save the log and copy and paste it into a reply.
It appears that Old Timer is now hiding the log in c:\_OTL\RemovedFiles\08312012-some number.log so if you don't see it look there.


Download aswMBR.exe ( 511KB ) to your desktop.
Right click aswMBR.exe and Run as Administrator
uncheck trace disk IO calls
Click the "Scan" button to start scan (Accept the Avast Engine)
On completion of the scan if the Fix button is enabled (not the FixMBR button) press it and then run a new scan and click save log, save it to your desktop and post in your next reply
If the Fix button is not enabled then just click save log, save it to your desktop and post in your next reply

ComboFix

:!: It must be saved to your desktop, do not run it from your browser:!:

:!: Disable your Antivirus software when downloading or running Combofix. If it has Script Blocking features, please disable these as well. See: http://www.bleepingc...opic114351.html


Download and Save this file -- to your Desktop -- from either of these two sources:
http://download.blee...Bs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Rightclick on ComboFix and select Run As Administrator to start the program.



* :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.


* A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix.

A caution - Do not run Combofix more than once. Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

A file will be created at => C:\Combofix.txt. I'll need to see that in your reply.


Download TDSSKiller:
http://support.kaspe.../tdsskiller.exe
Save it to your desktop then run it.
Right click on TDSSKiller.exe and select Run As Administrator to start the program.

If TDSSKiller alerts you that the system needs to reboot, please consent.

Run TDSSKiller again but this time:
before you hit the Scan hit Change Parameters and check the two items under Additional Options. OK then Scan.
In this mode it is prone to false positives so do not change the SKIP option to DELETE unless it says TDSS.
When done, a log file should be created on your C: drive named "TDSSKiller.txt" please copy and paste the contents in your next reply.



Malwarebytes' Anti-Malware
:!: If you have a previous version of MalwareBytes', remove it via Add or Remove Programs and download a fresh copy. :!:
http://www.malwareby...lwarebytes_free

SAVE Malwarebytes' Anti-Malware to your desktop.

* Right-click mbam-setup.exe and select Run As Administrator to start the program.
* follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.

* Be sure that everything is checked, and click Remove Selected.

* When completed, a log will open in Notepad. Please save it to a convenient location.
* The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
* Post that log back here.


Right click on (My) Computer and select Manage (Continue) Then the Event Viewer. Next select Windows Logs. Right click on System and Clear Log, Clear. Repeat for Application.

Reboot.

Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator. Then type (with an Enter after each line).

sfc  /scannow



(This will check your critical system files. If it asks for a CD and you don't have one or it doesn't like your CD just tell it to SKIP.)


1. Please download the Event Viewer Tool by Vino Rosso
http://images.malwar...om/vino/VEW.exe
and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning


Then use the 'Number of events' as follows:


1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.


Please post the Output log in your next reply then repeat but select Application.


Copy the text in the code box:

DRIVES
nnetsvcs
%SYSTEMDRIVE%\*.exe
%systemroot%\assembly\GAC_32\*.ini
%systemroot%\assembly\GAC_64\*.ini
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.exe
%APPDATA%\*.
/md5start
pnrpnsp.dll 
nwprovau.dll
nlaapi.dll
napinsp.dll
mswsock.dll
winrnr.dll
wshelper.dll
services.exe
atapi.sys
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
csrss.exe
PrintIsolationHost.exe
consrv.dll
/md5stop
%systemroot%\*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemdrive%\$Recycle.Bin|@;true;true;true
CREATERESTOREPOINT

Run OTL (Vista or Win 7 => right click and Run As Administrator)

Paste (Ctrl + v) the copied text in the box where it says Custom Scan/Fixes

Select the All option in the Extra Registry group then Run Scan.

You should get two logs. Please copy and paste both of them.


Download, Save and Run (win 7 or Vista => Right click and Run as Admin.) farbar service scanner

Posted Image

Tick "All" options.
Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.

Please copy and paste the log to your reply.

Ron
  • 0

#5
CicisMom

CicisMom

    New Member

  • Topic Starter
  • Member
  • Pip
  • 9 posts
I un-installed Malwarebytes, removed the old versions of Java, installed the new version.
However, I could not locate Yahoo Detect. I tried searching in my computer, and in the Add/Remove programs section and did not find it or anything with Yahoo.

And could you please clarify: "Atop here if you are missing the (All) Programs links to your installed programs". I'm not sure what you mean by the (All) Programs links?
  • 0

#6
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP
If you can't find Yahoo that's fine.

As for the All Programs. If you click on the Windows Ball in the bottom left corner (which used to be the Start button in the old days) then on All Programs (or maybe it says Programs in your version) you will get a list of installed programs that you can click on to run them. There is some malware out there which makes this list go away and I just want to make sure that you do not have that symptom before we clear the temp files.
  • 0

#7
CicisMom

CicisMom

    New Member

  • Topic Starter
  • Member
  • Pip
  • 9 posts
I did the first part (the Fix it part in OTL) and this is the log I got:

All processes killed
========== OTL ==========
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
C:\ProgramData\wzgvhopq.rtk moved successfully.
C:\Users\Dell\AppData\Local\728d8r8641b7v7slg6xd5614lw38o moved successfully.
C:\ProgramData\728d8r8641b7v7slg6xd5614lw38o moved successfully.
========== FILES ==========
< xcopy %Temp%\smtmp\1 "%AllUsersProfile%\Start Menu" /H /I /S /Y /C >
0 File(s) copied
C:\Users\Dell\Desktop\cmd.bat deleted successfully.
C:\Users\Dell\Desktop\cmd.txt deleted successfully.
< xcopy %Temp%\smtmp\2 "%UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch" /H /I /S /Y /C >
0 File(s) copied
C:\Users\Dell\Desktop\cmd.bat deleted successfully.
C:\Users\Dell\Desktop\cmd.txt deleted successfully.
< xcopy %Temp%\smtmp\3 "%AppData%\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar" /H /I /S /Y /C >
0 File(s) copied
C:\Users\Dell\Desktop\cmd.bat deleted successfully.
C:\Users\Dell\Desktop\cmd.txt deleted successfully.
< xcopy %Temp%\smtmp\4 "%AllUsersProfile%\Desktop" /H /I /S /Y /C >
0 File(s) copied
C:\Users\Dell\Desktop\cmd.bat deleted successfully.
C:\Users\Dell\Desktop\cmd.txt deleted successfully.
File\Folder C:\Windows\assembly\GAC_32\Desktop.ini not found.
File\Folder C:\Windows\assembly\GAC_64\Desktop.ini not found.
========== REGISTRY ==========
HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32\\""|"%systemroot%\system32\wbem\wbemess.dll" /E : value set successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Dell
->Temp folder emptied: 180267367 bytes
->Temporary Internet Files folder emptied: 9883127 bytes
->Java cache emptied: 1 bytes
->Google Chrome cache emptied: 469999739 bytes
->Opera cache emptied: 86631116 bytes
->Flash cache emptied: 2858243 bytes

User: Public
->Temp folder emptied: 0 bytes

User: Qoobox

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 314259773 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 421942950 bytes

Total Files Cleaned = 1,417.00 mb


OTL by OldTimer - Version 3.2.59.1 log created on 08312012_214832

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...



And I downloaded, ran, and scanned with aswMBR.exe, but as It began to scan, a few seconds later I got a blue screen saying "A problem has been detected and windows has shut down to prevent damage". My computer restarted and once it was on again, this error details appeared:

Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.0.6002.2.2.0.768.3
Locale ID: 1033

Additional information about the problem:
BCCode: 1000008e
BCP1: C0000005
BCP2: 85533E7B
BCP3: A40178AC
BCP4: 00000000
OS Version: 6_0_6002
Service Pack: 2_0
Product: 768_1

Files that help describe the problem:
C:\WINDOWS\Minidump\Mini083112-01.dmp
C:\Users\Dell\AppData\Local\temp\WER-120963-0.sysdata.xml
C:\Users\Dell\AppData\Local\temp\WER253B.tmp.version.txt



Should I try it again, or do something differently?
  • 0

#8
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP
Did you remember to "uncheck trace disk IO calls" before letting aswMBR start the scan?

If it still crashes go on to the next step.
  • 0

#9
CicisMom

CicisMom

    New Member

  • Topic Starter
  • Member
  • Pip
  • 9 posts
aswMBR

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-09-04 17:32:12
-----------------------------
17:32:12.890 OS Version: Windows 6.0.6002 Service Pack 2
17:32:12.890 Number of processors: 2 586 0x1706
17:32:12.892 ComputerName: DELL-PC UserName: Dell
17:32:13.963 Initialize success
17:32:44.957 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0
17:32:44.962 Disk 0 Vendor: WDC_WD32 11.0 Size: 305245MB BusType: 3
17:32:45.006 Disk 0 MBR read successfully
17:32:45.011 Disk 0 MBR scan
17:32:45.024 Disk 0 Windows VISTA default MBR code
17:32:45.030 Disk 0 Partition 1 00 DE Dell Utility Dell 8.0 101 MB offset 63
17:32:45.047 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 15360 MB offset 208896
17:32:45.062 Disk 0 Partition 3 80 (A) 07 HPFS/NTFS NTFS 287220 MB offset 31666176
17:32:45.069 Disk 0 Partition - 00 0F Extended LBA 2562 MB offset 619892736
17:32:45.110 Disk 0 Partition 4 00 DD MSDOS5.0 2561 MB offset 619894784
17:32:45.121 Disk 0 scanning sectors +625139712
17:32:45.193 Disk 0 scanning C:\Windows\system32\drivers
17:32:51.737 Service scanning
17:33:06.994 Modules scanning
17:33:11.972 Scan finished successfully
17:38:18.963 Disk 0 MBR has been saved successfully to "C:\Users\Dell\Desktop\MBR.dat"
17:38:18.967 The log file has been saved successfully to "C:\Users\Dell\Desktop\aswMBR.txt"




Combofix

ComboFix 12-09-04.02 - Dell 09/04/2012 17:48:59.2.2 - x86
Running from: c:\users\Dell\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((( Files Created from 2012-08-05 to 2012-09-05 )))))))))))))))))))))))))))))))
.
.
2012-09-05 00:54 . 2012-09-05 00:54 -------- d-----w- c:\users\Public\AppData\Local\temp
2012-09-05 00:54 . 2012-09-05 00:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-01 04:48 . 2012-09-01 04:48 -------- d-----w- C:\_OTL
2012-09-01 02:22 . 2012-09-01 02:22 -------- d-----w- c:\program files\Common Files\Java
2012-09-01 02:22 . 2012-09-01 02:22 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-08-30 19:15 . 2012-08-30 19:15 -------- d-----w- c:\programdata\RegInOut
2012-08-30 19:15 . 2012-08-30 19:15 -------- d-----w- c:\windows\RegInOut System Utilities
2012-08-27 00:10 . 2012-08-27 00:10 -------- d-----w- c:\windows\en
2012-08-27 00:09 . 2012-08-27 00:09 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2012-08-16 22:12 . 2012-05-11 15:57 623616 ----a-w- c:\windows\system32\localspl.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-09-01 02:22 . 2012-06-04 00:52 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-01 02:22 . 2011-05-07 18:32 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-08-05 06:15 . 2010-06-24 19:33 19720 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2012-07-25 21:39 . 2012-07-25 21:39 27496 ----a-w- c:\windows\system32\drivers\avgtpx86.sys
2012-07-25 21:27 . 2012-07-25 21:27 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-07-25 21:27 . 2011-05-07 18:33 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-07-16 09:41 . 2012-07-25 21:19 6891424 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{068D252B-ADCA-4829-A90C-80546C7AAB8E}\mpengine.dll
2012-06-07 03:59 . 2012-06-07 03:59 1070152 ----a-w- c:\windows\system32\MSCOMCTL.OCX
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2012-07-25 21:39 2086496 ----a-w- c:\program files\AVG Secure Search\12.1.0.21\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG Secure Search\12.1.0.21\AVG Secure Search_toolbar.dll" [2012-07-25 2086496]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-05-10 857648]
"OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2007-12-03 36864]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2008-12-18 3810304]
"PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2007-12-21 184320]
"SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2008-01-02 405504]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-16 13793824]
"NVHotkey"="c:\windows\system32\nvHotkey.dll" [2009-06-16 92704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-10 421736]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]
"vProt"="c:\program files\AVG Secure Search\vprot.exe" [2012-07-25 1147488]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\f:\0autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ImageMixer 3 SE Camera Monitor Ver.5.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ImageMixer 3 SE Camera Monitor Ver.5.lnk
backup=c:\windows\pss\ImageMixer 3 SE Camera Monitor Ver.5.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^Dell^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dell Dock.lnk]
path=c:\users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
backup=c:\windows\pss\Dell Dock.lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^Dell^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\users\Dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
2006-09-14 14:55 61440 ----a-w- c:\program files\Adobe\Photoshop Elements 5.0\apdproxy.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-10-15 04:17 49152 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2012-03-09 01:50 4280184 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-11-30 01:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2900740096-1093691669-3467002836-1000]
"EnableNotificationsRef"=dword:00000001
.
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\system32\aestsrv.exe [x]
.
.
--- Other Services/Drivers In Memory ---
.
*Deregistered* - aswMBR
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
2012-09-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-04-01 19:34]
.
2012-09-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-04-01 19:34]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
mStart Page = about:blank
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.0.1 68.94.157.1
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\12.1.5\ViProtocol.dll
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe
MSConfigStartUp-hpqSRMon - c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe
MSConfigStartUp-Messenger (Yahoo!) - c:\progra~1\Yahoo!\Messenger\YahooMessenger.exe
AddRemove-HitmanPro35 - c:\users\Dell\Desktop\ESSENTIALS\NEW MALWARE REMOVERS\HitmanPro35.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-09-04 17:54
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2012-09-04 17:56:04
ComboFix-quarantined-files.txt 2012-09-05 00:55
.
Pre-Run: 132,757,803,008 bytes free
Post-Run: 132,037,316,608 bytes free
.
- - End Of File - - 46427EE8283C897E7DF17836784EC909




