Hello,
I am not sure if my problem is related to a virus but it seems like a good thing to check. Several things are going wrong, they don't seem linked in any way but here they are:
My default beep (Control Panel, Sounds, Sounds, Program Events, Default Beep) is set to Windows XP Ding.wav. The folder C:\Windows\Media contains Windows XP Ding.wav and it plays just fine. However, anytime the default beep is supposed to play, such as when closing a Word document a message appears asking to save, the System Beep is played instead. The System Beep is the beep that comes from the PC itself, not through the speakers. This happened to me a few weeks ago and and I fixed it by checking the registry and adding a missing line. I checked the registry now and it seems like it has the right lines although I remember one of the Keys having 2 entries the last time I looked and all the Keys that are involved have only 1 entry. I wish I had taken a screenshot when I fixed it last time. I have been unable to fix this issue.
Some settings seem to have changed. For example, I like to see file extensions so Tools, Folder Options, View has "Hide File Extensions" unchecked. Yet today after a reboot, extensions are hidden and I had to change it back to the way I prefer.
Software programs sometimes hang and I have to reboot.
What I have tried: System Restore from a point 3 days ago.
Ran Avast and Malwarebyte Anti-Malware
Thank you for your assistance.
Here is my OTL log:
OTL logfile created on: 6/16/2014 10:07:11 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Lauren\My Documents\Software\OTL (post logs to geekstogo)
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.75 Gb Total Physical Memory | 2.20 Gb Available Physical Memory | 80.15% Memory free
4.59 Gb Paging File | 4.13 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 242.09 Gb Free Space | 51.98% Space Free | Partition Type: NTFS
Drive J: | 931.51 Gb Total Space | 28.46 Gb Free Space | 3.05% Space Free | Partition Type: NTFS
Computer Name: DELL-DESKTOP | User Name: Lauren | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2014/06/16 20:59:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Lauren\My Documents\Software\OTL (post logs to geekstogo)\OTL.exe
PRC - [2014/06/06 14:13:01 | 003,890,208 | ---- | M] (AVAST Software) -- C:\Program Files\Avast\avastui.exe
PRC - [2014/04/23 02:12:39 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\Avast\AvastSvc.exe
PRC - [2014/01/15 16:07:27 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2014/01/13 13:52:24 | 000,103,936 | ---- | M] (Freemake) -- C:\Documents and Settings\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
PRC - [2014/01/13 13:52:22 | 000,009,216 | ---- | M] (Ellora Assets Corp.) -- C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe
PRC - [2013/12/09 22:22:32 | 002,279,712 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
PRC - [2013/12/09 22:21:14 | 001,494,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2013/12/02 12:48:44 | 000,036,936 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\Program Files\EaseUSTodo Backup\bin\Agent.exe
PRC - [2013/10/10 18:54:44 | 000,120,088 | ---- | M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe
PRC - [2013/09/04 12:46:52 | 000,023,624 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\Program Files\EaseUSTodo Backup\bin\GuardAgent.exe
PRC - [2008/04/14 06:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/01/11 05:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
PRC - [1999/03/18 01:38:10 | 008,798,260 | R--- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office\WINWORD.EXE
========== Modules (No Company Name) ==========
MOD - [2014/06/16 21:12:36 | 002,776,064 | ---- | M] () -- C:\Program Files\Avast\defs\14061601\algo.dll
MOD - [2014/04/13 21:41:41 | 019,336,120 | ---- | M] () -- C:\Program Files\Avast\libcef.dll
MOD - [2014/02/14 12:14:31 | 001,079,296 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\6769297ceb522c4fe6de2c5e3575812d\System.IdentityModel.ni.dll
MOD - [2014/02/14 12:14:30 | 018,109,952 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\a95ac0b02617b9dadbc5f625586b2aac\System.ServiceModel.ni.dll
MOD - [2014/02/14 12:14:10 | 001,218,560 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Management\7612d2ecdf9c6beedc264e9390e97b0f\System.Management.ni.dll
MOD - [2014/02/14 12:13:51 | 000,221,696 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\2e3fdae8546832614633495638bef8d0\System.ServiceProcess.ni.dll
MOD - [2014/02/14 12:13:51 | 000,148,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\d1389795ee255d46ed3ed84776d2bb69\System.Configuration.Install.ni.dll
MOD - [2014/02/14 12:13:43 | 001,926,144 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Web.Services\3f0c8a7233cdd1741c75978c900ed398\System.Web.Services.ni.dll
MOD - [2014/02/14 12:13:27 | 001,021,952 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\cd626ecab8e1657628451408aba720cd\System.Runtime.DurableInstancing.ni.dll
MOD - [2014/02/14 12:13:26 | 002,659,328 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\be0a1bb51a0d8fb41140c8111ed56d19\System.Runtime.Serialization.ni.dll
