This topic is locked
Hello,
I have 2 old win xp pcs I'm trying to resurrect and tweak to improve speed & system conflicts that maybe effecting the pc's overall performance.
I will of course address each pc one-at-time on entirely separate threads.
The 1st one I chose to address is an old Compaq Persario that came loaded with WIN ME. Back when I was using this pc I used Power Quest Partition Magic 7.0 & Power Quest Boot Magic 7.0 to create several (5 or 6??) partitions... 3 of which were for separate "Boot-Up" options (2 using Win Me & 1 using Win XP).
Win XP was added via a Win XP update disk that came with the pc that ran on the designated win xp partition... all this was done several years ago and I don't remember all the exact details/order of events during this time...
Any rate...
I've recently decided to try incorporate this old pc into my home network using the Win XP boot. As one would expect many updates were needed... so I did the following: (Note order listed below does not represent the order installed, while it's safe to say the microsoft updates were done early on... I really don't recall the exact order all the changes below were implemented)
. Microsoft updates download & installed:
- WindowsXP-KB936929-SP3-x86-ENU (<--system only had service pack 1 installed)
- IE8-WindowsXP-KB2618444-x86-ENU
- Windows-KB890830-x64-V5.20 <-- this 1 failed to install
- Microsoft.NET Framework 4
Other Software Recently Installed:
- NetGear WG311v3 PCI Adapter
- Avast Free Anti-Virus
- Eusing Free Registry Cleaner
- Firefox 35.?? <-- additionally I tried to install Chrome bowser several time, but it failed)
- Archer C7
- TweakBit PC Suite <-- this software has now been removed
- Jing
- DropBox
- TP-Link USB Print Controller
From the get go the pc was running SLOW & some where along the line my "Login Page" changed from the normal Win Xp login to the more Win NT style login. Additionally my "EXPLORER.EXE" file became corrupted & I lost all my desktop icons & menus etc... which I now have to run the Task Manager trick of stopping the "EXPLORER.EXE" process and then adding it as new task to reveal my desktop stuff.
All that said the pc does indeed run, but unfortunately very slowly. It took me HOURS to make the above updates & installations. When I booted it up the hard drive reads like crazy even thou the only thing running was the Task Manager. I watched process CPU usages & noted that initially that "AvastSvc.exe" & "System Idle Process" were using the majority of the CPU sometimes as much as 97... after a while (5+ minutes) I noticed "Mscorsvw.exe" was starting to high CPUs of 97.
After 10+ minutes the hard drive light is still flickering & reading like crazy... once again I checked the Task Manager CPU process usage and found that "AvastSvc.exe" & "System Idle Process" were biggest users... not as high as prior about 50, but sometime hitting 97 for a second then dropping to around 47. At this point I had 2 windows open (My PC, & Add-Remove Programs) in addition to the Task Manager.
When I connect to the internet the PC runs EXTREMELY PAINFULLY SLOW... barely crawling... the hard drive is reading like crazy & it takes for ever to move forward to the next task... and even after letting it sit & run the tasks applied for 15+ minutes moving forward is still extremely slow & closing Firefox will take 5-10 minutes.
At one point I installed TweakBit PC Suite which wouldn't run the "fixes" it listed so I gave remote-access to my pc to their support tech & after about 45 minutes he was unable to resolve the issue & said my pc needed optimizing & he could have it done for $199. Being this pc hardware & software is antiquated I couldn't justify spending more money, so I have since uninstalled the software & applied for a refund.