TDSS

18:04:29.0843 5524 TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
18:04:30.0318 5524 ============================================================
18:04:30.0318 5524 Current date / time: 2012/09/04 18:04:30.0318
18:04:30.0318 5524 SystemInfo:
18:04:30.0318 5524
18:04:30.0319 5524 OS Version: 6.0.6002 ServicePack: 2.0
18:04:30.0319 5524 Product type: Workstation
18:04:30.0319 5524 ComputerName: DELL-PC
18:04:30.0319 5524 UserName: Dell
18:04:30.0319 5524 Windows directory: C:\Windows
18:04:30.0319 5524 System windows directory: C:\Windows
18:04:30.0319 5524 Processor architecture: Intel x86
18:04:30.0319 5524 Number of processors: 2
18:04:30.0319 5524 Page size: 0x1000
18:04:30.0319 5524 Boot type: Normal boot
18:04:30.0319 5524 ============================================================
18:04:30.0722 5524 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
18:04:30.0724 5524 ============================================================
18:04:30.0724 5524 \Device\Harddisk0\DR0:
18:04:30.0724 5524 MBR partitions:
18:04:30.0724 5524 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x33000, BlocksNum 0x1E00000
18:04:30.0724 5524 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1E33000, BlocksNum 0x230FA000
18:04:30.0749 5524 ============================================================
18:04:30.0798 5524 C: <-> \Device\Harddisk0\DR0\Partition2
18:04:30.0819 5524 D: <-> \Device\Harddisk0\DR0\Partition1
18:04:30.0819 5524 ============================================================
18:04:30.0819 5524 Initialize success
18:04:30.0819 5524 ============================================================
18:05:18.0798 5720 ============================================================
18:05:18.0799 5720 Scan started
18:05:18.0799 5720 Mode: Manual;
18:05:18.0799 5720 ============================================================
18:05:19.0127 5720 ================ Scan system memory ========================
18:05:19.0127 5720 System memory - ok
18:05:19.0127 5720 ================ Scan services =============================
18:05:19.0285 5720 [ 82B296AE1892FE3DBEE00C9CF92F8AC7 ] ACPI C:\Windows\system32\drivers\acpi.sys
18:05:19.0287 5720 ACPI - ok
18:05:19.0405 5720 [ 177FF6608B48638D4066726F3A3F8444 ] AdobeActiveFileMonitor5.0 C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
18:05:19.0425 5720 AdobeActiveFileMonitor5.0 - ok
18:05:19.0524 5720 [ 11A52CF7B265631DEEB24C6149309EFF ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
18:05:19.0525 5720 AdobeARMservice - ok
18:05:19.0592 5720 [ 04F0FCAC69C7C71A3AC4EB97FAFC8303 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
18:05:19.0596 5720 adp94xx - ok
18:05:19.0638 5720 [ 60505E0041F7751BDBB80F88BF45C2CE ] adpahci C:\Windows\system32\drivers\adpahci.sys
18:05:19.0641 5720 adpahci - ok
18:05:19.0660 5720 [ 8A42779B02AEC986EAB64ECFC98F8BD7 ] adpu160m C:\Windows\system32\drivers\adpu160m.sys
18:05:19.0661 5720 adpu160m - ok
18:05:19.0680 5720 [ 241C9E37F8CE45EF51C3DE27515CA4E5 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
18:05:19.0681 5720 adpu320 - ok
18:05:19.0734 5720 [ 9D1FDA9E086BA64E3C93C9DE32461BCF ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
18:05:19.0735 5720 AeLookupSvc - ok
18:05:19.0791 5720 [ EF1142512BEC12F1C2C87735DA1755BE ] AESTFilters C:\Windows\system32\aestsrv.exe
18:05:19.0792 5720 AESTFilters - ok
18:05:19.0860 5720 [ 3911B972B55FEA0478476B2E777B29FA ] AFD C:\Windows\system32\drivers\afd.sys
18:05:19.0862 5720 AFD - ok
18:05:19.0909 5720 [ 13F9E33747E6B41A3FF305C37DB0D360 ] agp440 C:\Windows\system32\drivers\agp440.sys
18:05:19.0909 5720 agp440 - ok
18:05:19.0925 5720 [ AE1FDF7BF7BB6C6A70F67699D880592A ] aic78xx C:\Windows\system32\drivers\djsvs.sys
18:05:19.0926 5720 aic78xx - ok
18:05:19.0943 5720 [ A1545B731579895D8CC44FC0481C1192 ] ALG C:\Windows\System32\alg.exe
18:05:19.0944 5720 ALG - ok
18:05:19.0970 5720 [ 9EAEF5FC9B8E351AFA7E78A6FAE91F91 ] aliide C:\Windows\system32\drivers\aliide.sys
18:05:19.0971 5720 aliide - ok
18:05:19.0984 5720 [ C47344BC706E5F0B9DCE369516661578 ] amdagp C:\Windows\system32\drivers\amdagp.sys
18:05:19.0985 5720 amdagp - ok
18:05:19.0996 5720 [ 9B78A39A4C173FDBC1321E0DD659B34C ] amdide C:\Windows\system32\drivers\amdide.sys
18:05:19.0996 5720 amdide - ok
18:05:20.0033 5720 [ 18F29B49AD23ECEE3D2A826C725C8D48 ] AmdK7 C:\Windows\system32\drivers\amdk7.sys
18:05:20.0034 5720 AmdK7 - ok
18:05:20.0045 5720 [ 93AE7F7DD54AB986A6F1A1B37BE7442D ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
18:05:20.0045 5720 AmdK8 - ok
18:05:20.0114 5720 [ C6D704C7F0434DC791AAC37CAC4B6E14 ] Appinfo C:\Windows\System32\appinfo.dll
18:05:20.0115 5720 Appinfo - ok
18:05:20.0209 5720 [ D8E18021F91AD79CA8491CB5A5DA22D4 ] Apple Mobile Device C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
18:05:20.0210 5720 Apple Mobile Device - ok
18:05:20.0270 5720 [ 5D2888182FB46632511ACEE92FDAD522 ] arc C:\Windows\system32\drivers\arc.sys
18:05:20.0271 5720 arc - ok
18:05:20.0324 5720 [ 5E2A321BD7C8B3624E41FDEC3E244945 ] arcsas C:\Windows\system32\drivers\arcsas.sys
18:05:20.0325 5720 arcsas - ok
18:05:20.0363 5720 [ 53B202ABEE6455406254444303E87BE1 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
18:05:20.0364 5720 AsyncMac - ok
18:05:20.0391 5720 [ 1F05B78AB91C9075565A9D8A4B880BC4 ] atapi C:\Windows\system32\drivers\atapi.sys
18:05:20.0392 5720 atapi - ok
18:05:20.0466 5720 [ 68E2A1A0407A66CF50DA0300852424AB ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
18:05:20.0469 5720 AudioEndpointBuilder - ok
18:05:20.0475 5720 [ 68E2A1A0407A66CF50DA0300852424AB ] Audiosrv C:\Windows\System32\Audiosrv.dll
18:05:20.0477 5720 Audiosrv - ok
18:05:20.0645 5720 [ D67719BCFDE5798F5C30D14EFED3BCAF ] AVGIDSAgent C:\Program Files\AVG\AVG2012\avgidsagent.exe
18:05:20.0674 5720 AVGIDSAgent - ok
18:05:20.0714 5720 [ 1074F787080068C71303B61FAE7E7CA4 ] AVGIDSDriver C:\Windows\system32\DRIVERS\avgidsdriverx.sys
18:05:20.0715 5720 AVGIDSDriver - ok
18:05:20.0731 5720 [ 61A7E0B02F82CFF3DB2445BBE50B3589 ] AVGIDSFilter C:\Windows\system32\DRIVERS\avgidsfilterx.sys
18:05:20.0732 5720 AVGIDSFilter - ok
18:05:20.0739 5720 [ D63D83659EEDF60B3A3E620281A888E5 ] AVGIDSHX C:\Windows\system32\DRIVERS\avgidshx.sys
18:05:20.0740 5720 AVGIDSHX - ok
18:05:20.0753 5720 [ BAF975B72062F53D327788E99D64197E ] AVGIDSShim C:\Windows\system32\DRIVERS\avgidsshimx.sys
18:05:20.0754 5720 AVGIDSShim - ok
18:05:20.0775 5720 [ DDA6A2A18841E4C9172BB85958B8D948 ] Avgldx86 C:\Windows\system32\DRIVERS\avgldx86.sys
18:05:20.0776 5720 Avgldx86 - ok
18:05:20.0780 5720 [ CCDD61545AAEA265977E4B1EFDC74E8C ] Avgmfx86 C:\Windows\system32\DRIVERS\avgmfx86.sys
18:05:20.0781 5720 Avgmfx86 - ok
18:05:20.0800 5720 [ 1FD90B28D2C3100BF4500199C8AD6358 ] Avgrkx86 C:\Windows\system32\DRIVERS\avgrkx86.sys
18:05:20.0800 5720 Avgrkx86 - ok
18:05:20.0821 5720 [ 1263F2554ACE925C237A40B4C568D815 ] Avgtdix C:\Windows\system32\DRIVERS\avgtdix.sys
18:05:20.0823 5720 Avgtdix - ok
18:05:20.0847 5720 [ 684DE9D6E62BFB177AABED3C62FDEAB3 ] avgtp C:\Windows\system32\drivers\avgtpx86.sys
18:05:20.0847 5720 avgtp - ok
18:05:20.0870 5720 [ EA1145DEBCD508FD25BD1E95C4346929 ] avgwd C:\Program Files\AVG\AVG2012\avgwdsvc.exe
18:05:20.0872 5720 avgwd - ok
18:05:20.0921 5720 [ 32795E299C3ABA589A5E04C83D531CDF ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
18:05:20.0922 5720 b57nd60x - ok
18:05:20.0989 5720 [ 423C7B87E886AC93D22936EA82665F83 ] BCM42RLY C:\Windows\system32\drivers\BCM42RLY.sys
18:05:20.0989 5720 BCM42RLY - ok
18:05:21.0051 5720 [ 41A70777E892C3DEA606758366566A77 ] BCM43XX C:\Windows\system32\DRIVERS\bcmwl6.sys
18:05:21.0059 5720 BCM43XX - ok
18:05:21.0147 5720 [ 67E506B75BD5326A3EC7B70BD014DFB6 ] Beep C:\Windows\system32\drivers\Beep.sys
18:05:21.0148 5720 Beep - ok
18:05:21.0222 5720 [ C789AF0F724FDA5852FB9A7D3A432381 ] BFE C:\Windows\System32\bfe.dll
18:05:21.0224 5720 BFE - ok
18:05:21.0313 5720 [ 93952506C6D67330367F7E7934B6A02F ] BITS C:\Windows\system32\qmgr.dll
18:05:21.0319 5720 BITS - ok
18:05:21.0329 5720 [ D4DF28447741FD3D953526E33A617397 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
18:05:21.0330 5720 blbdrive - ok
18:05:21.0417 5720 [ DB5BEA73EDAF19AC68B2C0FAD0F92B1A ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
18:05:21.0420 5720 Bonjour Service - ok
18:05:21.0453 5720 [ 35F376253F687BDE63976CCB3F2108CA ] bowser C:\Windows\system32\DRIVERS\bowser.sys
18:05:21.0454 5720 bowser - ok
18:05:21.0502 5720 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\drivers\brfiltlo.sys
18:05:21.0503 5720 BrFiltLo - ok
18:05:21.0515 5720 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\drivers\brfiltup.sys
18:05:21.0516 5720 BrFiltUp - ok
18:05:21.0543 5720 [ A3629A0C4226F9E9C72FAAEEBC3AD33C ] Browser C:\Windows\System32\browser.dll
18:05:21.0544 5720 Browser - ok
18:05:21.0591 5720 [ B304E75CFF293029EDDF094246747113 ] Brserid C:\Windows\system32\drivers\brserid.sys
18:05:21.0592 5720 Brserid - ok
18:05:21.0603 5720 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\system32\drivers\brserwdm.sys
18:05:21.0603 5720 BrSerWdm - ok
18:05:21.0617 5720 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\system32\drivers\brusbmdm.sys
18:05:21.0617 5720 BrUsbMdm - ok
18:05:21.0626 5720 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\system32\drivers\brusbser.sys
18:05:21.0626 5720 BrUsbSer - ok
18:05:21.0687 5720 [ 6D39C954799B63BA866910234CF7D726 ] BthEnum C:\Windows\system32\DRIVERS\BthEnum.sys
18:05:21.0687 5720 BthEnum - ok
18:05:21.0737 5720 [ 9A966A8E86D1771911AE34A20D11BFF3 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
18:05:21.0738 5720 BTHMODEM - ok
18:05:21.0749 5720 [ 5904EFA25F829BF84EA6FB045134A1D8 ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
18:05:21.0750 5720 BthPan - ok
18:05:21.0813 5720 [ 611FF3F2F095C8D4A6D4CFD9DCC09793 ] BTHPORT C:\Windows\system32\Drivers\BTHport.sys
18:05:21.0816 5720 BTHPORT - ok
18:05:21.0867 5720 [ A4C8377FA4A994E07075107DBE2E3DCE ] BthServ C:\Windows\System32\bthserv.dll
18:05:21.0868 5720 BthServ - ok
18:05:21.0912 5720 [ D330803EAB2A15CAEC7F011F1D4CB30E ] BTHUSB C:\Windows\system32\Drivers\BTHUSB.sys
18:05:21.0913 5720 BTHUSB - ok
18:05:21.0988 5720 [ 4A28E7BD365377D0512B7EF8C7596D2C ] btwaudio C:\Windows\system32\drivers\btwaudio.sys
18:05:21.0988 5720 btwaudio - ok
18:05:22.0034 5720 [ 5FFDE57253D665067B0886612817EB11 ] btwavdt C:\Windows\system32\drivers\btwavdt.sys
18:05:22.0035 5720 btwavdt - ok
18:05:22.0042 5720 [ AB07DC8B05C31A4F95FC73019BE9DB15 ] btwrchid C:\Windows\system32\DRIVERS\btwrchid.sys
18:05:22.0043 5720 btwrchid - ok
18:05:22.0116 5720 catchme - ok
18:05:22.0162 5720 [ 7ADD03E75BEB9E6DD102C3081D29840A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
18:05:22.0163 5720 cdfs - ok
18:05:22.0220 5720 [ 6B4BFFB9BECD728097024276430DB314 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
18:05:22.0221 5720 cdrom - ok
18:05:22.0288 5720 [ 312EC3E37A0A1F2006534913E37B4423 ] CertPropSvc C:\Windows\System32\certprop.dll
18:05:22.0288 5720 CertPropSvc - ok
18:05:22.0307 5720 [ E5D4133F37219DBCFE102BC61072589D ] circlass C:\Windows\system32\drivers\circlass.sys
18:05:22.0308 5720 circlass - ok
18:05:22.0343 5720 [ D7659D3B5B92C31E84E53C1431F35132 ] CLFS C:\Windows\system32\CLFS.sys
18:05:22.0344 5720 CLFS - ok
18:05:22.0416 5720 [ 8EE772032E2FE80A924F3B8DD5082194 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
18:05:22.0417 5720 clr_optimization_v2.0.50727_32 - ok
18:05:22.0490 5720 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
18:05:22.0491 5720 clr_optimization_v4.0.30319_32 - ok
18:05:22.0540 5720 [ 99AFC3795B58CC478FBBBCDC658FCB56 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
18:05:22.0541 5720 CmBatt - ok
18:05:22.0555 5720 [ 0CA25E686A4928484E9FDABD168AB629 ] cmdide C:\Windows\system32\drivers\cmdide.sys
18:05:22.0556 5720 cmdide - ok
18:05:22.0559 5720 [ 6AFEF0B60FA25DE07C0968983EE4F60A ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
18:05:22.0560 5720 Compbatt - ok
18:05:22.0562 5720 COMSysApp - ok
18:05:22.0576 5720 [ 741E9DFF4F42D2D8477D0FC1DC0DF871 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
18:05:22.0576 5720 crcdisk - ok
18:05:22.0595 5720 [ 1F07BECDCA750766A96CDA811BA86410 ] Crusoe C:\Windows\system32\drivers\crusoe.sys
18:05:22.0596 5720 Crusoe - ok
18:05:22.0665 5720 [ 75C6A297E364014840B48ECCD7525E30 ] CryptSvc C:\Windows\system32\cryptsvc.dll
18:05:22.0666 5720 CryptSvc - ok
18:05:22.0737 5720 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] DcomLaunch C:\Windows\system32\rpcss.dll
18:05:22.0741 5720 DcomLaunch - ok
18:05:22.0768 5720 [ 622C41A07CA7E6DD91770F50D532CB6C ] DfsC C:\Windows\system32\Drivers\dfsc.sys
18:05:22.0769 5720 DfsC - ok
18:05:22.0871 5720 [ 2CC3DCFB533A1035B13DCAB6160AB38B ] DFSR C:\Windows\system32\DFSR.exe
18:05:22.0883 5720 DFSR - ok
18:05:22.0967 5720 [ 9028559C132146FB75EB7ACF384B086A ] Dhcp C:\Windows\System32\dhcpcsvc.dll
18:05:22.0968 5720 Dhcp - ok
18:05:22.0982 5720 [ 5D4AEFC3386920236A548271F8F1AF6A ] disk C:\Windows\system32\drivers\disk.sys
18:05:22.0983 5720 disk - ok
18:05:23.0007 5720 [ 57D762F6F5974AF0DA2BE88A3349BAAA ] Dnscache C:\Windows\System32\dnsrslvr.dll
18:05:23.0009 5720 Dnscache - ok
18:05:23.0102 5720 [ 0840ABBBDF438691EE65A20040635CBE ] DockLoginService C:\Program Files\Dell\DellDock\DockLogin.exe
18:05:23.0111 5720 DockLoginService - ok
18:05:23.0141 5720 [ 324FD74686B1EF5E7C19A8AF49E748F6 ] dot3svc C:\Windows\System32\dot3svc.dll
18:05:23.0143 5720 dot3svc - ok
18:05:23.0199 5720 [ A622E888F8AA2F6B49E9BC466F0E5DEF ] DPS C:\Windows\system32\dps.dll
18:05:23.0201 5720 DPS - ok
18:05:23.0245 5720 [ 97FEF831AB90BEE128C9AF390E243F80 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
18:05:23.0246 5720 drmkaud - ok
18:05:23.0290 5720 [ C68AC676B0EF30CFBB1080ADCE49EB1F ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
18:05:23.0294 5720 DXGKrnl - ok
18:05:23.0324 5720 [ 908ED85B7806E8AF3AF5E9B74F7809D4 ] e1express C:\Windows\system32\DRIVERS\e1e6032.sys
18:05:23.0325 5720 e1express - ok
18:05:23.0380 5720 [ 5425F74AC0C1DBD96A1E04F17D63F94C ] E1G60 C:\Windows\system32\DRIVERS\E1G60I32.sys
18:05:23.0381 5720 E1G60 - ok
18:05:23.0412 5720 [ C0B95E40D85CD807D614E264248A45B9 ] EapHost C:\Windows\System32\eapsvc.dll
18:05:23.0413 5720 EapHost - ok
18:05:23.0488 5720 [ 7F64EA048DCFAC7ACF8B4D7B4E6FE371 ] Ecache C:\Windows\system32\drivers\ecache.sys
18:05:23.0490 5720 Ecache - ok
18:05:23.0536 5720 [ 9BE3744D295A7701EB425332014F0797 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
18:05:23.0538 5720 ehRecvr - ok
18:05:23.0551 5720 [ AD1870C8E5D6DD340C829E6074BF3C3F ] ehSched C:\Windows\ehome\ehsched.exe
18:05:23.0552 5720 ehSched - ok
18:05:23.0568 5720 [ C27C4EE8926E74AA72EFCAB24C5242C3 ] ehstart C:\Windows\ehome\ehstart.dll
18:05:23.0568 5720 ehstart - ok
18:05:23.0620 5720 [ 23B62471681A124889978F6295B3F4C6 ] elxstor C:\Windows\system32\drivers\elxstor.sys
18:05:23.0622 5720 elxstor - ok
18:05:23.0664 5720 [ 4E6B23DFC917EA39306B529B773950F4 ] EMDMgmt C:\Windows\system32\emdmgmt.dll
18:05:23.0668 5720 EMDMgmt - ok
18:05:23.0721 5720 [ F2A80DE2D1B7116052C09CB4D4CA1416 ] ErrDev C:\Windows\system32\drivers\errdev.sys
18:05:23.0722 5720 ErrDev - ok
18:05:23.0779 5720 [ 67058C46504BC12D821F38CF99B7B28F ] EventSystem C:\Windows\system32\es.dll
18:05:23.0781 5720 EventSystem - ok
18:05:23.0845 5720 [ 22B408651F9123527BCEE54B4F6C5CAE ] exfat C:\Windows\system32\drivers\exfat.sys
18:05:23.0846 5720 exfat - ok
18:05:23.0880 5720 [ 1E9B9A70D332103C52995E957DC09EF8 ] fastfat C:\Windows\system32\drivers\fastfat.sys
18:05:23.0881 5720 fastfat - ok
18:05:23.0890 5720 [ AFE1E8B9782A0DD7FB46BBD88E43F89A ] fdc C:\Windows\system32\DRIVERS\fdc.sys
18:05:23.0890 5720 fdc - ok
18:05:23.0916 5720 [ 6629B5F0E98151F4AFDD87567EA32BA3 ] fdPHost C:\Windows\system32\fdPHost.dll
18:05:23.0917 5720 fdPHost - ok
18:05:23.0923 5720 [ 89ED56DCE8E47AF40892778A5BD31FD2 ] FDResPub C:\Windows\system32\fdrespub.dll
18:05:23.0924 5720 FDResPub - ok
18:05:23.0966 5720 [ A8C0139A884861E3AAE9CFE73B208A9F ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
18:05:23.0967 5720 FileInfo - ok
18:05:23.0982 5720 [ 0AE429A696AECBC5970E3CF2C62635AE ] Filetrace C:\Windows\system32\drivers\filetrace.sys
18:05:23.0983 5720 Filetrace - ok
18:05:23.0989 5720 [ 85B7CF99D532820495D68D747FDA9EBD ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
18:05:23.0989 5720 flpydisk - ok
18:05:24.0006 5720 [ 01334F9EA68E6877C4EF05D3EA8ABB05 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
18:05:24.0007 5720 FltMgr - ok
18:05:24.0089 5720 [ 8CE364388C8ECA59B14B539179276D44 ] FontCache C:\Windows\system32\FntCache.dll
18:05:24.0093 5720 FontCache - ok
18:05:24.0150 5720 [ C7FBDD1ED42F82BFA35167A5C9803EA3 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
18:05:24.0151 5720 FontCache3.0.0.0 - ok
18:05:24.0184 5720 [ B972A66758577E0BFD1DE0F91AAA27B5 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
18:05:24.0185 5720 Fs_Rec - ok
18:05:24.0198 5720 [ 34582A6E6573D54A07ECE5FE24A126B5 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
18:05:24.0199 5720 gagp30kx - ok
18:05:24.0224 5720 [ 8182FF89C65E4D38B2DE4BB0FB18564E ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
18:05:24.0225 5720 GEARAspiWDM - ok
18:05:24.0265 5720 [ CD5D0AEEE35DFD4E986A5AA1500A6E66 ] gpsvc C:\Windows\System32\gpsvc.dll
18:05:24.0269 5720 gpsvc - ok
18:05:24.0355 5720 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
18:05:24.0356 5720 gupdate - ok
18:05:24.0360 5720 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
18:05:24.0361 5720 gupdatem - ok
18:05:24.0405 5720 [ 062452B7FFD68C8C042A6261FE8DFF4A ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
18:05:24.0408 5720 HDAudBus - ok
18:05:24.0424 5720 [ 1338520E78D90154ED6BE8F84DE5FCEB ] HidBth C:\Windows\system32\drivers\hidbth.sys
18:05:24.0424 5720 HidBth - ok
18:05:24.0438 5720 [ FF3160C3A2445128C5A6D9B076DA519E ] HidIr C:\Windows\system32\drivers\hidir.sys
18:05:24.0439 5720 HidIr - ok
18:05:24.0464 5720 [ 84067081F3318162797385E11A8F0582 ] hidserv C:\Windows\System32\hidserv.dll
18:05:24.0465 5720 hidserv - ok
18:05:24.0498 5720 [ CCA4B519B17E23A00B826C55716809CC ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
18:05:24.0499 5720 HidUsb - ok
18:05:24.0531 5720 [ D8AD255B37DA92434C26E4876DB7D418 ] hkmsvc C:\Windows\system32\kmsvc.dll
18:05:24.0532 5720 hkmsvc - ok
18:05:24.0545 5720 [ 16EE7B23A009E00D835CDB79574A91A6 ] HpCISSs C:\Windows\system32\drivers\hpcisss.sys
18:05:24.0546 5720 HpCISSs - ok
18:05:24.0655 5720 [ F50F7984FDD151EDD8A70A8DBD9E2A44 ] hpqcxs08 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
18:05:24.0657 5720 hpqcxs08 - ok
18:05:24.0694 5720 [ DF446BA625CC441617843E87798CE048 ] hpqddsvc C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
18:05:24.0704 5720 hpqddsvc - ok
18:05:24.0742 5720 [ F870AA3E254628EBEAFE754108D664DE ] HTTP C:\Windows\system32\drivers\HTTP.sys
18:05:24.0744 5720 HTTP - ok
18:05:24.0761 5720 [ C6B032D69650985468160FC9937CF5B4 ] i2omp C:\Windows\system32\drivers\i2omp.sys
18:05:24.0762 5720 i2omp - ok
18:05:24.0824 5720 [ 22D56C8184586B7A1F6FA60BE5F5A2BD ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
18:05:24.0825 5720 i8042prt - ok
18:05:24.0850 5720 [ 707C1692214B1C290271067197F075F6 ] iaStor C:\Windows\system32\drivers\iastor.sys
18:05:24.0852 5720 iaStor - ok
18:05:24.0867 5720 [ 54155EA1B0DF185878E0FC9EC3AC3A14 ] iaStorV C:\Windows\system32\drivers\iastorv.sys
18:05:24.0868 5720 iaStorV - ok
18:05:24.0930 5720 [ 98477B08E61945F974ED9FDC4CB6BDAB ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
18:05:24.0935 5720 idsvc - ok
18:05:24.0965 5720 [ 2D077BF86E843F901D8DB709C95B49A5 ] iirsp C:\Windows\system32\drivers\iirsp.sys
18:05:24.0965 5720 iirsp - ok
18:05:24.0995 5720 [ 9908D8A397B76CD8D31D0D383C5773C9 ] IKEEXT C:\Windows\System32\ikeext.dll
18:05:24.0998 5720 IKEEXT - ok
18:05:25.0055 5720 [ 83AA759F3189E6370C30DE5DC5590718 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
18:05:25.0056 5720 intelide - ok
18:05:25.0065 5720 [ 224191001E78C89DFA78924C3EA595FF ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
18:05:25.0066 5720 intelppm - ok
18:05:25.0102 5720 [ 9AC218C6E6105477484C6FDBE7D409A4 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
18:05:25.0103 5720 IPBusEnum - ok
18:05:25.0121 5720 [ 62C265C38769B864CB25B4BCF62DF6C3 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
18:05:25.0121 5720 IpFilterDriver - ok
18:05:25.0144 5720 [ 1998BD97F950680BB55F55A7244679C2 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
18:05:25.0146 5720 iphlpsvc - ok
18:05:25.0150 5720 IpInIp - ok
18:05:25.0161 5720 [ B25AAF203552B7B3491139D582B39AD1 ] IPMIDRV C:\Windows\system32\drivers\ipmidrv.sys
18:05:25.0161 5720 IPMIDRV - ok
18:05:25.0183 5720 [ 8793643A67B42CEC66490B2A0CF92D68 ] IPNAT C:\Windows\system32\DRIVERS\ipnat.sys
18:05:25.0184 5720 IPNAT - ok
18:05:25.0251 5720 [ 33642C17C232AA272C68E446A2619899 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
18:05:25.0255 5720 iPod Service - ok
18:05:25.0271 5720 [ 109C0DFB82C3632FBD11949B73AEEAC9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
18:05:25.0272 5720 IRENUM - ok
18:05:25.0283 5720 [ 6C70698A3E5C4376C6AB5C7C17FB0614 ] isapnp C:\Windows\system32\drivers\isapnp.sys
18:05:25.0283 5720 isapnp - ok
18:05:25.0313 5720 [ 232FA340531D940AAC623B121A595034 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
18:05:25.0314 5720 iScsiPrt - ok
18:05:25.0324 5720 [ BCED60D16156E428F8DF8CF27B0DF150 ] iteatapi C:\Windows\system32\drivers\iteatapi.sys
18:05:25.0324 5720 iteatapi - ok
18:05:25.0340 5720 [ 06FA654504A498C30ADCA8BEC4E87E7E ] iteraid C:\Windows\system32\drivers\iteraid.sys
18:05:25.0341 5720 iteraid - ok
18:05:25.0357 5720 [ 37605E0A8CF00CBBA538E753E4344C6E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
18:05:25.0358 5720 kbdclass - ok
18:05:25.0386 5720 [ EDE59EC70E25C24581ADD1FBEC7325F7 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
18:05:25.0386 5720 kbdhid - ok
18:05:25.0418 5720 [ A3E186B4B935905B829219502557314E ] KeyIso C:\Windows\system32\lsass.exe
18:05:25.0432 5720 KeyIso - ok
18:05:25.0472 5720 [ 4A1445EFA932A3BAF5BDB02D7131EE20 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
18:05:25.0475 5720 KSecDD - ok
18:05:25.0547 5720 [ 8078F8F8F7A79E2E6B494523A828C585 ] KtmRm C:\Windows\system32\msdtckrm.dll
18:05:25.0550 5720 KtmRm - ok
18:05:25.0581 5720 [ 1BF5EEBFD518DD7298434D8C862F825D ] LanmanServer C:\Windows\System32\srvsvc.dll
18:05:25.0583 5720 LanmanServer - ok
18:05:25.0604 5720 [ 1DB69705B695B987082C8BAEC0C6B34F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
18:05:25.0607 5720 LanmanWorkstation - ok
18:05:25.0662 5720 [ D1C5883087A0C3F1344D9D55A44901F6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
18:05:25.0662 5720 lltdio - ok
18:05:25.0689 5720 [ 2D5A428872F1442631D0959A34ABFF63 ] lltdsvc C:\Windows\System32\lltdsvc.dll
18:05:25.0692 5720 lltdsvc - ok
18:05:25.0704 5720 [ 35D40113E4A5B961B6CE5C5857702518 ] lmhosts C:\Windows\System32\lmhsvc.dll
18:05:25.0705 5720 lmhosts - ok
18:05:25.0722 5720 [ C7E15E82879BF3235B559563D4185365 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
18:05:25.0723 5720 LSI_FC - ok
18:05:25.0739 5720 [ EE01EBAE8C9BF0FA072E0FF68718920A ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
18:05:25.0739 5720 LSI_SAS - ok
18:05:25.0754 5720 [ 912A04696E9CA30146A62AFA1463DD5C ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
18:05:25.0755 5720 LSI_SCSI - ok
18:05:25.0771 5720 [ 8F5C7426567798E62A3B3614965D62CC ] luafv C:\Windows\system32\drivers\luafv.sys
18:05:25.0772 5720 luafv - ok
18:05:25.0784 5720 [ AEF9BABB8A506BC4CE0451A64AADED46 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
18:05:25.0786 5720 Mcx2Svc - ok
18:05:25.0832 5720 [ 0001CE609D66632FA17B84705F658879 ] megasas C:\Windows\system32\drivers\megasas.sys
18:05:25.0833 5720 megasas - ok
18:05:25.0881 5720 [ C252F32CD9A49DBFC25ECF26EBD51A99 ] MegaSR C:\Windows\system32\drivers\megasr.sys
18:05:25.0884 5720 MegaSR - ok
18:05:25.0917 5720 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] MMCSS C:\Windows\system32\mmcss.dll
18:05:25.0919 5720 MMCSS - ok
18:05:25.0927 5720 [ E13B5EA0F51BA5B1512EC671393D09BA ] Modem C:\Windows\system32\drivers\modem.sys
18:05:25.0927 5720 Modem - ok
18:05:25.0997 5720 [ 0A9BB33B56E294F686ABB7C1E4E2D8A8 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
18:05:25.0997 5720 monitor - ok
18:05:26.0008 5720 [ 5BF6A1326A335C5298477754A506D263 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
18:05:26.0009 5720 mouclass - ok
18:05:26.0023 5720 [ 93B8D4869E12CFBE663915502900876F ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
18:05:26.0024 5720 mouhid - ok
18:05:26.0027 5720 [ BDAFC88AA6B92F7842416EA6A48E1600 ] MountMgr C:\Windows\system32\drivers\mountmgr.sys
18:05:26.0028 5720 MountMgr - ok
18:05:26.0076 5720 [ 511D011289755DD9F9A7579FB0B064E6 ] mpio C:\Windows\system32\drivers\mpio.sys
18:05:26.0077 5720 mpio - ok
18:05:26.0088 5720 [ 22241FEBA9B2DEFA669C8CB0A8DD7D2E ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
18:05:26.0089 5720 mpsdrv - ok
18:05:26.0126 5720 [ 5DE62C6E9108F14F6794060A9BDECAEC ] MpsSvc C:\Windows\system32\mpssvc.dll
18:05:26.0130 5720 MpsSvc - ok
18:05:26.0176 5720 [ 4FBBB70D30FD20EC51F80061703B001E ] Mraid35x C:\Windows\system32\drivers\mraid35x.sys
18:05:26.0177 5720 Mraid35x - ok
18:05:26.0199 5720 [ 82CEA0395524AACFEB58BA1448E8325C ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
18:05:26.0201 5720 MRxDAV - ok
18:05:26.0226 5720 [ 1E94971C4B446AB2290DEB71D01CF0C2 ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
18:05:26.0227 5720 mrxsmb - ok
18:05:26.0255 5720 [ 4FCCB34D793B116423209C0F8B7A3B03 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
18:05:26.0256 5720 mrxsmb10 - ok
18:05:26.0274 5720 [ C3CB1B40AD4A0124D617A1199B0B9D7C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
18:05:26.0275 5720 mrxsmb20 - ok
18:05:26.0293 5720 [ F70590424EEFBF5C27A40C67AFDB8383 ] msahci C:\Windows\system32\drivers\msahci.sys
18:05:26.0294 5720 msahci - ok
18:05:26.0308 5720 [ 4468B0F385A86ECDDAF8D3CA662EC0E7 ] msdsm C:\Windows\system32\drivers\msdsm.sys
18:05:26.0309 5720 msdsm - ok
18:05:26.0337 5720 [ FD7520CC3A80C5FC8C48852BB24C6DED ] MSDTC C:\Windows\System32\msdtc.exe
18:05:26.0339 5720 MSDTC - ok
18:05:26.0358 5720 [ A9927F4A46B816C92F461ACB90CF8515 ] Msfs C:\Windows\system32\drivers\Msfs.sys
18:05:26.0359 5720 Msfs - ok
18:05:26.0388 5720 [ 0F400E306F385C56317357D6DEA56F62 ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
18:05:26.0389 5720 msisadrv - ok
18:05:26.0417 5720 [ 85466C0757A23D9A9AECDC0755203CB2 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
18:05:26.0419 5720 MSiSCSI - ok
18:05:26.0422 5720 msiserver - ok
18:05:26.0477 5720 [ D8C63D34D9C9E56C059E24EC7185CC07 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
18:05:26.0478 5720 MSKSSRV - ok
18:05:26.0486 5720 [ 1D373C90D62DDB641D50E55B9E78D65E ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
18:05:26.0487 5720 MSPCLOCK - ok
18:05:26.0490 5720 [ B572DA05BF4E098D4BBA3A4734FB505B ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
18:05:26.0490 5720 MSPQM - ok
18:05:26.0518 5720 [ B49456D70555DE905C311BCDA6EC6ADB ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
18:05:26.0519 5720 MsRPC - ok
18:05:26.0531 5720 [ E384487CB84BE41D09711C30CA79646C ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
18:05:26.0532 5720 mssmbios - ok
18:05:26.0540 5720 [ 7199C1EEC1E4993CAF96B8C0A26BD58A ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
18:05:26.0540 5720 MSTEE - ok
18:05:26.0551 5720 [ 6A57B5733D4CB702C8EA4542E836B96C ] Mup C:\Windows\system32\Drivers\mup.sys
18:05:26.0552 5720 Mup - ok
18:05:26.0569 5720 [ E4EAF0C5C1B41B5C83386CF212CA9584 ] napagent C:\Windows\system32\qagentRT.dll
18:05:26.0573 5720 napagent - ok
18:05:26.0639 5720 [ 85C44FDFF9CF7E72A40DCB7EC06A4416 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
18:05:26.0640 5720 NativeWifiP - ok
18:05:26.0680 5720 [ 1357274D1883F68300AEADD15D7BBB42 ] NDIS C:\Windows\system32\drivers\ndis.sys
18:05:26.0684 5720 NDIS - ok
18:05:26.0719 5720 [ 0E186E90404980569FB449BA7519AE61 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
18:05:26.0720 5720 NdisTapi - ok
18:05:26.0733 5720 [ D6973AA34C4D5D76C0430B181C3CD389 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
18:05:26.0733 5720 Ndisuio - ok
18:05:26.0760 5720 [ 818F648618AE34F729FDB47EC68345C3 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
18:05:26.0761 5720 NdisWan - ok
18:05:26.0775 5720 [ 71DAB552B41936358F3B541AE5997FB3 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
18:05:26.0776 5720 NDProxy - ok
18:05:26.0783 5720 [ BCD093A5A6777CF626434568DC7DBA78 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
18:05:26.0783 5720 NetBIOS - ok
18:05:26.0817 5720 [ ECD64230A59CBD93C85F1CD1CAB9F3F6 ] netbt C:\Windows\system32\DRIVERS\netbt.sys
18:05:26.0818 5720 netbt - ok
18:05:26.0830 5720 [ A3E186B4B935905B829219502557314E ] Netlogon C:\Windows\system32\lsass.exe
18:05:26.0832 5720 Netlogon - ok
18:05:26.0869 5720 [ C8052711DAECC48B982434C5116CA401 ] Netman C:\Windows\System32\netman.dll
18:05:26.0871 5720 Netman - ok
18:05:26.0886 5720 [ 2EF3BBE22E5A5ACD1428EE387A0D0172 ] netprofm C:\Windows\System32\netprofm.dll
18:05:26.0889 5720 netprofm - ok
18:05:26.0916 5720 [ D6C4E4A39A36029AC0813D476FBD0248 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
18:05:26.0917 5720 NetTcpPortSharing - ok
18:05:26.0931 5720 [ 2E7FB731D4790A1BC6270ACCEFACB36E ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
18:05:26.0932 5720 nfrd960 - ok
18:05:26.0943 5720 [ 2997B15415F9BBE05B5A4C1C85E0C6A2 ] NlaSvc C:\Windows\System32\nlasvc.dll
18:05:26.0945 5720 NlaSvc - ok
18:05:26.0959 5720 [ D36F239D7CCE1931598E8FB90A0DBC26 ] Npfs C:\Windows\system32\drivers\Npfs.sys
18:05:26.0959 5720 Npfs - ok
18:05:26.0983 5720 [ 8BB86F0C7EEA2BDED6FE095D0B4CA9BD ] nsi C:\Windows\system32\nsisvc.dll
18:05:26.0985 5720 nsi - ok
18:05:26.0999 5720 [ 609773E344A97410CE4EBF74A8914FCF ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
18:05:27.0000 5720 nsiproxy - ok
18:05:27.0051 5720 [ 6A4A98CEE84CF9E99564510DDA4BAA47 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
18:05:27.0057 5720 Ntfs - ok
18:05:27.0073 5720 [ E875C093AEC0C978A90F30C9E0DFBB72 ] ntrigdigi C:\Windows\system32\drivers\ntrigdigi.sys
18:05:27.0074 5720 ntrigdigi - ok
18:05:27.0077 5720 [ C5DBBCDA07D780BDA9B685DF333BB41E ] Null C:\Windows\system32\drivers\Null.sys
18:05:27.0078 5720 Null - ok
18:05:27.0343 5720 [ 8FE5350FA6A9F0B6633AEE811C468954 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
18:05:27.0398 5720 nvlddmkm - ok
18:05:27.0453 5720 [ 2EDF9E7751554B42CBB60116DE727101 ] nvraid C:\Windows\system32\drivers\nvraid.sys
18:05:27.0454 5720 nvraid - ok
18:05:27.0465 5720 [ ABED0C09758D1D97DB0042DBB2688177 ] nvstor C:\Windows\system32\drivers\nvstor.sys
18:05:27.0466 5720 nvstor - ok
18:05:27.0501 5720 [ DED8F2C0070478F13C37F7BD849B83FA ] nvsvc C:\Windows\system32\nvvsvc.exe
18:05:27.0504 5720 nvsvc - ok
18:05:27.0522 5720 [ 18BBDF913916B71BD54575BDB6EEAC0B ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
18:05:27.0523 5720 nv_agp - ok
18:05:27.0526 5720 NwlnkFlt - ok
18:05:27.0529 5720 NwlnkFwd - ok
18:05:27.0688 5720 [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
18:05:27.0690 5720 odserv - ok
18:05:27.0717 5720 [ 19CAC780B858822055F46C58A111723C ] OEM02Dev C:\Windows\system32\DRIVERS\OEM02Dev.sys
18:05:27.0718 5720 OEM02Dev - ok
18:05:27.0732 5720 [ 86326062A90494BDD79CE383511D7D69 ] OEM02Vfx C:\Windows\system32\DRIVERS\OEM02Vfx.sys
18:05:27.0733 5720 OEM02Vfx - ok
18:05:27.0782 5720 [ 6F310E890D46E246E0E261A63D9B36B4 ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
18:05:27.0783 5720 ohci1394 - ok
18:05:27.0841 5720 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
18:05:27.0843 5720 ose - ok
18:05:27.0891 5720 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2pimsvc C:\Windows\system32\p2psvc.dll
18:05:27.0895 5720 p2pimsvc - ok
18:05:27.0924 5720 [ 0C8E8E61AD1EB0B250B846712C917506 ] p2psvc C:\Windows\system32\p2psvc.dll
18:05:27.0929 5720 p2psvc - ok
18:05:27.0957 5720 [ 0FA9B5055484649D63C303FE404E5F4D ] Parport C:\Windows\system32\drivers\parport.sys
18:05:27.0958 5720 Parport - ok
18:05:27.0979 5720 [ B9C2B89F08670E159F7181891E449CD9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
18:05:27.0980 5720 partmgr - ok
18:05:27.0993 5720 [ 4F9A6A8A31413180D0FCB279AD5D8112 ] Parvdm C:\Windows\system32\drivers\parvdm.sys
18:05:27.0994 5720 Parvdm - ok
18:05:28.0022 5720 [ C6276AD11F4BB49B58AA1ED88537F14A ] PcaSvc C:\Windows\System32\pcasvc.dll
18:05:28.0024 5720 PcaSvc - ok
18:05:28.0059 5720 [ 941DC1D19E7E8620F40BBC206981EFDB ] pci C:\Windows\system32\drivers\pci.sys
18:05:28.0060 5720 pci - ok
18:05:28.0125 5720 [ 1636D43F10416AEB483BC6001097B26C ] pciide C:\Windows\system32\drivers\pciide.sys
18:05:28.0126 5720 pciide - ok
18:05:28.0158 5720 [ E6F3FB1B86AA519E7698AD05E58B04E5 ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
18:05:28.0159 5720 pcmcia - ok
18:05:28.0205 5720 [ 6349F6ED9C623B44B52EA3C63C831A92 ] PEAUTH C:\Windows\system32\drivers\peauth.sys
18:05:28.0209 5720 PEAUTH - ok
18:05:28.0285 5720 [ B1689DF169143F57053F795390C99DB3 ] pla C:\Windows\system32\pla.dll
18:05:28.0294 5720 pla - ok
18:05:28.0349 5720 [ C5E7F8A996EC0A82D508FD9064A5569E ] PlugPlay C:\Windows\system32\umpnpmgr.dll
18:05:28.0352 5720 PlugPlay - ok
18:05:28.0364 5720 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPAutoReg C:\Windows\system32\p2psvc.dll
18:05:28.0368 5720 PNRPAutoReg - ok
18:05:28.0378 5720 [ 0C8E8E61AD1EB0B250B846712C917506 ] PNRPsvc C:\Windows\system32\p2psvc.dll
18:05:28.0384 5720 PNRPsvc - ok
18:05:28.0418 5720 [ D0494460421A03CD5225CCA0059AA146 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
18:05:28.0422 5720 PolicyAgent - ok
18:05:28.0441 5720 [ ECFFFAEC0C1ECD8DBC77F39070EA1DB1 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
18:05:28.0442 5720 PptpMiniport - ok
18:05:28.0457 5720 [ 2027293619DD0F047C584CF2E7DF4FFD ] Processor C:\Windows\system32\drivers\processr.sys
18:05:28.0458 5720 Processor - ok
18:05:28.0487 5720 [ 0508FAA222D28835310B7BFCA7A77346 ] ProfSvc C:\Windows\system32\profsvc.dll
18:05:28.0490 5720 ProfSvc - ok
18:05:28.0509 5720 [ A3E186B4B935905B829219502557314E ] ProtectedStorage C:\Windows\system32\lsass.exe
18:05:28.0510 5720 ProtectedStorage - ok
18:05:28.0541 5720 [ 99514FAA8DF93D34B5589187DB3AA0BA ] PSched C:\Windows\system32\DRIVERS\pacer.sys
18:05:28.0542 5720 PSched - ok
18:05:28.0585 5720 [ 03E0FE281823BA64B3782F5B38950E73 ] PxHelp20 C:\Windows\system32\Drivers\PxHelp20.sys
18:05:28.0586 5720 PxHelp20 - ok
18:05:28.0659 5720 [ 0A6DB55AFB7820C99AA1F3A1D270F4F6 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
18:05:28.0665 5720 ql2300 - ok
18:05:28.0684 5720 [ 81A7E5C076E59995D54BC1ED3A16E60B ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
18:05:28.0685 5720 ql40xx - ok
18:05:28.0719 5720 [ E9ECAE663F47E6CB43962D18AB18890F ] QWAVE C:\Windows\system32\qwave.dll
18:05:28.0722 5720 QWAVE - ok
18:05:28.0739 5720 [ 9F5E0E1926014D17486901C88ECA2DB7 ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
18:05:28.0740 5720 QWAVEdrv - ok
18:05:28.0817 5720 [ E642B131FB74CAF4BB8A014F31113142 ] R300 C:\Windows\system32\DRIVERS\atikmdag.sys
18:05:28.0828 5720 R300 - ok
18:05:28.0833 5720 [ 147D7F9C556D259924351FEB0DE606C3 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
18:05:28.0833 5720 RasAcd - ok
18:05:28.0872 5720 [ F6A452EB4CEADBB51C9E0EE6B3ECEF0F ] RasAuto C:\Windows\System32\rasauto.dll
18:05:28.0875 5720 RasAuto - ok
18:05:28.0892 5720 [ A214ADBAF4CB47DD2728859EF31F26B0 ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
18:05:28.0893 5720 Rasl2tp - ok
18:05:28.0921 5720 [ 75D47445D70CA6F9F894B032FBC64FCF ] RasMan C:\Windows\System32\rasmans.dll
18:05:28.0924 5720 RasMan - ok
18:05:28.0959 5720 [ 509A98DD18AF4375E1FC40BC175F1DEF ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
18:05:28.0959 5720 RasPppoe - ok
18:05:28.0988 5720 [ 2005F4A1E05FA09389AC85840F0A9E4D ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
18:05:28.0989 5720 RasSstp - ok
18:05:29.0012 5720 [ B14C9D5B9ADD2F84F70570BBBFAA7935 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
18:05:29.0014 5720 rdbss - ok
18:05:29.0030 5720 [ 89E59BE9A564262A3FB6C4F4F1CD9899 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
18:05:29.0030 5720 RDPCDD - ok
18:05:29.0068 5720 [ FBC0BACD9C3D7F6956853F64A66E252D ] rdpdr C:\Windows\system32\drivers\rdpdr.sys
18:05:29.0070 5720 rdpdr - ok
18:05:29.0073 5720 [ 9D91FE5286F748862ECFFA05F8A0710C ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
18:05:29.0074 5720 RDPENCDD - ok
18:05:29.0114 5720 [ C127EBD5AFAB31524662C48DFCEB773A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
18:05:29.0115 5720 RDPWD - ok
18:05:29.0171 5720 [ BCDD6B4804D06B1F7EBF29E53A57ECE9 ] RemoteAccess C:\Windows\System32\mprdim.dll
18:05:29.0173 5720 RemoteAccess - ok
18:05:29.0209 5720 [ 9E6894EA18DAFF37B63E1005F83AE4AB ] RemoteRegistry C:\Windows\system32\regsvc.dll
18:05:29.0211 5720 RemoteRegistry - ok
18:05:29.0273 5720 [ 6482707F9F4DA0ECBAB43B2E0398A101 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
18:05:29.0274 5720 RFCOMM - ok
18:05:29.0328 5720 [ D85E3FA9F5B1F29BB4ED185C450D1470 ] rimmptsk C:\Windows\system32\DRIVERS\rimmptsk.sys
18:05:29.0329 5720 rimmptsk - ok
18:05:29.0372 5720 [ DB8EB01C58C9FADA00C70B1775278AE0 ] rimsptsk C:\Windows\system32\DRIVERS\rimsptsk.sys
18:05:29.0373 5720 rimsptsk - ok
18:05:29.0385 5720 [ 6C1F93C0760C9F79A1869D07233DF39D ] rismxdp C:\Windows\system32\DRIVERS\rixdptsk.sys
18:05:29.0386 5720 rismxdp - ok
18:05:29.0414 5720 [ 5123F83CBC4349D065534EEB6BBDC42B ] RpcLocator C:\Windows\system32\locator.exe
18:05:29.0415 5720 RpcLocator - ok
18:05:29.0441 5720 [ 3B5B4D53FEC14F7476CA29A20CC31AC9 ] RpcSs C:\Windows\System32\rpcss.dll
18:05:29.0445 5720 RpcSs - ok
18:05:29.0472 5720 [ 9C508F4074A39E8B4B31D27198146FAD ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
18:05:29.0472 5720 rspndr - ok
18:05:29.0476 5720 [ A3E186B4B935905B829219502557314E ] SamSs C:\Windows\system32\lsass.exe
18:05:29.0477 5720 SamSs - ok
18:05:29.0490 5720 [ 3CE8F073A557E172B330109436984E30 ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
18:05:29.0491 5720 sbp2port - ok
18:05:29.0541 5720 [ 77B7A11A0C3D78D3386398FBBEA1B632 ] SCardSvr C:\Windows\System32\SCardSvr.dll
18:05:29.0543 5720 SCardSvr - ok
18:05:29.0590 5720 [ 1A58069DB21D05EB2AB58EE5753EBE8D ] Schedule C:\Windows\system32\schedsvc.dll
18:05:29.0595 5720 Schedule - ok
18:05:29.0614 5720 [ 312EC3E37A0A1F2006534913E37B4423 ] SCPolicySvc C:\Windows\System32\certprop.dll
18:05:29.0615 5720 SCPolicySvc - ok
18:05:29.0651 5720 [ 8F36B54688C31EED4580129040C6A3D3 ] sdbus C:\Windows\system32\DRIVERS\sdbus.sys
18:05:29.0653 5720 sdbus - ok
18:05:29.0682 5720 [ 716313D9F6B0529D03F726D5AAF6F191 ] SDRSVC C:\Windows\System32\SDRSVC.dll
18:05:29.0684 5720 SDRSVC - ok
18:05:29.0788 5720 [ 16A252022535B680046F6E34E136D378 ] SeaPort C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
18:05:29.0790 5720 SeaPort - ok
18:05:29.0806 5720 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
18:05:29.0806 5720 secdrv - ok
18:05:29.0812 5720 [ FD5199D4D8A521005E4B5EE7FE00FA9B ] seclogon C:\Windows\system32\seclogon.dll
18:05:29.0814 5720 seclogon - ok
18:05:29.0824 5720 [ A9BBAB5759771E523F55563D6CBE140F ] SENS C:\Windows\system32\sens.dll
18:05:29.0826 5720 SENS - ok
18:05:29.0854 5720 [ 68E44E331D46F0FB38F0863A84CD1A31 ] Serenum C:\Windows\system32\drivers\serenum.sys
18:05:29.0855 5720 Serenum - ok
18:05:29.0870 5720 [ C70D69A918B178D3C3B06339B40C2E1B ] Serial C:\Windows\system32\drivers\serial.sys
18:05:29.0871 5720 Serial - ok
18:05:29.0886 5720 [ 8AF3D28A879BF75DB53A0EE7A4289624 ] sermouse C:\Windows\system32\drivers\sermouse.sys
18:05:29.0887 5720 sermouse - ok
18:05:29.0898 5720 [ D2193326F729B163125610DBF3E17D57 ] SessionEnv C:\Windows\system32\sessenv.dll
18:05:29.0900 5720 SessionEnv - ok
18:05:29.0909 5720 [ 3EFA810BDCA87F6ECC24F9832243FE86 ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
18:05:29.0910 5720 sffdisk - ok
18:05:29.0925 5720 [ E95D451F7EA3E583AEC75F3B3EE42DC5 ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
18:05:29.0926 5720 sffp_mmc - ok
18:05:29.0954 5720 [ 9F66A46C55D6F1CCABC79BB7AFCCC545 ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
18:05:29.0955 5720 sffp_sd - ok
18:05:29.0974 5720 [ 46ED8E91793B2E6F848015445A0AC188 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
18:05:29.0974 5720 sfloppy - ok
18:05:30.0029 5720 [ E1974A92AC0914A3859359A0A8C82C68 ] SftService C:\Program Files\Dell DataSafe Local Backup\sftservice.EXE
18:05:30.0033 5720 SftService - ok
18:05:30.0103 5720 [ E1499BD0FF76B1B2FBBF1AF339D91165 ] SharedAccess C:\Windows\System32\ipnathlp.dll
18:05:30.0106 5720 SharedAccess - ok
18:05:30.0141 5720 [ C7230FBEE14437716701C15BE02C27B8 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
18:05:30.0144 5720 ShellHWDetection - ok
18:05:30.0160 5720 [ 1D76624A09A054F682D746B924E2DBC3 ] sisagp C:\Windows\system32\drivers\sisagp.sys
18:05:30.0160 5720 sisagp - ok
18:05:30.0177 5720 [ 43CB7AA756C7DB280D01DA9B676CFDE2 ] SiSRaid2 C:\Windows\system32\drivers\sisraid2.sys
18:05:30.0178 5720 SiSRaid2 - ok
18:05:30.0187 5720 [ A99C6C8B0BAA970D8AA59DDC50B57F94 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
18:05:30.0188 5720 SiSRaid4 - ok
18:05:30.0281 5720 [ 862BB4CBC05D80C5B45BE430E5EF872F ] slsvc C:\Windows\system32\SLsvc.exe
18:05:30.0301 5720 slsvc - ok
18:05:30.0351 5720 [ 6EDC422215CD78AA8A9CDE6B30ABBD35 ] SLUINotify C:\Windows\system32\SLUINotify.dll
18:05:30.0353 5720 SLUINotify - ok
18:05:30.0390 5720 [ 7B75299A4D201D6A6533603D6914AB04 ] Smb C:\Windows\system32\DRIVERS\smb.sys
18:05:30.0390 5720 Smb - ok
18:05:30.0422 5720 [ 2A146A055B4401C16EE62D18B8E2A032 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
18:05:30.0424 5720 SNMPTRAP - ok
18:05:30.0443 5720 [ 7AEBDEEF071FE28B0EEF2CDD69102BFF ] spldr C:\Windows\system32\drivers\spldr.sys
18:05:30.0443 5720 spldr - ok
18:05:30.0475 5720 [ 8554097E5136C3BF9F69FE578A1B35F4 ] Spooler C:\Windows\System32\spoolsv.exe
18:05:30.0477 5720 Spooler - ok
18:05:30.0515 5720 [ 41987F9FC0E61ADF54F581E15029AD91 ] srv C:\Windows\system32\DRIVERS\srv.sys
18:05:30.0516 5720 srv - ok
18:05:30.0556 5720 [ FF33AFF99564B1AA534F58868CBE41EF ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
18:05:30.0558 5720 srv2 - ok
18:05:30.0572 5720 [ 7605C0E1D01A08F3ECD743F38B834A44 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
18:05:30.0573 5720 srvnet - ok
18:05:30.0629 5720 [ D5DFFEAA1E15D4EFFABB9D9A3068AC5B ] sscdbus C:\Windows\system32\DRIVERS\sscdbus.sys
18:05:30.0630 5720 sscdbus - ok
18:05:30.0688 5720 [ 8A1BE0C347814F482F493AEA619D57F6 ] sscdmdfl C:\Windows\system32\DRIVERS\sscdmdfl.sys
18:05:30.0689 5720 sscdmdfl - ok
18:05:30.0747 5720 [ 5AB0B1987F682A59B15B78F84C6AD7D0 ] sscdmdm C:\Windows\system32\DRIVERS\sscdmdm.sys
18:05:30.0748 5720 sscdmdm - ok
18:05:30.0777 5720 [ 751E66EB32EFA80633B80F5D7FF0A1D8 ] sscdserd C:\Windows\system32\DRIVERS\sscdserd.sys
18:05:30.0778 5720 sscdserd - ok
18:05:30.0824 5720 [ 03D50B37234967433A5EA5BA72BC0B62 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
18:05:30.0826 5720 SSDPSRV - ok
18:05:30.0875 5720 [ 6F1A32E7B7B30F004D9A20AFADB14944 ] SstpSvc C:\Windows\system32\sstpsvc.dll
18:05:30.0877 5720 SstpSvc - ok
18:05:30.0943 5720 [ 7E6DD4B34ACD36AF6C711D2BDE91B040 ] STacSV C:\Windows\system32\STacSV.exe
18:05:30.0946 5720 STacSV - ok
18:05:30.0967 5720 [ 6A2A5E809C2C0178326D92B19EE4AAD3 ] STHDA C:\Windows\system32\drivers\stwrt.sys
18:05:30.0969 5720 STHDA - ok
18:05:31.0059 5720 [ 5DE7D67E49B88F5F07F3E53C4B92A352 ] stisvc C:\Windows\System32\wiaservc.dll
18:05:31.0063 5720 stisvc - ok
18:05:31.0081 5720 [ 7BA58ECF0C0A9A69D44B3DCA62BECF56 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
18:05:31.0082 5720 swenum - ok
18:05:31.0117 5720 [ F21FD248040681CCA1FB6C9A03AAA93D ] swprv C:\Windows\System32\swprv.dll
18:05:31.0120 5720 swprv - ok
18:05:31.0127 5720 [ 192AA3AC01DF071B541094F251DEED10 ] Symc8xx C:\Windows\system32\drivers\symc8xx.sys
18:05:31.0128 5720 Symc8xx - ok
18:05:31.0142 5720 [ 8C8EB8C76736EBAF3B13B633B2E64125 ] Sym_hi C:\Windows\system32\drivers\sym_hi.sys
18:05:31.0142 5720 Sym_hi - ok
18:05:31.0160 5720 [ 8072AF52B5FD103BBBA387A1E49F62CB ] Sym_u3 C:\Windows\system32\drivers\sym_u3.sys
18:05:31.0160 5720 Sym_u3 - ok
18:05:31.0211 5720 [ DD17B63F26430E179EF6BDEF5AC735BD ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys
18:05:31.0212 5720 SynTP - ok
18:05:31.0254 5720 [ 9A51B04E9886AA4EE90093586B0BA88D ] SysMain C:\Windows\system32\sysmain.dll
18:05:31.0258 5720 SysMain - ok
18:05:31.0286 5720 [ 2DCA225EAE15F42C0933E998EE0231C3 ] TabletInputService C:\Windows\System32\TabSvc.dll
18:05:31.0288 5720 TabletInputService - ok
18:05:31.0320 5720 [ D7673E4B38CE21EE54C59EEEB65E2483 ] TapiSrv C:\Windows\System32\tapisrv.dll
18:05:31.0323 5720 TapiSrv - ok
18:05:31.0333 5720 [ CB05822CD9CC6C688168E113C603DBE7 ] TBS C:\Windows\System32\tbssvc.dll
18:05:31.0335 5720 TBS - ok
18:05:31.0380 5720 [ EE7E10BED85C312C1D5D30C435BDDA9F ] Tcpip C:\Windows\system32\drivers\tcpip.sys
18:05:31.0384 5720 Tcpip - ok
18:05:31.0413 5720 [ EE7E10BED85C312C1D5D30C435BDDA9F ] Tcpip6 C:\Windows\system32\DRIVERS\tcpip.sys
18:05:31.0418 5720 Tcpip6 - ok
18:05:31.0478 5720 [ 2C2D4CFF5E09C73908F9B5AF49A51365 ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
18:05:31.0478 5720 tcpipreg - ok
18:05:31.0486 5720 [ 5DCF5E267BE67A1AE926F2DF77FBCC56 ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
18:05:31.0487 5720 TDPIPE - ok
18:05:31.0499 5720 [ 389C63E32B3CEFED425B61ED92D3F021 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
18:05:31.0499 5720 TDTCP - ok
18:05:31.0539 5720 [ 76B06EB8A01FC8624D699E7045303E54 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
18:05:31.0540 5720 tdx - ok
18:05:31.0555 5720 [ 3CAD38910468EAB9A6479E2F01DB43C7 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
18:05:31.0556 5720 TermDD - ok
18:05:31.0587 5720 [ BB95DA09BEF6E7A131BFF3BA5032090D ] TermService C:\Windows\System32\termsrv.dll
18:05:31.0591 5720 TermService - ok
18:05:31.0609 5720 [ C7230FBEE14437716701C15BE02C27B8 ] Themes C:\Windows\system32\shsvcs.dll
18:05:31.0612 5720 Themes - ok
18:05:31.0621 5720 [ 1076FFCFFAAE8385FD62DFCB25AC4708 ] THREADORDER C:\Windows\system32\mmcss.dll
18:05:31.0622 5720 THREADORDER - ok
18:05:31.0653 5720 [ 409A577FD5781C717E55A28717514C58 ] TPkd C:\Windows\system32\drivers\TPkd.sys
18:05:31.0654 5720 TPkd - ok
18:05:31.0685 5720 [ EC74E77D0EB004BD3A809B5F8FB8C2CE ] TrkWks C:\Windows\System32\trkwks.dll
18:05:31.0687 5720 TrkWks - ok
18:05:31.0715 5720 [ 97D9D6A04E3AD9B6C626B9931DB78DBA ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
18:05:31.0716 5720 TrustedInstaller - ok
18:05:31.0746 5720 [ DCF0F056A2E4F52287264F5AB29CF206 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
18:05:31.0747 5720 tssecsrv - ok
18:05:31.0786 5720 [ CAECC0120AC49E3D2F758B9169872D38 ] tunmp C:\Windows\system32\DRIVERS\tunmp.sys
18:05:31.0786 5720 tunmp - ok
18:05:31.0815 5720 [ 300DB877AC094FEAB0BE7688C3454A9C ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
18:05:31.0815 5720 tunnel - ok
18:05:31.0833 5720 [ 7D33C4DB2CE363C8518D2DFCF533941F ] uagp35 C:\Windows\system32\drivers\uagp35.sys
18:05:31.0833 5720 uagp35 - ok
18:05:31.0855 5720 [ D9728AF68C4C7693CB100B8441CBDEC6 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
18:05:31.0857 5720 udfs - ok
18:05:31.0870 5720 [ ECEF404F62863755951E09C802C94AD5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
18:05:31.0873 5720 UI0Detect - ok
18:05:31.0899 5720 [ B0ACFDC9E4AF279E9116C03E014B2B27 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
18:05:31.0900 5720 uliagpkx - ok
18:05:31.0922 5720 [ 9224BB254F591DE4CA8D572A5F0D635C ] uliahci C:\Windows\system32\drivers\uliahci.sys
18:05:31.0923 5720 uliahci - ok
18:05:31.0938 5720 [ 8514D0E5CD0534467C5FC61BE94A569F ] UlSata C:\Windows\system32\drivers\ulsata.sys
18:05:31.0939 5720 UlSata - ok
18:05:31.0954 5720 [ 38C3C6E62B157A6BC46594FADA45C62B ] ulsata2 C:\Windows\system32\drivers\ulsata2.sys
18:05:31.0955 5720 ulsata2 - ok
18:05:31.0974 5720 [ 32CFF9F809AE9AED85464492BF3E32D2 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
18:05:31.0975 5720 umbus - ok
18:05:31.0995 5720 [ 68308183F4AE0BE7BF8ECD07CB297999 ] upnphost C:\Windows\System32\upnphost.dll
18:05:31.0998 5720 upnphost - ok
18:05:32.0065 5720 [ 83CAFCB53201BBAC04D822F32438E244 ] USBAAPL C:\Windows\system32\Drivers\usbaapl.sys
18:05:32.0066 5720 USBAAPL - ok
18:05:32.0099 5720 [ CAF811AE4C147FFCD5B51750C7F09142 ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
18:05:32.0100 5720 usbccgp - ok
18:05:32.0117 5720 [ E9476E6C486E76BC4898074768FB7131 ] usbcir C:\Windows\system32\drivers\usbcir.sys
18:05:32.0118 5720 usbcir - ok
18:05:32.0181 5720 [ 79E96C23A97CE7B8F14D310DA2DB0C9B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
18:05:32.0182 5720 usbehci - ok
18:05:32.0193 5720 [ 4673BBCB006AF60E7ABDDBE7A130BA42 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
18:05:32.0194 5720 usbhub - ok
18:05:32.0217 5720 [ 38DBC7DD6CC5A72011F187425384388B ] usbohci C:\Windows\system32\drivers\usbohci.sys
18:05:32.0217 5720 usbohci - ok
18:05:32.0249 5720 [ E75C4B5269091D15A2E7DC0B6D35F2F5 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
18:05:32.0250 5720 usbprint - ok
18:05:32.0289 5720 [ BE3DA31C191BC222D9AD503C5224F2AD ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
18:05:32.0290 5720 USBSTOR - ok
18:05:32.0321 5720 [ 814D653EFC4D48BE3B04A307ECEFF56F ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
18:05:32.0322 5720 usbuhci - ok
18:05:32.0348 5720 [ 1509E705F3AC1D474C92454A5C2DD81F ] UxSms C:\Windows\System32\uxsms.dll
18:05:32.0350 5720 UxSms - ok
18:05:32.0378 5720 [ CD88D1B7776DC17A119049742EC07EB4 ] vds C:\Windows\System32\vds.exe
18:05:32.0382 5720 vds - ok
18:05:32.0391 5720 [ 87B06E1F30B749A114F74622D013F8D4 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
18:05:32.0392 5720 vga - ok
18:05:32.0405 5720 [ 2E93AC0A1D8C79D019DB6C51F036636C ] VgaSave C:\Windows\System32\drivers\vga.sys
18:05:32.0406 5720 VgaSave - ok
18:05:32.0423 5720 [ 5D7159DEF58A800D5781BA3A879627BC ] viaagp C:\Windows\system32\drivers\viaagp.sys
18:05:32.0423 5720 viaagp - ok
18:05:32.0442 5720 [ C4F3A691B5BAD343E6249BD8C2D45DEE ] ViaC7 C:\Windows\system32\drivers\viac7.sys
18:05:32.0443 5720 ViaC7 - ok
18:05:32.0461 5720 [ AADF5587A4063F52C2C3FED7887426FC ] viaide C:\Windows\system32\drivers\viaide.sys
18:05:32.0461 5720 viaide - ok
18:05:32.0469 5720 [ 69503668AC66C77C6CD7AF86FBDF8C43 ] volmgr C:\Windows\system32\drivers\volmgr.sys
18:05:32.0470 5720 volmgr - ok
18:05:32.0503 5720 [ 23E41B834759917BFD6B9A0D625D0C28 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
18:05:32.0505 5720 volmgrx - ok
18:05:32.0548 5720 [ 147281C01FCB1DF9252DE2A10D5E7093 ] volsnap C:\Windows\system32\drivers\volsnap.sys
18:05:32.0550 5720 volsnap - ok
18:05:32.0600 5720 [ 587253E09325E6BF226B299774B728A9 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
18:05:32.0601 5720 vsmraid - ok
18:05:32.0651 5720 [ DB3D19F850C6EB32BDCB9BC0836ACDDB ] VSS C:\Windows\system32\vssvc.exe
18:05:32.0658 5720 VSS - ok
18:05:32.0713 5720 [ 3DA649C6EC481D8F36B54F33FC01DD1E ] vToolbarUpdater12.1.5 C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.1.5\ToolbarUpdater.exe
18:05:32.0718 5720 vToolbarUpdater12.1.5 - ok
18:05:32.0756 5720 [ 96EA68B9EB310A69C25EBB0282B2B9DE ] W32Time C:\Windows\system32\w32time.dll
18:05:32.0760 5720 W32Time - ok
18:05:32.0778 5720 [ 48DFEE8F1AF7C8235D4E626F0C4FE031 ] WacomPen C:\Windows\system32\drivers\wacompen.sys
18:05:32.0779 5720 WacomPen - ok
18:05:32.0787 5720 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarp C:\Windows\system32\DRIVERS\wanarp.sys
18:05:32.0788 5720 Wanarp - ok
18:05:32.0790 5720 [ 55201897378CCA7AF8B5EFD874374A26 ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
18:05:32.0791 5720 Wanarpv6 - ok
18:05:32.0815 5720 [ A3CD60FD826381B49F03832590E069AF ] wcncsvc C:\Windows\System32\wcncsvc.dll
18:05:32.0819 5720 wcncsvc - ok
18:05:32.0846 5720 [ 11BCB7AFCDD7AADACB5746F544D3A9C7 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
18:05:32.0848 5720 WcsPlugInService - ok
18:05:32.0863 5720 [ 78FE9542363F297B18C027B2D7E7C07F ] Wd C:\Windows\system32\drivers\wd.sys
18:05:32.0864 5720 Wd - ok
18:05:32.0890 5720 [ B6F0A7AD6D4BD325FBCD8BAC96CD8D96 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
18:05:32.0893 5720 Wdf01000 - ok
18:05:32.0903 5720 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiServiceHost C:\Windows\system32\wdi.dll
18:05:32.0906 5720 WdiServiceHost - ok
18:05:32.0909 5720 [ ABFC76B48BB6C96E3338D8943C5D93B5 ] WdiSystemHost C:\Windows\system32\wdi.dll
18:05:32.0912 5720 WdiSystemHost - ok
18:05:32.0939 5720 [ 04C37D8107320312FBAE09926103D5E2 ] WebClient C:\Windows\System32\webclnt.dll
18:05:32.0942 5720 WebClient - ok
18:05:32.0981 5720 [ AE3736E7E8892241C23E4EBBB7453B60 ] Wecsvc C:\Windows\system32\wecsvc.dll
18:05:32.0983 5720 Wecsvc - ok
18:05:32.0992 5720 [ 670FF720071ED741206D69BD995EA453 ] wercplsupport C:\Windows\System32\wercplsupport.dll
18:05:32.0995 5720 wercplsupport - ok
18:05:33.0024 5720 [ 32B88481D3B326DA6DEB07B1D03481E7 ] WerSvc C:\Windows\System32\WerSvc.dll
18:05:33.0026 5720 WerSvc - ok
18:05:33.0066 5720 [ 4575AA12561C5648483403541D0D7F2B ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
18:05:33.0068 5720 WinDefend - ok
18:05:33.0072 5720 WinHttpAutoProxySvc - ok
18:05:33.0128 5720 [ 6B2A1D0E80110E3D04E6863C6E62FD8A ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
18:05:33.0130 5720 Winmgmt - ok
18:05:33.0186 5720 [ 7CFE68BDC065E55AA5E8421607037511 ] WinRM C:\Windows\system32\WsmSvc.dll
18:05:33.0194 5720 WinRM - ok
18:05:33.0241 5720 [ 676F4B665BDD8053EAA53AC1695B8074 ] winusb C:\Windows\system32\DRIVERS\WinUSB.SYS
18:05:33.0242 5720 winusb - ok
18:05:33.0280 5720 [ C008405E4FEEB069E30DA1D823910234 ] Wlansvc C:\Windows\System32\wlansvc.dll
18:05:33.0285 5720 Wlansvc - ok
18:05:33.0361 5720 [ FB01D4AE207B9EFDBABFC55DC95C7E31 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
18:05:33.0370 5720 wlidsvc - ok
18:05:33.0375 5720 wltrysvc - ok
18:05:33.0441 5720 [ 2E7255D172DF0B8283CDFB7B433B864E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
18:05:33.0441 5720 WmiAcpi - ok
18:05:33.0483 5720 [ 43BE3875207DCB62A85C8C49970B66CC ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
18:05:33.0484 5720 wmiApSrv - ok
18:05:33.0588 5720 [ 3978704576A121A9204F8CC49A301A9B ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
18:05:33.0593 5720 WMPNetworkSvc - ok
18:05:33.0610 5720 [ CFC5A04558F5070CEE3E3A7809F3FF52 ] WPCSvc C:\Windows\System32\wpcsvc.dll
18:05:33.0613 5720 WPCSvc - ok
18:05:33.0641 5720 [ 801FBDB89D472B3C467EB112A0FC9246 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
18:05:33.0643 5720 WPDBusEnum - ok
18:05:33.0702 5720 [ DE9D36F91A4DF3D911626643DEBF11EA ] WpdUsb C:\Windows\system32\DRIVERS\wpdusb.sys
18:05:33.0703 5720 WpdUsb - ok
18:05:33.0833 5720 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
18:05:33.0837 5720 WPFFontCache_v0400 - ok
18:05:33.0868 5720 [ E3A3CB253C0EC2494D4A61F5E43A389C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
18:05:33.0868 5720 ws2ifsl - ok
18:05:33.0899 5720 [ 1CA6C40261DDC0425987980D0CD2AAAB ] wscsvc C:\Windows\system32\wscsvc.dll
18:05:33.0901 5720 wscsvc - ok
18:05:33.0904 5720 WSearch - ok
18:05:33.0984 5720 [ FC3EC24FCE372C89423E015A2AC1A31E ] wuauserv C:\Windows\system32\wuaueng.dll
18:05:33.0995 5720 wuauserv - ok
18:05:34.0020 5720 [ AC13CB789D93412106B0FB6C7EB2BCB6 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
18:05:34.0021 5720 WUDFRd - ok
18:05:34.0052 5720 [ 575A4190D989F64732119E4114045A4F ] wudfsvc C:\Windows\System32\WUDFSvc.dll
18:05:34.0055 5720 wudfsvc - ok
18:05:34.0064 5720 ================ Scan global ===============================
18:05:34.0091 5720 [ F31EEBC1A1C81FD04005489CC3DCDFE7 ] C:\Windows\system32\basesrv.dll
18:05:34.0123 5720 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
18:05:34.0144 5720 [ D2293B069E4B63DC17B2F08D45E71124 ] C:\Windows\system32\winsrv.dll
18:05:34.0223 5720 [ D4E6D91C1349B7BFB3599A6ADA56851B ] C:\Windows\system32\services.exe
18:05:34.0226 5720 [Global] - ok
18:05:34.0227 5720 ================ Scan MBR ==================================
18:05:34.0238 5720 [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0
18:05:34.0502 5720 \Device\Harddisk0\DR0 - ok
18:05:34.0503 5720 ================ Scan VBR ==================================
18:05:34.0557 5720 [ 2AB49138CD0ED4E3BC27DF01520ED295 ] \Device\Harddisk0\DR0\Partition1
18:05:34.0559 5720 \Device\Harddisk0\DR0\Partition1 - ok
18:05:34.0561 5720 [ 10034655ECFD74703F19F93131CA0C14 ] \Device\Harddisk0\DR0\Partition2
18:05:34.0562 5720 \Device\Harddisk0\DR0\Partition2 - ok
18:05:34.0563 5720 ============================================================
18:05:34.0563 5720 Scan finished
18:05:34.0563 5720 ============================================================
18:05:34.0569 3840 Detected object count: 0
18:05:34.0569 3840 Actual detected object count: 0