MOD - [2014/02/14 12:13:26 | 000,143,360 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\88aec4231adca9f5a4226c83911c4dad\SMDiagnostics.ni.dll
MOD - [2014/02/14 12:08:36 | 005,628,928 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\850fa7110c7423c324762c1ad3130219\System.Xml.ni.dll
MOD - [2014/02/14 12:08:35 | 007,070,720 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\354a5906fd46f4374f86916debf3ebcb\System.Core.ni.dll
MOD - [2014/02/14 12:08:32 | 001,014,272 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\991c4e11f571a4074b9c4a5841222338\System.Configuration.ni.dll
MOD - [2014/02/14 12:08:28 | 009,099,776 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\4c906eb82e6f56aea01b2a7291fab7ea\System.ni.dll
MOD - [2014/02/14 12:08:20 | 014,416,896 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\4e62d1d9b7dd2c2d14915abb73c22d50\mscorlib.ni.dll
MOD - [2014/01/13 19:06:46 | 000,105,544 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\ActivationOnline.dll
MOD - [2013/12/24 18:42:12 | 000,017,992 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\AndroidDeviceManager.dll
MOD - [2013/12/23 12:01:32 | 000,281,672 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\AndroidImage.dll
MOD - [2013/11/14 15:59:58 | 000,031,304 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\CheckTool.dll
MOD - [2013/10/22 18:31:30 | 000,037,960 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\ActiveOnline.dll
MOD - [2013/09/04 12:19:34 | 000,135,240 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\VMConfig.dll
MOD - [2013/09/04 12:19:34 | 000,096,840 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\TBFireWall.dll
MOD - [2013/09/04 12:19:34 | 000,069,192 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\TbTapeBrowse.dll
MOD - [2013/09/04 12:19:34 | 000,050,248 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\TBGetRemoteNetInfo.dll
MOD - [2013/09/04 12:19:30 | 000,115,784 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\NASOperator.dll
MOD - [2013/09/04 12:19:26 | 000,578,632 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\ExImage.dll
MOD - [2013/09/04 12:19:26 | 000,468,040 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\ExchBackupSizeEx.dll
MOD - [2013/09/04 12:19:26 | 000,293,960 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\ExchBackupSize.dll
MOD - [2013/09/04 12:19:26 | 000,068,680 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\EnumTapeDevice.dll
MOD - [2013/09/04 12:19:24 | 000,192,584 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\EmailBrowser.dll
MOD - [2013/09/04 12:19:24 | 000,192,072 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\EmailBackupSize.dll
MOD - [2013/09/04 12:19:24 | 000,030,280 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\DiskSearchImg.dll
MOD - [2013/09/04 12:19:22 | 000,135,752 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\CloudOperator.dll
MOD - [2013/09/04 12:19:22 | 000,098,888 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\CodeLog.dll
MOD - [2013/09/04 12:19:22 | 000,029,768 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\CompressFile.dll
MOD - [2013/09/04 12:19:20 | 000,022,600 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\AccountManager.dll
MOD - [2008/11/25 18:18:00 | 001,291,264 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\libxml2.dll
MOD - [2004/10/05 04:08:00 | 000,055,808 | ---- | M] () -- C:\Program Files\EaseUSTodo Backup\bin\zlib1.dll
========== Services (SafeList) ==========
SRV - [2014/05/13 18:22:28 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/05/10 02:08:38 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/04/23 02:12:39 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2014/01/15 16:07:27 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2014/01/13 13:52:24 | 000,103,936 | ---- | M] (Freemake) [Auto | Running] -- C:\Documents and Settings\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
SRV - [2014/01/13 13:52:22 | 000,009,216 | ---- | M] (Ellora Assets Corp.) [Auto | Running] -- C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe -- (FreemakeVideoCapture)
SRV - [2013/12/09 22:21:14 | 001,494,304 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2013/12/02 12:48:44 | 000,036,936 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Auto | Running] -- C:\Program Files\EaseUSTodo Backup\bin\Agent.exe -- (EaseUS Agent)
SRV - [2013/10/10 18:54:44 | 000,120,088 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE)
SRV - [2013/09/04 12:46:52 | 000,023,624 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Auto | Running] -- C:\Program Files\EaseUSTodo Backup\bin\GuardAgent.exe -- (Guard Agent)
SRV - [2012/11/09 12:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2007/01/11 05:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2014/05/15 14:13:02 | 000,777,488 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswsnx.sys -- (aswSnx)
DRV - [2014/05/15 14:13:02 | 000,411,680 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswsp.sys -- (aswSP)
DRV - [2014/05/15 14:13:02 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswrdr.sys -- (aswRdr)