I fortunately stumbled onto this forum & thought I give this a try prior to moving forward. Below is a copy of my OTL log I ran last weekend:
Thanks in advance,
Ziggy99
OTL logfile created on: 1/31/2015 3:51:41 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = J:\
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: enu | Date Format: M/d/yyyy
255.55 Mb Total Physical Memory | 62.59 Mb Available Physical Memory | 24.49% Memory free
617.63 Mb Paging File | 408.79 Mb Available in Paging File | 66.19% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19.45 Gb Total Space | 5.29 Gb Free Space | 27.19% Space Free | Partition Type: FAT32
Drive D: | 3.87 Gb Total Space | 3.87 Gb Free Space | 100.00% Space Free | Partition Type: FAT32
Drive E: | 4.67 Gb Total Space | 2.54 Gb Free Space | 54.44% Space Free | Partition Type: FAT32
Drive H: | 12.11 Gb Total Space | 4.88 Gb Free Space | 40.32% Space Free | Partition Type: FAT32
Drive I: | 61.63 Gb Total Space | 53.30 Gb Free Space | 86.48% Space Free | Partition Type: FAT32
Drive J: | 982.22 Mb Total Space | 693.31 Mb Free Space | 70.59% Space Free | Partition Type: FAT
Computer Name: COMPUTER | User Name: default | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2015/01/31 13:28:30 | 000,602,112 | ---- | M] (OldTimer Tools) -- J:\OTL.exe
PRC - [2015/01/21 17:29:32 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2001/08/17 22:36:54 | 000,086,016 | ---- | M] (PCtel, Inc.) -- C:\WINDOWS\SYSTEM32\pctspk.exe
========== Modules (No Company Name) ==========
MOD - [2015/01/31 15:35:50 | 002,913,280 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\15013101\algo.dll
MOD - [2001/03/02 12:02:04 | 000,037,808 | ---- | M] () -- C:\Program Files\Adobe5\Reader\ActiveX\AcroIEHelper.ocx
========== Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2015/01/21 17:29:32 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2015/01/09 04:05:12 | 000,114,800 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2002/01/22 10:32:10 | 000,258,048 | ---- | M] (NeoPlanet) [On_Demand | Stopped] -- C:\Program Files\COMPAQ\Compaq Advisor\bin\compaq-rba.exe -- (Compaq_RBA)
SRV - [2001/08/17 22:36:54 | 000,086,016 | ---- | M] (PCtel, Inc.) [Auto | Running] -- C:\WINDOWS\SYSTEM32\pctspk.exe -- (Pctspk)
SRV - [2001/08/10 13:14:14 | 000,192,512 | ---- | M] (Roxio Inc.) [On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\ImapiRox.exe -- (ImapiService)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | Unavailable | Unknown] -- -- (TPLINKUDSMBus)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\EAWDMFD.sys -- (EAWDMFD)
DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\EACMOS.SYS -- (EACMOS)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2015/01/22 15:21:00 | 000,787,800 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\aswSnx.sys -- (aswSnx)
DRV - [2015/01/22 15:20:22 | 000,423,784 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\aswSP.sys -- (aswSP)
DRV - [2015/01/21 17:29:42 | 000,206,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2015/01/21 17:29:42 | 000,070,384 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\aswMonFlt.sys -- (aswMonFlt)
DRV - [2015/01/21 17:29:42 | 000,057,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\aswTdi.sys -- (aswTdi)
DRV - [2015/01/21 17:29:42 | 000,055,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\aswRdr.sys -- (aswRdr)
DRV - [2015/01/21 17:29:42 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2015/01/21 17:29:42 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\aswHwid.sys -- (aswHwid)
DRV - [2008/04/14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\gameenum.sys -- (gameenum)
DRV - [2008/04/13 22:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\rtl8139.sys -- (rtl8139)
DRV - [2005/12/29 18:07:50 | 000,282,624 | R--- | M] (Marvell Semiconductor, Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\WG311v3XP.sys -- (W8335XP)
DRV - [2003/11/10 11:57:56 | 000,055,216 | ---- | M] (Roxio) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdr4_xp.sys -- (Cdr4_xp)
DRV - [2003/11/10 11:57:56 | 000,022,713 | ---- | M] (Roxio) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\cdralw2k.sys -- (Cdralw2k)
DRV - [2003/10/21 17:26:08 | 000,904,496 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\ha10kx2k.sys -- (ha10kx2k)
DRV - [2003/10/21 17:23:44 | 000,148,432 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\haP16v2k.sys -- (hap16v2k)
DRV - [2003/10/21 17:22:18 | 000,645,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\ctac32k.sys -- (ctac32k)
DRV - [2003/10/14 11:17:56 | 000,332,800 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\ctdvda2k.sys -- (ctdvda2k)
DRV - [2003/10/13 17:42:12 | 000,145,488 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\emupia2k.sys -- (emupia)
DRV - [2003/10/08 10:09:10 | 000,130,288 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\ctsfm2k.sys -- (ctsfm2k)
DRV - [2003/10/08 10:08:12 | 000,006,096 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\ctprxy2k.sys -- (ctprxy2k)
DRV - [2003/10/08 10:06:50 | 000,178,672 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\ctoss2k.sys -- (ossrv)
DRV - [2003/10/08 10:06:04 | 000,366,160 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\ctaud2k.sys -- (ctaud2k)
DRV - [2003/03/05 15:07:46 | 000,015,840 | ---- | M] (Creative Technology Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\PfModNT.sys -- (PfModNT)
DRV - [2001/12/04 07:01:00 | 000,003,360 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\PQNTDRV.SYS -- (PQNTDrv)