Malwarebytes

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Database version: v2012.09.04.11

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Dell :: DELL-PC [administrator]

9/4/2012 6:16:22 PM
mbam-log-2012-09-04 (18-16-22).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 202981
Time elapsed: 3 minute(s), 45 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)




VEW

Vino's Event Viewer v01c run on Windows Vista in English
Report run at 04/09/2012 7:22:35 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 05/09/2012 1:45:04 AM
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The HP CUE DeviceDiscovery Service service hung on starting.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 05/09/2012 1:42:50 AM
Type: Warning Category: 0
Event: 4 Source: b57nd60x
Broadcom NetLink ™ Fast Ethernet: The network link is down. Check to make sure the network cable is properly connected.

Log: 'System' Date/Time: 05/09/2012 1:42:14 AM
Type: Warning Category: 0
Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN AutoConfig service has successfully stopped.

Log: 'System' Date/Time: 05/09/2012 1:42:14 AM
Type: Warning Category: 0
Event: 10002 Source: Microsoft-Windows-WLAN-AutoConfig
WLAN Extensibility Module has stopped. Module Path: C:\Windows\System32\bcmihvsrv.dll



VEW application

Vino's Event Viewer v01c run on Windows Vista in English
Report run at 04/09/2012 7:23:27 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 05/09/2012 1:44:34 AM
Type: Error Category: 0
Event: 10 Source: Microsoft-Windows-WMI
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



OTL

OTL logfile created on: 9/4/2012 7:25:17 PM - Run 2
OTL by OldTimer - Version 3.2.59.1 Folder = C:\Users\Dell\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.50 Gb Total Physical Memory | 2.20 Gb Available Physical Memory | 62.92% Memory free
7.19 Gb Paging File | 5.81 Gb Available in Paging File | 80.73% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 280.49 Gb Total Space | 123.31 Gb Free Space | 43.96% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 9.31 Gb Free Space | 62.10% Space Free | Partition Type: NTFS

Computer Name: DELL-PC | User Name: Dell | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/08/31 15:33:57 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
PRC - [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2012/07/25 14:39:31 | 000,830,048 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.1.5\ToolbarUpdater.exe
PRC - [2012/07/25 14:39:30 | 001,147,488 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe
PRC - [2012/07/04 17:25:54 | 005,160,568 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgidsagent.exe
PRC - [2012/07/03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/07/03 13:46:44 | 000,462,920 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012/06/13 03:48:26 | 000,758,392 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgrsx.exe
PRC - [2012/06/13 03:48:24 | 001,255,544 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgnsx.exe
PRC - [2012/04/05 05:12:34 | 002,587,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgtray.exe
PRC - [2012/03/19 05:18:12 | 000,979,840 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgemcx.exe
PRC - [2012/02/14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe
PRC - [2012/02/14 04:52:38 | 000,338,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgcsrvx.exe
PRC - [2011/06/06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2010/08/20 13:53:08 | 000,689,472 | ---- | M] (SoftThinks SAS) -- C:\Program Files\Dell DataSafe Local Backup\SftService.exe
PRC - [2009/04/10 23:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/12/18 12:05:28 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Program Files\Dell\DellDock\DockLogin.exe
PRC - [2008/01/01 20:44:38 | 000,405,504 | ---- | M] (IDT, Inc.) -- C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
PRC - [2008/01/01 20:44:32 | 000,102,400 | ---- | M] (IDT, Inc.) -- C:\WINDOWS\System32\stacsv.exe
PRC - [2008/01/01 20:44:26 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) -- C:\WINDOWS\System32\AEstSrv.exe
PRC - [2007/12/21 08:58:06 | 000,184,320 | ---- | M] (CyberLink Corp.) -- C:\Program Files\Dell\MediaDirect\PCMService.exe
PRC - [2007/12/02 22:58:54 | 000,036,864 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\OEM02Mon.exe
PRC - [2006/11/03 15:55:50 | 000,703,280 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2006/11/03 15:55:48 | 001,583,920 | ---- | M] (Broadcom Corporation.) -- c:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
PRC - [2006/09/14 07:56:06 | 000,102,400 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe


========== Modules (No Company Name) ==========

MOD - [2012/07/25 14:39:31 | 000,132,704 | ---- | M] () -- C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\12.1.5\SiteSafety.dll
MOD - [2012/07/25 14:39:30 | 001,147,488 | ---- | M] () -- C:\Program Files\AVG Secure Search\vprot.exe
MOD - [2012/06/14 17:21:49 | 011,820,032 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\508b444db523c5cf20ff12c7f440837b\System.Web.ni.dll
MOD - [2012/05/13 19:50:31 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\846b9cf2756fdd15f704c9bab9c70b6f\System.Runtime.Remoting.ni.dll
MOD - [2012/05/13 18:00:37 | 007,953,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll
MOD - [2012/05/13 18:00:28 | 011,492,352 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll
MOD - [2011/09/27 08:23:00 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/09/27 08:22:40 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2008/12/18 02:55:28 | 000,054,784 | ---- | M] () -- C:\WINDOWS\System32\bcmwlrmt.dll
MOD - [2006/11/03 15:46:24 | 000,126,976 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll
MOD - [2006/11/03 15:25:56 | 000,389,120 | ---- | M] () -- C:\WINDOWS\System32\btwhidcs.dll


========== Services (SafeList) ==========

SRV - [2012/07/25 14:39:31 | 000,830,048 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.1.5\ToolbarUpdater.exe -- (vToolbarUpdater12.1.5)
SRV - [2012/07/04 17:25:54 | 005,160,568 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2012/07/03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/02/14 04:53:38 | 000,193,288 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2011/06/06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2010/08/20 13:53:08 | 000,689,472 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files\Dell DataSafe Local Backup\SftService.exe -- (SftService)
SRV - [2008/12/18 12:05:28 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV - [2008/01/20 19:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/01/01 20:44:32 | 000,102,400 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\WINDOWS\System32\stacsv.exe -- (STacSV)
SRV - [2008/01/01 20:44:26 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\WINDOWS\System32\AEstSrv.exe -- (AESTFilters)
SRV - [2006/09/14 07:56:06 | 000,102,400 | ---- | M] () [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor5.0)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Dell\AppData\Local\Temp\catchme.sys -- (catchme)
DRV - [2012/07/25 14:39:32 | 000,027,496 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2012/07/03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012/04/19 04:50:26 | 000,024,896 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2012/03/19 05:17:28 | 000,301,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2012/02/22 05:25:32 | 000,235,216 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2012/01/31 04:46:50 | 000,031,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\WINDOWS\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/12/23 13:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/12/23 13:32:08 | 000,017,232 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2011/12/23 13:32:06 | 000,024,144 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\avgidsfilterx.sys -- (AVGIDSFilter)
DRV - [2011/12/23 13:32:00 | 000,139,856 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2009/12/23 12:32:26 | 000,086,016 | ---- | M] (PACE Anti-Piracy, Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TPkd.sys -- (TPkd)
DRV - [2009/06/16 12:59:00 | 009,768,640 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009/04/10 21:42:52 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\winusb.sys -- (winusb)
DRV - [2008/12/18 02:55:10 | 000,018,424 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\bcm42rly.sys -- (BCM42RLY)
DRV - [2008/01/20 19:23:25 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\e1e6032.sys -- (e1express)
DRV - [2008/01/01 20:44:40 | 000,330,240 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2007/12/02 22:59:06 | 000,007,424 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\OEM02Vfx.sys -- (OEM02Vfx)
DRV - [2007/12/02 22:58:50 | 000,235,648 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\OEM02Dev.sys -- (OEM02Dev)
DRV - [2007/02/28 04:25:46 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007/02/28 04:25:44 | 000,043,520 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007/02/28 04:25:44 | 000,032,256 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2006/11/02 00:36:43 | 002,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\atikmdag.sys -- (R300)
DRV - [2005/08/17 08:47:48 | 000,073,696 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\sscdserd.sys -- (sscdserd)
DRV - [2005/08/17 08:46:26 | 000,093,872 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005/08/17 08:46:20 | 000,008,272 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2005/08/17 08:45:00 | 000,058,352 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\sscdbus.sys -- (sscdbus)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{15B7D127-05D8-415C-9AAD-912D5133908F}: "URL" = http://search.live.c...ferrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search...p={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0C760271-157E-42A0-9363-F321E7771D55}: "URL" = http://www.google.co...&rlz=1I7ADSA_en
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg....fr&d=2012-07-25 14:39:32&v=12.1.0.21&sap=dsp&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\12.1.5\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: C:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\ [2012/07/25 14:38:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\12.1.0.21\ [2012/07/25 14:39:35 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.nutridiary.com/mylog.asp
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Dell\AppData\Local\Google\Chrome\Application\17.0.963.46\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Dell\AppData\Local\Google\Chrome\Application\17.0.963.46\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Dell\AppData\Local\Google\Chrome\Application\17.0.963.46\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\PFiles\Plugins\np-mswmp.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\
CHR - Extension: Google Search = C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\
CHR - Extension: Gmail = C:\Users\Dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2011/05/07 11:18:25 | 000,000,027 | ---- | M]) - C:\WINDOWS\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.1.0.21\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.1.0.21\AVG Secure Search_toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVHotkey] C:\Windows\System32\nvHotkey.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OEM02Mon.exe] C:\WINDOWS\OEM02Mon.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [PCMService] C:\Program Files\Dell\MediaDirect\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll (AVG Technologies CZ, s.r.o.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_05)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 68.94.157.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0E59E7AF-4452-44F7-B729-5DE122B22E54}: DhcpNameServer = 24.205.1.14 4.2.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{56F003EC-191F-4AE7-ADD5-4DD33750F20F}: DhcpNameServer = 192.168.0.1 68.94.157.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\12.1.5\ViProtocol.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\WINDOWS\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Dell\Pictures\l_4212ee00c47e122d5da644a7c0f812fc.jpg
O24 - Desktop BackupWallPaper: C:\Users\Dell\Pictures\l_4212ee00c47e122d5da644a7c0f812fc.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 14:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk /p \??\F:)
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe - (Hewlett-Packard Co.)
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ImageMixer 3 SE Camera Monitor Ver.5.lnk - C:\Program Files\PIXELA\ImageMixer 3 SE Ver.5\Transfer Utility\CameraMonitor.exe - (PIXELA CORPORATION)
MsConfig - StartUpFolder: C:^Users^Dell^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dell Dock.lnk - C:\Program Files\Dell\DellDock\DellDock.exe - (Stardock Corporation)
MsConfig - StartUpFolder: C:^Users^Dell^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE - (Microsoft Corporation)
MsConfig - StartUpReg: Adobe Photo Downloader - hkey= - key= - C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: HP Software Update - hkey= - key= - C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard)
MsConfig - StartUpReg: msnmsgr - hkey= - key= - C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
MsConfig - State: "startup" - 2

SafeBootMin: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: hitmanpro35 - Reg Error: Value error.
SafeBootNet: hitmanpro35.sys - Reg Error: Value error.
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Reg Error: Value error.
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32: msacm.ac3acm - C:\Windows\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\Windows\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.XVID - C:\Windows\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\System32\yv12vfw.dll (www.helixcommunity.org)

CREATERESTOREPOINT
System Restore Service not available.

========== Files/Folders - Created Within 30 Days ==========

[2012/09/04 18:13:01 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/09/04 18:13:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/09/04 18:13:01 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012/09/04 18:11:22 | 010,652,120 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\Dell\Desktop\mbam-setup-1.62.0.1300.exe
[2012/09/04 18:02:49 | 002,211,928 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Dell\Desktop\tdsskiller.exe
[2012/09/04 17:56:05 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012/09/04 17:54:54 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012/09/04 17:47:27 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/09/04 17:44:11 | 004,744,582 | R--- | C] (Swearware) -- C:\Users\Dell\Desktop\ComboFix.exe
[2012/08/31 21:59:06 | 004,731,392 | ---- | C] (AVAST Software) -- C:\Users\Dell\Desktop\aswMBR.exe
[2012/08/31 21:48:32 | 000,000,000 | ---D | C] -- C:\_OTL
[2012/08/31 19:22:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012/08/31 19:22:36 | 000,246,760 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012/08/31 19:22:21 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012/08/31 19:22:21 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012/08/31 19:22:21 | 000,093,672 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2012/08/31 16:00:45 | 000,000,000 | ---D | C] -- C:\Users\Dell\Documents\OTL logs
[2012/08/31 15:33:57 | 000,598,528 | ---- | C] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
[2012/08/30 12:15:56 | 000,000,000 | ---D | C] -- C:\ProgramData\RegInOut
[2012/08/30 12:15:53 | 000,000,000 | ---D | C] -- C:\Windows\RegInOut System Utilities
[2012/08/30 11:38:03 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{8022A780-A62C-4DC8-9F80-5F75FD7D7772}
[2012/08/28 14:16:05 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{421F8392-1C10-4A80-8B10-A71919BCC980}
[2012/08/26 17:17:56 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{44405A3B-B362-485D-8B54-5E2EC3AA35E5}
[2012/08/26 17:10:10 | 000,000,000 | ---D | C] -- C:\Windows\en
[2012/08/26 17:09:11 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2012/08/26 16:10:01 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{81635705-AC04-480B-93A9-FE283738CA71}
[2012/08/25 16:20:16 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{27DC27A5-7B68-4B40-BDB3-ED3216EBDB70}
[2012/08/24 16:38:29 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{1EC2887C-EFAA-495E-9B2F-AC863BF6AFCA}
[2012/08/23 18:10:25 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{3597258C-D417-49A2-9E89-36727B3294BB}
[2012/08/22 19:25:04 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{BCCE0E22-1CAB-41D0-A97B-7AC5BF0D6C10}
[2012/08/19 15:33:26 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{F2D580F8-3BE1-4B22-AABF-105BBAB0E2A2}
[2012/08/18 14:14:37 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{10D573FE-1E89-4273-8DA4-41A247D60597}
[2012/08/18 14:14:26 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{B4CEA315-4D6E-480F-B4FD-C3DEA0B007B8}
[2012/08/17 15:18:10 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012/08/17 15:18:10 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012/08/17 15:18:09 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012/08/17 15:18:09 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012/08/17 15:18:08 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012/08/17 15:18:08 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012/08/17 15:18:08 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012/08/17 15:18:00 | 002,047,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012/08/17 15:11:29 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{07EF41AB-CD18-4725-AA74-6C1D2BE1C298}
[2012/08/17 15:11:19 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{4FD6CAA4-35E7-4A52-BFE9-1460FD763C54}
[2012/08/16 18:31:01 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{D419EA7C-DDAE-4A6B-BB94-58F00BCE4E69}
[2012/08/16 18:30:50 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{D3162CC3-0480-4CAA-B5C3-F4E9DBA8EE5A}
[2012/08/14 08:36:59 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{AD1469B5-9A4B-47F6-A4E4-D5495247A3BC}
[2012/08/14 08:36:49 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{543FAC00-7FFF-44C0-91B1-5CA2F8ADECA7}
[2012/08/13 13:56:30 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{F6169E6C-E35B-4122-8A23-5A39A26E9452}
[2012/08/13 13:56:18 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{0FA3EE77-45F8-4C59-A7FF-50F1B3D668AD}
[2012/08/12 18:26:51 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{753B59FD-266F-4899-9E2A-6D5A4ABBE460}
[2012/08/12 18:26:40 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{FEE762F4-DECF-4CFF-99E8-D87DB8066D0C}
[2012/08/11 22:53:39 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{56C47545-589C-4483-97BC-5A888AA97BF1}
[2012/08/11 22:53:28 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{CEC39232-9377-4465-9C85-A4E385BD0E45}
[2012/08/09 17:18:28 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{032A44BD-C1E0-4373-871A-494261E05068}
[2012/08/09 17:18:18 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{E405AD70-AE99-4005-8483-62F36743C33A}
[2012/08/05 20:35:40 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{86E9A7B2-2FF4-4D7F-8411-3530B663FAD8}
[2012/08/05 20:35:29 | 000,000,000 | ---D | C] -- C:\Users\Dell\AppData\Local\{CFD73512-0807-4DFC-9274-BBC5FB40D44A}

========== Files - Modified Within 30 Days ==========

[2012/09/04 19:23:00 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/09/04 19:20:04 | 000,061,440 | ---- | M] ( ) -- C:\Users\Dell\Desktop\VEW.exe
[2012/09/04 19:04:39 | 000,016,055 | ---- | M] () -- C:\Users\Dell\Desktop\CommandPrompt.jpg
[2012/09/04 18:49:54 | 000,604,692 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/09/04 18:49:54 | 000,108,962 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/09/04 18:45:10 | 000,062,804 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012/09/04 18:43:35 | 000,062,804 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2012/09/04 18:43:34 | 000,000,878 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/09/04 18:43:30 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/09/04 18:43:30 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/09/04 18:43:26 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/09/04 18:43:18 | 3753,992,192 | -HS- | M] () -- C:\hiberfil.sys
[2012/09/04 18:42:14 | 000,003,204 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012/09/04 18:13:02 | 000,000,908 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/09/04 18:11:56 | 010,652,120 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\Dell\Desktop\mbam-setup-1.62.0.1300.exe
[2012/09/04 18:03:32 | 002,211,928 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Dell\Desktop\tdsskiller.exe
[2012/09/04 17:44:24 | 004,744,582 | R--- | M] (Swearware) -- C:\Users\Dell\Desktop\ComboFix.exe
[2012/09/04 17:38:18 | 000,000,512 | ---- | M] () -- C:\Users\Dell\Desktop\MBR.dat
[2012/09/04 17:23:00 | 093,707,027 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012/08/31 22:03:02 | 355,282,420 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012/08/31 21:59:18 | 004,731,392 | ---- | M] (AVAST Software) -- C:\Users\Dell\Desktop\aswMBR.exe
[2012/08/31 21:54:37 | 000,008,484 | ---- | M] () -- C:\Users\Dell\AppData\Local\d3d9caps.dat
[2012/08/31 20:56:03 | 000,099,433 | ---- | M] () -- C:\Users\Dell\Desktop\fest2012.jpg
[2012/08/31 19:22:15 | 000,093,672 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2012/08/31 19:22:14 | 000,821,736 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2012/08/31 19:22:14 | 000,746,984 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2012/08/31 19:22:14 | 000,246,760 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012/08/31 19:22:14 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012/08/31 19:22:14 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012/08/31 15:33:57 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\Dell\Desktop\OTL.exe
[2012/08/30 15:31:00 | 000,041,205 | ---- | M] () -- C:\Users\Dell\Documents\errror2.jpg
[2012/08/30 15:28:27 | 000,131,396 | ---- | M] () -- C:\Users\Dell\Documents\errorrrrr.jpg
[2012/08/30 15:26:07 | 000,015,894 | ---- | M] () -- C:\Users\Dell\Documents\errorrrr.jpg
[2012/08/30 15:16:34 | 000,117,588 | ---- | M] () -- C:\Users\Dell\Documents\errrorrr.jpg
[2012/08/30 12:12:56 | 000,132,656 | ---- | M] () -- C:\Users\Dell\Documents\error8-30-12.jpg
[2012/08/26 16:25:45 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2012/08/26 16:25:45 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2012/08/24 18:17:20 | 000,022,433 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm
[2012/08/21 14:03:56 | 000,079,081 | ---- | M] () -- C:\Users\Dell\Desktop\IGETC_01.pdf
[2012/08/18 13:30:07 | 000,295,200 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT

========== Files Created - No Company Name ==========

[2012/09/04 19:20:03 | 000,061,440 | ---- | C] ( ) -- C:\Users\Dell\Desktop\VEW.exe
[2012/09/04 19:04:39 | 000,016,055 | ---- | C] () -- C:\Users\Dell\Desktop\CommandPrompt.jpg
[2012/09/04 18:13:02 | 000,000,908 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/09/04 17:38:18 | 000,000,512 | ---- | C] () -- C:\Users\Dell\Desktop\MBR.dat
[2012/08/31 20:56:03 | 000,099,433 | ---- | C] () -- C:\Users\Dell\Desktop\fest2012.jpg
[2012/08/30 15:16:34 | 000,117,588 | ---- | C] () -- C:\Users\Dell\Documents\errrorrr.jpg
[2012/08/30 15:16:04 | 000,015,894 | ---- | C] () -- C:\Users\Dell\Documents\errorrrr.jpg
[2012/08/30 14:38:41 | 000,041,205 | ---- | C] () -- C:\Users\Dell\Documents\errror2.jpg
[2012/08/30 13:10:20 | 000,131,396 | ---- | C] () -- C:\Users\Dell\Documents\errorrrrr.jpg
[2012/08/30 12:12:55 | 000,132,656 | ---- | C] () -- C:\Users\Dell\Documents\error8-30-12.jpg
[2012/08/26 17:31:36 | 355,282,420 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012/08/26 17:09:58 | 000,001,160 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
[2012/08/26 17:09:33 | 000,001,229 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
[2012/08/26 16:25:45 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2012/08/26 16:25:45 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2011/11/17 20:28:21 | 000,123,636 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2011/09/17 19:53:33 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2011/08/17 12:50:12 | 000,000,146 | ---- | C] () -- C:\Windows\WININIT.INI
[2011/06/03 22:01:23 | 016,247,549 | ---- | C] () -- C:\Program Files\iPhone GUI PSD 4.psd
[2011/05/17 15:25:18 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011/05/17 15:25:18 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011/05/17 15:25:17 | 000,631,808 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011/05/17 15:25:17 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011/05/17 15:25:17 | 000,080,896 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2011/05/07 11:11:09 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2011/05/07 11:11:09 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2011/05/07 11:11:09 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2011/05/07 11:11:09 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2011/05/07 11:11:09 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2011/05/07 11:06:00 | 000,017,480 | ---- | C] () -- C:\Windows\System32\drivers\hitmanpro35.sys
[2011/05/07 10:18:19 | 000,000,118 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2010/05/01 21:35:00 | 000,008,484 | ---- | C] () -- C:\Users\Dell\AppData\Local\d3d9caps.dat
[2010/03/30 16:11:46 | 000,097,792 | ---- | C] () -- C:\Users\Dell\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/29 13:18:48 | 000,062,804 | ---- | C] () -- C:\ProgramData\nvModes.001
[2010/03/29 13:18:42 | 000,062,804 | ---- | C] () -- C:\ProgramData\nvModes.dat

========== Custom Scans ==========

========== Drive Information ==========

Physical Drives
---------------

Drive: \\\\.\\PHYSICALDRIVE0 - Fixed hard disk media
Interface type: IDE
Media Type: Fixed hard disk media
Model: WDC WD3200BEVT-75ZCT2
Partitions: 4
Status: OK
Status Info: 0

Partitions
---------------

DeviceID: Disk #0, Partition #0
PartitionType: Unknown
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 0.00GB
Starting Offset: 32256
Hidden sectors: 0


DeviceID: Disk #0, Partition #1
PartitionType: Installable File System
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 15.00GB
Starting Offset: 106954752
Hidden sectors: 0


DeviceID: Disk #0, Partition #2
PartitionType: Installable File System
Bootable: True
BootPartition: True
PrimaryPartition: True
Size: 280.00GB
Starting Offset: 16213082112
Hidden sectors: 0


DeviceID: Disk #0, Partition #3
PartitionType: Extended w/Extended Int 13
Bootable: False
BootPartition: False
PrimaryPartition: False
Size: 3.00GB
Starting Offset: 317385080832
Hidden sectors: 0


< %SYSTEMDRIVE%\*.exe >

< %systemroot%\assembly\GAC_32\*.ini >

< %systemroot%\assembly\GAC_64\*.ini >

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*.exe >

< %APPDATA%\*. >
[2010/11/12 22:35:03 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\acccore
[2011/12/22 20:17:24 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Adobe
[2011/08/17 19:08:12 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Apple Computer
[2011/03/09 23:11:47 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Audacity
[2012/07/25 14:43:30 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\AVG2012
[2011/11/19 19:13:46 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\CoffeeCup Software
[2010/03/30 15:07:39 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Creative
[2011/04/26 14:28:12 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\CyberLink
[2011/05/24 21:23:34 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Dell
[2011/05/09 12:08:46 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Google
[2010/05/26 10:09:16 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\HP
[2010/03/29 08:33:03 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Identities
[2010/03/29 08:42:41 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Macromedia
[2012/02/15 20:05:45 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Malwarebytes
[2006/11/02 05:37:34 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Media Center Programs
[2012/07/26 14:08:11 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Media Player Classic
[2011/11/08 19:44:23 | 000,000,000 | --SD | M] -- C:\Users\Dell\AppData\Roaming\Microsoft
[2010/03/29 13:51:23 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\OpenOffice.org
[2012/02/27 17:59:12 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Opera
[2011/03/31 19:44:59 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\PCDr
[2010/07/25 17:09:16 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Reallusion
[2011/12/29 11:01:07 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\redsn0w
[2012/03/17 21:02:13 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Skype
[2012/03/17 17:22:22 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\skypePM
[2010/07/25 17:09:14 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\tmp
[2011/11/09 22:59:55 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Windows Live Writer
[2010/10/05 19:33:31 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\WinRAR
[2010/10/18 21:27:45 | 000,000,000 | ---D | M] -- C:\Users\Dell\AppData\Roaming\Yahoo!