DRV - [2014/04/23 02:12:55 | 000,180,632 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014/04/23 02:12:55 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014/04/23 02:12:55 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014/04/23 02:12:55 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2014/04/23 02:12:54 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2013/11/28 09:38:20 | 000,129,312 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2013/09/04 12:22:02 | 000,185,800 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\EuFdDisk.sys -- (EUFDDISK)
DRV - [2013/09/04 12:22:02 | 000,052,040 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\eubakup.sys -- (EUBAKUP)
DRV - [2013/09/04 12:22:02 | 000,040,776 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\EUBKMON.sys -- (EUBKMON)
DRV - [2013/09/04 12:22:02 | 000,014,920 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\eudskacs.sys -- (EUDSKACS)
DRV - [2013/06/05 01:18:18 | 000,181,912 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2013/06/05 01:18:18 | 000,084,248 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2011/07/22 12:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011/07/12 17:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2011/02/11 17:23:34 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf)
DRV - [2010/11/24 13:11:32 | 000,037,920 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2008/01/15 20:17:58 | 004,652,544 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2007/06/20 13:08:20 | 000,987,904 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2007/06/20 13:07:42 | 000,268,032 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWBS2.sys -- (HSFHWBS2)
DRV - [2007/06/20 13:07:38 | 000,731,136 | R--- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2007/05/11 18:31:36 | 003,580,832 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\lvuvc.sys -- (LVUVC)
DRV - [2007/05/11 18:31:22 | 000,041,888 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2007/02/15 20:57:04 | 000,034,760 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys -- (ElbyCDFL)
DRV - [2006/11/02 07:00:08 | 000,039,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\winusb.sys -- (WinUSB)
DRV - [2005/10/27 16:06:30 | 000,356,096 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61)
DRV - [2005/02/23 15:58:56 | 000,011,776 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2000/04/04 15:27:38 | 000,019,824 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\parclass.sys -- (Parclass)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 72 89 D5 D2 10 16 CF 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {B6D5861C-31D3-4027-A88B-6DFA4823E89A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.c...Box&Form=IE8SRC
IE - HKCU\..\SearchScopes\{9572F753-6188-4928-8B93-D29FDA5AFB50}: "URL" = http://search.yahoo....petb&type=10295
IE - HKCU\..\SearchScopes\{B6D5861C-31D3-4027-A88B-6DFA4823E89A}: "URL" = http://www.google.co...utputEncoding?}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "www.centralohiogravesearch.com"
FF - prefs.js..extensions.enabledAddons: %7Be5bbc237-c99b-4ced-a061-0be27703295f%7D:1.3
FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:9.0.2018.95
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:29.0.1
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\WINDOWS\system32\npdeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Avast\WebRep\FF [2014/06/16 21:09:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 29.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2014/01/20 00:25:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lauren\Application Data\Mozilla\Extensions
[2014/03/20 21:47:05 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\37eq72n9.default\extensions
[2014/03/20 01:10:29 | 000,013,332 | ---- | M] () (No name found) -- C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\37eq72n9.default\extensions\{e5bbc237-c99b-4ced-a061-0be27703295f}.xpi
[2014/05/10 02:08:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2014/05/10 02:08:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}
[2014/05/10 02:08:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014/05/10 02:08:40 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2014/06/16 21:09:28 | 000,000,000 | ---D | M] (avast! Online Security) -- C:\PROGRAM FILES\AVAST\WEBREP\FF
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - plugin: Error reading preferences file
CHR - Extension: Google Docs = C:\Documents and Settings\Lauren\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Wallet = C:\Documents and Settings\Lauren\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
O1 HOSTS File: ([2014/01/21 19:28:19 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe ()
O4 - HKCU..\Run: [GeeTeeDee] C:\Documents and Settings\Lauren\Local Settings\Application Data\Codea\GeeTeeDee\Application\GeeTeeDee.exe File not found
O4 - HKCU..\Run: [Wunderlist] "C:\Documents and Settings\Lauren\Local Settings\Apps\2.0\KE2D0ZJN.1LE\JWQ429C4.1KJ\wund..tion_45ec1bcecca77a53_0002.0000_764351e9af88762f\Wunderlist.exe" /silent File not found