DRV - [2001/10/04 16:18:36 | 000,053,701 | ---- | M] (Gemplus) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\gcr432.sys -- (Gcr432)
DRV - [2001/09/24 09:39:18 | 000,010,261 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\LVBulk.sys -- (LVBulk)
DRV - [2001/09/24 09:38:26 | 000,033,280 | ---- | M] (Logitech Inc.) [Kernel | System | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\LVSound2.sys -- (lusbaudio)
DRV - [2001/09/20 03:39:44 | 000,193,574 | ---- | M] (Tekom Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\lvvi500a.sys -- (LVVI500A)
DRV - [2001/09/10 10:43:46 | 000,205,824 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\udfreadr_xp.sys -- (UdfReadr_xp)
DRV - [2001/09/10 10:42:10 | 000,233,344 | ---- | M] (Roxio) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\cdudf_xp.sys -- (cdudf_xp)
DRV - [2001/09/10 10:39:52 | 000,017,958 | ---- | M] (Roxio) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\Dvd_2k.sys -- (dvd_2K)
DRV - [2001/09/10 10:39:42 | 000,019,158 | ---- | M] (Roxio) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\Mmc_2k.sys -- (mmc_2K)
DRV - [2001/09/10 10:39:32 | 000,078,486 | ---- | M] (Roxio) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\pwd_2K.sys -- (pwd_2K)
DRV - [2001/09/07 15:41:36 | 000,412,672 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\sbpci.sys -- (sbpci)
DRV - [2001/08/20 11:59:38 | 000,025,472 | ---- | M] (Roxio Inc.) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\imapiRox.sys -- (Imapi)
DRV - [2001/08/17 13:28:16 | 000,397,502 | ---- | M] (PCtel, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\vpctcom.sys -- (Vpctcom)
DRV - [2001/08/17 13:28:16 | 000,064,605 | ---- | M] (PCtel, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\vvoice.sys -- (Vvoice)
DRV - [2001/08/17 13:28:14 | 000,604,253 | ---- | M] (PCTEL, INC.) [Kernel | Boot | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\vmodem.sys -- (Vmodem)
DRV - [2001/08/17 13:28:14 | 000,112,574 | ---- | M] (PCTEL, INC.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\ptserlp.sys -- (Ptserlp)
DRV - [2001/08/17 12:50:26 | 000,731,648 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\nv4.sys -- (nv4)
DRV - [2001/08/17 12:19:34 | 000,040,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\es1371mp.sys -- (es1371)
DRV - [2001/07/18 13:51:14 | 000,013,716 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\pfc.sys -- (pfc)
DRV - [2001/07/11 11:06:12 | 000,023,153 | ---- | M] (SMC Networks Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\SMC1211.sys -- (SMC1211)
DRV - [1998/09/15 20:00:00 | 000,313,184 | ---- | M] (Creative Technology Ltd.) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\ctsyn.sys -- (CTSYN)
DRV - [1998/09/13 20:01:00 | 000,197,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\SYSTEM32\DRIVERS\emu10k1.sys -- (EMU10K1)
DRV - [1998/09/06 20:00:00 | 000,026,496 | ---- | M] (Creative Technology Ltd.) [Kernel | System | Running] -- C:\WINDOWS\SYSTEM32\DRIVERS\sfman.sys -- (SFMAN)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://rd.yahoo.com/...rch/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://rd.yahoo.com/...rch/search.html
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.c...ferrer:source?}
IE - HKLM\..\SearchScopes\{589B893E-773C-4941-88C2-0DCC718E621C}: "URL" = http://taplika.com/r...r=337866173&ir=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.highstream.net/members/
IE - HKCU\..\SearchScopes,DefaultScope = {589B893E-773C-4941-88C2-0DCC718E621C}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.c...Box&Form=IE8SRC
IE - HKCU\..\SearchScopes\{589B893E-773C-4941-88C2-0DCC718E621C}: "URL" = http://taplika.com/r...r=337866173&ir=
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Taplika"
FF - prefs.js..browser.search.isUS: true
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:10.0.2502.149
FF - prefs.js..extensions.enabledAddons: support%40lastpass.com:3.1.1
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:2.0
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: File not found
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Documents and Settings\default\Local Settings\Application Data\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015/01/21 17:29:26 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2004/05/16 12:27:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 35.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2004/05/16 12:27:58 | 000,000,000 | ---D | M]
[2015/01/24 09:55:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\default\Application Data\Mozilla\Extensions
[2004/10/24 13:35:52 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\1kpeerw0.default\extensions
[2004/10/24 13:35:52 | 000,000,000 | ---D | M] (Firefox (default)) -- C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\1kpeerw0.default\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015/01/24 10:03:50 | 000,000,000 | ---D | M] (LastPass) -- C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\1kpeerw0.default\extensions\[email protected]
[2015/01/24 09:59:04 | 000,002,778 | ---- | M] () -- C:\Documents and Settings\default\Application Data\Mozilla\Firefox\Profiles\1kpeerw0.default\searchplugins\Taplika.xml
[2004/10/24 13:36:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2015/01/24 09:54:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2015/01/24 09:54:32 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2004/10/24 13:35:38 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\defaults\profile\extensions