< MD5 for: ATAPI.SYS >
[2009/04/11 10:43:58 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\WINDOWS\System32\DriverStore\FileRepository\mshdc.inf_4c9c5a00\atapi.sys
[2009/04/11 10:43:58 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\WINDOWS\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18034_none_dd1bb97e219e87cb\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\WINDOWS\System32\drivers\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\WINDOWS\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009/04/10 23:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\WINDOWS\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008/01/20 19:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\WINDOWS\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008/01/20 19:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\WINDOWS\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006/11/02 02:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\WINDOWS\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2009/04/11 10:43:58 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=96DC4E1A9F90CCD489950A8935425C59 -- C:\WINDOWS\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.22134_none_dda556493abc2795\atapi.sys

< MD5 for: CSRSS.EXE >
[2008/01/20 19:24:54 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=ABCA209EBA02CB59233614DB83B4F50D -- C:\WINDOWS\System32\csrss.exe
[2008/01/20 19:24:54 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=ABCA209EBA02CB59233614DB83B4F50D -- C:\WINDOWS\winsxs\x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4c\csrss.exe

< MD5 for: EXPLORER.EXE >
[2009/04/11 10:59:39 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2009/04/11 10:59:39 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2009/04/11 10:59:39 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009/04/10 23:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2009/04/10 23:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\WINDOWS\explorer.exe
[2009/04/10 23:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2009/04/11 10:59:39 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2008/01/20 19:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\WINDOWS\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe

< MD5 for: MSWSOCK.DLL >
[2009/04/10 23:28:22 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=8617350C9B590B63E620881092751BCB -- C:\WINDOWS\ERDNT\cache\mswsock.dll
[2009/04/10 23:28:22 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=8617350C9B590B63E620881092751BCB -- C:\WINDOWS\System32\mswsock.dll
[2009/04/10 23:28:22 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=8617350C9B590B63E620881092751BCB -- C:\WINDOWS\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.0.6002.18005_none_ba3ed0122a6d89da\mswsock.dll
[2008/01/20 19:24:02 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=89FD0595EEA4E505CABEFCF7008F2612 -- C:\WINDOWS\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.0.6001.18000_none_b85357062d4bbe8e\mswsock.dll

< MD5 for: NAPINSP.DLL >
[2008/01/20 19:24:29 | 000,050,176 | ---- | M] (Microsoft Corporation) MD5=FC62A635063B762E1C3C60EA77279378 -- C:\WINDOWS\System32\NapiNSP.dll
[2008/01/20 19:24:29 | 000,050,176 | ---- | M] (Microsoft Corporation) MD5=FC62A635063B762E1C3C60EA77279378 -- C:\WINDOWS\winsxs\x86_microsoft-windows-n..ider-infrastructure_31bf3856ad364e35_6.0.6001.18000_none_ac1d40c88f30e6c0\NapiNSP.dll

< MD5 for: NLAAPI.DLL >
[2008/01/20 19:23:44 | 000,048,128 | ---- | M] (Microsoft Corporation) MD5=D1A84F7D4CAFCFE2A32149FF418056E5 -- C:\WINDOWS\System32\nlaapi.dll
[2008/01/20 19:23:44 | 000,048,128 | ---- | M] (Microsoft Corporation) MD5=D1A84F7D4CAFCFE2A32149FF418056E5 -- C:\WINDOWS\winsxs\x86_microsoft-windows-nlasvc_31bf3856ad364e35_6.0.6001.18000_none_6785f5c70aea4565\nlaapi.dll

< MD5 for: PNRPNSP.DLL >
[2008/01/20 19:25:26 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=690D41DF1D555F96D4898A0F54EBA065 -- C:\WINDOWS\System32\pnrpnsp.dll
[2008/01/20 19:25:26 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=690D41DF1D555F96D4898A0F54EBA065 -- C:\WINDOWS\winsxs\x86_microsoft-windows-peertopeerpnrp_31bf3856ad364e35_6.0.6001.18000_none_717f15b322749509\pnrpnsp.dll

< MD5 for: SERVICES.EXE >
[2008/01/20 19:24:48 | 000,279,040 | ---- | M] (Microsoft Corporation) MD5=2B336AB6286D6C81FA02CBAB914E3C6C -- C:\WINDOWS\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe
[2009/04/10 23:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B -- C:\WINDOWS\ERDNT\cache\services.exe
[2009/04/10 23:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B -- C:\WINDOWS\System32\services.exe
[2009/04/10 23:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B -- C:\WINDOWS\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe

< MD5 for: SVCHOST.EXE >
[2008/01/20 19:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008/01/20 19:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\WINDOWS\System32\svchost.exe
[2008/01/20 19:23:43 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\WINDOWS\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6001.18000_none_b5bb59a1054dbde5\svchost.exe
[2012/07/03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe

< MD5 for: USERINIT.EXE >
[2008/01/20 19:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008/01/20 19:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\WINDOWS\System32\userinit.exe
[2008/01/20 19:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\WINDOWS\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009/04/10 23:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2009/04/10 23:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\WINDOWS\System32\winlogon.exe
[2009/04/10 23:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\WINDOWS\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2012/07/03 13:46:42 | 000,217,672 | ---- | M] () MD5=8A7F34F0BBD076EC3815680A7309114F -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2008/01/20 19:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\WINDOWS\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

< MD5 for: WINRNR.DLL >
[2009/04/10 23:28:25 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=C411C80F90D6732380352B98B37BBD53 -- C:\WINDOWS\System32\winrnr.dll
[2009/04/10 23:28:25 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=C411C80F90D6732380352B98B37BBD53 -- C:\WINDOWS\winsxs\x86_microsoft-windows-dns-client-winrnr_31bf3856ad364e35_6.0.6002.18005_none_5b39cbfb4d3802b6\winrnr.dll
[2006/11/02 02:46:14 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=FF78B8E67EDCE9FEED651D7858D77A04 -- C:\WINDOWS\winsxs\x86_microsoft-windows-dns-client-winrnr_31bf3856ad364e35_6.0.6000.16386_none_571790f3532b2696\winrnr.dll

< MD5 for: WSHELPER.DLL >
[2006/11/02 02:46:14 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=20614C9F12A3A09A5015C9EBBD4419D2 -- C:\WINDOWS\System32\wshelper.dll
[2006/11/02 02:46:14 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=20614C9F12A3A09A5015C9EBBD4419D2 -- C:\WINDOWS\winsxs\x86_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6000.16386_none_024e4071fa6fea95\wshelper.dll

< %systemroot%\*. /mp /s >

< hklm\software\clients\startmenuinternet|command /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\system32\ie4uinit.exe" -hide [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\system32\ie4uinit.exe" -show [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\system32\ie4uinit.exe" -reinstall [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2012/06/28 18:00:47 | 000,748,664 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" [2012/06/28 18:00:47 | 000,748,664 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\ShowIconsCommand: "C:\Program Files\Opera\Opera.exe" /ShowIconsCommand [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\HideIconsCommand: "C:\Program Files\Opera\Opera.exe" /HideIconsCommand [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\ReinstallCommand: "C:\Program Files\Opera\Opera.exe" /ReInstallBrowser [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\shell\open\command\\: "C:\Program Files\Opera\Opera.exe" [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)

< hklm\software\clients\startmenuinternet|command /64 /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\system32\ie4uinit.exe" -hide [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\system32\ie4uinit.exe" -show [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\system32\ie4uinit.exe" -reinstall [2011/05/07 12:29:44 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2012/06/28 18:00:47 | 000,748,664 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" [2012/06/28 18:00:47 | 000,748,664 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\ShowIconsCommand: "C:\Program Files\Opera\Opera.exe" /ShowIconsCommand [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\HideIconsCommand: "C:\Program Files\Opera\Opera.exe" /HideIconsCommand [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\InstallInfo\\ReinstallCommand: "C:\Program Files\Opera\Opera.exe" /ReInstallBrowser [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Opera\shell\open\command\\: "C:\Program Files\Opera\Opera.exe" [2012/08/05 16:56:09 | 000,874,896 | ---- | M] (Opera Software)

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemdrive%\$Recycle.Bin|@;true;true;true >

< End of report >



OTL Extras

OTL Extras logfile created on: 9/4/2012 7:25:17 PM - Run 2
OTL by OldTimer - Version 3.2.59.1 Folder = C:\Users\Dell\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.50 Gb Total Physical Memory | 2.20 Gb Available Physical Memory | 62.92% Memory free
7.19 Gb Paging File | 5.81 Gb Available in Paging File | 80.73% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 280.49 Gb Total Space | 123.31 Gb Free Space | 43.96% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 9.31 Gb Free Space | 62.10% Space Free | Partition Type: NTFS

Computer Name: DELL-PC | User Name: Dell | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (All) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- "%1" %*
.chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
.cmd [@ = cmdfile] -- "%1" %*
.com [@ = ComFile] -- "%1" %*
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.exe [@ = exefile] -- "%1" %*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] -- C:\Windows\System32\mshta.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
.inf [@ = inffile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\rundll32.exe (Microsoft Corporation)
.js [@ = JSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.pif [@ = piffile] -- "%1" %*
.reg [@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation)
.scr [@ = scrfile] -- "%1" /S
.txt [@ = txtfile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\Windows\system32\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
inffile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2900740096-1093691669-3467002836-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0D4B21DD-D485-4F8F-979C-4D9F97A95203}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1A6B6DDE-7CBE-449E-AC18-B35129EDAD06}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{762C9CBD-1186-47A7-BCFE-D244FD8FB921}" = rport=10243 | protocol=6 | dir=out | app=system |
"{86E3C416-A3EC-4F1D-A309-24995AB489AB}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A243296B-8D5F-4378-88F2-62C01E33C872}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A766F4BB-BEC7-4C6F-89A0-E4E2EA36B8E6}" = lport=10243 | protocol=6 | dir=in | app=system |
"{BA14F699-EC86-4320-A392-BE7129CD762A}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C320E7B5-ED43-4105-AABE-A0D35CB22076}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{C4991D1A-1946-4AD4-9681-3E623150C8AD}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{D0A7CD87-E5BB-42E7-B92C-A87F25BE6B37}" = lport=2869 | protocol=6 | dir=in | app=system |
"{D4DA0DD3-9AEA-4D3F-934C-2B76B2FE7422}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F7B04E2C-97C3-46B4-A11F-42644846EE42}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{FE161D78-E5AD-433F-A91B-E8B22A337C5B}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02D98730-EA34-4E4C-AD23-85153308F2AB}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{06C25B46-4FCF-456A-85A0-033F754F0FF5}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{08E79B16-E6EB-485F-AE0B-6C277F259777}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{1077FA70-78A3-4BBD-BA7D-EFCA680DC808}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{13012802-C079-462F-A409-E81D748F7F59}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{1A027C66-C0BA-4E4F-B28F-B358DF979DEC}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{2034EE73-437F-4E33-A92F-F4C6037BFDE9}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{2057972F-E513-4B88-8337-1CD85D71B836}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{20E88627-8713-4760-9881-BABC16C3B811}" = dir=in | app=c:\program files\dell\mediadirect\kernel\dmp\clbrowserengine.exe |
"{218355A7-6B12-4777-9D82-96EE2A36D889}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3391E578-0834-49F1-9AF1-6C6B863EA633}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{3BDCECAA-980E-4005-8703-95E140104F18}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{3F119D3E-5FD1-4A05-B192-47EE0E2E87ED}" = protocol=6 | dir=out | app=system |
"{42C464D4-5D25-4B91-ACBE-BD5907D289F9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4C063CA0-A7A4-4D9F-8486-EBF02572CB62}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{54877E9B-D7FC-4EBF-BA8C-9D83634B82C5}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{5579455B-6BFD-48DA-91E9-AEB2AFDBB1C6}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{5A16DB9C-8155-49FE-A112-85712F1E4EF4}" = protocol=6 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{626622A5-D598-4730-A05C-4AA5C08059F0}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{65903279-199E-4174-9BFF-A5B54255C059}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7B7DA692-2944-4BC5-84AE-FF772315911D}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{82CAE654-1DD6-4FEA-9C27-F4A4A271E97F}" = dir=in | app=c:\program files\dell\mediadirect\kernel\dms\clmsservice.exe |
"{846C5E05-C896-43B3-8387-6EE8C798BC44}" = protocol=17 | dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{853A5625-0861-4045-9260-56C71C7233A6}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{8845F4CD-589F-45A4-A403-A51CC6A5E0F5}" = protocol=6 | dir=in | app=c:\program files\opera\pluginwrapper\opera_plugin_wrapper.exe |
"{89028312-5867-49E5-8DAD-F429A1A71081}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{8926C113-CD57-41CF-A769-791301EA2112}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{8B8339F4-F858-44AC-B897-C759989A2202}" = dir=in | app=c:\program files\dell\mediadirect\pcmservice.exe |
"{988D32A1-E7F1-4A90-92A3-A9373B452292}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{99310787-5094-4627-96D2-DF4DD1CE6576}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{9AFBF121-B8F5-41C3-8921-17C9DFF960C5}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{A5E11483-2D15-4F9F-B361-92CEE1FD6A0E}" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |
"{A72D35D3-2B12-455A-9060-80143B31DEC7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{B151DF67-6C4E-45AE-9245-67474019BA57}" = dir=in | app=c:\program files\dell\mediadirect\mediadirect.exe |
"{B480206A-1009-423E-B4CB-50B8A23BAFD7}" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |
"{B5B003F8-0BB3-4178-8B85-AC1BE2377B50}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B95EF378-9712-43FB-996D-2913E75B3BCF}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{C0D2EB65-C453-4BB6-BA3B-72434DBEFA4B}" = protocol=17 | dir=in | app=c:\program files\opera\pluginwrapper\opera_plugin_wrapper.exe |
"{D01D934E-0E35-418C-B7B2-AC09F466EEDE}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{D2E85055-4809-41ED-9E1D-C7E963539DAA}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{DBDB89B7-F7BB-4D25-BA46-1C5957DADB88}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{DE596D55-94AD-4B10-B386-15DDFBA3A0EC}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{ECF669CB-C125-45E4-9E6B-CA4A69895F64}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F1200B39-2498-498D-B45B-5791AC24ADE0}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{F515BF07-7D2C-415B-9628-4F20F3FD8CE8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{F7BA3280-CC91-477B-82C5-6A7559FC9971}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"TCP Query User{04B6CDE2-7AED-4A0E-9BBE-75C2666BCCD4}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{0978135B-B540-4C96-BC55-01417B08F036}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"TCP Query User{194129F5-8EB4-455B-BBC3-F6C9406A1EE8}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"TCP Query User{3FCA5895-E678-45E2-964A-E0D963CE3712}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"TCP Query User{489C0D48-BC01-4749-82D9-240CE971D357}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe" = protocol=6 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe |
"TCP Query User{5EEC25B7-DA48-4584-A730-5E88C4759CBB}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b2\redsn0w.exe" = protocol=6 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b2\redsn0w.exe |
"TCP Query User{98A5EE0A-0988-467A-8AC9-2D63C4FC5226}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"TCP Query User{E7FFD349-4829-45D0-87EC-E00730C3771A}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"TCP Query User{F78A4B91-3EA0-4DFF-B7D4-8C82F47333FE}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe" = protocol=6 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe |
"UDP Query User{03E7D5ED-A694-4DD2-846D-A7147F10FEF9}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe" = protocol=17 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe |
"UDP Query User{176AA7A7-3E56-4B19-892B-61A8D819846C}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"UDP Query User{280131F3-D38F-4A1F-9AE7-A1C6A9FDFE75}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |
"UDP Query User{2EE4D885-09C9-4828-A17A-AD4EE2A2B4CE}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe" = protocol=17 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b3\redsn0w.exe |
"UDP Query User{35723C98-5555-4E37-8704-8B4895BB2EEA}C:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b2\redsn0w.exe" = protocol=17 | dir=in | app=c:\users\dell\downloads\redsn0w_win_0.9.10b2\redsn0w_win_0.9.10b2\redsn0w.exe |
"UDP Query User{9465A809-0AA7-4943-AF1A-86AA3BE1E19E}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"UDP Query User{B65D9F0C-825C-455E-877D-C6DDB2F8FF52}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"UDP Query User{E8B9BE53-C3AA-4A57-9C37-47DCF271426A}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{EFF793CA-A101-4B13-B71B-5B679E324E93}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{07620C4F-0964-4086-A872-C9C12E418E52}" = DJ_SF_03_D4300_Software
"{095B1DCF-5E8B-47EC-9B18-481918A731DB}" = Microsoft Default Manager
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{11B83AD3-7A46-4C2E-A568-9505981D4C6F}" = HP Update
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995}" = Live! Cam Avatar v1.0
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{24EFA94F-F3D6-4386-8824-B54712C9DC88}" = D4300_Help
"{25569723-DC5A-4467-A639-79535BF01B71}" = Adobe Help Center 2.1
"{25613C10-27D2-410B-942B-D922D5C3A7BE}" = Interlok driver setup x32
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7
"{29ED20C9-5E15-4969-9279-25BF3727A3DA}" = iTunes
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{3138EAD3-700B-4A10-B617-B3F8096EE30D}" = Dell Edoc Viewer
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{387D9916-BD27-480f-8CF0-3228832BBAA2}" = HP Deskjet D4300 Printer Driver Software 10.0 Rel .3
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module
"{42C7C4D8-033E-44F9-BF34-43808A0686CC}" = D4300
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}" = DeviceDiscovery
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5ACE69F0-A3E8-44eb-88C1-0A841E700180}" = TrayApp
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm
"{6D12EC75-E7D3-4EAD-AB10-E1F3AFF94AA6}" = AVG 2012
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport
"{8B0A7592-2AE0-48EA-A327-6EB7DAB25E4A}" = DJ_SF_03_D4300_Software_Min
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{903679E8-44C8-4C07-9600-05C92654FC50}" = QualXServ Service Agreement
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}" = OutlookAddinSetup
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}" = MediaDirect
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}" = Apple Mobile Device Support
"{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}" = Status
"{A13E07E1-A423-44FB-9DEE-B24C75C1BAF2}" = WIDCOMM Bluetooth Software 6.0.1.3100
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7B609FB-83D8-4FC3-8477-1BC65ECFE85B}" = Adobe Photoshop Elements 5.0
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.0)
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B143D835-EBAF-4A39-8B31-1868FF4166C1}" = AVG 2012
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B674F947-56D6-4793-B465-7D7C87E04D0C}" = ImageMixer 3 SE Ver.5 Video Tools
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C99C0593-3B48-41D9-B42F-6E035B320449}" = Broadcom Management Programs
"{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DFE492C4-A9F5-413E-A2CC-6F5F3ACC229F}" = ImageMixer 3 SE Ver.5 Transfer Utility
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E60A3FF1-856E-4DD2-BFC6-FD9B976FE1C5}" = DJ_SF_03_D4300_ProductContext
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 5" = Adobe Photoshop Elements 5.0
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Advanced Video FX Engine" = Advanced Video FX Engine
"AVG" = AVG 2012
"Broadcom 802.11 Application" = Dell Wireless WLAN Card Utility
"CoffeeCup HTML Editor" = CoffeeCup HTML Editor
"Creative OEM002" = Laptop Integrated Webcam Driver (1.04.01.1011)
"Dell Webcam Center" = Dell Webcam Center
"Dell Webcam Manager" = Dell Webcam Manager
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HP Imaging Device Functions" = HP Imaging Device Functions 10.0
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 7.1.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.62.0.1300
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Drivers" = NVIDIA Drivers
"Opera 12.01.1532" = Opera 12.01
"SynTPDeinstKey" = Dell Touchpad
"WinLiveSuite" = Windows Live Essentials
"YTdetect" = Yahoo! Detect

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 9/4/2012 9:44:34 PM | Computer Name = Dell-PC | Source = WinMgmt | ID = 10
Description =

[ Dell Events ]
Error - 11/3/2010 6:22:27 PM | Computer Name = Dell-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 2/24/2011 10:15:31 PM | Computer Name = Dell-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 2/24/2011 10:15:31 PM | Computer Name = Dell-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

Error - 8/4/2011 10:57:25 PM | Computer Name = Dell-PC | Source = DataSafe | ID = 17
Description = The process was interrupted before completion.

[ Media Center Events ]
Error - 5/25/2011 12:12:22 AM | Computer Name = Dell-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

[ System Events ]
Error - 9/4/2012 9:45:04 PM | Computer Name = Dell-PC | Source = Service Control Manager | ID = 7022
Description =


< End of report >



FSS

Farbar Service Scanner Version: 06-08-2012
Ran by Dell (administrator) on 04-09-2012 at 19:40:43
Running from "C:\Users\Dell\Desktop"
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcsvc.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys => MD5 is legit
C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll => MD5 is legit
C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll
[2008-01-20 19:24] - [2008-01-20 19:24] - 0288256 ____A (Microsoft Corporation) E1499BD0FF76B1B2FBBF1AF339D91165

C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****




For the part with Command Prompt, the message I got was "Windows Resource Protection found corrupt files but was unable to fix some of them".
  • 0

#10
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP
Not seeing much. Vista almost always complains when you run sfc. We can look to see what it is complaining about but it's probably some .ini files that are supposed to change:

Copy the next line:

findstr /c:"[SR]" \windows\logs\cbs\cbs.log > \junk.txt


Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Right click and Paste or Edit then Paste and the copied line should appear.
Hit Enter.

Attach the file \windows\logs\cbs\junk.txt to your next reply.



We can fix this:
Log: 'System' Date/Time: 05/09/2012 1:45:04 AM
Type: Error Category: 0
Event: 7022 Source: Service Control Manager
The HP CUE DeviceDiscovery Service service hung on starting.

Right click on (My) Computer and select Manage then Services and Applications and then Services find the HP CUE DeviceDiscovery service and right click on it and select Properties. Then change the Startup Type to Disabled. Apply. Close the services window. This is nothing you need.


Get the free version of Speccy:

http://www.filehippo...download_speccy (Look in the upper right for the Download
Latest Version button) Download, Save and Install it. Run Speccy. When it finishes (the little icon in the bottom left will stop moving), File, Save as Text File, (to your desktop) note the name it gives. OK. Open the file in notepad and delete the line that gives the serial number of your Operating System. (It will be near the top about 10 lines down.) Attach the file to your next post.

Get Process Explorer

http://live.sysinter...com/procexp.exe
Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator).

View, Select Column, check Verified Signer, OK
Options, Verify Image Signatures


Click twice on the CPU column header to sort things by CPU usage with the big hitters at the top.

Wait a minute for things to settle down.

File, Save As, Save. Open the file Procexp.txt on your desktop and copy and paste the text to a reply.

Use IE and go to http://eset.com/onlinescan and click on ESET online Scanner. Accept the terms then press Start (If you get a warning from your browser tell it you want to run it).

# Check Scan Archives
# Push the Start button.
# ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
# When the scan completes, push LIST OF THREATS FOUND
# Push EXPORT TO TEXT FILE , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
# Push the BACK button.
# Push Finish
# Once the scan is completed, you may close the window.
# Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
# Copy and paste that log as a reply.


Let's also try the bitdefender quickscan.

http://quickscan.bitdefender.com/

When it finishes there is a View Report option at the bottom. Click on it and copy and paste the report (even if it says nothing found).
  • 0

Advertisements


#11
CicisMom

CicisMom

    New Member

  • Topic Starter
  • Member
  • Pip
  • 9 posts
Where do I get the file \windows\logs\cbs\junk.txt ? In the windows\logs\cbs folder there is no junk.txt
  • 0

#12
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP
Oops. My mistake. It will be c:\junk.txt
  • 0

#13
CicisMom

CicisMom

    New Member

  • Topic Starter
  • Member
  • Pip
  • 9 posts
Junk

2012-09-04 18:49:10, Info CSI 00000006 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:10, Info CSI 00000007 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:15, Info CSI 00000009 [SR] Verify complete
2012-09-04 18:49:15, Info CSI 0000000a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:15, Info CSI 0000000b [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:20, Info CSI 0000000d [SR] Verify complete
2012-09-04 18:49:21, Info CSI 0000000e [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:21, Info CSI 0000000f [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:22, Info CSI 00000011 [SR] Verify complete
2012-09-04 18:49:22, Info CSI 00000012 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:22, Info CSI 00000013 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:23, Info CSI 00000015 [SR] Verify complete
2012-09-04 18:49:24, Info CSI 00000016 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:24, Info CSI 00000017 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:25, Info CSI 00000019 [SR] Verify complete
2012-09-04 18:49:25, Info CSI 0000001a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:25, Info CSI 0000001b [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:26, Info CSI 0000001d [SR] Verify complete
2012-09-04 18:49:27, Info CSI 0000001e [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:27, Info CSI 0000001f [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:28, Info CSI 00000021 [SR] Verify complete
2012-09-04 18:49:28, Info CSI 00000022 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:28, Info CSI 00000023 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:29, Info CSI 00000025 [SR] Verify complete
2012-09-04 18:49:29, Info CSI 00000026 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:29, Info CSI 00000027 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:31, Info CSI 00000029 [SR] Verify complete
2012-09-04 18:49:31, Info CSI 0000002a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:31, Info CSI 0000002b [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:32, Info CSI 0000002d [SR] Verify complete
2012-09-04 18:49:32, Info CSI 0000002e [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:32, Info CSI 0000002f [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:33, Info CSI 00000031 [SR] Verify complete
2012-09-04 18:49:34, Info CSI 00000032 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:34, Info CSI 00000033 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:35, Info CSI 00000035 [SR] Verify complete
2012-09-04 18:49:35, Info CSI 00000036 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:35, Info CSI 00000037 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:36, Info CSI 00000039 [SR] Verify complete
2012-09-04 18:49:37, Info CSI 0000003a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:37, Info CSI 0000003b [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:38, Info CSI 0000003d [SR] Verify complete
2012-09-04 18:49:38, Info CSI 0000003e [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:38, Info CSI 0000003f [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:39, Info CSI 00000041 [SR] Verify complete
2012-09-04 18:49:40, Info CSI 00000042 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:40, Info CSI 00000043 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:41, Info CSI 00000045 [SR] Verify complete
2012-09-04 18:49:41, Info CSI 00000046 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:41, Info CSI 00000047 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:43, Info CSI 00000049 [SR] Verify complete
2012-09-04 18:49:43, Info CSI 0000004a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:43, Info CSI 0000004b [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:44, Info CSI 0000004d [SR] Verify complete
2012-09-04 18:49:45, Info CSI 0000004e [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:45, Info CSI 0000004f [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:46, Info CSI 00000051 [SR] Verify complete
2012-09-04 18:49:46, Info CSI 00000052 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:46, Info CSI 00000053 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:47, Info CSI 00000055 [SR] Verify complete
2012-09-04 18:49:48, Info CSI 00000056 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:48, Info CSI 00000057 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:49, Info CSI 00000059 [SR] Verify complete
2012-09-04 18:49:49, Info CSI 0000005a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:49, Info CSI 0000005b [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:50, Info CSI 0000005d [SR] Verify complete
2012-09-04 18:49:51, Info CSI 0000005e [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:51, Info CSI 0000005f [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:52, Info CSI 00000061 [SR] Verify complete
2012-09-04 18:49:52, Info CSI 00000062 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:52, Info CSI 00000063 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:54, Info CSI 00000065 [SR] Verify complete
2012-09-04 18:49:54, Info CSI 00000066 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:54, Info CSI 00000067 [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:56, Info CSI 00000069 [SR] Verify complete
2012-09-04 18:49:56, Info CSI 0000006a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:56, Info CSI 0000006b [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:58, Info CSI 0000006d [SR] Verify complete
2012-09-04 18:49:58, Info CSI 0000006e [SR] Verifying 100 (0x00000064) components
2012-09-04 18:49:58, Info CSI 0000006f [SR] Beginning Verify and Repair transaction
2012-09-04 18:49:59, Info CSI 00000071 [SR] Verify complete
2012-09-04 18:50:00, Info CSI 00000072 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:00, Info CSI 00000073 [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:01, Info CSI 00000075 [SR] Verify complete
2012-09-04 18:50:01, Info CSI 00000076 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:01, Info CSI 00000077 [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:03, Info CSI 00000079 [SR] Verify complete
2012-09-04 18:50:04, Info CSI 0000007a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:04, Info CSI 0000007b [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:05, Info CSI 0000007d [SR] Verify complete
2012-09-04 18:50:05, Info CSI 0000007e [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:05, Info CSI 0000007f [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:06, Info CSI 00000081 [SR] Verify complete
2012-09-04 18:50:07, Info CSI 00000082 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:07, Info CSI 00000083 [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:08, Info CSI 00000085 [SR] Verify complete
2012-09-04 18:50:08, Info CSI 00000086 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:08, Info CSI 00000087 [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:12, Info CSI 00000089 [SR] Verify complete
2012-09-04 18:50:12, Info CSI 0000008a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:12, Info CSI 0000008b [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:18, Info CSI 0000008d [SR] Verify complete
2012-09-04 18:50:19, Info CSI 0000008e [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:19, Info CSI 0000008f [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:23, Info CSI 00000091 [SR] Verify complete
2012-09-04 18:50:23, Info CSI 00000092 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:23, Info CSI 00000093 [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:27, Info CSI 00000096 [SR] Verify complete
2012-09-04 18:50:27, Info CSI 00000097 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:27, Info CSI 00000098 [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:30, Info CSI 0000009b [SR] Verify complete
2012-09-04 18:50:31, Info CSI 0000009c [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:31, Info CSI 0000009d [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:35, Info CSI 0000009f [SR] Verify complete
2012-09-04 18:50:35, Info CSI 000000a0 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:35, Info CSI 000000a1 [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:41, Info CSI 000000ab [SR] Verify complete
2012-09-04 18:50:42, Info CSI 000000ac [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:42, Info CSI 000000ad [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:47, Info CSI 000000af [SR] Verify complete
2012-09-04 18:50:47, Info CSI 000000b0 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:47, Info CSI 000000b1 [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:53, Info CSI 000000b3 [SR] Verify complete
2012-09-04 18:50:53, Info CSI 000000b4 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:53, Info CSI 000000b5 [SR] Beginning Verify and Repair transaction
2012-09-04 18:50:57, Info CSI 000000b7 [SR] Verify complete
2012-09-04 18:50:58, Info CSI 000000b8 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:50:58, Info CSI 000000b9 [SR] Beginning Verify and Repair transaction
2012-09-04 18:51:04, Info CSI 000000bb [SR] Verify complete
2012-09-04 18:51:04, Info CSI 000000bc [SR] Verifying 100 (0x00000064) components
2012-09-04 18:51:04, Info CSI 000000bd [SR] Beginning Verify and Repair transaction
2012-09-04 18:51:12, Info CSI 000000bf [SR] Verify complete
2012-09-04 18:51:12, Info CSI 000000c0 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:51:12, Info CSI 000000c1 [SR] Beginning Verify and Repair transaction
2012-09-04 18:51:22, Info CSI 000000c5 [SR] Verify complete
2012-09-04 18:51:22, Info CSI 000000c6 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:51:22, Info CSI 000000c7 [SR] Beginning Verify and Repair transaction
2012-09-04 18:51:38, Info CSI 000000c9 [SR] Verify complete
2012-09-04 18:51:38, Info CSI 000000ca [SR] Verifying 100 (0x00000064) components
2012-09-04 18:51:38, Info CSI 000000cb [SR] Beginning Verify and Repair transaction
2012-09-04 18:51:52, Info CSI 000000cd [SR] Verify complete
2012-09-04 18:51:53, Info CSI 000000ce [SR] Verifying 100 (0x00000064) components
2012-09-04 18:51:53, Info CSI 000000cf [SR] Beginning Verify and Repair transaction
2012-09-04 18:51:56, Info CSI 000000d1 [SR] Verify complete
2012-09-04 18:51:57, Info CSI 000000d2 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:51:57, Info CSI 000000d3 [SR] Beginning Verify and Repair transaction
2012-09-04 18:51:59, Info CSI 000000d5 [SR] Verify complete
2012-09-04 18:52:00, Info CSI 000000d6 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:00, Info CSI 000000d7 [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:02, Info CSI 000000d9 [SR] Verify complete
2012-09-04 18:52:03, Info CSI 000000da [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:03, Info CSI 000000db [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:12, Info CSI 000000f9 [SR] Verify complete
2012-09-04 18:52:12, Info CSI 000000fa [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:12, Info CSI 000000fb [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:14, Info CSI 000000fd [SR] Verify complete
2012-09-04 18:52:14, Info CSI 000000fe [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:14, Info CSI 000000ff [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:17, Info CSI 00000101 [SR] Verify complete
2012-09-04 18:52:17, Info CSI 00000102 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:17, Info CSI 00000103 [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:20, Info CSI 00000105 [SR] Verify complete
2012-09-04 18:52:20, Info CSI 00000106 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:20, Info CSI 00000107 [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:28, Info CSI 00000109 [SR] Verify complete
2012-09-04 18:52:28, Info CSI 0000010a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:28, Info CSI 0000010b [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:35, Info CSI 0000010e [SR] Verify complete
2012-09-04 18:52:36, Info CSI 0000010f [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:36, Info CSI 00000110 [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:38, Info CSI 00000112 [SR] Verify complete
2012-09-04 18:52:39, Info CSI 00000113 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:39, Info CSI 00000114 [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:43, Info CSI 00000116 [SR] Verify complete
2012-09-04 18:52:43, Info CSI 00000117 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:43, Info CSI 00000118 [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:47, Info CSI 0000011a [SR] Verify complete
2012-09-04 18:52:47, Info CSI 0000011b [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:47, Info CSI 0000011c [SR] Beginning Verify and Repair transaction
2012-09-04 18:52:51, Info CSI 0000011e [SR] Verify complete
2012-09-04 18:52:51, Info CSI 0000011f [SR] Verifying 100 (0x00000064) components
2012-09-04 18:52:51, Info CSI 00000120 [SR] Beginning Verify and Repair transaction
2012-09-04 18:53:00, Info CSI 00000136 [SR] Verify complete
2012-09-04 18:53:00, Info CSI 00000137 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:53:00, Info CSI 00000138 [SR] Beginning Verify and Repair transaction
2012-09-04 18:53:09, Info CSI 00000149 [SR] Verify complete
2012-09-04 18:53:09, Info CSI 0000014a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:53:09, Info CSI 0000014b [SR] Beginning Verify and Repair transaction
2012-09-04 18:53:28, Info CSI 0000014d [SR] Verify complete
2012-09-04 18:53:28, Info CSI 0000014e [SR] Verifying 100 (0x00000064) components
2012-09-04 18:53:28, Info CSI 0000014f [SR] Beginning Verify and Repair transaction
2012-09-04 18:53:41, Info CSI 00000151 [SR] Verify complete
2012-09-04 18:53:41, Info CSI 00000152 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:53:41, Info CSI 00000153 [SR] Beginning Verify and Repair transaction
2012-09-04 18:53:52, Info CSI 00000155 [SR] Verify complete
2012-09-04 18:53:52, Info CSI 00000156 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:53:52, Info CSI 00000157 [SR] Beginning Verify and Repair transaction
2012-09-04 18:53:59, Info CSI 00000159 [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-09-04 18:54:00, Info CSI 0000015b [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-09-04 18:54:00, Info CSI 0000015c [SR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"
2012-09-04 18:54:00, Info CSI 0000015f [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"tcpmon.ini"; source file in store is also corrupted
2012-09-04 18:54:00, Info CSI 00000161 [SR] Verify complete
2012-09-04 18:54:01, Info CSI 00000162 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:54:01, Info CSI 00000163 [SR] Beginning Verify and Repair transaction
2012-09-04 18:54:06, Info CSI 00000165 [SR] Verify complete
2012-09-04 18:54:06, Info CSI 00000166 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:54:06, Info CSI 00000167 [SR] Beginning Verify and Repair transaction
2012-09-04 18:54:11, Info CSI 00000169 [SR] Verify complete
2012-09-04 18:54:11, Info CSI 0000016a [SR] Verifying 100 (0x00000064) components
2012-09-04 18:54:11, Info CSI 0000016b [SR] Beginning Verify and Repair transaction
2012-09-04 18:54:16, Info CSI 0000016e [SR] Verify complete
2012-09-04 18:54:16, Info CSI 0000016f [SR] Verifying 100 (0x00000064) components
2012-09-04 18:54:16, Info CSI 00000170 [SR] Beginning Verify and Repair transaction
2012-09-04 18:54:29, Info CSI 00000172 [SR] Verify complete
2012-09-04 18:54:30, Info CSI 00000173 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:54:30, Info CSI 00000174 [SR] Beginning Verify and Repair transaction
2012-09-04 18:54:36, Info CSI 00000176 [SR] Verify complete
2012-09-04 18:54:36, Info CSI 00000177 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:54:36, Info CSI 00000178 [SR] Beginning Verify and Repair transaction
2012-09-04 18:54:45, Info CSI 0000017a [SR] Verify complete
2012-09-04 18:54:46, Info CSI 0000017b [SR] Verifying 100 (0x00000064) components
2012-09-04 18:54:46, Info CSI 0000017c [SR] Beginning Verify and Repair transaction
2012-09-04 18:54:54, Info CSI 0000017e [SR] Verify complete
2012-09-04 18:54:54, Info CSI 0000017f [SR] Verifying 100 (0x00000064) components
2012-09-04 18:54:54, Info CSI 00000180 [SR] Beginning Verify and Repair transaction
2012-09-04 18:55:00, Info CSI 00000182 [SR] Verify complete
2012-09-04 18:55:00, Info CSI 00000183 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:55:00, Info CSI 00000184 [SR] Beginning Verify and Repair transaction
2012-09-04 18:55:05, Info CSI 00000187 [SR] Verify complete
2012-09-04 18:55:05, Info CSI 00000188 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:55:05, Info CSI 00000189 [SR] Beginning Verify and Repair transaction
2012-09-04 18:55:10, Info CSI 0000018b [SR] Verify complete
2012-09-04 18:55:10, Info CSI 0000018c [SR] Verifying 100 (0x00000064) components
2012-09-04 18:55:10, Info CSI 0000018d [SR] Beginning Verify and Repair transaction
2012-09-04 18:55:15, Info CSI 0000018f [SR] Verify complete
2012-09-04 18:55:16, Info CSI 00000190 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:55:16, Info CSI 00000191 [SR] Beginning Verify and Repair transaction
2012-09-04 18:55:21, Info CSI 00000193 [SR] Verify complete
2012-09-04 18:55:21, Info CSI 00000194 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:55:21, Info CSI 00000195 [SR] Beginning Verify and Repair transaction
2012-09-04 18:55:27, Info CSI 0000019a [SR] Verify complete
2012-09-04 18:55:27, Info CSI 0000019b [SR] Verifying 100 (0x00000064) components
2012-09-04 18:55:27, Info CSI 0000019c [SR] Beginning Verify and Repair transaction
2012-09-04 18:55:33, Info CSI 0000019e [SR] Verify complete
2012-09-04 18:55:34, Info CSI 0000019f [SR] Verifying 100 (0x00000064) components
2012-09-04 18:55:34, Info CSI 000001a0 [SR] Beginning Verify and Repair transaction
2012-09-04 18:55:42, Info CSI 000001a2 [SR] Verify complete
2012-09-04 18:55:43, Info CSI 000001a3 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:55:43, Info CSI 000001a4 [SR] Beginning Verify and Repair transaction
2012-09-04 18:55:56, Info CSI 000001a6 [SR] Verify complete
2012-09-04 18:55:56, Info CSI 000001a7 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:55:56, Info CSI 000001a8 [SR] Beginning Verify and Repair transaction
2012-09-04 18:55:57, Info CSI 000001aa [SR] Verify complete
2012-09-04 18:55:58, Info CSI 000001ab [SR] Verifying 100 (0x00000064) components
2012-09-04 18:55:58, Info CSI 000001ac [SR] Beginning Verify and Repair transaction
2012-09-04 18:56:04, Info CSI 000001ae [SR] Verify complete
2012-09-04 18:56:05, Info CSI 000001af [SR] Verifying 100 (0x00000064) components
2012-09-04 18:56:05, Info CSI 000001b0 [SR] Beginning Verify and Repair transaction
2012-09-04 18:56:10, Info CSI 000001b2 [SR] Verify complete
2012-09-04 18:56:10, Info CSI 000001b3 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:56:10, Info CSI 000001b4 [SR] Beginning Verify and Repair transaction
2012-09-04 18:56:16, Info CSI 000001b6 [SR] Verify complete
2012-09-04 18:56:16, Info CSI 000001b7 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:56:16, Info CSI 000001b8 [SR] Beginning Verify and Repair transaction
2012-09-04 18:56:35, Info CSI 000001ba [SR] Verify complete
2012-09-04 18:56:35, Info CSI 000001bb [SR] Verifying 100 (0x00000064) components
2012-09-04 18:56:35, Info CSI 000001bc [SR] Beginning Verify and Repair transaction
2012-09-04 18:56:39, Info CSI 000001be [SR] Verify complete
2012-09-04 18:56:39, Info CSI 000001bf [SR] Verifying 100 (0x00000064) components
2012-09-04 18:56:39, Info CSI 000001c0 [SR] Beginning Verify and Repair transaction
2012-09-04 18:56:44, Info CSI 000001c2 [SR] Verify complete
2012-09-04 18:56:45, Info CSI 000001c3 [SR] Verifying 100 (0x00000064) components
2012-09-04 18:56:45, Info CSI 000001c4 [SR] Beginning Verify and Repair transaction
2012-09-04 18:56:52, Info CSI 000001cf [SR] Verify complete
2012-09-04 18:56:52, Info CSI 000001d0 [SR] Verifying 5 components
2012-09-04 18:56:52, Info CSI 000001d1 [SR] Beginning Verify and Repair transaction
2012-09-04 18:56:52, Info CSI 000001d3 [SR] Verify complete
2012-09-04 18:56:52, Info CSI 000001d4 [SR] Repairing 1 components
2012-09-04 18:56:52, Info CSI 000001d5 [SR] Beginning Verify and Repair transaction
2012-09-04 18:56:52, Info CSI 000001d7 [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-09-04 18:56:52, Info CSI 000001d9 [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2012-09-04 18:56:52, Info CSI 000001da [SR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"
2012-09-04 18:56:52, Info CSI 000001dd [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"tcpmon.ini"; source file in store is also corrupted
2012-09-04 18:56:52, Info CSI 000001df [SR] Repair complete
2012-09-04 18:56:52, Info CSI 000001e0 [SR] Committing transaction
2012-09-04 18:56:52, Info CSI 000001e4 [SR] Verify and Repair Transaction completed. All files and registry keys listed in this transaction have been successfully repaired