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.51.2)
O16 - DPF: {CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_38)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.51.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 209.18.47.61 209.18.47.62 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{343812E6-4E4B-4548-8652-4045ACD4457A}: DhcpNameServer = 209.18.47.61 209.18.47.62 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2014/01/15 12:57:49 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2010/01/10 21:54:52 | 000,000,170 | ---- | M] () - J:\Autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2014/06/16 21:55:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lauren\Desktop\defaultbeep
[2014/06/09 00:59:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\HTML-Kit
[2014/06/02 00:03:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lauren\Desktop\Dining Room
[2014/05/31 16:17:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lauren\Desktop\Bunk Bed
========== Files - Modified Within 30 Days ==========
[2014/06/16 22:09:15 | 000,009,838 | ---- | M] () -- C:\WINDOWS\System32\nvAppTimestamps
[2014/06/16 22:03:01 | 000,000,334 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2014/06/16 22:02:37 | 000,002,473 | ---- | M] () -- C:\Documents and Settings\Lauren\Desktop\Word.lnk
[2014/06/16 21:59:26 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014/06/16 21:57:36 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014/06/16 21:57:36 | 000,000,224 | ---- | M] () -- C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job
[2014/06/16 21:57:30 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014/06/16 21:57:20 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\lvuvc.hs
[2014/06/16 21:36:11 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014/06/16 21:22:15 | 000,000,830 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014/06/16 21:11:56 | 000,001,552 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2014/06/16 20:57:31 | 000,000,315 | ---- | M] () -- C:\Documents and Settings\Lauren\Desktop\defaultbeep.zip
[2014/06/13 00:27:13 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2014/06/12 13:58:44 | 000,004,413 | ---- | M] () -- C:\WINDOWS\ULEAD32.INI
[2014/06/09 01:28:38 | 000,000,376 | ---- | M] () -- C:\WINDOWS\ODBC.INI
[2014/06/09 01:13:49 | 092,553,240 | ---- | M] () -- C:\Documents and Settings\Lauren\Desktop\RegistryBeforeBeepFix.reg
[2014/06/08 15:00:00 | 000,000,218 | ---- | M] () -- C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job
[2014/06/08 12:45:21 | 000,003,922 | ---- | M] () -- C:\Documents and Settings\Lauren\.recently-used.xbel
[2014/05/27 21:39:35 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\scribeShakeIcon.job
[2014/05/25 02:53:09 | 000,000,889 | ---- | M] () -- C:\Documents and Settings\Lauren\Desktop\UNION CEMETERY.lnk
[2014/05/19 12:08:30 | 000,000,649 | ---- | M] () -- C:\Documents and Settings\Lauren\Desktop\RunLog.lnk
========== Files Created - No Company Name ==========
[2014/06/16 21:54:27 | 000,000,321 | ---- | C] () -- C:\Documents and Settings\Lauren\Desktop\defaultbeep.reg
[2014/06/16 21:11:56 | 000,001,552 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2014/06/16 20:57:31 | 000,000,315 | ---- | C] () -- C:\Documents and Settings\Lauren\Desktop\defaultbeep.zip
[2014/06/09 01:13:44 | 092,553,240 | ---- | C] () -- C:\Documents and Settings\Lauren\Desktop\RegistryBeforeBeepFix.reg
[2014/06/08 12:45:21 | 000,003,922 | ---- | C] () -- C:\Documents and Settings\Lauren\.recently-used.xbel
[2014/05/27 21:39:34 | 000,000,274 | ---- | C] () -- C:\WINDOWS\tasks\scribeShakeIcon.job
[2014/05/25 02:53:09 | 000,000,889 | ---- | C] () -- C:\Documents and Settings\Lauren\Desktop\UNION CEMETERY.lnk
[2014/05/19 12:08:30 | 000,000,649 | ---- | C] () -- C:\Documents and Settings\Lauren\Desktop\RunLog.lnk
[2014/05/09 21:21:41 | 000,966,656 | ---- | C] () -- C:\WINDOWS\System32\w2w32.dll
[2014/05/09 21:21:41 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\WebDial.exe
[2014/04/23 02:13:01 | 000,024,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswHwid.sys
[2014/04/13 21:41:59 | 000,180,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2014/04/13 21:41:55 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2014/03/23 02:21:00 | 000,109,057 | ---- | C] () -- C:\WINDOWS\File Renamer - Basic Uninstaller.exe
[2014/03/02 19:46:44 | 000,000,134 | ---- | C] () -- C:\Documents and Settings\Lauren\Application Data\PDFShaper.ini
[2014/01/30 12:47:37 | 000,022,396 | ---- | C] () -- C:\WINDOWS\System32\drivers\USBkey.sys
[2014/01/30 12:47:37 | 000,011,668 | ---- | C] () -- C:\WINDOWS\System32\ppmon.exe
[2014/01/30 12:47:37 | 000,007,440 | ---- | C] () -- C:\WINDOWS\System32\ppmon.dll
[2014/01/28 02:02:35 | 000,329,282 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-2000478354-162531612-839522115-1003-0.dat
[2014/01/20 17:02:42 | 000,040,776 | ---- | C] () -- C:\WINDOWS\System32\drivers\EUBKMON.sys
[2014/01/19 19:32:36 | 000,329,282 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-18-0.dat