[2004/10/24 13:35:38 | 000,000,000 | ---D | M] (Firefox (default)) -- C:\Program Files\Mozilla Firefox\defaults\profile\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2015/01/21 17:29:26 | 000,000,000 | ---D | M] ("Avast Online Security") -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2004/10/01 10:14:00 | 000,061,440 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jsd3250.dll
[2004/10/01 10:14:00 | 000,172,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\xpinstal.dll
[2004/10/01 10:14:00 | 000,094,208 | ---- | M] () -- C:\Program Files\mozilla firefox\components\BrandRes.dll
[2004/10/01 10:14:00 | 000,053,248 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\jar50.dll
[2004/10/01 10:14:00 | 000,150,912 | ---- | M] (Full Circle Software, Inc.) -- C:\Program Files\mozilla firefox\components\fullsoft.dll
[2004/10/01 10:14:00 | 000,024,576 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\qfaservices.dll
[2004/10/01 10:14:00 | 000,001,064 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.src
[2004/10/01 10:14:00 | 000,000,287 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.gif
[2004/10/01 10:14:00 | 000,000,687 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.src
[2004/10/01 10:14:00 | 000,000,692 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\dictionary.src
[2004/10/01 10:14:00 | 000,001,018 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.gif
[2004/10/01 10:14:00 | 000,000,734 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.src
[2004/10/01 10:14:00 | 000,001,113 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.src
[2004/10/01 10:14:00 | 000,000,557 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\dictionary.png
[2004/10/01 10:14:00 | 000,001,076 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.gif
[2004/10/01 10:14:00 | 000,000,680 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.png
O1 HOSTS File: ([2003/11/10 10:19:08 | 000,000,000 | ---- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\etc\hosts
O2 - BHO: (Yahoo! Companion BHO) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Common\ycomp5_1_3_0.dll (Yahoo! Inc.)
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe5\Reader\ActiveX\AcroIEHelper.ocx ()
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (&Yahoo! Companion) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\ycomp5_1_3_0.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - BrandBitmap - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - SmBrandBitmap - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (&Yahoo! Companion) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\ycomp5_1_3_0.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [AdaptecDirectCD] C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe (Roxio)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\STARTEAK.exe (Compaq Computer Corporation)
O4 - HKLM..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [CTHelper] C:\WINDOWS\System32\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Lexmark X5100 Series] C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe (Lexmark International, Inc.)
O4 - HKLM..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver\LVComS.exe (Logitech Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [srmclean] C:\CPQS\scom\srmclean.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe ()
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [WCOLOREAL] C:\Program Files\COMPAQ\Coloreal\coloreal.exe ()
O4 - HKCU..\Run: [Creative MediaSource Go] C:\Program Files\Creative\MediaSource\Go\CTCMSGo.exe (Creative Technology Ltd)
O4 - HKCU..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe (Creative Technology Ltd)
O4 - HKLM..\RunOnce: [WSE_Taplika] C:\WINDOWS\system32\wscript.exe /E:vbscript /B "C:\DOCUME~1\default\APPLIC~1\WSE_Taplika\UpdateProc\bkup.dat" File not found
O4 - HKCU..\RunOnce: [WSE_Taplika] C:\WINDOWS\system32\wscript.exe /E:vbscript /B "C:\DOCUME~1\default\APPLIC~1\WSE_Taplika\UpdateProc\bkup.dat" File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NETGEAR WG311v3 Smart Wizard.lnk = C:\Program Files\NETGEAR\WG311v3\WG311v3.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetIcon = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetHood = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0
O9 - Extra Button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe (America Online, Inc.)
O9 - Extra Button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YPager.exe (Yahoo! Inc.)
O9 - Extra 'Tools' menuitem : Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YPager.exe (Yahoo! Inc.)
O12 - Plugin for: .bcf - C:\Program Files\Internet Explorer\PLUGINS\NPBelv32.dll (Belarc, Inc.)
O12 - Plugin for: .mp3 - C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll (Apple Computer, Inc.)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (InterTrust Technologies Corporation, Inc.)
O15 - HKCU\..Trusted Domains: aol.com ([free] http in Trusted sites)
O16 - DPF: {00000075-9980-0010-8000-00AA00389B71} http://codecs.micros...i386/voxacm.CAB (Reg Error: Key error.)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://www.apple.com...ex/qtplugin.cab (QuickTime Object)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} http://download.yaho...talls/yinst.cab (YInstStarter Class)
O16 - DPF: {32564D57-0000-0010-8000-00AA00389B71} http://codecs.micros...i386/wmv8ax.cab (Reg Error: Key error.)
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} http://a1540.g.akama...meInstaller.exe (Reg Error: Key error.)