Speccy

Summary
Operating System
MS Windows Vista Home Premium 32-bit SP2
CPU
Intel Mobile Core 2 Duo @ 2.50GHz 49 °C
Penryn 45nm Technology
RAM
4.00 GB Dual-Channel DDR2 @ 332MHz (5-5-5-15)
Motherboard
Dell Inc. 0U8042 (Microprocessor) 55 °C
Graphics
Generic PnP Monitor (1280x800@60Hz)
128MB GeForce 8400M GS (Dell) 73 °C
Hard Drives
298GB Western Digital WDC WD3200BEVT-75ZCT2 (SATA) 38 °C
Optical Drives
MATSHITA DVD+-RW UJ-867S ATA Device
Audio
SigmaTel High Definition Audio CODEC
Operating System
MS Windows Vista Home Premium 32-bit SP2
Computer type: Portable
Installation Date: 24 July 2009, 18:15

Windows Security Center
User Account Control (UAC) Disabled
Firewall Enabled
Antivirus Disabled
Windows Update
AutoUpdate Download Automatically and Install at Set Scheduled time
Schedule Frequency Every day
Schedule Time 3 am
Windows Defender
Windows Defender Disabled
Environment Variables
USERPROFILE C:\Users\Dell
SystemRoot C:\Windows
User Variables
TEMP C:\Users\Dell\AppData\Local\Temp
TMP C:\Users\Dell\AppData\Local\Temp
Machine Variables
ComSpec C:\Windows\system32\cmd.exe
FP_NO_HOST_CHECK NO
OS Windows_NT
Path C:\Windows\system32
C:\Windows
C:\Windows\system32\wbem
C:\Program Files\Common Files\Microsoft Shared\Windows Live
C:\Program Files\Common Files\Roxio Shared\DLLShared
C:\Program Files\Common Files\Roxio Shared\10.0\DLLShared
C:\Program Files\QuickTime\QTSystem
%SYSTEMROOT%\System32\WindowsPowerShell\v1.0
C:\Program Files\Windows Live\Shared
PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE x86
TEMP C:\Windows\TEMP
TMP C:\Windows\TEMP
USERNAME SYSTEM
windir C:\Windows
PROCESSOR_LEVEL 6
PROCESSOR_IDENTIFIER x86 Family 6 Model 23 Stepping 6, GenuineIntel
PROCESSOR_REVISION 1706
NUMBER_OF_PROCESSORS 2
TRACE_FORMAT_SEARCH_PATH \\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
DFSTRACINGON FALSE
CLASSPATH .;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
QTJAVA C:\Program Files\Java\jre6\lib\ext\QTJava.zip
PSModulePath C:\Windows\system32\WindowsPowerShell\v1.0\Modules\
asl.log Destination=file
Battery
AC line Online
Battery full time Unknown
Battery Charge % 100 %
Battery State High
Amount of time remaining (sec) Unknown
Power Profile
Active power scheme Home/Office Desk
Hibernation Enabled
Power Shutdown Enabled
Power Suspend Enabled
Turn Off Monitor after: (On AC Power) 20 min
Turn Off Monitor after: (On Battery Power) 5 min
Turn Off Hard Disk after: (On AC Power) Never
Turn Off Hard Disk after: (On Battery Power) 10 min
Suspend after: (On AC Power) Never
Suspend after: (On Battery Power) 5 min
Screen saver Enabled
Uptime
Current Session
Current Time 9/6/2012 8:47:03 PM
Current Uptime 13826 sec (0 d, 03 h, 50 m, 26 s)
Last Boot Time 9/6/2012 4:56:37 PM
Last ShutDown Time 9/4/2012 8:00:18 PM
Uptime Statistics
First Boot Time 9/4/2012 6:43:27 PM
First Shutdown Time 9/4/2012 6:42:13 PM
Total Uptime 18380 sec (0 d, 05 h, 06 m, 20 s)
Total Downtime 161884 sec (1 d, 20 h, 58 m, 04 s)
Longest Uptime 13769 sec (0 d, 03 h, 49 m, 29 s)
Longest Downtime 161810 sec (1 d, 20 h, 56 m, 50 s)
Total Reboots 2
System Availability 10.20%
TimeZone
TimeZone GMT -8 Hours
Language English
Country United States
Currency $
Date Format M/d/yyyy
Time Format h:mm:ss tt
Scheduler
9/6/2012 9:23 PM; GoogleUpdateTaskMachineUA
9/7/2012 2:23 PM; GoogleUpdateTaskMachineCore
Launch BCM WLAN Tray
PCDEventLauncher
Process List
adobearm.exe
Process ID 3604
User Dell
Domain Dell-PC
Path C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Memory Usage 10 MB
Peak Memory Usage 32 MB
aestsrv.exe
Process ID 1760
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\aestsrv.exe
Memory Usage 1.57 MB
Peak Memory Usage 1.62 MB
applemobiledeviceservice.exe
Process ID 844
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
Memory Usage 11 MB
Peak Memory Usage 11 MB
armsvc.exe
Process ID 1636
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
Memory Usage 3.33 MB
Peak Memory Usage 3.41 MB
audiodg.exe
Process ID 1368
avgcsrvx.exe
Process ID 604
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\AVG\AVG2012\avgcsrvx.exe
Memory Usage 36 MB
Peak Memory Usage 51 MB
avgemcx.exe
Process ID 3252
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\AVG\AVG2012\avgemcx.exe
Memory Usage 6.17 MB
Peak Memory Usage 6.83 MB
avgidsagent.exe
Process ID 3664
avgnsx.exe
Process ID 3244
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\AVG\AVG2012\avgnsx.exe
Memory Usage 2.66 MB
Peak Memory Usage 8.95 MB
avgrsx.exe
Process ID 568
User SYSTEM
Domain NT AUTHORITY
Path C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
Memory Usage 5.00 MB
Peak Memory Usage 34 MB
avgtray.exe
Process ID 3420
avgwdsvc.exe
Process ID 2132
bcmwltry.exe
Process ID 1768
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\bcmwltry.exe
Memory Usage 21 MB
Peak Memory Usage 23 MB
btstackserver.exe
Process ID 4204
User Dell
Domain Dell-PC
Path c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
Memory Usage 12 MB
Peak Memory Usage 13 MB
bttray.exe
Process ID 4060
User Dell
Domain Dell-PC
Path C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
Memory Usage 10 MB
Peak Memory Usage 11 MB
csrss.exe
Process ID 832
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\csrss.exe
Memory Usage 6.95 MB
Peak Memory Usage 7.26 MB
csrss.exe
Process ID 904
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\csrss.exe
Memory Usage 9.49 MB
Peak Memory Usage 15 MB
distnoted.exe
Process ID 3368
User Dell
Domain Dell-PC
Path C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe
Memory Usage 5.31 MB
Peak Memory Usage 5.32 MB
docklogin.exe
Process ID 1520
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Dell\DellDock\DockLogin.exe
Memory Usage 3.25 MB
Peak Memory Usage 3.33 MB
dwm.exe
Process ID 2788
User Dell
Domain Dell-PC
Path C:\Windows\system32\Dwm.exe
Memory Usage 50 MB
Peak Memory Usage 65 MB
ehmsas.exe
Process ID 3560
User Dell
Domain Dell-PC
Path C:\Windows\ehome\ehmsas.exe
Memory Usage 3.73 MB
Peak Memory Usage 3.78 MB
ehtray.exe
Process ID 3384
User Dell
Domain Dell-PC
Path C:\WINDOWS\ehome\ehtray.exe
Memory Usage 1.41 MB
Peak Memory Usage 5.16 MB
explorer.exe
Process ID 2936
User Dell
Domain Dell-PC
Path C:\Windows\Explorer.EXE
Memory Usage 50 MB
Peak Memory Usage 65 MB
ipodservice.exe
Process ID 5888
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\iPod\bin\iPodService.exe
Memory Usage 5.11 MB
Peak Memory Usage 5.20 MB
ituneshelper.exe
Process ID 3196
User Dell
Domain Dell-PC
Path C:\Program Files\iTunes\iTunesHelper.exe
Memory Usage 11 MB
Peak Memory Usage 11 MB
jusched.exe
Process ID 3448
User Dell
Domain Dell-PC
Path C:\Program Files\Common Files\Java\Java Update\jusched.exe
Memory Usage 3.52 MB
Peak Memory Usage 3.64 MB
lsass.exe
Process ID 948
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\lsass.exe
Memory Usage 8.12 MB
Peak Memory Usage 8.41 MB
lsm.exe
Process ID 960
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\lsm.exe
Memory Usage 3.97 MB
Peak Memory Usage 4.00 MB
mbamgui.exe
Process ID 3380
User Dell
Domain Dell-PC
Path C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
Memory Usage 6.15 MB
Peak Memory Usage 6.48 MB
mbamservice.exe
Process ID 4372
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
Memory Usage 62 MB
Peak Memory Usage 172 MB
mdnsresponder.exe
Process ID 2168
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Bonjour\mDNSResponder.exe
Memory Usage 4.20 MB
Peak Memory Usage 4.32 MB
mobsync.exe
Process ID 6744
User Dell
Domain Dell-PC
Path C:\Windows\System32\mobsync.exe
Memory Usage 6.36 MB
Peak Memory Usage 7.59 MB
notepad.exe
Process ID 7220
User Dell
Domain Dell-PC
Path C:\Windows\system32\NOTEPAD.EXE
Memory Usage 4.88 MB
Peak Memory Usage 5.82 MB
nvvsvc.exe
Process ID 2040
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\nvvsvc.exe
Memory Usage 6.70 MB
Peak Memory Usage 10 MB
nvvsvc.exe
Process ID 1156
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\nvvsvc.exe
Memory Usage 3.32 MB
Peak Memory Usage 3.42 MB
oem02mon.exe
Process ID 4008
User Dell
Domain Dell-PC
Path C:\WINDOWS\OEM02Mon.exe
Memory Usage 4.47 MB
Peak Memory Usage 4.68 MB
opera.exe
Process ID 4308
User Dell
Domain Dell-PC
Path C:\Program Files\Opera\opera.exe
Memory Usage 277 MB
Peak Memory Usage 361 MB
opera_plugin_wrapper.exe
Process ID 4296
User Dell
Domain Dell-PC
Path C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe
Memory Usage 29 MB
Peak Memory Usage 121 MB
pcmservice.exe
Process ID 4044
User Dell
Domain Dell-PC
Path C:\Program Files\Dell\MediaDirect\PCMService.exe
Memory Usage 11 MB
Peak Memory Usage 12 MB
photoshopelementsfileagent.exe
Process ID 888
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
Memory Usage 572 KB
Peak Memory Usage 4.21 MB
rundll32.exe
Process ID 3452
User Dell
Domain Dell-PC
Path C:\WINDOWS\System32\rundll32.exe
Memory Usage 3.71 MB
Peak Memory Usage 3.81 MB
seaport.exe
Process ID 2368
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
Memory Usage 8.11 MB
Peak Memory Usage 8.31 MB
searchfilterhost.exe
Process ID 7036
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\SearchFilterHost.exe
Memory Usage 6.61 MB
Peak Memory Usage 6.61 MB
searchindexer.exe
Process ID 3580
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\SearchIndexer.exe
Memory Usage 17 MB
Peak Memory Usage 18 MB
searchprotocolhost.exe
Process ID 5524
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\SearchProtocolHost.exe
Memory Usage 8.32 MB
Peak Memory Usage 8.32 MB
services.exe
Process ID 936
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\services.exe
Memory Usage 7.14 MB
Peak Memory Usage 7.46 MB
sftservice.exe
Process ID 2528
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Dell DataSafe Local Backup\sftservice.EXE
Memory Usage 6.36 MB
Peak Memory Usage 6.66 MB
skype.exe
Process ID 3068
User Dell
Domain Dell-PC
Path C:\Program Files\Skype\Phone\Skype.exe
Memory Usage 76 MB
Peak Memory Usage 107 MB
slsvc.exe
Process ID 1408
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\SLsvc.exe
Memory Usage 10 MB
Peak Memory Usage 15 MB
smss.exe
Process ID 524
User SYSTEM
Domain NT AUTHORITY
Path \SystemRoot\System32\smss.exe
Memory Usage 696 KB
Peak Memory Usage 752 KB
speccy.exe
Process ID 1956
User Dell
Domain Dell-PC
Path C:\Program Files\Speccy\Speccy.exe
Memory Usage 19 MB
Peak Memory Usage 19 MB
spoolsv.exe
Process ID 1904
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\spoolsv.exe
Memory Usage 9.73 MB
Peak Memory Usage 9.87 MB
stacsv.exe
Process ID 2636
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\STacSV.exe
Memory Usage 5.93 MB
Peak Memory Usage 6.08 MB
sttray.exe
Process ID 3428
User Dell
Domain Dell-PC
Path C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
Memory Usage 8.36 MB
Peak Memory Usage 9.65 MB
svchost.exe
Process ID 1112
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 6.86 MB
Peak Memory Usage 7.21 MB
svchost.exe
Process ID 1184
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 6.48 MB
Peak Memory Usage 6.84 MB
svchost.exe
Process ID 1244
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 14 MB
Peak Memory Usage 15 MB
svchost.exe
Process ID 1268
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 88 MB
Peak Memory Usage 121 MB
svchost.exe
Process ID 1280
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 81 MB
Peak Memory Usage 564 MB
svchost.exe
Process ID 1392
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 4.67 MB
Peak Memory Usage 4.74 MB
svchost.exe
Process ID 2876
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\svchost.exe
Memory Usage 3.22 MB
Peak Memory Usage 3.23 MB
svchost.exe
Process ID 2740
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 6.76 MB
Peak Memory Usage 7.87 MB
svchost.exe
Process ID 2308
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 5.25 MB
Peak Memory Usage 5.44 MB
svchost.exe
Process ID 2216
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 6.95 MB
Peak Memory Usage 7.13 MB
svchost.exe
Process ID 2180
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 3.61 MB
Peak Memory Usage 3.67 MB
svchost.exe
Process ID 216
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 20 MB
Peak Memory Usage 74 MB
svchost.exe
Process ID 1644
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 22 MB
Peak Memory Usage 34 MB
svchost.exe
Process ID 1472
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 24 MB
Peak Memory Usage 24 MB
svchost.exe
Process ID 1440
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\svchost.exe
Memory Usage 14 MB
Peak Memory Usage 14 MB
syncserver.exe
Process ID 2000
User Dell
Domain Dell-PC
Path C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServer.exe
Memory Usage 13 MB
Peak Memory Usage 14 MB
syntpenh.exe
Process ID 4000
User Dell
Domain Dell-PC
Path C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Memory Usage 6.41 MB
Peak Memory Usage 6.65 MB
system
Process ID 4
system idle process
Process ID 0
taskeng.exe
Process ID 2564
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\taskeng.exe
Memory Usage 5.42 MB
Peak Memory Usage 5.86 MB
taskeng.exe
Process ID 2896
User Dell
Domain Dell-PC
Path C:\Windows\system32\taskeng.exe
Memory Usage 11 MB
Peak Memory Usage 12 MB
toolbarupdater.exe
Process ID 2812
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.1.5\ToolbarUpdater.exe
Memory Usage 7.57 MB
Peak Memory Usage 8.19 MB
unsecapp.exe
Process ID 4568
User Dell
Domain Dell-PC
Path C:\Windows\system32\wbem\unsecapp.exe
Memory Usage 4.53 MB
Peak Memory Usage 4.58 MB
vprot.exe
Process ID 2480
User Dell
Domain Dell-PC
Path C:\Program Files\AVG Secure Search\vprot.exe
Memory Usage 20 MB
Peak Memory Usage 28 MB
wininit.exe
Process ID 892
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\wininit.exe
Memory Usage 3.91 MB
Peak Memory Usage 4.09 MB
winlogon.exe
Process ID 1580
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\winlogon.exe
Memory Usage 5.14 MB
Peak Memory Usage 6.51 MB
wlanext.exe
Process ID 1788
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\WLANExt.exe
Memory Usage 5.01 MB
Peak Memory Usage 5.13 MB
wlidsvc.exe
Process ID 3544
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
Memory Usage 8.42 MB
Peak Memory Usage 8.55 MB
wlidsvcm.exe
Process ID 3740
User SYSTEM
Domain NT AUTHORITY
Path C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
Memory Usage 2.61 MB
Peak Memory Usage 2.70 MB
wltray.exe
Process ID 4016
User Dell
Domain Dell-PC
Path C:\WINDOWS\System32\WLTRAY.EXE
Memory Usage 21 MB
Peak Memory Usage 22 MB
wltrysvc.exe
Process ID 1752
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\System32\WLTRYSVC.EXE
Memory Usage 2.49 MB
Peak Memory Usage 2.57 MB
wmiprvse.exe
Process ID 4632
User SYSTEM
Domain NT AUTHORITY
Path C:\Windows\system32\wbem\wmiprvse.exe
Memory Usage 6.05 MB
Peak Memory Usage 6.20 MB
wmiprvse.exe
Process ID 7280
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\wbem\wmiprvse.exe
Memory Usage 9.34 MB
Peak Memory Usage 9.34 MB
wmpnetwk.exe
Process ID 5580
User NETWORK SERVICE
Domain NT AUTHORITY
Path C:\Program Files\Windows Media Player\wmpnetwk.exe
Memory Usage 27 MB
Peak Memory Usage 28 MB
wmpnscfg.exe
Process ID 3476
User Dell
Domain Dell-PC
Path C:\Program Files\Windows Media Player\wmpnscfg.exe
Memory Usage 4.84 MB
Peak Memory Usage 4.95 MB
wudfhost.exe
Process ID 7964
User LOCAL SERVICE
Domain NT AUTHORITY
Path C:\Windows\system32\WUDFHost.exe
Memory Usage 4.94 MB
Peak Memory Usage 4.95 MB
Hotfixes
9/7/2012 Skype 5.10 for Windows (KB2727727)
Skype 5.10 for Windows is now available. Updates include various
performance improvements and bugfixes.
8/17/2012 Security Update for Microsoft Office 2007 suites (KB2596856)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
8/17/2012 Windows Malicious Software Removal Tool - August 2012 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
8/17/2012 Security Update for Windows Vista (KB2712808)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/17/2012 Security Update for Windows Vista (KB2705219)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/17/2012 Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB2722913)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
8/17/2012 Security Update for Windows Vista (KB2731847)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/17/2012 Security Update for Microsoft Office 2007 suites (KB2687441)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
8/17/2012 Security Update for Microsoft Office 2007 suites (KB2596754)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
8/17/2012 Security Update for Microsoft Office 2007 suites (KB2596615)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
7/25/2012 Security Update for Windows Vista (KB2691442)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
7/25/2012 Security Update for Windows Vista (KB2718523)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
7/25/2012 Security Update for Microsoft Office 2007 suites (KB2596744)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
7/25/2012 Windows Malicious Software Removal Tool - July 2012 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
7/25/2012 Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB2719177)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
7/25/2012 Security Update for Windows Vista (KB2698365)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
7/25/2012 Security Update for Windows Vista (KB2719985)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
7/25/2012 Security Update for Microsoft Office InfoPath 2007 (KB2596786)
A security vulnerability exists in Microsoft Office InfoPath
2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
7/25/2012 Security Update for Windows Vista (KB2655992)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain access to
information. You can help protect your system by installing this
update from Microsoft. After you install this update, you may
have to restart your system.
7/25/2012 Definition Update for Windows Defender - KB915597 (Definition 1.131.548.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
7/25/2012 Windows Update Agent 7.6.7600.256
The Windows Update Agent enables your computer to search for
and install updates from an update service. The agent can automatically
update itself as needed to communicate with the update service
when Windows searches for new updates.
6/15/2012 Definition Update for Windows Defender - KB915597 (Definition 1.127.2061.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/14/2012 Update for Windows Vista (KB2677070)
Install this update to resolve issues in Windows. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article for more information.
After you install this item, you may have to restart your computer.
6/14/2012 Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2686833)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/14/2012 Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2686827)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/14/2012 Windows Malicious Software Removal Tool - June 2012 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
6/14/2012 Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2656368)
A security issue has been identified that could allow an authenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/14/2012 Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB2699988)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
6/14/2012 Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2656374)
A security issue has been identified that could allow an authenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/14/2012 Security Update for Windows Vista (KB2685939)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/14/2012 Security Update for Windows Vista (KB2709162)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/14/2012 Definition Update for Windows Defender - KB915597 (Definition 1.127.1815.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/11/2012 Definition Update for Windows Defender - KB915597 (Definition 1.127.1592.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/5/2012 Update for Windows Vista (KB2718704)
Install this update to resolve an issue which requires an update
to the certificate revocation list on Windows systems and to
keep your systems certificate list up to date. After you install
this update, you may have to restart your system.
6/1/2012 Definition Update for Windows Defender - KB915597 (Definition 1.127.1171.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/29/2012 Definition Update for Windows Defender - KB915597 (Definition 1.127.930.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/28/2012 Definition Update for Windows Defender - KB915597 (Definition 1.127.601.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/22/2012 Definition Update for Windows Defender - KB915597 (Definition 1.127.390.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/22/2012 Definition Update for Windows Defender - KB915597 (Definition 1.127.201.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/16/2012 Definition Update for Windows Defender - KB915597 (Definition 1.125.1854.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/12/2012 Definition Update for Windows Defender - KB915597 (Definition 1.125.1635.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/12/2012 Security Update for Microsoft Office 2007 suites (KB2596880)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
5/12/2012 Security Update for Microsoft Office Excel 2007 (KB2597161)
A security vulnerability exists in Microsoft Office Excel 2007
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
5/12/2012 Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2604094)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2012 Security Update for Microsoft .NET Framework 3.5 SP1 on Windows XP, Server 2003, Vista, Server 2008 x86 (KB2604111)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2012 Windows Malicious Software Removal Tool - May 2012 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
5/12/2012 Update Rollup for ActiveX Killbits for Windows Vista (KB2695962)
Security issues have been identified in ActiveX controls that
could allow an attacker to compromise a system running Microsoft
Internet Explorer and gain control over it. You can help protect
your system by installing this update from Microsoft. After you
install this item, you may have to restart your computer.
5/12/2012 Security Update for Windows Vista (KB2690533)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2012 Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2656405)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2012 Security Update for Microsoft Office Word 2007 (KB2596917)
A security vulnerability exists in Microsoft Office Word 2007
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
5/12/2012 Security Update for Windows Vista (KB2688338)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2012 Security Update for Windows Vista (KB2660649)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2012 Security Update for Windows Vista (KB2659262)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2012 Security Update for Microsoft Office 2007 suites (KB2596672)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
5/12/2012 Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2604121)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2012 Security Update for Windows Vista (KB2658846)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2012 Security Update for Microsoft Office 2007 suites (KB2597969)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
5/12/2012 Security Update for Microsoft Office 2007 suites (KB2597162)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
5/12/2012 Security Update for Microsoft .NET Framework 3.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2656409)
A security issue has been identified that could allow an attacker
to break or bypass a security feature in the affected software.
You can help protect your system by installing this update from
Microsoft. After you install this update, you may have to restart
your system.
5/12/2012 Security Update for Microsoft Office 2007 suites (KB2596792)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
5/12/2012 Security Update for Microsoft Silverlight (KB2690729)
This security update to Silverlight includes fixes outlined in
KBs 2681578 and 2690729. This update is backward compatible with
web applications built using previous versions of Silverlight.
5/12/2012 Security Update for Windows Vista (KB2676562)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2012 Security Update for Microsoft .NET Framework 3.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2604105)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/9/2012 Definition Update for Windows Defender - KB915597 (Definition 1.125.1373.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/4/2012 Definition Update for Windows Defender - KB915597 (Definition 1.125.1137.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
4/28/2012 Definition Update for Windows Defender - KB915597 (Definition 1.125.655.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
4/28/2012 Definition Update for Windows Defender - KB915597 (Definition 1.125.655.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
4/28/2012 Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB2675157)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
4/28/2012 Security Update for Windows Vista (KB2653956)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/28/2012 Security Update for Microsoft Office 2007 suites (KB2598041)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
4/28/2012 Update for Windows Vista (KB2679255)
Install this update to resolve issues in Windows. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article for more information.
After you install this item, you may have to restart your computer.
4/28/2012 Security Update for Microsoft Office 2007 suites (KB2596871)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
4/28/2012 Windows Malicious Software Removal Tool - April 2012 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
4/28/2012 Update for Windows Mail Junk E-mail Filter [April 2012] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
4/18/2012 Definition Update for Windows Defender - KB915597 (Definition 1.123.1936.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
4/7/2012 Definition Update for Windows Defender - KB915597 (Definition 1.123.1222.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
4/6/2012 Definition Update for Windows Defender - KB915597 (Definition 1.123.978.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
3/23/2012 Definition Update for Windows Defender - KB915597 (Definition 1.123.212.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
3/16/2012 Definition Update for Windows Defender - KB915597 (Definition 1.121.1660.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
3/16/2012 Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2600217)
This update addresses stability, reliability, and performance
issues in Microsoft .NET Framework 4. After you install this
item, you may have to restart your computer.
3/16/2012 Security Update for Windows Vista (KB2641653)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/16/2012 Windows Malicious Software Removal Tool - March 2012 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
3/16/2012 Update Rollup for ActiveX Killbits for Windows Vista (KB2647518)
Security issues have been identified in ActiveX controls that
could allow an attacker to compromise a system running Microsoft
Internet Explorer and gain control over it. You can help protect
your system by installing this update from Microsoft. After you
install this item, you may have to restart your computer.
3/16/2012 Security Update for Windows Vista (KB2621440)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/16/2012 Security Update for Windows Vista (KB2665364)
A security issue has been identified that could allow an unauthenticated
remote attacker to cause the affected application to stop responding.
You can help protect your system by installing this update from
Microsoft. After you install this update, you may have to restart
your system.
3/16/2012 Update for Windows Mail Junk E-mail Filter [March 2012] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
3/15/2012 Definition Update for Windows Defender - KB915597 (Definition 1.121.1421.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
3/10/2012 Definition Update for Windows Defender - KB915597 (Definition 1.121.1200.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
3/3/2012 The 2007 Microsoft Office Suite Service Pack 3 (SP3)
Service Pack 3 provides the latest updates to the 2007 Microsoft
Office Suite. This update also applies to Microsoft Office Project,
Microsoft Office SharePoint Designer, Microsoft Office Visio,
and Visual Web Developer.
3/3/2012 PowerPoint Viewer 2007 Service Pack 3 (SP3)
Service Pack 3 provides the latest updates to PowerPoint Viewer
2007.
3/2/2012 Definition Update for Windows Defender - KB915597 (Definition 1.121.737.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
3/1/2012 Definition Update for Windows Defender - KB915597 (Definition 1.121.548.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
2/25/2012 Definition Update for Windows Defender - KB915597 (Definition 1.121.303.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
2/23/2012 Definition Update for Windows Defender - KB915597 (Definition 1.121.61.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
2/18/2012 Definition Update for Windows Defender - KB915597 (Definition 1.119.2141.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
2/18/2012 Windows Malicious Software Removal Tool - February 2012 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
2/18/2012 Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2633874)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
2/18/2012 Security Update for Windows Vista (KB2654428)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
2/18/2012 Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB2647516)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
2/18/2012 Security Update for Windows Vista (KB2660465)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
2/18/2012 Security Update for Microsoft Silverlight (KB2668562)
This security update to Silverlight includes fixes outlined in
KBs 2651026 and 2668562. This update is backward compatible with
web applications built using previous versions of Silverlight.
2/18/2012 Update for Windows Mail Junk E-mail Filter [February 2012] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
2/18/2012 Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2633870)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
2/15/2012 Definition Update for Windows Defender - KB915597 (Definition 1.119.1924.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
2/11/2012 Definition Update for Windows Defender - KB915597 (Definition 1.119.1683.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
2/9/2012 Definition Update for Windows Defender - KB915597 (Definition 1.119.1519.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
2/7/2012 Definition Update for Windows Defender - KB915597 (Definition 1.119.1449.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
2/3/2012 Definition Update for Windows Defender - KB915597 (Definition 1.119.1249.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
2/2/2012 Definition Update for Windows Defender - KB915597 (Definition 1.119.978.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
1/27/2012 Definition Update for Windows Defender - KB915597 (Definition 1.119.772.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
1/27/2012 Security Update for Windows Vista (KB2585542)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain access to
information. You can help protect your system by installing this
update from Microsoft. After you install this update, you may
have to restart your system.
1/24/2012 Definition Update for Windows Defender - KB915597 (Definition 1.119.477.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
1/24/2012 Security Update for Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (KB973923)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system with Microsoft Visual
C++ 2005 Service Pack 1 Redistributable Package and gain complete
control over it. You can help protect your computer by installing
this update from Microsoft. After you install this item, you
may have to restart your computer.
1/21/2012 Definition Update for Windows Defender - KB915597 (Definition 1.119.236.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
1/17/2012 Security Update for Windows Vista (KB2644615)
A security issue has been identified that could allow an attacker
to break or bypass a security feature in the affected software.
You can help protect your system by installing this update from
Microsoft. After you install this update, you may have to restart
your system.
1/16/2012 Definition Update for Windows Defender - KB915597 (Definition 1.117.2807.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
1/13/2012 Security Update for Windows Vista (KB2598479)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/13/2012 Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2656362)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/13/2012 Windows Malicious Software Removal Tool - January 2012 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
1/13/2012 Security Update for Microsoft .NET Framework 3.5 SP1 on Windows XP, Server 2003, Vista, Server 2008 x86 (KB2657424)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/13/2012 Security Update for Windows Vista (KB2584146)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/13/2012 Security Update for Windows Vista (KB2646524)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/13/2012 Update for Windows Mail Junk E-mail Filter [January 2012] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
1/13/2012 Security Update for Windows Vista (KB2631813)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/13/2012 Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2656351)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/10/2012 Definition Update for Windows Defender - KB915597 (Definition 1.117.2549.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
1/7/2012 Definition Update for Windows Defender - KB915597 (Definition 1.117.2358.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
1/3/2012 Definition Update for Windows Defender - KB915597 (Definition 1.117.2154.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
1/2/2012 Definition Update for Windows Defender - KB915597 (Definition 1.117.1973.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
12/28/2011 Definition Update for Windows Defender - KB915597 (Definition 1.117.1787.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
12/26/2011 Definition Update for Windows Defender - KB915597 (Definition 1.117.1627.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
12/21/2011 Definition Update for Windows Defender - KB915597 (Definition 1.117.1411.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
12/17/2011 Definition Update for Windows Defender - KB915597 (Definition 1.117.1189.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
12/17/2011 Security Update for Microsoft Office PowerPoint 2007 (KB2596843)
A security vulnerability exists in Microsoft Office PowerPoint
2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
12/17/2011 Security Update for Windows Vista (KB2633171)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
12/17/2011 Security Update for Microsoft Office PowerPoint 2007 (KB2596764)
A security vulnerability exists in Microsoft Office PowerPoint
2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
12/17/2011 Security Update for Windows Vista (KB2619339)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
12/17/2011 Windows Malicious Software Removal Tool - December 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
12/17/2011 Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB2618444)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
12/17/2011 Security Update for Microsoft Office PowerPoint 2007 (KB2596912)
A security vulnerability exists in Microsoft Office PowerPoint
2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
12/17/2011 Security Update for Windows Vista (KB2639417)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
12/17/2011 Update for Windows Mail Junk E-mail Filter [December 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
12/17/2011 Update for Microsoft Office Excel 2007 (KB2596596)
Microsoft has released an update for Microsoft Office Excel 2007
. This update provides the latest fixes to Microsoft Office Excel
2007 . Additionally, this update contains stability and performance
improvements.
12/17/2011 Security Update for Windows Vista (KB2620712)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
12/17/2011 Security Update for Microsoft Office 2007 suites (KB2596785)
A security vulnerability exists in Microsoft Office 2007 suites
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
12/17/2011 Update for Windows Vista (KB2633952)
Install this update to resolve issues caused by revised daylight
saving time and time zone laws in several countries. This update
enables your computer to automatically adjust the computer clock
on the correct date in 2012. After you install this item, you
may have to restart your computer.
12/17/2011 Update for Microsoft Office 2007 suites (KB2596651)
Microsoft has released an update for Microsoft Office 2007 suites
. This update provides the latest fixes to Microsoft Office 2007
suites . Additionally, this update contains stability and performance
improvements.
12/17/2011 Update for Microsoft Office 2007 suites (KB2596789)
Microsoft has released an update for Microsoft Office 2007 suites
. This update provides the latest fixes to Microsoft Office 2007
suites . Additionally, this update contains stability and performance
improvements.
12/17/2011 Cumulative Security Update for ActiveX Killbits for Windows Vista (KB2618451)
Security issues have been identified in ActiveX controls that
could allow an attacker to compromise a system running Microsoft
Internet Explorer and gain control over it. You can help protect
your system by installing this update from Microsoft. After you
install this item, you may have to restart your computer.
12/16/2011 Definition Update for Windows Defender - KB915597 (Definition 1.117.953.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
12/9/2011 Definition Update for Windows Defender - KB915597 (Definition 1.117.692.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
12/9/2011 Definition Update for Windows Defender - KB915597 (Definition 1.117.614.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
12/7/2011 Definition Update for Windows Defender - KB915597 (Definition 1.117.433.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
12/4/2011 Definition Update for Windows Defender - KB915597 (Definition 1.117.154.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
11/29/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.2785.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
11/26/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.2571.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
11/18/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.2100.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
11/17/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.1923.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
11/13/2011 Update for Windows Vista (KB2641690)
Install this update to resolve an issue which requires an update
to the certificate revocation list on Windows systems and to
keep your systems certificate list up to date. After you install
this update, you may have to restart your system.
11/11/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.1674.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
11/10/2011 Update for Windows Mail Junk E-mail Filter [November 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
11/10/2011 Windows Malicious Software Removal Tool - November 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
11/10/2011 Security Update for Windows Vista (KB2588516)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
11/10/2011 Security Update for Windows Vista (KB2620704)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
11/9/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.1462.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
11/4/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.1237.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
11/3/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.998.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
10/29/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.766.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
10/27/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.502.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
10/22/2011 Definition Update for Windows Defender - KB915597 (Definition 1.115.250.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
10/19/2011 Definition Update for Windows Defender - KB915597 (Definition 1.113.1886.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
10/15/2011 Definition Update for Windows Defender - KB915597 (Definition 1.113.1652.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
10/12/2011 Security Update for Windows Vista (KB2579686)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/12/2011 Security Update for Microsoft Silverlight (KB2617986)
This security update to Silverlight includes fixes outlined in
KBs 2604930 and 2617986. This update is backward compatible with
web applications built using previous versions of Silverlight.
10/12/2011 Security Update for Windows Vista (KB2567053)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/12/2011 Windows Malicious Software Removal Tool - October 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
10/12/2011 Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB2586448)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
10/12/2011 Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2572075)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/12/2011 Update for Windows Mail Junk E-mail Filter [October 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
10/12/2011 Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2572078)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/12/2011 Security Update for Windows Vista (KB2564958)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/12/2011 Definition Update for Windows Defender - KB915597 (Definition 1.113.1466.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
10/8/2011 Definition Update for Windows Defender - KB915597 (Definition 1.113.1136.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
10/6/2011 Definition Update for Windows Defender - KB915597 (Definition 1.113.874.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
9/30/2011 Definition Update for Windows Defender - KB915597 (Definition 1.113.631.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
9/29/2011 Windows Malicious Software Removal Tool - September 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
9/28/2011 Definition Update for Windows Defender - KB915597 (Definition 1.113.359.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
9/24/2011 Definition Update for Windows Defender - KB915597 (Definition 1.113.126.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
9/21/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.2630.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
9/16/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.2389.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
9/16/2011 Security Update for Microsoft Office 2007 System (KB2553090)
A security vulnerability exists in Microsoft Office 2007 System
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
9/16/2011 Update for Windows Mail Junk E-mail Filter [September 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
9/16/2011 Security Update for Microsoft Office Excel 2007 (KB2553073)
A security vulnerability exists in Microsoft Office Excel 2007
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
9/16/2011 Windows Malicious Software Removal Tool - September 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
9/16/2011 Update for Windows Vista (KB2616676)
Install this update to resolve an issue which requires an update
to the certificate revocation list on Windows systems and to
keep your systems certificate list up to date. After you install
this update, you may have to restart your system.
9/16/2011 Security Update for Microsoft Office 2007 System (KB2553089)
A security vulnerability exists in Microsoft Office 2007 System
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
9/16/2011 Update for Office File Validation 2010 (KB2553065), 32-bit Edition
Microsoft has released an update for Microsoft Office File Validation
2010, 32-bit Edition. This update provides the latest fixes to
Microsoft Office File Validation 2010, 32-bit Edition. Additionally,
this update contains stability and performance improvements.
9/16/2011 Security Update for the 2007 Microsoft Office System (KB2553074)
A security vulnerability exists in the 2007 Microsoft Office
System and the Microsoft Office Compatibility Pack that could
allow arbitrary code to run when a maliciously modified file
is opened. This update resolves that vulnerability.
9/16/2011 Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2468871)
Install this update to resolve issues in Microsoft .NET Framework
4. For a complete listing of the issues that are included in
this update, see the associated Microsoft Knowledge Base article
for more information. After you install this item, you may have
to restart your computer.
9/16/2011 Security Update for Microsoft Office 2007 System (KB2584063)
A security vulnerability exists in Microsoft Office 2007 System
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
9/16/2011 Security Update for Windows Vista (KB2570947)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
9/16/2011 Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2533523)
This update addresses stability, reliability, and performance
issues in Microsoft .NET Framework 4. After you install this
item, you may have to restart your computer.
9/16/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.2089.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
9/10/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.1823.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
9/9/2011 Update for Windows Vista (KB2607712)
Install this update to resolve an issue which requires an update
to the certificate revocation list on Windows systems and to
keep your systems certificate list up to date. After you install
this update, you may have to restart your system.
9/7/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.1554.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
9/3/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.1301.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
8/31/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.1045.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
8/26/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.775.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
8/24/2011 Update for Windows Vista (KB2570791)
Install this update to resolve issues caused by revised daylight
saving time and time zone laws in several countries. This update
enables your computer to automatically adjust the computer clock
on the correct date in 2011. After you install this item, you
may have to restart your computer.
8/24/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.490.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
8/19/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.216.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
8/17/2011 Definition Update for Windows Defender - KB915597 (Definition 1.111.35.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
8/17/2011 Definition Update for Windows Defender - KB915597 (Definition 1.109.1918.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
8/14/2011 Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2539636)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain access to information. You can help protect
your computer by installing this update from Microsoft. After
you install this item, you may have to restart your computer.
8/14/2011 Definition Update for Windows Defender - KB915597 (Definition 1.109.1657.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
8/14/2011 Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2539636)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain access to information. You can help protect
your computer by installing this update from Microsoft. After
you install this item, you may have to restart your computer.
8/12/2011 Security Update for Windows Vista (KB2567680)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/12/2011 Security Update for Windows Vista (KB2536276)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/12/2011 Update Rollup for ActiveX Killbits for Windows Vista (KB2562937)
Security issues have been identified in ActiveX controls that
could allow an attacker to compromise a system running Microsoft
Internet Explorer and gain control over it. You can help protect
your system by installing this update from Microsoft. After you
install this item, you may have to restart your computer.
8/12/2011 Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB2559049)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
8/12/2011 Update for Windows Mail Junk E-mail Filter [August 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
8/12/2011 Windows Malicious Software Removal Tool - August 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
8/12/2011 Update for Windows Vista (KB2563227)
Install this update to resolve performance and reliability issues
in Windows. By applying this update, you can achieve better performance
and responsiveness in various scenarios. For a complete listing
of the issues that are included in this update, see the associated
Microsoft Knowledge Base article for more information. After
you install this item, you may have to restart your computer.
8/12/2011 Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2539633)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain access to information. You can help protect
your computer by installing this update from Microsoft. After
you install this item, you may have to restart your computer.
8/12/2011 Security Update for Windows Vista (KB2556532)
A security issue has been identified that could allow an authenticated
local attacker to cause the affected system to stop responding.
You can help protect your system by installing this update from
Microsoft. After you install this update, you may have to restart
your system.
8/12/2011 Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2539636)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain access to information. You can help protect
your computer by installing this update from Microsoft. After
you install this item, you may have to restart your computer.
8/12/2011 Security Update for Windows Vista (KB2563894)
A security issue has been identified that could allow an unauthenticated
remote attacker to cause the affected system to stop responding.
You can help protect your system by installing this update from
Microsoft. After you install this update, you may have to restart
your system.
8/11/2011 Definition Update for Windows Defender - KB915597 (Definition 1.109.1371.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
8/6/2011 Definition Update for Windows Defender - KB915597 (Definition 1.109.1136.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
8/5/2011 Microsoft Office File Validation Add-in
Microsoft Office File Validation is a security add-in for Office
2003 and 2007. Office File Validation is used to validate that
Binary File Format files conform to the Microsoft Office File
Format. The user will be notified of possible security risks
if files fail to conform to the format.
8/3/2011 Definition Update for Windows Defender - KB915597 (Definition 1.109.869.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
7/29/2011 Definition Update for Windows Defender - KB915597 (Definition 1.109.625.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
7/27/2011 Definition Update for Windows Defender - KB915597 (Definition 1.109.351.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
7/23/2011 Definition Update for Windows Defender - KB915597 (Definition 1.109.116.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
7/19/2011 Definition Update for Windows Defender - KB915597 (Definition 1.107.2067.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
7/15/2011 Definition Update for Windows Defender - KB915597 (Definition 1.107.1837.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
7/14/2011 Security Update for Windows Vista (KB2532531)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
7/14/2011 Security Update for Windows Vista (KB2555917)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
7/14/2011 Update for Windows Mail Junk E-mail Filter [July 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
7/14/2011 Windows Malicious Software Removal Tool - July 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
7/14/2011 Update for Windows Vista (KB2533623)
Install this update to resolve issues in Windows. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article for more information.
After you install this item, you may have to restart your computer.
7/14/2011 Security Update for Windows Vista (KB2507938)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
7/13/2011 Definition Update for Windows Defender - KB915597 (Definition 1.107.1567.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
7/9/2011 Definition Update for Windows Defender - KB915597 (Definition 1.107.1308.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
7/6/2011 Definition Update for Windows Defender - KB915597 (Definition 1.107.1036.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
7/2/2011 Definition Update for Windows Defender - KB915597 (Definition 1.107.834.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/30/2011 Update for Windows Vista (KB2545698)
Install this update to resolve issues in Windows. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article for more information.
After you install this item, you may have to restart your computer.
6/30/2011 Update for Windows Vista (KB2541763)
Install this update to resolve issues in Windows. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article for more information.
After you install this item, you may have to restart your computer.
6/29/2011 Definition Update for Windows Defender - KB915597 (Definition 1.107.553.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/29/2011 Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2478663)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
6/29/2011 Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2518870)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
6/24/2011 Definition Update for Windows Defender - KB915597 (Definition 1.107.328.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/21/2011 Definition Update for Windows Defender - KB915597 (Definition 1.107.49.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/19/2011 Security Update for Microsoft Office Excel 2007 (KB2541007)
A security vulnerability exists in Microsoft Office Excel 2007
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
6/19/2011 Security Update for Windows Vista (KB2535512)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/19/2011 Windows Malicious Software Removal Tool - June 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
6/19/2011 Update for Microsoft Office 2007 System (KB2539530)
Microsoft has released an update for Microsoft Office 2007 System.
This update provides the latest fixes to Microsoft Office 2007
System. Additionally, this update adds support for the new Indian
rupee currency symbol.
6/19/2011 Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243)
A security issue has been identified leading to MFC application
vulnerability in DLL planting due to MFC not specifying the full
path to system/localization DLLs. You can protect your computer
by installing this update from Microsoft. After you install this
item, you may have to restart your computer.
6/19/2011 Security Update for .NET Framework 3.5 SP1, Windows Vista SP2, and Windows Server 2008 SP2 x86 (KB2478660)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
6/19/2011 Security Update for Windows Vista (KB2503665)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/19/2011 Security Update for Microsoft Silverlight (KB2512827)
This security update to Silverlight includes fixes outlined in
KBs 2514842 and 2512827. This update is backward compatible with
web applications built using previous versions of Silverlight.
6/19/2011 Security Update for Windows Vista (KB2536275)
A security issue has been identified that could allow an unauthenticated
remote attacker to cause the affected system to stop responding.
You can help protect your system by installing this update from
Microsoft. After you install this update, you may have to restart
your system.
6/19/2011 Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB2530548)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
6/19/2011 Security Update for Windows Vista (KB2476490)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/19/2011 Security Update for .NET Framework 3.5 SP1, Windows Vista SP2, and Windows Server 2008 SP2 x86 (KB2518866)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
6/19/2011 Security Update for the 2007 Microsoft Office System (KB2541012)
A security vulnerability exists in the 2007 Microsoft Office
System and the Microsoft Office Compatibility Pack that could
allow arbitrary code to run when a maliciously modified file
is opened. This update resolves that vulnerability.
6/19/2011 Security Update for Windows Vista (KB2544893)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain access to
information. You can help protect your system by installing this
update from Microsoft. After you install this update, you may
have to restart your system.
6/19/2011 Security Update for Windows Vista (KB2536276)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/19/2011 Update for Windows Mail Junk E-mail Filter [June 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
6/19/2011 Security Update for Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (KB2538242)
A security issue has been identified leading to MFC application
vulnerability in DLL planting due to MFC not specifying the full
path to system/localization DLLs. You can protect your computer
by installing this update from Microsoft. After you install this
item, you may have to restart your computer.
6/18/2011 Definition Update for Windows Defender - KB915597 (Definition 1.105.2171.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/18/2011 Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2478663)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
6/18/2011 Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2518870)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
6/18/2011 Security Update for .NET Framework 3.5 SP1, Windows Vista SP2, and Windows Server 2008 SP2 x86 (KB2478660)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
6/18/2011 Security Update for .NET Framework 3.5 SP1, Windows Vista SP2, and Windows Server 2008 SP2 x86 (KB2518866)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
6/18/2011 Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2478663)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
6/18/2011 Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2518870)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
6/15/2011 Definition Update for Windows Defender - KB915597 (Definition 1.105.1913.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/11/2011 Definition Update for Windows Defender - KB915597 (Definition 1.105.1687.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/7/2011 Definition Update for Windows Defender - KB915597 (Definition 1.105.1413.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/3/2011 Definition Update for Windows Defender - KB915597 (Definition 1.105.1184.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/1/2011 Definition Update for Windows Defender - KB915597 (Definition 1.105.929.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/27/2011 Definition Update for Windows Defender - KB915597 (Definition 1.105.646.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/25/2011 Definition Update for Windows Defender - KB915597 (Definition 1.105.365.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/21/2011 Definition Update for Windows Defender - KB915597 (Definition 1.105.124.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/17/2011 Definition Update for Windows Defender - KB915597 (Definition 1.103.1875.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/14/2011 Definition Update for Windows Defender - KB915597 (Definition 1.103.1631.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/11/2011 Windows Malicious Software Removal Tool - May 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
5/11/2011 Update for Windows Mail Junk E-mail Filter [May 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
5/11/2011 Security Update for Microsoft Office PowerPoint 2007 (KB2535818)
A security vulnerability exists in Microsoft Office PowerPoint
2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
5/11/2011 Security Update for Microsoft Office 2007 System (KB2540162)
A security vulnerability exists in the 2007 Microsoft Office
System that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
5/11/2011 Definition Update for Windows Defender - KB915597 (Definition 1.103.1349.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/7/2011 Security Update for Microsoft Visual C++ 2005 Service Pack 1 Redistributable Package (KB2467175)
A security issue has been identified leading to MFC application
vulnerability in DLL planting due to MFC not specifying the full
path to system/localization DLLs. You can protect your computer
by installing this update from Microsoft. After you install this
item, you may have to restart your computer.
5/7/2011 Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2467174)
A security issue has been identified leading to MFC application
vulnerability in DLL planting due to MFC not specifying the full
path to system/localization DLLs. You can protect your computer
by installing this update from Microsoft. After you install this
item, you may have to restart your computer.
5/7/2011 Windows Internet Explorer 9 for Windows Vista
Windows Internet Explorer 9 delivers web sites and applications
that look and perform like native PC applications through the
power of Windows.