[2014/01/19 19:32:35 | 000,590,264 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2014/01/19 19:32:35 | 000,172,186 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2014/01/19 17:06:37 | 000,348,672 | ---- | C] () -- C:\WINDOWS\System32\HIDWatch.dll
[2014/01/19 17:06:37 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\Dssconv.dll
[2014/01/19 17:06:37 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\KL2DLL32.DLL
[2014/01/19 17:03:19 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\ScratchRemoval.dll
[2014/01/19 02:21:52 | 000,000,067 | ---- | C] () -- C:\Documents and Settings\Lauren\Application Data\burnaware.ini
[2014/01/18 21:03:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\plclient.INI
[2014/01/18 20:38:34 | 000,001,057 | ---- | C] () -- C:\Documents and Settings\Lauren\Application Data\vso_ts_preview.xml
[2014/01/18 00:28:40 | 000,004,413 | ---- | C] () -- C:\WINDOWS\ULEAD32.INI
[2014/01/17 18:45:26 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2014/01/15 16:09:58 | 000,218,200 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2014/01/15 15:06:24 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2014/01/15 14:50:43 | 001,134,316 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2014/01/15 14:50:43 | 001,134,316 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2014/01/15 14:50:43 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2014/01/15 14:46:49 | 003,557,400 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2014/01/15 14:35:01 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2014/01/15 13:22:12 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2014/01/15 12:59:06 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2014/01/15 12:55:52 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2014/01/15 07:28:39 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2014/01/15 07:27:49 | 000,163,072 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
========== ZeroAccess Check ==========
[2014/01/15 13:35:10 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/14 06:42:06 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 08:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/14 06:42:10 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2014/04/13 21:33:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2014/01/19 01:02:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Battle.net
[2014/01/17 15:38:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON
[2014/01/19 17:54:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Freemake
[2014/01/24 02:20:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2014/04/23 13:15:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Package Cache
[2014/01/18 14:25:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\RapidSolution
[2014/01/17 20:04:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\RootsMagic
[2014/01/17 20:04:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\RootsMagic Shared
[2014/03/21 20:00:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Samsung
[2014/01/18 21:02:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ScanSoft
[2014/02/11 03:43:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\vsosdk
[2014/03/24 18:28:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\6Wunderkinder
[2014/04/13 21:43:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\AVAST Software
[2014/01/19 01:05:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\Battle.net
[2014/01/18 19:22:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\calibre
[2014/05/17 00:13:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\DocToHtml
[2014/01/25 02:12:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\EMCO
[2014/01/19 03:33:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\EPSON
[2014/03/03 04:31:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\EssentialPIM
[2014/05/27 22:25:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\gtk-2.0
[2014/01/17 23:48:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\ImgBurn
[2014/02/15 02:04:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\KewlBoxPrefs
[2014/01/17 23:04:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\MPC-HC
[2014/01/24 02:20:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\NCH Swift Sound
[2014/01/17 18:50:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\Notepad++
[2014/04/25 00:11:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\OpenOffice
[2014/01/17 21:28:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\OpenOffice.org
[2014/01/19 14:48:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\OverDrive
[2014/01/17 20:04:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\RootsMagic
[2014/01/18 21:03:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\ScanSoft
[2014/03/01 21:10:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\Vso
[2014/01/15 16:20:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\Windows Desktop Search
[2014/01/18 00:39:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lauren\Application Data\Windows Search
========== Purity Check ==========
< End of report >
Sign In
Create Account