O16 - DPF: {5CE8C9BE-B561-4311-8C03-D6F6C1CAF7E1} http://wwss1pro.comp...ect/CSND_AX.CAB (CSND_AX.ctlCSND_AX)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.4.2_04)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} http://v4.windowsupd...7940.4726736111 (Reg Error: Key error.)
O16 - DPF: {A8658086-E6AC-4957-BC8E-7D54A7E8A78E} http://www.microsoft.../20/SassCln.CAB (SassCln Object)
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} http://fdl.msn.com/z...4/heartbeat.cab (HeartbeatCtl Class)
O16 - DPF: {CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.4.2_01)
O16 - DPF: {CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.4.2_04)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://download.mac...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E87A6788-1D0F-4444-8898-1D25829B6755} http://fdl.msn.com/p...at/msnchat4.cab (MSN Chat Control 4.0)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\SYSTEM\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O16 - DPF: Yahoo! Spades http://download.game...nts/y/st2_x.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE97BD92-BFBF-4DBC-85DF-42BA78CA5E22}: Domain = novocon.net
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F76B995E-D791-45D5-924E-F18B79CBFD1E}: Domain = novocon.net
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\SYSTEM32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (MrvGINA.dll) - C:\WINDOWS\System32\MrvGINA.dll (Marvell®)
O24 - Desktop WallPaper: C:\WINDOWS\WEB\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\WEB\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2003/11/10 10:22:00 | 000,000,194 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2000/06/20 16:58:32 | 000,000,027 | -HS- | M] () - C:\AUTOEXEC.DOS -- [ FAT32 ]
O32 - AutoRun File - [2003/11/10 10:22:00 | 000,000,194 | -HS- | M] () - C:\AUTOEXEC.BAK -- [ FAT32 ]
O32 - AutoRun File - [2002/01/17 20:07:56 | 000,000,194 | ---- | M] () - H:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2000/06/20 16:58:32 | 000,000,027 | -H-- | M] () - H:\AUTOEXEC.DOS -- [ FAT32 ]
O32 - AutoRun File - [2002/01/17 20:07:56 | 000,000,194 | ---- | M] () - H:\AUTOEXEC.BAK -- [ FAT32 ]
O32 - AutoRun File - [2001/07/28 22:54:58 | 000,000,194 | ---- | M] () - H:\autoexec.nav -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2015/01/25 12:51:51 | 000,000,000 | R--D | C] -- C:\Documents and Settings\default\My Documents\Dropbox
[2015/01/25 12:06:55 | 000,000,000 | ---D | C] -- C:\Program Files\Dropbox
[2015/01/25 12:03:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\default\Start Menu\Programs\Dropbox
[2015/01/25 11:52:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\default\Application Data\Dropbox
[2015/01/25 08:19:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\BSD
[2015/01/24 12:49:22 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\default\PrivacIE
[2015/01/24 12:37:26 | 000,000,000 | ---D | C] -- C:\Program Files\Citrix
[2015/01/24 12:34:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\default\Local Settings\Application Data\Citrix
[2015/01/24 11:01:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\TweakBit
[2015/01/24 10:04:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\default\Local Settings\Application Data\LastPass
[2015/01/24 09:55:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\default\Local Settings\Application Data\Mozilla
[2015/01/24 09:54:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Mozilla
[2015/01/24 09:54:45 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2015/01/24 08:11:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MRT
[2015/01/24 06:50:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2015/01/22 20:04:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2015/01/22 16:55:01 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\default\IETldCache
[2015/01/22 16:48:08 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2015/01/22 16:04:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\default\Application Data\WSE_Taplika
[2015/01/22 16:03:56 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2015/01/22 16:03:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\default\Local Settings\Application Data\Google
[2015/01/22 16:02:44 | 000,000,000 | ---D | C] -- C:\Program Files\WSE_Taplika
[2015/01/22 15:43:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\default\Local Settings\Application Data\Temp
[2015/01/22 02:56:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2015/01/21 17:31:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\default\Application Data\AVAST Software
[2015/01/21 17:30:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\jumpshot.com
[2015/01/21 17:30:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\AVAST Software
[2015/01/21 17:29:47 | 000,423,784 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2015/01/21 17:29:47 | 000,057,928 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2015/01/21 17:29:46 | 000,070,384 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2015/01/21 17:29:46 | 000,055,240 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2015/01/21 17:29:45 | 000,787,800 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2015/01/21 17:29:43 | 000,291,352 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2015/01/21 17:29:39 | 000,043,152 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2015/01/21 17:24:53 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2015/01/21 17:21:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2015/01/21 17:14:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-us
[2015/01/21 17:14:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\scripting
[2015/01/21 17:14:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\provisioning