Fast: Internet Explorer 9 is all-around fast.
Designed to take full advantage of your PC’s hardware through
Windows, Internet Explorer 9 delivers graphically rich and immersive
experiences that are as fast and responsive as native applications
installed on your PC.

Clean: Internet Explorer puts the focus
on the Web sites you love with a clean look and increased viewing
area that makes your Web sites shine. Intuitive and seamless
integration with Windows Vista provides one-click access to Web
applications pinned directly to your Taskbar.

Trusted: Internet
Explorer is the trusted way to the Web because it has a robust
set of built-in security, privacy and reliability technologies
that keep you safer and your browsing experience uninterrupted.


Interoperable: Support for HTML5 and modern Web standards architected
to take advantage of the GPU means that the same mark-up not
only works across the Web, but runs faster and delivers a richer
experience through Windows and Internet Explorer 9.
5/7/2011 Definition Update for Windows Defender - KB915597 (Definition 1.103.1139.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/7/2011 Update for Windows Vista (KB2492386)
Install this update to resolve a set of known application compatibility
issues with Windows. For a complete listing of the issues that
are included in this update, see the associated Microsoft Knowledge
Base article for more information. After you install this item,
you may have to restart your computer.
5/7/2011 Update for Windows Vista (KB2522422)
Install this update to resolve issues in Windows. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article for more information.
After you install this item, you may have to restart your computer.
5/7/2011 Windows Malicious Software Removal Tool - April 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
4/25/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.103.395.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/22/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.103.290.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/22/2011 Update for Microsoft Silverlight (KB2526954)
This update to Silverlight improves security, reliability, accessibility
support, startup performance, enhances line-of-business support
and includes several fixes to better support rich internet applications.
This update is backward compatible with web applications built
using previous versions of Silverlight.
4/21/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.103.181.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/20/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.103.85.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/18/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.103.9.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/17/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.1625.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/16/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.1574.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/15/2011 Security Update for Windows Vista (KB2507618)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/15/2011 Cumulative Security Update for Internet Explorer 8 for Windows Vista (KB2497640)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
4/15/2011 Security Update for Windows Vista (KB2511455)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/15/2011 Security Update for Windows Vista (KB2506212)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/15/2011 Security Update for Windows Vista (KB2508429)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/15/2011 Security Update for Microsoft Office Excel 2007 (KB2464583)
A security vulnerability exists in Microsoft Office Excel 2007
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
4/15/2011 Security Update for Windows Vista (KB2509553)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/15/2011 Security Update for Windows Vista (KB2506223)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/15/2011 Update for Microsoft Office 2007 System (KB2508958)
Microsoft has released an update for Microsoft Office 2007 System.
This update decreases installation failures for updates installed
on Microsoft Office 2007 System.
4/15/2011 Security Update for Windows Vista (KB2503658)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain access to
information. You can help protect your system by installing this
update from Microsoft. After you install this update, you may
have to restart your system.
4/15/2011 Security Update for Windows Vista (KB2510531)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/15/2011 Security Update for Microsoft Office PowerPoint 2007 (KB2464594)
A security vulnerability exists in Microsoft Office PowerPoint
2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
4/15/2011 Security Update for Windows Vista (KB2412687)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/15/2011 Security Update for Microsoft Office 2007 System (KB2464635)
A security vulnerability exists in the 2007 Microsoft Office
System that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
4/15/2011 Security Update for Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows 7, Windows Server 2008 x86 (KB2446708)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
4/15/2011 Security Update for Microsoft Office 2007 System (KB2509488)
A security vulnerability exists in Microsoft Office 2007 System
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
4/15/2011 Cumulative Security Update for ActiveX Killbits for Windows Vista (KB2508272)
Security issues have been identified in ActiveX controls that
could allow an attacker to compromise a system running Microsoft
Internet Explorer and gain control over it. You can help protect
your system by installing this update from Microsoft. After you
install this item, you may have to restart your computer.
4/15/2011 Update for Windows Mail Junk E-mail Filter [April 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
4/15/2011 Security Update for the 2007 Microsoft Office System (KB2466156)
A security vulnerability exists in the 2007 Microsoft Office
System and the Microsoft Office Compatibility Pack that could
allow arbitrary code to run when a maliciously modified file
is opened. This update resolves that vulnerability.
4/15/2011 Windows Malicious Software Removal Tool - April 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
4/15/2011 Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623)
A security vulnerability exists in Microsoft Office PowerPoint
Viewer 2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
4/15/2011 Security Update for .NET Framework 3.5 SP1, Windows Vista SP2, and Windows Server 2008 SP2 x86 (KB2449742)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
4/14/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.1424.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/12/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.1266.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/11/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.1200.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/9/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.1143.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/7/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.1046.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/6/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.892.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/4/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.799.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/2/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.702.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
4/1/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.633.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/31/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.500.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/31/2011 Update for Windows Live Essentials 2011 (KB 2520039)
This upgrade of Windows Live Essentials 2011 contains important
performance improvements and some language translation fixes.
For more information on Windows Live Essentials 2011, click on
'More Information' below.
3/29/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.319.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/27/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.223.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/26/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.158.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/24/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.101.77.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/24/2011 Update for Windows Vista (KB2524375)
Install this update to resolve an issue which requires an update
to the certificate revocation list on Windows systems and to
keep your systems certificate list up to date. After you install
this update, you may have to restart your system.
3/23/2011 Update for Windows Vista (KB2505189)
Install this update to resolve issues in Windows. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article for more information.
After you install this item, you may have to restart your computer.
3/23/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.1721.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/22/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.1632.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/20/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.1548.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/18/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.1482.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/18/2011 Update for Microsoft Silverlight (KB2495644)
This update to Silverlight improves security, reliability, accessibility
support, startup performance, enhances line-of-business support
and includes several fixes to better support rich internet applications.
This update is backward compatible with web applications built
using previous versions of Silverlight.
3/17/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.1359.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/16/2011 Update for Windows Vista (KB971029)
Install this update to restrict AutoRun entries in the AutoPlay
dialog to only CD and DVD drives. After you install this item,
you may have to restart your computer.
3/16/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.1275.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/14/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.1169.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/13/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.1138.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/12/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.1073.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/11/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.1007.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/9/2011 Windows Malicious Software Removal Tool - March 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
3/9/2011 Update for Windows Mail Junk E-mail Filter [March 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
3/9/2011 Security Update for Windows Vista (KB2479943)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/9/2011 Security Update for Windows Vista (KB2481109)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/9/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.862.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/7/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.785.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/6/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.683.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/5/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.623.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/3/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.540.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
3/2/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.408.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/28/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.290.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/27/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.209.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/27/2011 Windows Live Essentials 2011 (KB2434419)
Do more with Windows on your PC with free programs from Microsoft
for photos, movies, instant messaging, email, social networking,
and more. Get it all in one simple download.
Windows Live Essentials
includes Messenger, Photo Gallery, Mail, Movie Maker, Writer,
Family Safety, and Windows Live Mesh, plus Bing Bar, Messenger
Companion, Microsoft Outlook Hotmail Connector, Microsoft Outlook
Social Connector Provider for Windows Live Messenger, and Microsoft
Silverlight.
Installing this update will replace your Windows
Live Toolbar with Bing Bar.
2/25/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.138.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/25/2011 Windows PowerShell 2.0 and WinRM 2.0 for Windows Vista (KB968930)
The Windows Management Framework Core package includes Windows
PowerShell 2.0 and Windows Remote Management (WinRM) 2.0. For
more information on the Windows Management Framework, see http://support.micro....com/kb/968929.
2/24/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.99.7.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/22/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.2310.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/21/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.2228.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/20/2011 Update for Windows (KB928439)
Windows PowerShell
2/19/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.2141.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/18/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.2006.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/16/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.1877.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/15/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.1705.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/13/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.1597.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/12/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.1544.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/10/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.1456.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/10/2011 Security Update for Windows Vista (KB2479628)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
2/10/2011 Security Update for Windows Vista (KB2393802)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
2/10/2011 Update for Windows Mail Junk E-mail Filter [February 2011] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer
2/10/2011 Platform Update Supplement for Windows Vista (KB2117917)
Install this update to resolve issues in Windows. For a complete
listing of the issues that are included in this update, see the
associated Microsoft Knowledge Base article for more information.
After you install this item, you may have to restart your computer.
2/10/2011 Cumulative Security Update for Internet Explorer 8 for Windows Vista (KB2482017)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
2/10/2011 Windows Malicious Software Removal Tool - February 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
2/10/2011 Security Update for Windows Vista (KB2483185)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
2/10/2011 Security Update for Windows Vista (KB2485376)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
2/9/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.1311.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/7/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.1134.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/5/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.1055.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/3/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.979.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
2/1/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.840.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
1/31/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.682.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
1/29/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.596.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
1/28/2011 Definition Update for Microsoft Security Essentials - KB2310138 (Definition 1.97.491.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
1/28/2011 Microsoft Security Essentials Client Update Package - KB2290031 (2.0.657.0)
This package will update Microsoft Security Essentials client
on the user's machine.
1/28/2011 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.97.491.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
1/25/2011 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.97.252.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
1/23/2011 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.97.163.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
1/23/2011 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.97.144.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
1/22/2011 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.97.74.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
1/20/2011 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.4382.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
1/20/2011 Security Update for Windows Vista (KB2423089)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/20/2011 Windows Malicious Software Removal Tool - January 2011 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
1/20/2011 Security Update for Windows Vista (KB2419640)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/20/2011 Security Update for Windows Vista (KB2436673)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/20/2011 Security Update for Windows Vista (KB2478935)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/20/2011 Update for Microsoft Silverlight (KB2477244)
This update to Silverlight improves security, reliability, accessibility
support, startup performance, enhances line-of-business support
and includes several fixes to better support rich internet applications.
This update is backward compatible with web applications built
using previous versions of Silverlight.
1/20/2011 Security Update for Windows Vista (KB2305420)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/20/2011 Security Update for Windows Vista (KB2442962)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/20/2011 Security Update for Windows Vista (KB2296199)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
1/20/2011 Cumulative Security Update for Internet Explorer 8 for Windows Vista (KB2416400)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
1/20/2011 Update for Windows Vista (KB2443685)
Install this update to resolve issues caused by revised daylight
saving time and time zone laws in several countries. This update
enables your computer to automatically adjust the computer clock
on the correct date in 2011. After you install this item, you
may have to restart your computer.
1/20/2011 Update for Windows Mail Junk E-mail Filter [December 2010] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
1/19/2011 Security Update for Microsoft Office 2007 System (KB2288931)
A security vulnerability exists in the 2007 Microsoft Office
System that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
1/19/2011 Update for Internet Explorer for Windows Vista (KB2467659)
Install this update to resolve issues in Internet Explorer. For
a complete listing of the issues that are included in this update,
see the associated Microsoft Knowledge Base article for more
information. After you install this item, you may have to restart
your computer.
1/19/2011 Windows Malicious Software Removal Tool - December 2010 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
12/13/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.1673.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
12/12/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.1626.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
12/11/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.1581.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
12/9/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.1424.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
12/6/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.1268.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
12/5/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.1211.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
12/4/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.1182.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
12/3/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.1100.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/30/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.822.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/28/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.766.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/27/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.718.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/26/2010 Security Update for Windows Vista (KB977816)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
11/25/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.564.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/25/2010 Update for Internet Explorer 8 Compatibility View List for Windows Vista (KB2447568)
This Compatibility View List update helps make Web sites that
are designed for older browsers look better in Internet Explorer
8. When users install Internet Explorer 8, they will be given
a choice about opting-in to a list of sites that should be displayed
in Compatibility View. After you install this item, you may have
to restart Internet Explorer.
11/23/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.381.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/21/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.294.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/19/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.167.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/17/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.95.30.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/16/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.1954.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/14/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.1896.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/13/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.1774.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/13/2010 Security Update for Microsoft Office 2007 System (KB2289158)
A security vulnerability exists in the 2007 Microsoft Office
System and the Compatibility Pack for the 2007 Office system
that could allow remote code execution. This update resolves
that vulnerability.
11/13/2010 Update for Windows Mail Junk E-mail Filter [November 2010] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
11/10/2010 Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2413381)
A security vulnerability exists in Microsoft Office PowerPoint
Viewer 2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
11/10/2010 Windows Malicious Software Removal Tool - November 2010 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
11/10/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.1529.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/9/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.1441.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/6/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.1326.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/6/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.1296.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/4/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.1092.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
11/1/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.917.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/31/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.836.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/30/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.770.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/29/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.688.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/28/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.627.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/28/2010 Update for Windows Vista (KB2388210)
Install this update to resolve a set of known application compatibility
issues with Windows. For a complete listing of the issues that
are included in this update, see the associated Microsoft Knowledge
Base article for more information. After you install this item,
you may have to restart your computer.
10/26/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.511.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/25/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.385.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/23/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.345.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/22/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.300.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/21/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.163.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/19/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.93.63.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/18/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1978.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/17/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1926.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/16/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1866.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/14/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1800.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/13/2010 Security Update for Windows Vista (KB2378111)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/13/2010 Update for Windows Vista (KB2345886)
Install this update to help strengthen authentication credentials
in specific scenarios. After you install this item, you may have
to restart your computer.
10/13/2010 Security Update for Windows Vista (KB2207566)
A security issue has been identified that could allow an unauthenticated
remote attacker to cause the affected system to stop responding.
You can help protect your system by installing this update from
Microsoft. After you install this update, you may have to restart
your system.
10/13/2010 Security Update for Windows Vista (KB979687)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/13/2010 Security Update for Windows Vista (KB982132)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/13/2010 Cumulative Security Update for Internet Explorer 8 for Windows Vista (KB2360131)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
10/13/2010 Security Update for Microsoft Office Excel 2007 (KB2345035)
A security vulnerability exists in Microsoft Office Excel 2007
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
10/13/2010 Security Update for the 2007 Microsoft Office System (KB2344875)
A security vulnerability exists in the 2007 Microsoft Office
System and the Microsoft Office Compatibility Pack that could
allow arbitrary code to run when a maliciously modified file
is opened. This update resolves that vulnerability.
10/13/2010 Security Update for the 2007 Microsoft Office System (KB2345043)
A security vulnerability exists in the 2007 Microsoft Office
System and the Microsoft Office Compatibility Pack that could
allow arbitrary code to run when a maliciously modified file
is opened. This update resolves that vulnerability.
10/13/2010 Security Update for Windows Vista (KB2387149)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/13/2010 Security Update for Windows Vista (KB981957)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/13/2010 Security Update for Windows Vista (KB979688)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/13/2010 Security Update for Microsoft Office Word 2007 (KB2344993)
A security vulnerability exists in Microsoft Office Word 2007
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
10/13/2010 Security Update for Windows Vista (KB2281679)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/13/2010 Windows Malicious Software Removal Tool - October 2010 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
10/13/2010 Security Update for Windows Vista (KB2296011)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
10/13/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1643.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/13/2010 Microsoft Security Essentials Client update package - KB2267610
This package will update Microsoft Security Essentials client
on user machine.
10/12/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1566.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/10/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1485.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/8/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1344.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/6/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1254.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/6/2010 Security Update for Microsoft .NET Framework 3.5 SP1, Windows Vista SP2, and Windows Server 2008 SP2 x86 (KB2416470)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain access to information. You can help protect
your computer by installing this update from Microsoft. After
you install this item, you may have to restart your computer.
10/6/2010 Security Update for Microsoft .NET Framework 3.5 SP1 on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008 x86 (KB2416473)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain access to information. You can help protect
your computer by installing this update from Microsoft. After
you install this item, you may have to restart your computer.
10/5/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1102.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/4/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.1023.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/2/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.995.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
10/1/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.891.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/30/2010 Update for Windows Vista (KB2158563)
Install this update to resolve issues caused by revised daylight
saving time and time zone laws in several countries. This update
enables your computer to automatically adjust the computer clock
on the correct date in 2010. After you install this item, you
may have to restart your computer.
9/30/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.830.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/30/2010 Update for Windows Vista (KB2158563)
Install this update to resolve issues caused by revised daylight
saving time and time zone laws in several countries. This update
enables your computer to automatically adjust the computer clock
on the correct date in 2010. After you install this item, you
may have to restart your computer.
9/30/2010 Update for Microsoft Silverlight (KB2416427)
This update to Silverlight improves security, reliability, accessibility
support, startup performance, enhances line-of-business support
and includes several fixes to better support rich internet applications.
This update is backward compatible with web applications built
using previous versions of Silverlight.
9/30/2010 Update for Internet Explorer 8 Compatibility View List for Windows Vista (KB2362765)
This Compatibility View List update helps make Web sites that
are designed for older browsers look better in Internet Explorer
8. When users install Internet Explorer 8, they will be given
a choice about opting-in to a list of sites that should be displayed
in Compatibility View. After you install this item, you may have
to restart Internet Explorer.
9/28/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.758.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/27/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.672.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/26/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.612.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/25/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.549.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/24/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.452.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/21/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.202.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/20/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.141.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/18/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.114.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/17/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.91.33.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/16/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.1733.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/15/2010 Security Update for Windows Vista (KB981322)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
9/15/2010 Security Update for Windows Vista (KB2347290)
A security issue has been identified that could allow an authenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
9/15/2010 Security Update for Windows Vista (KB975558)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
9/15/2010 Security Update for the 2007 Microsoft Office System (KB2288621)
A security vulnerability exists in the 2007 Microsoft Office
System that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
9/15/2010 Windows Malicious Software Removal Tool - September 2010 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
9/15/2010 Update for Windows Mail Junk E-mail Filter [September 2010] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
9/15/2010 Update for Windows Vista (KB2141007)
Install this update to help strengthen authentication credentials
in specific scenarios. After you install this item, you may have
to restart your computer.
9/15/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.1665.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/15/2010 Update for Microsoft Silverlight (KB2164913)
This update to Silverlight improves security, reliability, accessibility
support, startup performance, enhances line-of-business support
and includes several fixes to better support rich internet applications.
This update is backward compatible with web applications built
using previous versions of Silverlight.
9/13/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.1521.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/11/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.1497.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/10/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.1390.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/9/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.1290.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/8/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.1177.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/6/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.1125.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/6/2010 Security Update for Jscript 5.8 for Windows Vista (KB971961)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
9/6/2010 Security Update for Windows Vista (KB981332)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
9/6/2010 Update for Windows Vista (KB976662)
Install this update to improve Internet Explorer 8's JSON interoperability
in conformance with the new ECMAScript, fifth edition standard.
After you install this item, you may have to restart your computer.
9/5/2010 Internet Explorer 8 for Windows Vista
Internet Explorer 8 is the latest version of the familiar Web
browser that you are most comfortable using. Internet Explorer
8 helps you get everything that you want from the Web faster,
easier, and more privately and securely than ever. After you
install this item, you may have to restart your computer. This
update is provided to you and licensed under the Windows Vista
License Terms.
9/5/2010 Office Genuine Advantage Notifications (KB949810)
Office Genuine Advantage Notifications is part of Microsoft’s
effort to reduce software piracy. Installing this software will
help confirm that the copy of Office install on this computer
is genuine and properly licensed. If the copy of Office installed
on the computer is not genuine, the software will provide periodic
reminders to help you take appropriate action and protect yourself
from security threats posed by counterfeit software.
9/5/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.1034.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/4/2010 Update for Microsoft Office OneNote 2007 (KB980729)
Microsoft has released an update for Microsoft Office OneNote
2007. This update provides the latest fixes to Microsoft Office
OneNote 2007. Additionally, this update contains stability and
performance improvements.
9/4/2010 Security Update for Microsoft Office Excel 2007 (KB982308)
A security vulnerability exists in Microsoft Office Excel 2007
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
9/4/2010 Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
A security vulnerability exists in Microsoft Office Visio Viewer
2007 that could allow arbitrary code to run when a maliciously
modified web page is opened. This update resolves that vulnerability.
9/4/2010 Security Update for Microsoft Office InfoPath 2007 (KB979441)
A security vulnerability exists in Microsoft Office InfoPath
2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
9/4/2010 Security Update for Microsoft Office PowerPoint 2007 (KB982158)
A security vulnerability exists in Microsoft Office PowerPoint
2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
9/4/2010 Security Update for the 2007 Microsoft Office System (KB976321)
A security vulnerability exists in the 2007 Microsoft Office
System that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
9/4/2010 Security Update for the 2007 Microsoft Office System (KB969559)
A security vulnerability exists in the 2007 Microsoft Office
System that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves the vulnerability
so that the 2007 Microsoft Office System documents are handled
appropriately.
9/4/2010 Security Update for the 2007 Microsoft Office System (KB974234)
This update resolves a problem that can cause programs that use
the Outlook View Control with Forms 2.0, such as Microsoft Office
Outlook with Business Contact Manager, to stop functioning as
expected after Security Update for Microsoft Office Outlook 2007
(KB972363) is installed.
9/4/2010 Security Update for the 2007 Microsoft Office System (KB982331)
A security vulnerability exists in the 2007 Microsoft Office
System and the Microsoft Office Compatibility Pack that could
allow arbitrary code to run when a maliciously modified file
is opened. This update resolves that vulnerability.
9/4/2010 Security Update for the 2007 Microsoft Office System (KB2277947)
A security vulnerability exists in the 2007 Microsoft Office
System and the Microsoft Office Compatibility Pack that could
allow arbitrary code to run when a maliciously modified file
is opened. This update resolves that vulnerability.
9/4/2010 Security Update for Microsoft Office Word 2007 (KB2251419)
A security vulnerability exists in Microsoft Office Word 2007
that could allow arbitrary code to run when a maliciously modified
file is opened. This update resolves that vulnerability.
9/3/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.965.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
9/3/2010 Security Update for the 2007 Microsoft Office System (KB982312)
A security vulnerability exists in the 2007 Microsoft Office
System and the Compatibility Pack for the 2007 Office system
that could allow remote code execution. This update resolves
that vulnerability.
9/3/2010 Security Update for the 2007 Microsoft Office System (KB972581)
A security vulnerability exists in the 2007 Microsoft Office
System that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves the vulnerability
so that the 2007 Microsoft Office System documents are handled
appropriately.
9/2/2010 Update for Microsoft Office OneNote 2007 Help (KB963670)
This update installs the latest assistance content for the Microsoft
Office OneNote 2007 Help file.
9/2/2010 Update for Microsoft Office PowerPoint 2007 Help (KB963669)
This update installs the latest assistance content for the Microsoft
Office PowerPoint 2007 Help file and the Office PowerPoint 2007
Developer Help file.
9/2/2010 Update for the 2007 Microsoft Office System Help for Common Features (KB963673)
This update installs the latest assistance content for the Microsoft
Office 2007 Help file.
9/2/2010 Update for Microsoft Office Word 2007 Help (KB963665)
This update installs the latest assistance content for the Microsoft
Office Word 2007 Help file and the Office Word 2007 Developer
Help file.
9/2/2010 Update for the 2007 Microsoft Office System (KB967642)
This update fixes an error that may occur when installing the
Microsoft Office suite Service Packs.
9/2/2010 Update for Microsoft Office Excel 2007 Help (KB963678)
This update installs the latest assistance content for the Microsoft
Office Excel 2007 Help file and the Office Excel 2007 Developer
Help file.
9/2/2010 The 2007 Microsoft Office Suite Service Pack 2 (SP2)
Service Pack 2 provides the latest updates to the 2007 Microsoft
Office Suite. This update also applies to Microsoft Office Project,
Microsoft Office SharePoint Designer, Microsoft Expression Web,
Microsoft Office Visio, and Visual Web Developer.
9/2/2010 Update for Microsoft Script Editor Help (KB963671)
This update installs the latest assistance content for the Microsoft
Script Editor Help file that is included with the 2007 Office
System.
8/31/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.639.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/30/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.580.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/29/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.553.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/26/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.362.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/23/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.134.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/21/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.107.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/20/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.89.42.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/19/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.2173.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/18/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.2106.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/16/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.1998.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/14/2010 Security Update for Windows Vista (KB982665)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/14/2010 Cumulative Security Update for Internet Explorer 7 for Windows Vista (KB2183461)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
8/14/2010 Security Update for Windows Vista (KB980436)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/14/2010 Security Update for Windows Vista (KB981997)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/14/2010 Security Update for Windows Vista (KB2160329)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/14/2010 Security Update for Windows Vista (KB982799)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/14/2010 Security Update for .NET Framework 3.5 SP1, Windows Vista SP2, and Windows Server 2008 SP2 x86 (KB983589)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system that is running the Microsoft
.NET Framework and gain complete control over it. You can help
protect your computer by installing this update from Microsoft.
After you install this item, you may have to restart your computer.
8/14/2010 Security Update for Windows Vista (KB981852)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/14/2010 Windows Malicious Software Removal Tool - August 2010 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
8/14/2010 Security Update for Windows Vista (KB2079403)
A security issue has been identified that could allow an authenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/14/2010 Security Update for Windows Vista (KB982214)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/14/2010 Security Update for Windows Vista (KB978886)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/14/2010 Update for Windows Mail Junk E-mail Filter [August 2010] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
8/12/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.1720.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/11/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.1648.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/9/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.1489.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/8/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.1459.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/6/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.1322.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/4/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.1229.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/3/2010 Security Update for Windows Vista (KB2286198)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
8/3/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.1076.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
8/1/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.1005.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/31/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.976.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/30/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.933.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/28/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.710.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/25/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.532.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/24/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.465.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/22/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.314.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/21/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.225.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/19/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.162.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/17/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.87.55.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/16/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.2151.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/15/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.2098.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/15/2010 Update for Windows Mail Junk E-mail Filter [July 2010] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
7/15/2010 Windows Malicious Software Removal Tool - July 2010 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
7/14/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.2014.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/12/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.1925.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/11/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.1840.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/10/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.1797.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/8/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.1655.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/6/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.1571.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/5/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.1457.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/3/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.1321.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
7/1/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.1178.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
6/29/2010 Microsoft Security Essentials Client update package - KB2254596
This package will update Microsoft Security Essentials client
on user machine.
6/29/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.994.0)
Install this update to revise the definition files that are used
to detect viruses, spyware, and other potentially unwanted software.
Once you have installed this item, it cannot be removed.
6/27/2010 Microsoft .NET Framework 4 Client Profile for Windows Vista x86 (KB982670)
The Microsoft .NET Framework 4 Client Profile provides a subset
of features from the .NET Framework 4. The Client Profile is
designed to run client applications and to enable the fastest
possible deployment for Windows Presentation Foundation (WPF)
and Windows Forms technology.
6/27/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.916.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/25/2010 Update for Windows Vista (KB982519)
Install this update to resolve issues with non-compatible applications.
For complete details of this update, see the associated Knowledge
Base Article. After you install this item, you may have to restart
your computer.
6/25/2010 Cumulative Update for Media Center for Windows Vista (KB982480)
Install this update to resolve issues with Media Center for Windows
Vista. For a complete listing of the issues that are included
in this cumulative update, see the associated Microsoft Knowledge
Base article for more information. After you install this item,
you may have to restart your computer.
6/25/2010 Microsoft .NET Framework 3.5 SP1, Windows Vista SP2, and Windows Server 2008 SP2 Update x86 (KB982525)
This update addresses a set of known issues of the Microsoft
.NET Framework 3.5 Service Pack 1. After you install this item,
you may have to restart your computer.
6/24/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.704.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/24/2010 Update for Microsoft Search Enhancement Pack (KB2237744)
This update addresses Search Enhancement Pack Firefox add-on
issue.
6/21/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.85.532.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/13/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.1668.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/11/2010 Cumulative Security Update for Internet Explorer 7 for Windows Vista (KB982381)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
6/11/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.1523.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/10/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.1458.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/10/2010 Microsoft .NET Framework 3.5 SP1, Windows Vista SP2, and Windows Server 2008 SP2 Security Update x86 (KB979910)
A security issue has been identified that could allow an attacker
to tamper with digitally signed content without being detected,
when this content is being consumed by an application that makes
use of the Microsoft .NET Framework on a Windows-based system.
You can help protect your computer by installing this update
from Microsoft. After you install this item, you may have to
restart your computer.
6/10/2010 Security Update for Windows Vista (KB979482)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/10/2010 Update for Microsoft Search Enhancement Pack
This update improves performance and reliability of Microsoft
Search Enhancement Pack.
6/10/2010 Security Update for the 2007 Microsoft Office System (KB982312)
A security vulnerability exists in the 2007 Microsoft Office
System and the Compatibility Pack for the 2007 Office system
that could allow remote code execution. This update resolves
that vulnerability.
6/10/2010 Cumulative Security Update for ActiveX Killbits for Windows Vista (KB980195)
Security issues have been identified in ActiveX controls that
could allow an attacker to compromise a system running Microsoft
Internet Explorer and gain control over it. You can help protect
your system by installing this update from Microsoft. After you
install this item, you may have to restart your computer.
6/10/2010 Security Update for Windows Vista (KB980218)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/10/2010 Windows Malicious Software Removal Tool - June 2010 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
6/10/2010 Update for Windows Mail Junk E-mail Filter [June 2010] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
6/10/2010 Security Update for Windows Vista (KB979559)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
6/10/2010 Microsoft .NET Framework 3.5 SP1, Windows Vista SP2, and Windows Server 2008 SP2 Update x86 (KB982536)
Install this update to help strengthen authentication credentials
in specific scenarios. After you install this item, you may have