[2015/01/21 17:14:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2015/01/21 17:14:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\peernet
[2015/01/21 17:14:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en
[2015/01/21 17:09:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2015/01/21 15:31:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2015/01/20 18:38:31 | 000,282,624 | R--- | C] (Marvell Semiconductor, Inc) -- C:\WINDOWS\System32\drivers\WG311v3XP.sys
[2015/01/20 17:57:55 | 000,000,000 | ---D | C] -- C:\OEMSettings
[2015/01/20 17:52:56 | 000,000,000 | ---D | C] -- C:\Program Files\NETGEAR
[2015/01/20 17:52:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\NETGEAR WG311v3 Smart Wizard
[2015/01/20 17:52:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\Downloaded Installations
[2015/01/18 08:23:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\default\Start Menu\Programs\Free Registry Cleaner
[2015/01/18 08:23:13 | 000,000,000 | ---D | C] -- C:\Program Files\Eusing Free Registry Cleaner
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2015/01/31 16:04:14 | 000,000,418 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2015/01/31 15:48:14 | 000,000,366 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2015/01/31 15:46:56 | 000,000,226 | ---- | M] () -- C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job
[2015/01/31 15:46:36 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2015/01/31 15:46:32 | 268,029,952 | -HS- | M] () -- C:\hiberfil.sys
[2015/01/31 15:43:10 | 000,032,548 | ---- | M] () -- C:\WINDOWS\System32\BMXStateBkp-{00000000-00000000-00000007-00001102-00000004-20021102}.rfx
[2015/01/31 15:43:10 | 000,032,548 | ---- | M] () -- C:\WINDOWS\System32\BMXState-{00000000-00000000-00000007-00001102-00000004-20021102}.rfx
[2015/01/31 15:43:10 | 000,031,812 | ---- | M] () -- C:\WINDOWS\System32\BMXCtrlState-{00000000-00000000-00000007-00001102-00000004-20021102}.rfx
[2015/01/31 15:43:10 | 000,031,812 | ---- | M] () -- C:\WINDOWS\System32\BMXBkpCtrlState-{00000000-00000000-00000007-00001102-00000004-20021102}.rfx
[2015/01/31 15:43:10 | 000,001,072 | ---- | M] () -- C:\WINDOWS\System32\settingsbkup.sfm
[2015/01/31 15:43:10 | 000,001,072 | ---- | M] () -- C:\WINDOWS\System32\settings.sfm
[2015/01/31 15:43:10 | 000,000,384 | ---- | M] () -- C:\WINDOWS\System32\DVCStateBkp-{00000000-00000000-00000007-00001102-00000004-20021102}.dat
[2015/01/31 15:43:10 | 000,000,384 | ---- | M] () -- C:\WINDOWS\System32\DVCState-{00000000-00000000-00000007-00001102-00000004-20021102}.dat
[2015/01/31 14:34:42 | 000,374,064 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2015/01/31 14:34:42 | 000,050,532 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2015/01/31 13:27:20 | 000,000,360 | ---- | M] () -- C:\WINDOWS\tasks\PCHealth Scheduler for Data Collection.job
[2015/01/31 09:58:08 | 000,013,002 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2015/01/25 15:05:26 | 000,000,037 | ---- | M] () -- C:\Documents and Settings\default\Application Data\WB.CFG
[2015/01/25 12:51:56 | 000,000,896 | ---- | M] () -- C:\Documents and Settings\default\Desktop\Dropbox.lnk
[2015/01/24 09:55:08 | 000,000,656 | ---- | M] () -- C:\Documents and Settings\default\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2015/01/24 09:54:54 | 000,000,638 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2015/01/24 09:09:48 | 000,005,632 | ---- | M] () -- C:\Documents and Settings\default\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2015/01/24 08:04:46 | 000,000,729 | ---- | M] () -- C:\Documents and Settings\default\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2015/01/24 07:24:28 | 000,178,648 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2015/01/24 07:07:52 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2015/01/22 16:55:04 | 000,000,220 | ---- | M] () -- C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job
[2015/01/22 16:15:14 | 004,924,323 | ---- | M] () -- C:\WINDOWS\{00000000-00000000-00000007-00001102-00000004-20021102}.CDF
[2015/01/22 15:21:00 | 000,787,800 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2015/01/22 15:20:22 | 000,423,784 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2015/01/22 15:18:00 | 000,017,145 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2015/01/21 17:30:28 | 000,001,645 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Avast Free Antivirus.lnk
[2015/01/21 17:29:42 | 000,206,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2015/01/21 17:29:42 | 000,070,384 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2015/01/21 17:29:42 | 000,057,928 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2015/01/21 17:29:42 | 000,055,240 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2015/01/21 17:29:42 | 000,049,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2015/01/21 17:29:42 | 000,024,184 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswHwid.sys
[2015/01/21 17:29:40 | 000,291,352 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2015/01/21 17:29:40 | 000,043,152 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2015/01/21 17:22:14 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2015/01/21 17:16:12 | 000,000,221 | RHS- | M] () -- C:\boot.ini
[2015/01/21 17:09:34 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2015/01/21 17:09:34 | 000,047,564 | RHS- | M] () -- C:\ntdetect.com
[2015/01/20 17:53:00 | 000,001,728 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\NETGEAR WG311v3 Smart Wizard.lnk
[2015/01/20 17:53:00 | 000,001,720 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NETGEAR WG311v3 Smart Wizard.lnk
[2015/01/18 08:23:16 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\default\Desktop\Eusing Free Registry Cleaner.lnk