to restart your computer.
6/9/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.1300.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/7/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.1236.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/5/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.1158.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/4/2010 Update for Microsoft Silverlight (KB982926)
This update to Silverlight improves security and reliability,
and adds a variety of performance and functional enhancements
including support for web-conferencing, printing support and
improved support for video, networking and rich internet applications.
This update is backward compatible with web applications built
using previous versions of Silverlight.
6/4/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.1094.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/2/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.1029.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
6/1/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.935.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/29/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.720.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/28/2010 Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.83.665.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
5/26/2010 Update for Windows Vista (KB981793)
Install this update to resolve issues caused by revised daylight
saving time and time zone laws in several countries. This update
enables your computer to automatically adjust the computer clock
on the correct date in 2010. After you install this item, you
may have to restart your computer.
5/12/2010 Windows Malicious Software Removal Tool - May 2010 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
5/12/2010 Security Update for Windows Vista (KB978542)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
5/12/2010 Update for Windows Mail Junk E-mail Filter [May 2010] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
5/6/2010 Update for the 2007 Microsoft Office System (KB981715)
Microsoft has released an update for the 2007 Microsoft Office
System. This update provides the latest fixes to the 2007 Microsoft
Office System. Additionally, this update contains stability and
performance improvements.
5/6/2010 Security Update for the 2007 Microsoft Office System (KB969618)
A security vulnerability exists in Microsoft PowerPoint 2007
that could allow arbitrary code to run when a maliciously modified
document is opened. This update resolves that vulnerability.
5/6/2010 Security Update for PowerPoint Viewer 2007 (KB970059)
A security vulnerability exists in Microsoft PowerPoint Viewer
2007 that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves that vulnerability.
5/6/2010 Security Update for the 2007 Microsoft Office System (KB972581)
A security vulnerability exists in the 2007 Microsoft Office
System that could allow arbitrary code to run when a maliciously
modified file is opened. This update resolves the vulnerability
so that the 2007 Microsoft Office System documents are handled
appropriately.
5/3/2010 Update for Microsoft Search Enhancement Pack
This update improves performance and reliability of Microsoft
Search Enhancement Pack.
5/3/2010 Update for Windows Live Sign-In Assistant (KB 967912)
Install this update to get the most recent version of Windows
Live Sign-In Assistant.
5/3/2010 PowerPoint Viewer 2007 Service Pack 2 (SP2)
Service Pack 2 provides the latest updates to PowerPoint Viewer
2007.
5/3/2010 Update for Microsoft Silverlight (KB979202)
This update to Silverlight includes functional, performance,
reliability and security improvements. This update is backward
compatible with web applications built using previous versions
of Silverlight.
5/3/2010 Security Update for the 2007 Microsoft Office System (KB951944)
A security vulnerability exists in the 2007 Microsoft Office
System and the Compatibility Pack for the 2007 Office system
that could allow remote code execution. This update resolves
that vulnerability.
5/3/2010 Security Update for Microsoft Visual C++ 2008 Redistributable Package (KB973924)
A security issue has been identified that could allow an attacker
to compromise your Windows-based system with Microsoft Visual
C++ 2008 Redistributable Package and gain complete control over
it. You can help protect your computer by installing this update
from Microsoft. After you install this item, you may have to
restart your computer.
4/29/2010 Update for Windows Vista (KB980248)
Install this update to remove the Windows File Protection from
applicable Windows font files. This update is necessary so the
Office 2010 installer can update the fonts. After you install
this item, you may have to restart your computer.
4/16/2010 Security Update for Windows Vista (KB980232)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/16/2010 Security Update for Windows Vista (KB979683)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/16/2010 Security Update for Windows Vista (KB981349)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/16/2010 Windows Malicious Software Removal Tool - April 2010 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
4/16/2010 Update for Windows Mail Junk E-mail Filter [April 2010] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
4/16/2010 Security Update for Windows Vista (KB977816)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/16/2010 Security Update for Windows Vista (KB978338)
A security issue has been identified that could allow an attacker
to misrepresent a system action or behavior without the knowledge
of the user. You can help protect your system by installing this
update from Microsoft. After you install this update, you may
have to restart your system.
4/14/2010 Security Update for Windows Vista (KB978601)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
4/14/2010 Security Update for Windows Vista (KB979309)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/31/2010 Cumulative Security Update for Internet Explorer 7 for Windows Vista (KB980182)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
3/29/2010 Update for Windows Vista (KB971737)
Install this update to help strengthen authentication credentials
in specific scenarios. After you install this item, you may have
to restart your computer.
3/29/2010 Platform Update for Windows Vista (KB971644)
The Platform Update for Windows Vista is a collection of runtime
libraries that make it easy for developers to target a wider
customer base. After you install this item, you may have to restart
your computer.
3/29/2010 Microsoft .NET Framework 2.0 Service Pack 2 Security Update for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2 (KB974470)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Update for Windows Vista (KB970430)
Install this update to help strengthen authentication credentials
in specific scenarios. After you install this item, you may have
to restart your computer.
3/29/2010 Update for Windows Vista (KB976264)
Install this update to resolve issues with non-compatible applications
for Windows Vista. For complete details of this update, see Knowledge
Base Article KB976264. After you install this item, you may have
to restart your computer.
3/29/2010 nVidia - Display - NVIDIA GeForce 8400M GS
nVidia Display software update released in June, 2009
3/29/2010 Windows Vista Service Pack 2 (KB948465)
Windows Vista Service Pack 2 is an update to Windows Vista that
includes all of the updates that have been delivered since Service
Pack 1, as well as support for new types of hardware and emerging
hardware standards. After you install this item, you may have
to restart your computer. This update is provided to you and
licensed under the Windows Vista License Terms.
3/29/2010 Update to .NET Framework 3.5 Service Pack 1 for the .NET Framework Assistant 1.0 x86 (KB963707)
The update to .NET Framework 3.5 Service Pack 1 for the .NET
Framework Assistant 1.0 for Firefox addresses several compatibility
issues with version 1.0 of the extension.
3/29/2010 Update for Windows Vista (KB968389)
Install this update to help strengthen authentication credentials
in specific scenarios. After you install this item, you may have
to restart your computer.
3/29/2010 Security Update for Windows Vista (KB972270)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Cumulative Security Update for Internet Explorer 7 for Windows Vista (KB978207)
Security issues have been identified that could allow an attacker
to compromise a system that is running Microsoft Internet Explorer
and gain control over it. You can help protect your system by
installing this update from Microsoft. After you install this
item, you may have to restart your computer.
3/29/2010 Security Update for Windows Vista (KB971468)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Update for Windows Vista (KB959108)
Install this update to resolve an issue with the Microsoft Customer
Experience Improvement Program. After you install this item,
you may have to restart your computer. This update is provided
to you and licensed under the Windows Vista License Terms.
3/29/2010 Security Update for Windows Vista (KB967723)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Security Update for Windows Vista (KB970710)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Update for Windows Vista (KB973687)
Install this update to prevent applications from sending too
many HTTP requests while a well-known Document Type Definition
(DTD) is included. After you install this item, you may have
to restart your computer.
3/29/2010 Security Update for Windows Vista (KB975467)
A security issue has been identified that could allow an unauthenticated
remote attacker to cause the affected system to stop responding.
You can help protect your system by installing this update from
Microsoft. After you install this update, you may have to restart
your system.
3/29/2010 Security Update for Windows Media Format Runtime 11 for Windows Vista (KB968816)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Definition Update for Windows Defender - KB915597 (Definition 1.79.702.0)
Install this update to revise the definition files used to detect
spyware and other potentially unwanted software. Once you have
installed this item, it cannot be removed.
3/29/2010 Security Update for Windows Vista (KB973507)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Microsoft .NET Framework 2.0 Service Pack 2 Security Update for Windows Vista Service Pack 1 and Windows Server 2008 (KB974469)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Security Update for Windows Vista (KB971657)
A security issue has been identified that could allow an authenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Security Update for Windows Vista (KB956744)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Update for Windows Vista (KB976470)
Install this update to resolve an issue in which the "Date and
Time" window of Control Panel will incorrectly display an error
message. After you install this item, you may have to restart
your computer.
3/29/2010 Security Update for Movie Maker 6.0 for Windows Vista (KB975561)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Security Update for Windows Vista (KB958869)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Cumulative Update for Media Center for Windows Vista (KB974306)
Install this update to resolve issues with Media Center for Windows
Vista. For a complete listing of the issues that are included
in this cumulative update, see Microsoft Knowledge Base article
974306. After you install this item, you may have to restart
your computer.
3/29/2010 Update for Windows Vista (KB979306)
Install this update to resolve issues caused by revised daylight
saving time and time zone laws in several countries. This update
enables your computer to automatically adjust the computer clock
on the correct date in 2010. After you install this item, you
may have to restart your computer.
3/29/2010 Security Update for Windows Vista (KB961501)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system. This update is provided to you and licensed
under the Windows Vista License Terms.
3/29/2010 Update for Windows Mail Junk E-mail Filter [March 2010] (KB905866)
Install this update for Windows Mail to revise the definition
files that are used to detect e-mail messages that should be
considered junk e-mail or that may contain phishing content.
After you install this item, you may have to restart your computer.
3/29/2010 Security Update for Jscript 5.7 for Windows Vista (KB971961)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Security Update for Windows Vista (KB977165)
A security issue has been identified that could allow an authenticated
local attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Update for Windows Vista (KB957200)
This is a reliability update. This update resolves some performance
and reliability issues in Windows Vista. By applying this update,
you can achieve better performance and responsiveness in various
scenarios. After you install this item, you may have to restart
your computer. This update is provided to you and licensed under
the Windows Vista License Terms.
3/29/2010 Security Update for Windows Vista (KB969947)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Cumulative Security Update for ActiveX Killbits for Windows Vista (KB978262)
Security issues have been identified in ActiveX controls that
could allow an attacker to compromise a system running Microsoft
Internet Explorer and gain control over it. You can help protect
your system by installing this update from Microsoft. After you
install this item, you may have to restart your computer.
3/29/2010 Windows Malicious Software Removal Tool - March 2010 (KB890830)
After the download, this tool runs one time to check your computer
for infection by specific, prevalent malicious software (including
Blaster, Sasser, and Mydoom) and helps remove any infection that
is found. If an infection is found, the tool will display a status
report the next time that you start your computer. A new version
of the tool will be offered every month. If you want to manually
run the tool on your computer, you can download a copy from the
Microsoft Download Center, or you can run an online version from
microsoft.com. This tool is not a replacement for an antivirus
product. To help protect your computer, you should use an antivirus
product.
3/29/2010 Security Update for Windows Vista (KB973540)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Update for Rights Management Services Client for Windows Vista (KB979099)
Install this update to resolve issues caused by manifest expiration
in AD RMS enabled applications. This update will fix any existing
issues in addition to addressing any future application manifest
expirations. After you install this item, you may have to restart
any running AD RMS enabled applications.
3/29/2010 Security Update for Windows Vista (KB974145)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Update for Windows Vista (KB972036)
Install this update to resolve issues with non-compatible applications
for Windows Vista. For complete details of this update, see Knowledge
Base Article KB972036. After you install this item, you may have
to restart your computer.
3/29/2010 Security Update for Windows Vista (KB974571)
A security issue has been identified that could allow an attacker
to misrepresent a system action or behavior without the knowledge
of the user. You can help protect your system by installing this
update from Microsoft. After you install this update, you may
have to restart your system.
3/29/2010 Security Update for Windows Vista (KB970238)
A security issue has been identified that could allow an authenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system. This update is provided to you and licensed
under the Windows Vista License Terms.
3/29/2010 Update for Windows Vista (KB973917)
Install this update to help strengthen authentication credentials
in specific scenarios. After you install this item, you may have
to restart your computer.
3/29/2010 Security Update for Windows Vista (KB975517)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Security Update for Windows Vista (KB974318)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Security Update for Windows Vista (KB973565)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Security Update for Windows Vista (KB975560)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Security Update for Windows Media Format Runtime 11 for Windows Vista (KB954155)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Update for Windows Vista (KB972145)
Install this update to resolve a compliance issue with Windows
Media Player and Set Program Access and Computer Defaults. After
you install this item, you may have to restart your computer.
3/29/2010 Security Update for Windows Vista (KB973768)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Security Update for Windows Vista (KB978251)
A security issue has been identified that could allow an unauthenticated
remote attacker to compromise your system and gain control over
it. You can help protect your system by installing this update
from Microsoft. After you install this update, you may have to
restart your system.
3/29/2010 Update for Windows Vista (KB975929)
Both the Meiryo UI font and the Meiryo UI Bold font are included
in this update. These new fonts let an application optimally
display Kana characters in the Ribbon UI component and in other
parts of the user interface, especially in areas where text area
is limited. After you install this item, you may have to restart
your computer.
3/29/2010 Windows Update Agent 7.4.7600.226
The Windows Update Agent enables your computer to search for
and install updates from an update service. The agent can automatically
update itself as needed to communicate with the update service
when Windows searches for new updates.
7/25/2009 Hotfix for Windows (KB954708)
Fix for KB954708
7/25/2009 Update for Windows (KB955430)
Fix for KB955430
7/25/2009 Hotfix for Windows (KB948278)
Fix for KB948278
System Folders
Path for burning CD C:\Users\Dell\AppData\Local\Microsoft\Windows\Burn\Burn
Application Data C:\ProgramData
Public Desktop C:\Users\Public\Desktop
Documents C:\Users\Public\Documents
Global Favorites C:\Users\Dell\Favorites
Music C:\Users\Public\Music
Pictures C:\Users\Public\Pictures
Start Menu Programs C:\ProgramData\Microsoft\Windows\Start Menu\Programs
Start Menu C:\ProgramData\Microsoft\Windows\Start Menu
Startup C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Templates C:\ProgramData\Microsoft\Windows\Templates
Videos C:\Users\Public\Videos
Cookies C:\Users\Dell\AppData\Roaming\Microsoft\Windows\Cookies
Desktop C:\Users\Dell\Desktop
Physical Desktop C:\Users\Dell\Desktop
User Favorites C:\Users\Dell\Favorites
Fonts C:\Windows\Fonts
Internet History C:\Users\Dell\AppData\Local\Microsoft\Windows\History
Temporary Internet Files C:\Users\Dell\AppData\Local\Microsoft\Windows\Temporary Internet Files
Local Application Data C:\Users\Dell\AppData\Local
Windows directory C:\Windows
Windows/System C:\Windows\system32
Program Files C:\Program Files
Security Options
Accounts: Administrator account status Disabled
Accounts: Guest account status Disabled
Accounts: Limit local account use of blank passwords to console logon only Enabled
Accounts: Rename administrator account Administrator
Accounts: Rename guest account Guest
Audit: Audit the access of global system objects Disabled
Audit: Audit the use of Backup and Restore privilege Disabled
Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings Not Defined
Audit: Shut down system immediately if unable to log security audits Disabled
DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax Not Defined
DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax Not Defined
Devices: Allow undock without having to log on Enabled
Devices: Allowed to format and eject removable media Not Defined
Devices: Prevent users from installing printer drivers Disabled
Devices: Restrict CD-ROM access to locally logged-on user only Not Defined
Devices: Restrict floppy access to locally logged-on user only Not Defined
Domain controller: Allow server operators to schedule tasks Not Defined
Domain controller: LDAP server signing requirements Not Defined
Domain controller: Refuse machine account password changes Not Defined
Domain member: Digitally encrypt or sign secure channel data (always) Enabled
Domain member: Digitally encrypt secure channel data (when possible) Enabled
Domain member: Digitally sign secure channel data (when possible) Enabled
Domain member: Disable machine account password changes Disabled
Domain member: Maximum machine account password age 30 days
Domain member: Require strong (Windows 2000 or later) session key Disabled
Interactive logon: Do not display last user name Disabled
Interactive logon: Do not require CTRL+ALT+DEL Not Defined
Interactive logon: Message text for users attempting to log on Not Defined
Interactive logon: Message title for users attempting to log on
Interactive logon: Number of previous logons to cache (in case domain controller is not available) 10 logons
Interactive logon: Prompt user to change password before expiration 14 days
Interactive logon: Require Domain Controller authentication to unlock workstation Disabled
Interactive logon: Require smart card Disabled
Interactive logon: Smart card removal behavior No Action
Microsoft network client: Digitally sign communications (always) Disabled
Microsoft network client: Digitally sign communications (if server agrees) Enabled
Microsoft network client: Send unencrypted password to third-party SMB servers Disabled
Microsoft network server: Amount of idle time required before suspending session 15 minutes
Microsoft network server: Digitally sign communications (always) Disabled
Microsoft network server: Digitally sign communications (if client agrees) Disabled
Microsoft network server: Disconnect clients when logon hours expire Enabled
Network access: Allow anonymous SID/Name translation Disabled
Network access: Do not allow anonymous enumeration of SAM accounts Enabled
Network access: Do not allow anonymous enumeration of SAM accounts and shares Disabled
Network access: Do not allow storage of credentials or .NET Passports for network authentication Disabled
Network access: Let Everyone permissions apply to anonymous users Disabled
Network access: Named Pipes that can be accessed anonymously netlogon,lsarpc,samr,browser
Network access: Remotely accessible registry paths System\CurrentControlSet\Control\ProductOptions,System\CurrentControlSet\Control\Server Applications,Software\Microsoft\Windows NT\CurrentVersion
Network access: Remotely accessible registry paths and sub-paths System\CurrentControlSet\Control\Print\Printers,System\CurrentControlSet\Services\Eventlog,Software\Microsoft\OLAP Server,Software\Microsoft\Windows NT\CurrentVersion\Print,Software\Microsoft\Windows NT\CurrentVersion\Windows,System\CurrentControlSet\Control\ContentIndex,System\CurrentControlSet\Control\Terminal Server,System\CurrentControlSet\Control\Terminal Server\UserConfig,System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration,Software\Microsoft\Windows NT\CurrentVersion\Perflib,System\CurrentControlSet\Services\SysmonLog
Network access: Restrict anonymous access to Named Pipes and Shares Enabled
Network access: Shares that can be accessed anonymously Not Defined
Network access: Sharing and security model for local accounts Classic - local users authenticate as themselves
Network security: Do not store LAN Manager hash value on next password change Enabled
Network security: Force logoff when logon hours expire Disabled
Network security: LAN Manager authentication level Send NTLMv2 response only
Network security: LDAP client signing requirements Negotiate signing
Network security: Minimum session security for NTLM SSP based (including secure RPC) clients
Network security: Minimum session security for NTLM SSP based (including secure RPC) servers
Recovery console: Allow automatic administrative logon Disabled
Recovery console: Allow floppy copy and access to all drives and all folders Disabled
Shutdown: Allow system to be shut down without having to log on Enabled
Shutdown: Clear virtual memory pagefile Disabled
System cryptography: Force strong key protection for user keys stored on the computer Not Defined
System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing Disabled
System objects: Require case insensitivity for non-Windows subsystems Not Defined
System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links) Enabled
System settings: Optional subsystems Posix
System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies Disabled
User Account Control: Admin Approval Mode for the Built-in Administrator account Disabled
User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop Disabled
User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode Prompt for consent
User Account Control: Behavior of the elevation prompt for standard users Prompt for credentials
User Account Control: Detect application installations and prompt for elevation Enabled
User Account Control: Only elevate executables that are signed and validated Disabled
User Account Control: Only elevate UIAccess applications that are installed in secure locations Enabled
User Account Control: Run all administrators in Admin Approval Mode Disabled
User Account Control: Switch to the secure desktop when prompting for elevation Enabled
User Account Control: Virtualize file and registry write failures to per-user locations Enabled
Services
Running Adobe Acrobat Update Service
Running Adobe Active File Monitor V5
Running Andrea ST Filters Service
Running Apple Mobile Device
Running Application Experience
Running AVG WatchDog
Running AVGIDSAgent
Running Background Intelligent Transfer Service
Running Base Filtering Engine
Running Bluetooth Support Service
Running Bonjour Service
Running CNG Key Isolation
Running COM+ Event System
Running Cryptographic Services
Running DCOM Server Process Launcher
Running Dell Wireless WLAN Tray Service
Running Desktop Window Manager Session Manager
Running DHCP Client
Running Diagnostic Policy Service
Running Diagnostic System Host
Running Distributed Link Tracking Client
Running DNS Client
Running Dock Login Service
Running Extensible Authentication Protocol
Running Function Discovery Provider Host
Running Function Discovery Resource Publication
Running Group Policy Client
Running HP CUE DeviceDiscovery Service
Running hpqcxs08
Running Human Interface Device Access
Running IKE and AuthIP IPsec Keying Modules
Running IP Helper
Running iPod Service
Running IPsec Policy Agent
Running KtmRm for Distributed Transaction Coordinator
Running MBAMService
Running Multimedia Class Scheduler
Running Network Connections
Running Network List Service
Running Network Location Awareness
Running Network Store Interface Service
Running NVIDIA Display Driver Service
Running Peer Networking Identity Manager
Running Plug and Play
Running Portable Device Enumerator Service
Running Print Spooler
Running Program Compatibility Assistant Service
Running ReadyBoost
Running Remote Access Connection Manager
Running Remote Procedure Call (RPC)
Running SeaPort
Running Secondary Logon
Running Secure Socket Tunneling Protocol Service
Running Security Accounts Manager
Running Security Center
Running Server
Running Shell Hardware Detection
Running SigmaTel Audio Service
Running SoftThinks Agent Service
Running Software Licensing
Running SSDP Discovery
Running Superfetch
Running System Event Notification Service
Running Tablet PC Input Service
Running Task Scheduler
Running TCP/IP NetBIOS Helper
Running Telephony
Running Terminal Services
Running Themes
Running UPnP Device Host
Running User Profile Service
Running vToolbarUpdater12.1.5
Running WebClient
Running Windows Audio
Running Windows Audio Endpoint Builder
Running Windows Driver Foundation - User-mode Driver Framework
Running Windows Error Reporting Service
Running Windows Event Log
Running Windows Firewall
Running Windows Font Cache Service
Running Windows Image Acquisition (WIA)
Running Windows Live ID Sign-in Assistant
Running Windows Management Instrumentation
Running Windows Media Player Network Sharing Service
Running Windows Search
Running Windows Time
Running Windows Update
Running WLAN AutoConfig
Running Workstation
Stopped Application Information
Stopped Application Layer Gateway Service
Stopped Certificate Propagation
Stopped COM+ System Application
Stopped Computer Browser
Stopped DFS Replication
Stopped Diagnostic Service Host
Stopped Distributed Transaction Coordinator
Stopped Google Update Service (gupdate)
Stopped Google Update Service (gupdatem)
Stopped Health Key and Certificate Management
Stopped Interactive Services Detection
Stopped Internet Connection Sharing (ICS)
Stopped Link-Layer Topology Discovery Mapper
Stopped Microsoft .NET Framework NGEN v2.0.50727_X86
Stopped Microsoft .NET Framework NGEN v4.0.30319_X86
Stopped Microsoft iSCSI Initiator Service
Stopped Microsoft Office Diagnostics Service
Stopped Microsoft Software Shadow Copy Provider
Stopped Net.Tcp Port Sharing Service
Stopped Netlogon
Stopped Network Access Protection Agent
Stopped Office Source Engine
Stopped Parental Controls
Start pending Peer Name Resolution Protocol
Stopped Peer Networking Grouping
Stopped Performance Logs & Alerts
Stopped PnP-X IP Bus Enumerator
Stopped PNRP Machine Name Publication Service
Stopped Problem Reports and Solutions Control Panel Support
Stopped Protected Storage
Stopped Quality Windows Audio Video Experience
Stopped Remote Access Auto Connection Manager
Stopped Remote Procedure Call (RPC) Locator
Stopped Remote Registry
Stopped Routing and Remote Access
Stopped Skype Updater
Stopped SL UI Notification Service
Stopped Smart Card
Stopped Smart Card Removal Policy
Stopped SNMP Trap
Stopped Terminal Services Configuration
Stopped Thread Ordering Server
Stopped TPM Base Services
Stopped Virtual Disk
Stopped Volume Shadow Copy
Stopped Windows Backup
Stopped Windows CardSpace
Stopped Windows Color System
Stopped Windows Connect Now - Config Registrar
Stopped Windows Defender
Stopped Windows Event Collector
Stopped Windows Installer
Stopped Windows Media Center Extender Service
Stopped Windows Media Center Receiver Service
Stopped Windows Media Center Scheduler Service
Stopped Windows Media Center Service Launcher
Stopped Windows Modules Installer
Stopped Windows Presentation Foundation Font Cache 3.0.0.0
Stopped Windows Presentation Foundation Font Cache 4.0.0.0
Stopped Windows Remote Management (WS-Management)
Stopped WinHTTP Web Proxy Auto-Discovery Service
Stopped Wired AutoConfig
Stopped WMI Performance Adapter
Device Tree
ACPI x86-based PC
Microsoft ACPI-Compliant System
Intel® Core™2 Duo CPU T9300 @ 2.50GHz
Intel® Core™2 Duo CPU T9300 @ 2.50GHz
ACPI Thermal Zone
System board
ACPI Lid
ACPI Power Button
ACPI Sleep Button
Microsoft AC Adapter
Microsoft ACPI-Compliant Control Method Battery
Direct Application Launch Button
Microsoft Windows Management Interface for ACPI
PCI bus
Mobile Intel® PM965/GM965/GL960 Express Processor to DRAM Controller - 2A00
Intel® ICH8 Family PCI Express Root Port 1 - 283F
Intel® ICH8 Family PCI Express Root Port 4 - 2845
Intel® ICH8 Family SMBus Controller - 283E
System board
System board
Mobile Intel® PM965/GM965/GL960 Express PCI Express Root Port - 2A01
NVIDIA GeForce 8400M GS
Generic PnP Monitor
Intel® ICH8 Family USB Universal Host Controller - 2834
USB Root Hub
Generic USB Hub
Dell Truemobile 355 Bluetooth + EDR
Bluetooth Device (Personal Area Network)
Bluetooth Device (RFCOMM Protocol TDI)
Standard Serial over Bluetooth link (COM12)
Standard Serial over Bluetooth link (COM11)
Standard Modem over Bluetooth link #3
Microsoft Bluetooth Enumerator
Bluetooth Peripheral Device
Bluetooth OPP
Bluetooth OPP
Bluetooth FTP
Bluetooth AV Source
Bluetooth AV Source
Bluetooth AV Source
Bluetooth Remote Control
Bluetooth Imaging Responder
Bluetooth Hands-free Audio
Bluetooth Stereo Audio
Bluetooth Remote Control
HID-compliant consumer control device
USB Human Interface Device
HID Keyboard Device
USB Human Interface Device
HID-compliant mouse
HID-compliant consumer control device
Intel® ICH8 Family USB Universal Host Controller - 2835
USB Root Hub
Intel® ICH8 Family USB2 Enhanced Host Controller - 283A
USB Root Hub
High Definition Audio Controller
SigmaTel High Definition Audio CODEC
Intel® ICH8 Family PCI Express Root Port 2 - 2841
Dell Wireless 1505 Draft 802.11n WLAN Mini-Card
Intel® ICH8 Family PCI Express Root Port 6 - 2849
Broadcom NetLink ™ Fast Ethernet
Intel® ICH8 Family USB Universal Host Controller - 2830
USB Root Hub
Intel® ICH8 Family USB Universal Host Controller - 2831
USB Root Hub
Intel® ICH8 Family USB Universal Host Controller - 2832
USB Root Hub
Intel® ICH8 Family USB2 Enhanced Host Controller - 2836
USB Root Hub
USB Composite Device
Laptop Integrated Webcam
Apple Mobile Device USB Driver
Apple iPhone
Intel® 82801 PCI Bridge - 2448
RICOH OHCI Compliant IEEE 1394 Host Controller
SDA Standard Compliant SD Host Controller
Ricoh MMC Host Controller
Ricoh Memory Stick Controller
Ricoh xD-Picture Card Controller
Intel® ICH8M LPC Interface Controller - 2815
Synaptics PS/2 Port Pointing Device
Standard PS/2 Keyboard
System CMOS/real time clock
System timer
System speaker
System board
Programmable interrupt controller
Direct memory access controller
Numeric data processor
High Precision Event Timer
Intel® ICH8M Ultra ATA Storage Controllers - 2850
IDE Channel
MATSHITA DVD+-RW UJ-867S ATA Device
Intel® ICH8M-E/M SATA AHCI Controller
WDC WD3200BEVT-75ZCT2
CPU
Intel Mobile Core 2 Duo
Cores 2
Threads 2
Name Intel Mobile Core 2 Duo
Code Name Penryn
Package Socket P (478)
Technology 45nm
Specification Intel® Core™2 Duo CPU T9300 @ 2.50GHz
Family 6
Extended Family 6
Model 7
Extended Model 17
Stepping 6
Revision C0
Instructions MMX, SSE, SSE2, SSE3, SSSE3, SSE4.1, Intel 64
Virtualization Supported, Disabled
Hyperthreading Not supported
Fan Speed 4276 RPM
Bus Speed 199.5 MHz
Rated Bus Speed 798.1 MHz
Stock Core Speed 2500 MHz
Stock Bus Speed 200 MHz
Average Temperature 49 °C
Caches
L1 Data Cache Size 2 x 32 KBytes
L1 Instructions Cache Size 2 x 32 KBytes
L2 Unified Cache Size 6144 KBytes
Core 0
Core Speed 2493.9 MHz
Multiplier x 13.0
Bus Speed 199.5 MHz
Rated Bus Speed 798.1 MHz
Temperature 48 °C
Thread 1
APIC ID 0
Core 1
Core Speed 2493.9 MHz
Multiplier x 13.5
Bus Speed 199.5 MHz
Rated Bus Speed 798.1 MHz
Temperature 50 °C
Thread 1
APIC ID 1
RAM
Memory slots
Total memory slots 2
Used memory slots 2
Free memory slots 0
Memory
Type DDR2
Size 4096 MBytes
Channels # Dual
DRAM Frequency 332.5 MHz
CAS# Latency (CL) 5 clocks
RAS# to CAS# Delay (tRCD) 5 clocks
RAS# Precharge (tRP) 5 clocks
Cycle Time (tRAS) 15 clocks
Physical Memory
Memory Usage 48 %
Total Physical 3.50 GB
Available Physical 1.80 GB
Total Virtual 7.18 GB
Available Virtual 5.34 GB
SPD
Number Of SPD Modules 2
Slot #1
Type DDR2
Size 2048 MBytes
Manufacturer Samsung
Max Bandwidth PC2-6400 (400 MHz)
Part Number M4 70T5663EH3-CF7
Serial Number 75AE0E7E
Week/year 24 / 09
SPD Ext. EPP
JEDEC #3
Frequency 400.0 MHz
CAS# Latency 6.0
RAS# To CAS# 6
RAS# Precharge 6
tRAS 18
tRC 24
Voltage 1.800 V
JEDEC #2
Frequency 333.3 MHz
CAS# Latency 5.0
RAS# To CAS# 6
RAS# Precharge 6
tRAS 16
tRC 21
Voltage 1.800 V
JEDEC #1
Frequency 266.7 MHz
CAS# Latency 4.0
RAS# To CAS# 4
RAS# Precharge 4
tRAS 12
tRC 16
Voltage 1.800 V
Slot #2
Type DDR2
Size 2048 MBytes
Manufacturer Qimonda
Max Bandwidth PC2-6400 (400 MHz)
Part Number 64T256020EDL2.5C2
Serial Number 0213762F
Week/year 48 / 08
SPD Ext. EPP
JEDEC #3
Frequency 400.0 MHz
CAS# Latency 6.0
RAS# To CAS# 6
RAS# Precharge 6
tRAS 18
tRC 24
Voltage 1.800 V
JEDEC #2
Frequency 333.3 MHz
CAS# Latency 5.0
RAS# To CAS# 6
RAS# Precharge 6
tRAS 16
tRC 21
Voltage 1.800 V
JEDEC #1
Frequency 266.7 MHz
CAS# Latency 4.0
RAS# To CAS# 4
RAS# Precharge 4
tRAS 12
tRC 16
Voltage 1.800 V
Motherboard
Manufacturer Dell Inc.
Model 0U8042 (Microprocessor)
Chipset Vendor Intel
Chipset Model PM965
Chipset Revision C0
Southbridge Vendor Intel
Southbridge Model 82801HBM (ICH8-ME)
Southbridge Revision B0
System Temperature 55 °C
BIOS
Brand Dell Inc.
Version A15
Date 12/26/2008
PCI Data
Graphics
Monitor
Name Generic PnP Monitor on NVIDIA GeForce 8400M GS
Current Resolution 1280x800 pixels
Work Resolution 1280x770 pixels
State enabled, primary
Monitor Width 1280
Monitor Height 800
Monitor BPP 32 bits per pixel
Monitor Frequency 60 Hz
Device \\.\DISPLAY1\Monitor0
GeForce 8400M GS
GPU G86M
Device ID 10DE-0427
Revision A2
Subvendor Dell (1028)
Current Performance Level Level 3
Current GPU Clock 400 MHz
Current Memory Clock 600 MHz
Current Shader Clock 800 MHz
Technology 80 nm
Die Size 115 nm?
Transistors 210 M
Release Date May 09, 2007
DirectX Support 10.0
DirectX Shader Model 4.0
OpenGL Support 3.0
Bus Interface PCI Express x16
Temperature 73 °C
Driver nvlddmkm.sys
Driver version 8.15.11.8621
ForceWare version 186.21
BIOS Version 60.86.45.00.40
ROPs 8
Shaders 16 unified
Physical Memory 128 MB
Virtual Memory 1664 MB
Bus Width 64 Bit
Count of performance levels : 3
Level 1 - "Default"
GPU Clock 169 MHz
Memory Clock 100 MHz
Shader Clock 338 MHz
Level 2 - "2D Desktop"
GPU Clock 275 MHz
Memory Clock 301 MHz
Shader Clock 550 MHz
Level 3 - "3D Applications"
GPU Clock 400 MHz
Memory Clock 600 MHz
Shader Clock 800 MHz
OpenGL
Version 3.0.0
Vendor NVIDIA Corporation
Renderer GeForce 8400M GS/PCI/SSE2
GLU Version 1.2.2.0 Microsoft Corporation
Values
GL_MAX_LIGHTS 8
GL_MAX_TEXTURE_SIZE 8192
GL_MAX_TEXTURE_STACK_DEPTH 10
GL Extensions
GL_ARB_color_buffer_float
GL_ARB_depth_buffer_float
GL_ARB_depth_texture
GL_ARB_draw_buffers
GL_ARB_draw_instanced
GL_ARB_fragment_program
GL_ARB_fragment_program_shadow
GL_ARB_fragment_shader
GL_ARB_half_float_pixel
GL_ARB_half_float_vertex
GL_ARB_framebuffer_object
GL_ARB_geometry_shader4
GL_ARB_imaging
GL_ARB_map_buffer_range
GL_ARB_multisample
GL_ARB_multitexture
GL_ARB_occlusion_query
GL_ARB_pixel_buffer_object
GL_ARB_point_parameters
GL_ARB_point_sprite
GL_ARB_shadow
GL_ARB_shader_objects
GL_ARB_shading_language_100
GL_ARB_texture_border_clamp
GL_ARB_texture_buffer_object
GL_ARB_texture_compression
GL_ARB_texture_cube_map
GL_ARB_texture_env_add
GL_ARB_texture_env_combine
GL_ARB_texture_env_dot3
GL_ARB_texture_float
GL_ARB_texture_mirrored_repeat
GL_ARB_texture_non_power_of_two
GL_ARB_texture_rectangle
GL_ARB_texture_rg
GL_ARB_transpose_matrix
GL_ARB_vertex_array_object
GL_ARB_vertex_buffer_object
GL_ARB_vertex_program
GL_ARB_vertex_shader
GL_ARB_window_pos
GL_ATI_draw_buffers
GL_ATI_texture_float
GL_ATI_texture_mirror_once
GL_S3_s3tc
GL_EXT_texture_env_add
GL_EXT_abgr
GL_EXT_bgra
GL_EXT_blend_color
GL_EXT_blend_equation_separate
GL_EXT_blend_func_separate
GL_EXT_blend_minmax
GL_EXT_blend_subtract
GL_EXT_compiled_vertex_array
GL_EXT_Cg_shader
GL_EXT_bindable_uniform
GL_EXT_depth_bounds_test
GL_EXT_direct_state_access
GL_EXT_draw_buffers2
GL_EXT_draw_instanced
GL_EXT_draw_range_elements
GL_EXT_fog_coord
GL_EXT_framebuffer_blit
GL_EXT_framebuffer_multisample
GL_EXT_framebuffer_object
GL_EXTX_framebuffer_mixed_formats
GL_EXT_framebuffer_sRGB
GL_EXT_geometry_shader4
GL_EXT_gpu_program_parameters
GL_EXT_gpu_shader4
GL_EXT_multi_draw_arrays
GL_EXT_packed_depth_stencil
GL_EXT_packed_float
GL_EXT_packed_pixels
GL_EXT_pixel_buffer_object
GL_EXT_point_parameters
GL_EXT_provoking_vertex
GL_EXT_rescale_normal
GL_EXT_secondary_color
GL_EXT_separate_specular_color
GL_EXT_shadow_funcs
GL_EXT_stencil_two_side
GL_EXT_stencil_wrap
GL_EXT_texture3D
GL_EXT_texture_array
GL_EXT_texture_buffer_object
GL_EXT_texture_compression_latc
GL_EXT_texture_compression_rgtc
GL_EXT_texture_compression_s3tc
GL_EXT_texture_cube_map
GL_EXT_texture_edge_clamp
GL_EXT_texture_env_combine
GL_EXT_texture_env_dot3
GL_EXT_texture_filter_anisotropic
GL_EXT_texture_integer
GL_EXT_texture_lod
GL_EXT_texture_lod_bias
GL_EXT_texture_mirror_clamp
GL_EXT_texture_object
GL_EXT_texture_sRGB
GL_EXT_texture_swizzle
GL_EXT_texture_shared_exponent
GL_EXT_timer_query
GL_EXT_vertex_array
GL_EXT_vertex_array_bgra
GL_IBM_rasterpos_clip
GL_IBM_texture_mirrored_repeat
GL_KTX_buffer_region
GL_NV_blend_square
GL_NV_copy_depth_to_color
GL_NV_depth_buffer_float
GL_NV_conditional_render
GL_NV_depth_clamp
GL_NV_explicit_multisample
GL_NV_fence
GL_NV_float_buffer
GL_NV_fog_distance
GL_NV_fragment_program
GL_NV_fragment_program_option
GL_NV_fragment_program2
GL_NV_framebuffer_multisample_coverage
GL_NV_geometry_shader4
GL_NV_gpu_program4
GL_NV_half_float
GL_NV_light_max_exponent
GL_NV_multisample_coverage
GL_NV_multisample_filter_hint
GL_NV_occlusion_query
GL_NV_packed_depth_stencil
GL_NV_parameter_buffer_object
GL_NV_pixel_data_range
GL_NV_point_sprite
GL_NV_primitive_restart
GL_NV_register_combiners
GL_NV_register_combiners2
GL_NV_texgen_reflection
GL_NV_texture_compression_vtc
GL_NV_texture_env_combine4
GL_NV_texture_expand_normal
GL_NV_texture_rectangle
GL_NV_texture_shader
GL_NV_texture_shader2
GL_NV_texture_shader3
GL_NV_transform_feedback
GL_NV_vertex_array_range
GL_NV_vertex_array_range2
GL_NV_vertex_program
GL_NV_vertex_program1_1
GL_NV_vertex_program2
GL_NV_vertex_program2_option
GL_NV_vertex_program3
GL_NVX_conditional_render
GL_NV_vertex_buffer_unified_memory
GL_NV_shader_buffer_load
GL_SGIS_generate_mipmap
GL_SGIS_texture_lod
GL_SGIX_depth_texture
GL_SGIX_shadow
GL_SUN_slice_accum
GL_WIN_swap_hint
WGL_EXT_swap_control
GL_EXT_bgra
Hard Drives
WDC WD3200BEVT-75ZCT2
Manufacturer Western Digital
Form Factor GB/2.5-inch
Business Unit/Brand Mobile/WD Scorpio®
Heads 16
Cylinders 16383
SATA type SATA-II 3.0Gb/s
Device type Fixed
ATA Standard ATA8-ACS
Serial Number WD-WXG0A69K5972
LBA Size 48-bit LBA
Power On Count 1572 times
Power On Time 152.9 days
Speed, Expressed in Revolutions Per Minute (rpm) 5400
Features S.M.A.R.T., APM, AAM, NCQ
Transfer Mode SATA II
Interface SATA
Capacity 298GB
Real size 320,072,933,376 bytes
RAID Type None
S.M.A.R.T
01 Read Error Rate 200 (200 worst) Data 0000000000
03 Spin-Up Time 187 (186) Data 0000000659
04 Start/Stop Count 099 (099) Data 000000071D
05 Reallocated Sectors Count 200 (200) Data 0000000000
07 Seek Error Rate 100 (253) Data 0000000000
09 Power-On Hours (POH) 095 (095) Data 0000000E55
0A Spin Retry Count 100 (100) Data 0000000000
0B Recalibration Retries 100 (100) Data 0000000000
0C Device Power Cycle Count 099 (099) Data 0000000624
C0 Power-off Retract Count 200 (200) Data 0000000042
C1 Load/Unload Cycle Count 195 (195) Data 00000044CD
C2 Temperature 109 (094) Data 0000000026
C4 Reallocation Event Count 200 (200) Data 0000000000
C5 Current Pending Sector Count 200 (200) Data 0000000000
C6 Uncorrectable Sector Count 100 (253) Data 0000000000
C7 UltraDMA CRC Error Count 200 (200) Data 0000000000
C8 Write Error Rate / Multi-Zone Error Rate 100 (253) Data 0000000000
F0 Head Flying Hours 096 (096) Data 0000000DF2
F1 Total LBAs Written 085 (085) Data 000879638B
F2 Total LBAs Read 200 (200) Data 003B4FAF8C
Temperature 38 °C
Temperature Range ok (less than 50 °C)
Status Good
Partition 0
Partition ID Disk #0, Partition #0
Size 101 MB
Partition 1
Partition ID Disk #0, Partition #1
Disk Letter D:
File System NTFS
Volume Serial Number EC5BB72C
Size 15.0GB
Used Space 5.69GB (38%)
Free Space 9.31GB (62%)
Partition 2
Partition ID Disk #0, Partition #2
Disk Letter C:
File System NTFS
Volume Serial Number 14D14AAC
Size 280GB
Used Space 159GB (57%)
Free Space 122GB (43%)
Partition 3
Partition ID Disk #0, Partition #3
Size 2.50 GB
Optical Drives
MATSHITA DVD+-RW UJ-867S ATA Device
Media Type DVD Writer
Name MATSHITA DVD+-RW UJ-867S ATA Device
Availability Running/Full Power
Capabilities Random Access, Supports Writing, Supports Removable Media
Config Manager Error Code Device is working properly
Config Manager User Config FALSE
Drive E:
Media Loaded FALSE
SCSI Bus 0
SCSI Logical Unit 0
SCSI Port 1
SCSI Target Id 0
Status OK
Audio
Sound Cards
Bluetooth Hands-free Audio
Bluetooth Stereo Audio
SigmaTel High Definition Audio CODEC
Playback Devices
HDMI (SigmaTel High Definition Audio CODEC)
Speakers / Headphones (SigmaTel High Definition Audio CODEC) (default)
Recording Device
Microphone Array (SigmaTel High Definition Audio CODEC)
Peripherals
Standard PS/2 Keyboard
Device Kind Keyboard
Device Name Standard PS/2 Keyboard
Location plugged into keyboard port
Driver
Date 6-21-2006
Version 6.0.6002.18005
File C:\Windows\system32\DRIVERS\i8042prt.sys
File C:\Windows\system32\DRIVERS\kbdclass.sys
HID Keyboard Device
Device Kind Keyboard
Device Name HID Keyboard Device
Vendor Unknown
Location USB Human Interface Device
Driver
Date 6-21-2006
Version 6.0.6002.18005
File C:\Windows\system32\DRIVERS\kbdhid.sys
File C:\Windows\system32\DRIVERS\kbdclass.sys
Synaptics PS/2 Port Pointing Device
Device Kind Mouse
Device Name Synaptics PS/2 Port Pointing Device
Location plugged into PS/2 mouse port
Driver
Date 4-27-2007
Version 9.1.18.6
File C:\Windows\system32\DRIVERS\SynTP.sys
File C:\Windows\system32\SynTPAPI.dll
File C:\Windows\system32\SynCOM.dll
File C:\Windows\system32\SynCtrl.dll
File C:\Program Files\Synaptics\SynTP\SynTPRes.dll
File C:\Program Files\Synaptics\SynTP\SynTPCpl.dll
File C:\Program Files\Synaptics\SynTP\SynCntxt.rtf
File C:\Program Files\Synaptics\SynTP\SynZMetr.exe
File C:\Program Files\Synaptics\SynTP\SynMood.exe
File C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
File C:\Program Files\Synaptics\SynTP\SynTPCOM.dll
File C:\Program Files\Synaptics\SynTP\Tutorial.exe
File C:\Program Files\Synaptics\SynTP\InstNT.exe
File C:\Program Files\Synaptics\SynTP\SynISDLL.dll
File C:\Program Files\Synaptics\SynTP\SynUnst.ini
File C:\Program Files\Synaptics\SynTP\DellTpad.exe
File C:\Program Files\Synaptics\SynTP\DellTpad.exe.manifest
File C:\Program Files\Synaptics\SynTP\DellTpad.rtf
File C:\Windows\system32\SynTPCo4.dll
File C:\Windows\system32\WdfCoInstaller01000.dll
File C:\Windows\system32\DRIVERS\i8042prt.sys
File C:\Windows\system32\DRIVERS\mouclass.sys
HID-compliant mouse
Device Kind Mouse
Device Name HID-compliant mouse
Vendor Unknown
Location USB Human Interface Device
Driver
Date 6-21-2006
Version 6.0.6001.18000
File C:\Windows\system32\DRIVERS\mouhid.sys
File C:\Windows\system32\DRIVERS\mouclass.sys
Laptop Integrated Webcam
Device Kind Camera/scanner
Device Name Laptop Integrated Webcam
Vendor OmniVision
Comment Laptop Integrated Webcam
Location 0000.001d.0007.006.000.000.000.000.000
Driver
Date 10-11-2007
Version 1.4.1.1011
File C:\Windows\System32\Drivers\OEM02Dev.sys
File C:\Windows\System32\Drivers\OEM02Vfx.sys
File C:\Windows\System32\Drivers\OEM02PC.bmp
File C:\Windows\System32\Drivers\OEM02Pvc.bmp
File C:\Windows\System32\Drivers\OEM02Afx.sys
File C:\Windows\system32\OEM02Cvw.bff
File C:\Windows\system32\OEM02Cvw.dll
File C:\Windows\system32\OEM02Cvw.crl
File C:\Windows\system32\OEM02Hwx.dll
File C:\Windows\system32\OEM02Pin.crl
File C:\Windows\system32\OEM02Pin.dll
File C:\Windows\system32\CtCamMgr.dll
File C:\Windows\system32\OEM02Srv.exe
File C:\Windows\system32\cximage.dll
File C:\Windows\Twain_32\Creative\OEM002\HookWnd.dll
File C:\Windows\OEM002.uns
File C:\Windows\OEM02Mon.exe
File C:\Windows\OEM02Cfg.exe
File C:\Windows\CtDrvIns.exe
Printers
HP Deskjet D4300 series (Default Printer)
Printer Port USB001
Print Processor hpzpp5mu
Availability Always
Priority 1
Duplex None
Print Quality 600 * 600 dpi Color
Status Unknown
Driver
Driver Name HP Deskjet D4300 series (v6.00)
Driver Path C:\Windows\system32\spool\DRIVERS\W32X86\3\UNIDRV.DLL
Microsoft XPS Document Writer
Printer Port XPSPort:
Print Processor WinPrint
Availability Always
Priority 1
Duplex None
Print Quality 600 * 600 dpi Color
Status Unknown
Driver
Driver Name Microsoft XPS Document Writer (v6.00)
Driver Path C:\Windows\system32\spool\DRIVERS\W32X86\3\mxdwdrv.dll
Send To OneNote 2007
Printer Port Send To Microsoft OneNote Port:
Print Processor OneNotePrint2007
Availability Always
Priority 1
Duplex None
Print Quality 300 * 300 dpi Color
Status Unknown
Driver
Driver Name Send To Microsoft OneNote Driver (v4.00)
Driver Path C:\Windows\system32\spool\DRIVERS\W32X86\3\msonpdrv.dll
Network
You are connected to the internet
Connected through Dell Wireless 1505 Draft 802.11n WLAN Mini-Card
IP Address 192.168.0.6
Subnet mask 255.255.255.0
Gateway server 192.168.0.1
Preferred DNS server 192.168.0.1
Alternate DNS server 68.94.157.1
DHCP Enabled
DHCP server 192.168.0.1
External IP Address 99.154.247.0
Adapter Type IEEE 802.11 wireless
NetBIOS over TCP/IP Enabled via DHCP
NETBIOS Node Type Broadcast node
Link Speed 0 kbps
Computer Name
NetBIOS Name DELL-PC
DNS Name Dell-PC
Domain Name Dell-PC
Remote Desktop
Console
State Active
Domain Dell-PC
WinInet Info
LAN Connection
Local system uses a local area network to connect to the Internet
Local system has RAS to connect to the Internet
Wi-Fi Info
Using native Wi-Fi API version 2
Available access points count 1
Wi-Fi (Diamonds5)
SSID Diamonds5
Frequency 2437000 kHz
Channel Number 6
Name No name
Signal Strength/Quality 83
Security Enabled
State The interface is connected to a network
Dot11 Type Infrastructure BSS network
Network Connectible
Network Flags Currently Connected to this network
Cipher Algorithm to be used when joining this network AES-CCMP algorithm
Default Auth used to join this network for the first time 802.11i RSNA algorithm that uses PSK
WinHTTPInfo
WinHTTPSessionProxyType No proxy
Session Proxy
Session Proxy Bypass
Connect Retries 5
Connect Timeout 60000
HTTP Version HTTP 1.1
Max Connects Per 1.0 Servers INFINITE
Max Connects Per Servers INFINITE
Max HTTP automatic redirects 10
Max HTTP status continue 10
Send Timeout 30000
IEProxy Auto Detect No
IEProxy Auto Config
IEProxy
IEProxy Bypass
Default Proxy Config Access Type No proxy
Default Config Proxy
Default Config Proxy Bypass
Sharing and Discovery
Network Discovery Enabled
File and Printer Sharing Disabled
Simple File Sharing Enabled
Administrative Shares Enabled
Adapters List
Bluetooth Device (Personal Area Network)
IP Address 0.0.0.0
Subnet mask 0.0.0.0
Gateway server 0.0.0.0
Dell Wireless 1505 Draft 802.11n WLAN Mini-Card
IP Address 192.168.0.6
Subnet mask 255.255.255.0
Gateway server 192.168.0.1
Broadcom NetLink ™ Fast Ethernet
IP Address 0.0.0.0
Subnet mask 0.0.0.0
Gateway server 0.0.0.0
Network Shares
No network shares
Current TCP Connections
AppleMobileDeviceService.exe (844)
Local 127.0.0.1:27015 LISTEN
Local 127.0.0.1:27015 ESTABLISHED Remote 127.0.0.1:49158 (Querying... )
Local 127.0.0.1:27015 ESTABLISHED Remote 127.0.0.1:51898 (Querying... )
Local 127.0.0.1:49155 ESTABLISHED Remote 127.0.0.1:5354 (Querying... )
C:\Program Files\AVG Secure Search\vprot.exe (2480)
Local 192.168.0.6:49159 CLOSE-WAIT Remote 96.6.55.117:80 (Querying... ) (HTTP)
Local 192.168.0.6:49160 CLOSE-WAIT Remote 69.22.151.107:80 (Querying... ) (HTTP)
C:\Program Files\Opera\opera.exe (4308)
Local 192.168.0.6:54270 ESTABLISHED Remote 74.125.224.121:80 (Querying... ) (HTTP)
Local 192.168.0.6:54271 ESTABLISHED Remote 74.125.224.121:80 (Querying... ) (HTTP)
Local 192.168.0.6:54276 ESTABLISHED Remote 74.125.224.122:80 (Querying... ) (HTTP)
Local 192.168.0.6:54174 ESTABLISHED Remote 69.171.248.16:443 (Querying... ) (HTTPS)
Local 192.168.0.6:54328 ESTABLISHED Remote 74.125.224.122:80 (Querying... ) (HTTP)
Local 192.168.0.6:54256 ESTABLISHED Remote 74.54.247.132:80 (Querying... ) (HTTP)
Local 192.168.0.6:54330 ESTABLISHED Remote 67.228.177.87:80 (Querying... ) (HTTP)
Local 192.168.0.6:54331 ESTABLISHED Remote 91.203.99.45:80 (Querying... ) (HTTP)
C:\Program Files\iTunes\iTunesHelper.exe (3196)
Local 127.0.0.1:49158 ESTABLISHED Remote 127.0.0.1:27015 (Querying... )
System Process
Local 192.168.0.6:54324 TIME-WAIT Remote 74.125.224.102:80 (Querying... ) (HTTP)
Local 192.168.0.6:54325 TIME-WAIT Remote 74.125.224.102:80 (Querying... ) (HTTP)
Local 192.168.0.6:54315 TIME-WAIT Remote 184.31.236.20:80 (Querying... ) (HTTP)
Local 192.168.0.6:54309 TIME-WAIT Remote 23.2.111.144:80 (Querying... ) (HTTP)
Local 192.168.0.6:54302 TIME-WAIT Remote 184.31.236.20:80 (Querying... ) (HTTP)
Local 192.168.0.6:54295 TIME-WAIT Remote 69.22.151.104:80 (Querying... ) (HTTP)
Local 192.168.0.6:54285 TIME-WAIT Remote 184.31.236.20:80 (Querying... ) (HTTP)
Local 192.168.0.6:54284 TIME-WAIT Remote 184.31.236.20:80 (Querying... ) (HTTP)
Local 192.168.0.6:54278 TIME-WAIT Remote 74.125.224.121:80 (Querying... ) (HTTP)
Local 192.168.0.6:54268 TIME-WAIT Remote 69.22.150.16:80 (Querying... ) (HTTP)
Local 192.168.0.6:54260 TIME-WAIT Remote 23.2.111.139:80 (Querying... ) (HTTP)
Local 192.168.0.6:54254 TIME-WAIT Remote 74.54.247.132:80 (Querying... ) (HTTP)
Local 192.168.0.6:54327 TIME-WAIT Remote 74.125.224.121:80 (Querying... ) (HTTP)
Local 192.168.0.6:54329 TIME-WAIT Remote 74.125.224.122:80 (Querying... ) (HTTP)
System Process
Local 0.0.0.0:10243 LISTEN
Local 0.0.0.0:445 (Windows shares) LISTEN
Local 0.0.0.0:2869 LISTEN
Local 0.0.0.0:5357 LISTEN
Local 192.168.0.6:139 (NetBIOS session service) LISTEN
\Device\HarddiskVolume3\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe (4440)
Local 127.0.0.1:51898 ESTABLISHED Remote 127.0.0.1:27015 (Querying... )
lsass.exe (948)
Local 0.0.0.0:49156 LISTEN
mDNSResponder.exe (2168)
Local 127.0.0.1:5354 ESTABLISHED Remote 127.0.0.1:49155 (Querying... )
Local 127.0.0.1:5354 LISTEN
services.exe (936)
Local 0.0.0.0:49211 LISTEN
svchost.exe (1184)
Local 0.0.0.0:135 (DCE) LISTEN
svchost.exe (1244)
Local 0.0.0.0:49153 LISTEN
svchost.exe (1280)
Local 0.0.0.0:49154 LISTEN
wininit.exe (892)
Local 0.0.0.0:49152 LISTEN
wmpnetwk.exe (5580)
Local 0.0.0.0:554 LISTEN