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2015/01/25 12:51:53 | 000,000,896 | ---- | C] () -- C:\Documents and Settings\default\Desktop\Dropbox.lnk
[2015/01/25 09:22:08 | 000,000,037 | ---- | C] () -- C:\Documents and Settings\default\Application Data\WB.CFG
[2015/01/24 09:54:51 | 000,000,644 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2015/01/24 09:04:35 | 000,000,101 | ---- | C] () -- C:\Documents and Settings\NetworkService\Application Data\WB.CFG
[2015/01/22 20:55:24 | 268,029,952 | -HS- | C] () -- C:\hiberfil.sys
[2015/01/22 16:17:17 | 000,000,226 | ---- | C] () -- C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Logon.job
[2015/01/22 16:17:16 | 000,000,220 | ---- | C] () -- C:\WINDOWS\tasks\Microsoft Windows XP End of Service Notification Monthly.job
[2015/01/22 16:04:49 | 000,000,418 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2015/01/22 15:59:46 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2015/01/22 15:59:46 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2015/01/21 17:30:26 | 000,001,645 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Avast Free Antivirus.lnk
[2015/01/21 17:30:10 | 000,000,366 | -H-- | C] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2015/01/21 17:29:47 | 000,206,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2015/01/21 17:29:47 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2015/01/21 17:29:46 | 000,024,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswHwid.sys
[2015/01/21 17:14:42 | 000,613,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm
[2015/01/21 17:14:42 | 000,067,374 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.adm
[2015/01/21 17:14:42 | 000,023,195 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplay.chm
[2015/01/21 17:14:42 | 000,010,457 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.hta
[2015/01/21 17:14:42 | 000,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css
[2015/01/21 17:14:42 | 000,000,855 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf
[2015/01/21 17:14:42 | 000,000,420 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmploc.js
[2015/01/21 17:14:41 | 000,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2015/01/21 17:14:41 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2015/01/21 17:14:41 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2015/01/21 17:14:41 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2015/01/21 17:14:41 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2015/01/21 17:14:41 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2015/01/21 17:14:41 | 000,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2015/01/21 17:14:41 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2015/01/21 17:14:41 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2015/01/21 17:14:41 | 000,029,070 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmp.inf
[2015/01/21 17:14:41 | 000,006,769 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2015/01/21 17:14:40 | 000,572,557 | ---- | C] () -- C:\WINDOWS\System32\dllcache\rtuner.wmv
[2015/01/21 17:14:40 | 000,300,969 | ---- | C] () -- C:\WINDOWS\System32\dllcache\viz.wmv
[2015/01/21 17:14:40 | 000,066,725 | ---- | C] () -- C:\WINDOWS\System32\dllcache\revert.wmz
[2015/01/21 17:14:40 | 000,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif
[2015/01/21 17:14:40 | 000,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif
[2015/01/21 17:14:40 | 000,017,272 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf
[2015/01/21 17:14:40 | 000,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif
[2015/01/21 17:14:40 | 000,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif
[2015/01/21 17:14:40 | 000,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif
[2015/01/21 17:14:40 | 000,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif
[2015/01/21 17:14:40 | 000,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif
[2015/01/21 17:14:40 | 000,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif
[2015/01/21 17:14:40 | 000,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif
[2015/01/21 17:14:40 | 000,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif
[2015/01/21 17:14:40 | 000,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif
[2015/01/21 17:14:40 | 000,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js
[2015/01/21 17:14:40 | 000,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif
[2015/01/21 17:14:40 | 000,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif
[2015/01/21 17:14:40 | 000,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif
[2015/01/21 17:14:40 | 000,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif
[2015/01/21 17:14:40 | 000,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif
[2015/01/21 17:14:40 | 000,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif
[2015/01/21 17:14:40 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif
[2015/01/21 17:14:40 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif
[2015/01/21 17:14:40 | 000,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif
[2015/01/21 17:14:40 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm
[2015/01/21 17:14:40 | 000,000,908 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf
[2015/01/21 17:14:39 | 000,375,519 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nuskin.wmv
[2015/01/21 17:14:39 | 000,077,307 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm
[2015/01/21 17:14:39 | 000,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip
[2015/01/21 17:14:39 | 000,018,286 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf
[2015/01/21 17:14:39 | 000,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif
[2015/01/21 17:14:39 | 000,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif
[2015/01/21 17:14:39 | 000,001,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst6.wpl
[2015/01/21 17:14:39 | 000,001,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst5.wpl
[2015/01/21 17:14:39 | 000,001,474 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst3.wpl
[2015/01/21 17:14:39 | 000,001,451 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst12.wpl
[2015/01/21 17:14:39 | 000,001,448 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst4.wpl
[2015/01/21 17:14:39 | 000,001,250 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst1.wpl
[2015/01/21 17:14:39 | 000,001,049 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst2.wpl
[2015/01/21 17:14:39 | 000,001,046 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst7.wpl
[2015/01/21 17:14:39 | 000,001,036 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst8.wpl
[2015/01/21 17:14:39 | 000,000,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst11.wpl
[2015/01/21 17:14:39 | 000,000,787 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst10.wpl
[2015/01/21 17:14:39 | 000,000,784 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst9.wpl
[2015/01/21 17:14:39 | 000,000,783 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst13.wpl
[2015/01/21 17:14:39 | 000,000,775 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst14.wpl
[2015/01/21 17:14:39 | 000,000,733 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst15.wpl
[2015/01/21 17:14:39 | 000,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2015/01/21 17:14:38 | 000,457,607 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mdlib.wmv
[2015/01/21 17:14:38 | 000,381,425 | ---- | C] () -- C:\WINDOWS\System32\dllcache\copycd.wmv
[2015/01/21 17:14:38 | 000,184,959 | ---- | C] () -- C:\WINDOWS\System32\dllcache\compact.wmz
[2015/01/21 17:14:38 | 000,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css
[2015/01/21 17:14:38 | 000,008,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\contents.htm
[2015/01/21 17:14:38 | 000,006,878 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.js
[2015/01/21 17:14:38 | 000,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js
[2015/01/21 17:14:38 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif
[2015/01/21 17:14:38 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif
[2015/01/21 17:14:38 | 000,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif
[2015/01/21 17:14:38 | 000,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif
[2015/01/21 17:14:38 | 000,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif
[2015/01/21 17:14:37 | 000,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif
[2015/01/21 17:11:30 | 000,498,742 | ---- | C] () -- C:\WINDOWS\System32\dllcache\dxmasf.dll
[2015/01/21 17:11:28 | 000,844,314 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdxm.ocx
[2015/01/21 17:11:28 | 000,004,126 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msdxmlc.dll
[2015/01/21 17:09:50 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2015/01/21 17:09:50 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod
[2015/01/20 17:52:58 | 000,001,728 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\NETGEAR WG311v3 Smart Wizard.lnk
[2015/01/20 17:52:58 | 000,001,720 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NETGEAR WG311v3 Smart Wizard.lnk
[2015/01/18 08:23:15 | 000,000,654 | ---- | C] () -- C:\Documents and Settings\default\Desktop\Eusing Free Registry Cleaner.lnk
[2004/02/03 18:09:01 | 000,005,632 | ---- | C] () -- C:\Documents and Settings\default\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2003/11/28 20:50:41 | 000,151,552 | ---- | C] () -- C:\WINDOWS\CTDEL.EXE
[2003/11/10 08:53:50 | 000,023,357 | -H-- | C] () -- C:\Program Files\folder.htt
[2003/11/10 08:47:12 | 000,003,584 | ---- | C] () -- C:\Documents and Settings\default\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
========== ZeroAccess Check ==========
[2004/10/24 11:55:42 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\System32\shdocvw.dll -- [2008/04/14 05:42:06 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\System32\wbem\fastprox.dll -- [2009/02/09 07:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\System32\wbem\wbemess.dll -- [2008/04/14 05:42:10 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2003/11/10 11:03:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BVRP Software
[2015/01/21 15:31:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software
[2015/01/24 11:01:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TweakBit
[2015/01/25 08:19:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BSD
[2003/11/10 11:03:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\default\Application Data\Template
[2003/11/10 11:03:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\default\Application Data\InterTrust
[2003/11/10 11:03:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\default\Application Data\IM
[2003/11/10 11:03:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\default\Application Data\CheetaChat
[2003/11/10 11:03:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\default\Application Data\BVRP Software
[2003/12/14 14:22:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\default\Application Data\Steinberg
[2003/12/15 10:58:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\default\Application Data\InterVideo
[2015/01/21 17:31:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\default\Application Data\AVAST Software
[2015/01/22 16:04:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\default\Application Data\WSE_Taplika
[2015/01/25 11:52:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\default\Application Data\Dropbox
========== Purity Check ==========
< End of report >
Sign In
Create Account