Procexp

It never stopped moving, but I saved it anyways

Process PID CPU Private Bytes Working Set Description Company Name Verified Signer
AEstSrv.exe 1760 372 K 1,664 K Andrea filters APO access service (32-bit) Andrea Electronics Corporation (Verified) Microsoft Windows Hardware Compatibility Publisher
armsvc.exe 1636 2,108 K 3,448 K Adobe Acrobat Update Service Adobe Systems Incorporated (Verified) Adobe Systems, Incorporated
avgcsrvx.exe 604 18,500 K 316 K AVG Scanning Core Module - Server Part AVG Technologies CZ, s.r.o. (Verified) AVG Technologies
avgemcx.exe 3252 3,168 K 6,368 K AVG E-mail Scanner AVG Technologies CZ, s.r.o. (Verified) AVG Technologies CZ, s.r.o.
avgnsx.exe 3244 9,792 K 176 K AVG Online Shield Service AVG Technologies CZ, s.r.o. (Verified) AVG Technologies CZ, s.r.o.
distnoted.exe 3368 1,708 K 5,460 K distnoted Apple Inc. (Verified) Apple Inc.
DockLogin.exe 1520 1,040 K 3,344 K Dock Login Service Stardock Corporation (Unable to verify) Stardock Corporation
ehmsas.exe 3560 1,076 K 3,900 K Media Center Media Status Aggregator Service Microsoft Corporation (Verified) Microsoft Windows
jusched.exe 3448 1,140 K 3,680 K Java™ Update Scheduler Sun Microsystems, Inc. (Verified) Oracle America, Inc.
lsm.exe 960 1,976 K 4,116 K Local Session Manager Service Microsoft Corporation (Verified) Microsoft Windows
mDNSResponder.exe 2168 1,596 K 4,336 K Bonjour Service Apple Inc. (Verified) Apple Inc.
nvvsvc.exe 1156 1,056 K 3,452 K NVIDIA Driver Helper Service, Version 186.21 NVIDIA Corporation (Verified) NVIDIA Corporation
SeaPort.exe 2368 4,828 K 8,396 K Microsoft SeaPort Search Enhancement Broker Microsoft Corporation (Verified) Microsoft Corporation
SftService.exe 2528 4,436 K 6,652 K SoftThinks Agent Service SoftThinks SAS (Verified) Dell Inc
SLsvc.exe 1408 6,048 K 10,452 K Microsoft Software Licensing Service Microsoft Corporation (Verified) Microsoft Windows
smss.exe 524 292 K 764 K Windows Session Manager Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 2308 2,276 K 5,408 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 2876 1,040 K 3,316 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 1472 1,592 K 24,540 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 1392 1,988 K 4,780 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 2180 2,264 K 3,724 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 2740 4,424 K 6,824 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 216 18,240 K 20,640 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 1112 3,632 K 7,004 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
SyncServer.exe 2000 5,964 K 13,836 K SyncServer Apple Inc. (Verified) Apple Inc.
taskeng.exe 2564 1,988 K 5,596 K Task Scheduler Engine Microsoft Corporation (Verified) Microsoft Windows
ToolbarUpdater.exe 2812 4,236 K 7,828 K ToolbarU Application (Verified) AVG Technologies
unsecapp.exe 4568 2,332 K 4,692 K Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation (Verified) Microsoft Windows
wininit.exe 892 1,364 K 4,040 K Windows Start-Up Application Microsoft Corporation (Verified) Microsoft Windows
winlogon.exe 1580 2,044 K 5,368 K Windows Logon Application Microsoft Corporation (Verified) Microsoft Windows
WLIDSVC.EXE 3544 5,560 K 8,704 K Microsoft® Windows Live ID Service Microsoft Corp. (Verified) Microsoft Corporation
WLIDSVCM.EXE 3740 888 K 2,712 K Microsoft® Windows Live ID Service Monitor Microsoft Corp. (Verified) Microsoft Corporation
WLTRYSVC.EXE 1752 700 K 2,572 K (Unable to verify) (null)
WmiPrvSE.exe 4632 21,152 K 25,348 K WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
Interrupts n/a < 0.01 0 K 0 K Hardware Interrupts and DPCs
spoolsv.exe 1904 < 0.01 6,392 K 10,176 K Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows
PhotoshopElementsFileAgent.exe 888 < 0.01 1,632 K 728 K (Unable to verify) (null)
svchost.exe 1280 < 0.01 78,008 K 84,924 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 1244 < 0.01 19,460 K 15,464 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
rundll32.exe 3452 < 0.01 2,432 K 3,876 K Windows host process (Rundll32) Microsoft Corporation (Verified) Microsoft Windows
mbamgui.exe 3380 < 0.01 2,480 K 6,324 K Malwarebytes Anti-Malware Malwarebytes Corporation (Verified) Malwarebytes Corporation
notepad.exe 7220 < 0.01 1,380 K 5,016 K Notepad Microsoft Corporation (Verified) Microsoft Windows
ehtray.exe 3384 < 0.01 1,440 K 1,628 K Media Center Tray Applet Microsoft Corporation (Verified) Microsoft Windows
notepad.exe 6696 < 0.01 2,104 K 5,752 K Notepad Microsoft Corporation (Verified) Microsoft Windows
AdobeARM.exe 3604 < 0.01 4,488 K 10,364 K Adobe Reader and Acrobat Manager Adobe Systems Incorporated (Verified) Adobe Systems, Incorporated
sttray.exe 3428 < 0.01 4,304 K 8,616 K Sigmatel Audio system tray application IDT, Inc. (Verified) Microsoft Windows Hardware Compatibility Publisher
avgrsx.exe 568 < 0.01 37,428 K 384 K AVG Resident Shield Service AVG Technologies CZ, s.r.o. (Verified) AVG Technologies CZ, s.r.o.
audiodg.exe 1368 < 0.01 14,660 K 16,632 K Windows Audio Device Graph Isolation Microsoft Corporation (Verified) Microsoft Windows
wmpnscfg.exe 3476 < 0.01 1,720 K 5,112 K Windows Media Player Network Sharing Service Configuration Application Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 2216 < 0.01 3,768 K 7,160 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
iTunesHelper.exe 3196 < 0.01 5,124 K 11,196 K iTunesHelper Apple Inc. (Verified) Apple Inc.
lsass.exe 948 < 0.01 3,472 K 8,368 K Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows
BTStackServer.exe 4204 < 0.01 12,984 K 12,060 K Bluetooth Stack COM Server Broadcom Corporation. (Verified) Broadcom Corporation
SearchIndexer.exe 3580 < 0.01 41,612 K 19,600 K Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 1440 < 0.01 8,972 K 14,180 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
avgwdsvc.exe 2132 < 0.01 9,120 K 17,584 K AVG Watchdog Service AVG Technologies CZ, s.r.o. (Verified) AVG Technologies
iPodService.exe 5888 < 0.01 2,944 K 5,324 K iPodService Module (32-bit) Apple Inc. (Verified) Apple Inc.
nvvsvc.exe 2040 < 0.01 3,128 K 6,884 K NVIDIA Driver Helper Service, Version 186.21 NVIDIA Corporation (Verified) NVIDIA Corporation
services.exe 936 < 0.01 2,856 K 7,936 K Services and Controller app Microsoft Corporation (Verified) Microsoft Windows
taskeng.exe 2896 < 0.01 10,092 K 11,164 K Task Scheduler Engine Microsoft Corporation (Verified) Microsoft Windows
avgtray.exe 3420 < 0.01 14,036 K 12,724 K AVG Tray Monitor AVG Technologies CZ, s.r.o. (Verified) AVG Technologies CZ, s.r.o.
svchost.exe 1268 < 0.01 86,392 K 90,568 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 1644 < 0.01 22,784 K 22,480 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
wlanext.exe 1788 < 0.01 2,036 K 5,200 K Windows Wireless LAN 802.11 Extensibility Framework Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 1184 < 0.01 3,888 K 6,700 K Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
stacsv.exe 2636 < 0.01 8,320 K 6,224 K STacSV Module IDT, Inc. (Verified) Microsoft Windows Hardware Compatibility Publisher
csrss.exe 832 < 0.01 2,052 K 7,372 K Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows
BTTray.exe 4060 < 0.01 6,136 K 10,748 K Bluetooth Tray Application Broadcom Corporation. (Verified) Broadcom Corporation
WLTRAY.EXE 4016 < 0.01 26,608 K 22,072 K Dell Wireless WLAN Card Wireless Network Tray Applet Dell Inc. (Unable to verify) Dell Inc.
BCMWLTRY.EXE 1768 < 0.01 27,668 K 21,656 K Dell Wireless WLAN Card Wireless Network Controller Dell Inc. (Unable to verify) Dell Inc.
AppleMobileDeviceService.exe 844 < 0.01 6,168 K 11,572 K MobileDeviceService Apple Inc. (Verified) Apple Inc.
WmiApSrv.exe 7588 < 0.01 2,392 K 4,968 K WMI Performance Reverse Adapter Microsoft Corporation (Verified) Microsoft Windows
avgidsagent.exe 3664 < 0.01 18,592 K 14,496 K AVG Identity Protection Service AVG Technologies CZ, s.r.o. (Verified) AVG Technologies CZ, s.r.o.
csrss.exe 904 < 0.01 2,552 K 9,456 K Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows
explorer.exe 2936 < 0.01 36,856 K 51,824 K Windows Explorer Microsoft Corporation (Verified) Microsoft Windows
mbamservice.exe 4372 < 0.01 103,856 K 64,152 K Malwarebytes Anti-Malware Malwarebytes Corporation (Verified) Malwarebytes Corporation
Skype.exe 3068 < 0.01 73,080 K 77,784 K Skype Skype Technologies S.A. (Verified) Skype Technologies SA
opera.exe 4308 < 0.01 260,000 K 277,728 K Opera Internet Browser Opera Software (Verified) Opera Software ASA
wmpnetwk.exe 5580 < 0.01 20,724 K 27,796 K Windows Media Player Network Sharing Service Microsoft Corporation (Verified) Microsoft Windows
OEM02Mon.exe 4008 < 0.01 2,532 K 4,672 K Live! Cam Console Auto Launcher Creative Technology Ltd. (Verified) Microsoft Windows Hardware Compatibility Publisher
vprot.exe 2480 < 0.01 15,324 K 20,168 K VProtect Application (Verified) AVG Technologies
opera_plugin_wrapper.exe 4296 < 0.01 15,416 K 29,988 K Opera Internet Browser plugin wrapper Opera Software (Verified) Opera Software ASA
dwm.exe 2788 < 0.01 44,072 K 52,860 K Desktop Window Manager Microsoft Corporation (Verified) Microsoft Windows
SynTPEnh.exe 4000 < 0.01 2,296 K 6,636 K Synaptics TouchPad Enhancements Synaptics, Inc. (Verified) Microsoft Windows Hardware Compatibility Publisher
System 4 < 0.01 0 K 39,392 K
PCMService.exe 4044 < 0.01 7,912 K 11,236 K CyberLink PowerCinema Resident Program CyberLink Corp. (Unable to verify) CyberLink Corp.
procexp.exe 6336 0.77 22,388 K 33,380 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
System Idle Process 0 99.23 0 K 24 K




Eset

C:\Users\Dell\Downloads\cnet2_CoffeeHTML12_exe.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined
C:\Users\Dell\Downloads\cnet2_setup_zip.exe a variant of Win32/InstallCore.D application cleaned by deleting - quarantined



log

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=7bbe38a8aa2783408fe751319fdbc4ee
# end=stopped
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-09-07 04:18:53
# local_time=2012-09-06 09:18:53 (-0800, Pacific Daylight Time)
# country="United States"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1024 16777215 100 0 3651892 3651892 0 0
# compatibility_mode=5892 16776574 100 100 2970793 183598015 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=31553
# found=0
# cleaned=0
# scan_time=1045
# version=7
# iexplore.exe=9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=7bbe38a8aa2783408fe751319fdbc4ee
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-09-07 08:15:38
# local_time=2012-09-07 01:15:38 (-0800, Pacific Daylight Time)
# country="United States"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1024 16777215 100 0 3705008 3705008 0 0
# compatibility_mode=5892 16776574 100 100 3023909 183651131 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=200481
# found=2
# cleaned=2
# scan_time=5334
C:\Users\Dell\Downloads\cnet2_CoffeeHTML12_exe.exe a variant of Win32/InstallCore.D application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\Users\Dell\Downloads\cnet2_setup_zip.exe a variant of Win32/InstallCore.D application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C





When I did bitdefender I did not get a "view report" option. It just said: "Good news! We found no active infections on your PC Keep it clean with Bitdefender Antivirus Plus 2012!"
  • 0

#14
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,598 posts
  • MVP
spc was just complaining about tcpmon.ini as usual so nothing to worry about.

Bitdefender must have changed. Will have to rerun and see if I can figure out how to get a report.

Uninstall speccy. You don't need it.

I don't see anything wrong with the PC now. Are you still having problems.
  • 0

#15
CicisMom

CicisMom

    New Member

  • Topic Starter
  • Member
  • Pip
  • 9 posts
Well, I'm still getting pop-ups from my anti-virus about a list of tracking cookies foound. And both my windows movie maker programs are still not working, even though I had already un-installed and re-installed them. It keeps saying the files may be corrupt only after I try to export, but the files are fine because they work on other computers, and I am able to play the back. So I thought maybe I had something that was affecting my computer and causing the program to think it was the files. But not I'm just not sure what's wrong if nothing bad was found.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP