OTL logfile created on: 8/31/2010 6:27:18 PM - Run 1
OTL by OldTimer - Version 3.2.11.0     Folder = C:\Documents and Settings\Owner.DESKTOP\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
895.00 Mb Total Physical Memory | 351.00 Mb Available Physical Memory | 39.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 80.00% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 227.51 Gb Total Space | 180.79 Gb Free Space | 79.47% Space Free | Partition Type: NTFS
Drive D: | 5.36 Gb Total Space | 3.40 Gb Free Space | 63.44% Space Free | Partition Type: FAT32
Drive E: | 1.60 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: DESKTOP
Current User Name: Owner
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Minimal
Quick Scan
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Documents and Settings\Owner.DESKTOP\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
PRC - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\TiVo\Desktop\TiVoServer.exe (TiVo Inc.)
PRC - C:\Program Files\TiVo\Desktop\TiVoNotify.exe (TiVo Inc.)
PRC - C:\Program Files\Common Files\TiVo Shared\Transfer\TiVoTransfer.exe (TiVo Inc.)
PRC - C:\Program Files\TiVo\Desktop\TranscodingService.exe (TiVo Inc.)
PRC - C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe (Intuit Inc.)
PRC - C:\Program Files\OpenCase\OpenCASE Media Agent\MediaAgent.exe (ExtendMedia Inc.)
PRC - C:\Program Files\Norton Save and Restore\Agent\VProSvc.exe (Symantec Corporation)
PRC - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
PRC - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS (New Boundary Technologies, Inc.)
PRC - C:\WINDOWS\arservice.exe (Microsoft)
PRC - C:\Program Files\Nikon\NkView6\NkvMon.exe (Nikon Corporation)
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - C:\Documents and Settings\Owner.DESKTOP\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll (Adobe Systems, Inc.)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\msvcp60.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
MOD - C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation)
MOD - C:\Program Files\Comcast\Desktop Doctor\bin\sprthook.dll (SupportSoft, Inc.)
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - (Akamai) -- c:\Program Files\Common Files\Akamai\rswin_3745.dll ()
SRV - (avast! Web Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Mail Scanner) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (GoogleDesktopManager-051210-111108) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Adobe Version Cue CS4) -- C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe (Adobe Systems Incorporated)
SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (GameConsoleService) -- C:\Program Files\WildTangent\Apps\Gateway Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (IntuitUpdateService) -- C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe (Intuit Inc.)
SRV - (OpenCASE Media Agent) -- C:\Program Files\OpenCase\OpenCASE Media Agent\MediaAgent.exe (ExtendMedia Inc.)
SRV - (Norton Save and Restore) -- C:\Program Files\Norton Save and Restore\Agent\VProSvc.exe (Symantec Corporation)
SRV - (sprtsvc_ddoctorv2) SupportSoft Sprocket Service (ddoctorv2) -- C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (WLSetupSvc) -- C:\Program Files\Windows Live\installer\WLSetupSvc.exe (Microsoft Corporation)
SRV - (usnjsvc) -- C:\Program Files\Windows Live\Messenger\usnsvc.exe (Microsoft Corporation)
SRV - (PrismXL) -- C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS (New Boundary Technologies, Inc.)
SRV - (IDriverT) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (ARSVC) -- C:\WINDOWS\arservice.exe (Microsoft)
SRV - (Adobe Version Cue CS2) -- C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe (Adobe Systems Incorporated)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (ALWIL Software)
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (ALWIL Software)
DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (ALWIL Software)
DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (Aavmker4) -- C:\WINDOWS\System32\drivers\aavmker4.sys (ALWIL Software)
DRV - (adfs) -- C:\WINDOWS\System32\drivers\adfs.sys (Adobe Systems, Inc.)
DRV - (Cdralw2k) -- C:\WINDOWS\System32\drivers\cdralw2k.sys (Sonic Solutions)
DRV - (Cdr4_xp) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys (Sonic Solutions)
DRV - (symsnap) -- C:\WINDOWS\system32\DRIVERS\symsnap.sys (StorageCraft)
DRV - (scsiscan) -- C:\WINDOWS\system32\drivers\scsiscan.sys (Microsoft Corporation)
DRV - (amdagp) -- C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (sisagp) -- C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (VProEventMonitor) -- C:\WINDOWS\system32\drivers\vproeventmonitor.sys (Symantec Corporation)
DRV - (BVRPMPR5) -- C:\WINDOWS\system32\drivers\BVRPMPR5.SYS (Avanquest Software)
DRV - (WimFltr) -- C:\WINDOWS\system32\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (v2imount) -- C:\WINDOWS\system32\drivers\v2imount.sys (Symantec Corporation)
DRV - (BrSerIf) -- C:\WINDOWS\system32\drivers\BrSerIf.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\WINDOWS\system32\drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (HSFHWBS2) -- C:\WINDOWS\system32\drivers\HSFHWBS2.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (BrScnUsb) -- C:\WINDOWS\system32\drivers\BrScnUsb.sys (Brother Industries Ltd.)
DRV - (wanatw) WAN Miniport (ATW) -- C:\WINDOWS\system32\drivers\wanatw4.sys (America Online, Inc.)
DRV - (Sparrow) -- C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (sym_u3) -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (sym_hi) -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (symc8xx) -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (symc810) -- C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (ultra) -- C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (ql12160) -- C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1080) -- C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql1280) -- C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (dac2w2k) -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (mraid35x) -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (asc) -- C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550) -- C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (AliIde) -- C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (CmdIde) -- C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (ONSIO) -- C:\WINDOWS\system32\drivers\onsio.sys ()
DRV - (SMPLSCSI) -- C:\WINDOWS\System32\drivers\SMPLSCSI.SYS (OnSpec Electronic, Inc.)
DRV - (ASPI32) -- C:\WINDOWS\System32\drivers\ASPI32.SYS (Adaptec)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr8/*http://www.yahoo.com/ext/search/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.comcast.net/toolbar2.0/search/
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = :0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo.com/search?fr=ffsp1&p="
FF - prefs.js..browser.search.selectedEngine: "Search"
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.%(version)s
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.6.5.200812101546
FF - prefs.js..keyword.URL: "http://search.myheritage.com/?orig=ds&q="
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord [2008/01/19 14:33:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.15\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/06/26 04:19:36 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.15\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/08/21 23:15:08 | 000,000,000 | ---D | M]
 
[2009/03/11 18:54:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Mozilla\Extensions
[2010/08/19 11:10:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Mozilla\Firefox\Profiles\djc05nap.default\extensions
[2009/09/14 20:53:00 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Mozilla\Firefox\Profiles\djc05nap.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/11/01 12:02:39 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Mozilla\Firefox\Profiles\djc05nap.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010/07/03 16:48:12 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010/06/26 12:05:44 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/01/29 19:43:34 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}
[2010/06/26 12:05:27 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/01/29 19:37:25 | 000,003,803 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\MyHeritage.xml
 
O1 HOSTS File: ([2008/12/30 18:56:15 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Comcast Toolbar) - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\Program Files\ComcastToolbar\comcasttoolbar.dll (Comcast Cable Communications.                )
O3 - HKCU\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\ShellBrowser: (Comcast Toolbar) - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\Program Files\ComcastToolbar\comcasttoolbar.dll (Comcast Cable Communications.                )
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Comcast Toolbar) - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - C:\Program Files\ComcastToolbar\comcasttoolbar.dll (Comcast Cable Communications.                )
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe_ID0ENQBO] C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ddoctorv2] C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [Google Desktop Search] C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
O4 - HKLM..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PPort11reminder] C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [Recguard] C:\WINDOWS\SMINST\Recguard.exe ()
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [TivoNotify] C:\Program Files\TiVo\Desktop\TiVoNotify.exe (TiVo Inc.)
O4 - HKCU..\Run: [TivoServer] C:\Program Files\TiVo\Desktop\TiVoServer.exe (TiVo Inc.)
O4 - HKCU..\Run: [TranscodingService] C:\Program Files\TiVo\Desktop\TranscodingService.exe (TiVo Inc.)
O4 - HKCU..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe (Nikon Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} http://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab (Reg Error: Key error.)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} http://web1.shutterfly.com/downloads/Uploader.cab (Shutterfly Picture Upload Plugin)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Owner.DESKTOP\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Owner.DESKTOP\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/06/17 04:41:16 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{2f405d47-f39b-11dc-b0ec-0016ecdd544f}\Shell - "" = AutoRun
O33 - MountPoints2\{2f405d47-f39b-11dc-b0ec-0016ecdd544f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{2f405d47-f39b-11dc-b0ec-0016ecdd544f}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -- File not found
O33 - MountPoints2\{3c45a733-2532-11dc-b0ce-0016ecdd544f}\Shell - "" = AutoRun
O33 - MountPoints2\{3c45a733-2532-11dc-b0ce-0016ecdd544f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{44099d41-287f-11db-8c3a-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{44099d41-287f-11db-8c3a-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs: 6to4 -  File not found
NetSvcs: Ias -  File not found
NetSvcs: Iprip -  File not found
NetSvcs: Irmon -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: WmdmPmSp -  File not found
 
Drivers32: msacm.clmp3enc - C:\Program Files\CyberLink\Power2Go\CLMP3Enc.ACM (CyberLink Corp.)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.siren - C:\WINDOWS\System32\sirenacm.dll (Microsoft Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
 
CREATERESTOREPOINT
Error starting restore point: System Restore is disabled.
Error closing restore point: System Restore is disabled.
 
[color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]
 
[2010/08/31 18:22:41 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\OTL.exe
[2010/08/30 18:05:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner.DESKTOP\Desktop\gmer
[2010/08/30 17:32:27 | 000,000,000 | ---D | C] -- C:\Program Files\ERUNT
[2010/08/30 17:26:42 | 000,791,393 | ---- | C] (Lars Hederer                                                ) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\erunt-setup.exe
[2010/08/30 17:25:48 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\TFC.exe
[2010/08/30 16:16:50 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Owner.DESKTOP\Recent
[2010/08/30 16:13:59 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2010/08/21 17:22:16 | 000,000,000 | ---D | C] -- C:\MGtools
[2010/08/20 15:57:58 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/08/20 15:57:56 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/08/20 07:12:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner.DESKTOP\Desktop\TasteofHomeAug-Sept
[2010/08/19 11:46:37 | 006,153,376 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\mb.exe
[2010/08/19 11:19:31 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010/07/17 12:26:55 | 009,242,552 | ---- | C] (SUPERAntiSpyware.com) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\SUPERAntiSpyware.exe
[2010/06/29 07:02:15 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\WINDOWS\avastSS.scr
[2010/06/26 12:06:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2010/06/19 06:55:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\SupportSoft
[2010/06/07 08:00:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Facebook
[2009/12/19 12:52:47 | 000,308,160 | ---- | C] (ALWIL Software) -- C:\Program Files\avast_home_setup.exe
[2008/12/27 13:42:37 | 015,452,536 | ---- | C] (Microsoft Corporation) -- C:\Program Files\IE7-WindowsXP-x86-enu.exe
 
[color=#E56717]========== Files - Modified Within 90 Days ==========[/color]
 
[2010/08/31 18:22:42 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\OTL.exe
[2010/08/31 07:58:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/08/31 07:42:24 | 000,043,209 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010/08/31 07:42:21 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/08/31 07:42:18 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/08/31 07:41:02 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/08/31 07:40:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/08/31 07:40:54 | 939,053,056 | -HS- | M] () -- C:\hiberfil.sys
[2010/08/30 17:57:55 | 000,284,915 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\gmer.zip
[2010/08/30 17:32:28 | 000,000,611 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\NTREGOPT.lnk
[2010/08/30 17:32:28 | 000,000,592 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\ERUNT.lnk
[2010/08/30 17:28:42 | 010,223,616 | -H-- | M] () -- C:\Documents and Settings\Owner.DESKTOP\NTUSER.DAT
[2010/08/30 17:28:42 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Owner.DESKTOP\ntuser.ini
[2010/08/30 17:26:46 | 000,791,393 | ---- | M] (Lars Hederer                                                ) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\erunt-setup.exe
[2010/08/30 17:25:49 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\TFC.exe
[2010/08/30 07:32:21 | 000,010,142 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\calendar.xlsx
[2010/08/29 12:14:34 | 000,009,996 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\BCA football contact list.xlsx
[2010/08/29 12:11:00 | 000,010,438 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\ykypboomffa contact list.xlsx
[2010/08/29 11:50:23 | 000,033,280 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\footballteamgrid.doc
[2010/08/21 17:24:16 | 000,146,056 | ---- | M] () -- C:\MGlogs.zip
[2010/08/21 17:14:35 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\settings.dat
[2010/08/20 15:58:01 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/08/20 06:06:35 | 000,047,104 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\BCAFanatics-FFLrules.doc
[2010/08/20 06:02:40 | 000,009,017 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\keepers2010.xlsx
[2010/08/20 05:41:19 | 000,000,467 | ---- | M] () -- C:\WINDOWS\BRWMARK.INI
[2010/08/19 11:50:32 | 002,398,955 | ---- | M] () -- C:\MGtools.exe
[2010/08/19 11:49:49 | 000,464,491 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\RootRepeal.zip
[2010/08/19 11:49:00 | 003,819,566 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\ComboFix.exe
[2010/08/19 11:46:37 | 006,153,376 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\mb.exe
[2010/08/19 11:45:12 | 009,242,552 | ---- | M] (SUPERAntiSpyware.com) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\SUPERAntiSpyware.exe
[2010/08/19 11:43:08 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\defogger_reenable
[2010/08/19 11:40:11 | 000,050,477 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\Defogger.exe
[2010/08/19 11:28:24 | 000,000,685 | ---- | M] () -- C:\WINDOWS\win.ini
[2010/08/19 11:28:24 | 000,000,291 | RHS- | M] () -- C:\boot.ini
[2010/08/19 11:28:24 | 000,000,282 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/08/19 11:19:33 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\CCleaner.lnk
[2010/08/18 14:38:31 | 000,028,672 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\fure-personal statement.doc
[2010/08/12 19:33:26 | 002,132,048 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/08/12 19:01:14 | 000,505,644 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010/08/12 19:01:14 | 000,444,578 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/08/12 19:01:14 | 000,072,328 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/07/17 12:16:30 | 000,001,757 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
[2010/07/17 12:16:30 | 000,001,567 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NkvMon.exe.lnk
[2010/07/17 12:16:30 | 000,000,988 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma.lnk
[2010/07/16 18:22:03 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/07/14 18:31:59 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
[2010/07/14 18:31:59 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm
[2010/07/03 11:17:44 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2010/07/03 11:17:44 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm
[2010/07/03 09:05:47 | 000,023,552 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\red cross.doc
[2010/06/29 07:02:16 | 000,002,626 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/06/28 15:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\WINDOWS\avastSS.scr
[2010/06/28 15:57:12 | 000,165,032 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2010/06/28 15:37:52 | 000,046,672 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2010/06/28 15:37:30 | 000,165,456 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2010/06/28 15:33:13 | 000,023,376 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2010/06/28 15:32:45 | 000,100,176 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2010/06/28 15:32:42 | 000,094,544 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2010/06/28 15:32:33 | 000,017,744 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2010/06/28 15:32:16 | 000,028,880 | ---- | M] (ALWIL Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2010/06/23 20:41:54 | 000,062,508 | -H-- | M] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/06/08 08:02:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2010/06/08 08:02:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm
[2010/06/07 07:54:47 | 000,014,848 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010/08/30 17:57:53 | 000,284,915 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\gmer.zip
[2010/08/30 17:32:28 | 000,000,611 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\NTREGOPT.lnk
[2010/08/30 17:32:28 | 000,000,592 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\ERUNT.lnk
[2010/08/29 12:05:16 | 000,009,996 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\BCA football contact list.xlsx
[2010/08/29 11:59:57 | 000,010,438 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\ykypboomffa contact list.xlsx
[2010/08/29 11:48:12 | 000,033,280 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\footballteamgrid.doc
[2010/08/21 17:22:22 | 000,146,056 | ---- | C] () -- C:\MGlogs.zip
[2010/08/21 17:14:35 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\settings.dat
[2010/08/20 15:58:01 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/08/19 11:50:28 | 002,398,955 | ---- | C] () -- C:\MGtools.exe
[2010/08/19 11:48:54 | 003,819,566 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\ComboFix.exe
[2010/08/19 11:43:08 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\defogger_reenable
[2010/08/19 11:40:11 | 000,050,477 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\Defogger.exe
[2010/08/19 11:19:33 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\CCleaner.lnk
[2010/08/17 08:22:43 | 000,009,017 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\keepers2010.xlsx
[2010/08/05 15:25:35 | 000,028,672 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\fure-personal statement.doc
[2010/07/12 07:01:36 | 000,010,142 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\calendar.xlsx
[2010/07/03 09:05:47 | 000,023,552 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\My Documents\red cross.doc
[2010/06/23 20:41:54 | 000,062,508 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010/02/02 08:27:02 | 043,550,760 | ---- | C] () -- C:\Program Files\setup_av_free.exe
[2009/12/24 00:57:40 | 000,000,467 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2009/12/24 00:57:40 | 000,000,026 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2009/12/24 00:55:58 | 000,000,227 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini
[2009/12/24 00:55:58 | 000,000,093 | ---- | C] () -- C:\WINDOWS\brpcfx.ini
[2009/12/24 00:54:56 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\BRTCPCON.DLL
[2009/12/24 00:54:56 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\BRLMW03A.INI
[2009/12/24 00:54:52 | 000,000,086 | ---- | C] () -- C:\WINDOWS\Brfaxrx.ini
[2009/12/24 00:54:50 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll
[2009/12/24 00:53:43 | 000,031,567 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2008/12/28 22:09:46 | 016,168,344 | ---- | C] () -- C:\Program Files\jre-6u11-windows-i586-p.exe
[2008/12/24 10:32:15 | 000,000,129 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/12/09 09:36:16 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2008/03/16 15:47:17 | 000,285,216 | ---- | C] () -- C:\WINDOWS\System32\drivers\onsio.sys
[2008/03/16 15:47:17 | 000,000,207 | ---- | C] () -- C:\WINDOWS\SWISNIFE.INI
[2008/01/19 14:34:16 | 000,001,446 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2007/05/06 10:58:04 | 000,014,848 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/02/05 09:51:21 | 000,000,170 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\Application Data\wklnhst.dat
[2006/11/28 19:30:46 | 000,000,021 | ---- | C] () -- C:\WINDOWS\CS_setup.ini
[2006/10/20 07:32:57 | 000,106,496 | R--- | C] () -- C:\WINDOWS\System32\vshp1020.dll
[2006/10/15 13:51:36 | 000,000,136 | ---- | C] () -- C:\Documents and Settings\Owner.DESKTOP\Local Settings\Application Data\fusioncache.dat
[2006/08/10 10:08:47 | 000,532,544 | ---- | C] () -- C:\WINDOWS\PIC.dll
[2006/08/10 10:08:47 | 000,024,576 | ---- | C] () -- C:\WINDOWS\HKNTDLL.dll
[2006/08/10 10:08:47 | 000,011,776 | ---- | C] () -- C:\WINDOWS\HIDMNT.dll
[2006/08/10 10:03:36 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006/08/10 09:33:28 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006/08/10 09:33:28 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006/08/10 09:33:27 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006/08/10 09:33:25 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006/08/10 09:33:25 | 000,573,440 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006/08/10 09:33:25 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006/08/10 09:33:21 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2006/06/21 04:48:15 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2006/06/17 04:24:58 | 000,001,276 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2006/06/17 04:24:57 | 000,000,518 | ---- | C] () -- C:\WINDOWS\System32\emver.ini
[2005/08/05 23:01:54 | 000,235,008 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2005/08/02 18:19:16 | 000,050,176 | ---- | C] () -- C:\WINDOWS\armcex.dll
[2004/07/10 18:55:38 | 000,252,416 | ---- | C] () -- C:\WINDOWS\System32\wsiShared.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010/02/03 21:13:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2006/11/24 22:48:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Broderbund Software
[2008/06/25 10:54:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Comcast
[2008/08/04 19:21:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ExtendMedia
[2006/08/10 10:09:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Napster
[2008/09/06 12:09:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PopCap
[2009/12/24 00:53:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ScanSoft
[2008/12/24 08:06:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SITEguard
[2008/12/26 08:53:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\STOPzilla!
[2007/08/15 12:24:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SupportSoft
[2008/12/26 11:17:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2009/06/20 09:59:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TiVo
[2008/08/04 22:08:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2007/07/01 19:06:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WildTangent
[2010/04/28 19:50:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/04/11 11:07:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2008/03/16 13:59:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Amazon
[2008/12/30 22:45:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\ComcastToolbar
[2010/06/07 08:00:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Facebook
[2006/10/25 18:58:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\MSNInstaller
[2006/12/04 19:20:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Nikon
[2008/02/10 20:02:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Opera
[2006/08/10 10:13:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\SampleView
[2007/02/05 09:51:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Template
[2007/08/17 08:52:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Viewpoint
[2006/10/15 13:51:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\WildTangent
[2010/07/17 12:18:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Owner.DESKTOP\Application Data\wsInspector
[2006/10/14 16:08:00 | 000,000,258 | ---- | M] () -- C:\WINDOWS\Tasks\ISP signup reminder 1.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2006/08/10 10:01:31 | 000,000,002 | ---- | M] () -- C:\AUDIT_INSTALL_IN_PROGRESS
[2006/06/17 04:41:16 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2008/12/24 08:20:08 | 000,000,221 | ---- | M] () -- C:\Boot.bak
[2010/08/19 11:28:24 | 000,000,291 | RHS- | M] () -- C:\boot.ini
[2004/08/04 00:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2006/06/17 04:41:16 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010/08/31 07:40:54 | 939,053,056 | -HS- | M] () -- C:\hiberfil.sys
[2006/06/17 04:41:16 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2006/08/10 10:10:43 | 000,001,210 | -H-- | M] () -- C:\IPH.PH
[2008/03/19 21:12:58 | 000,000,512 | ---- | M] () -- C:\LOG9A.log
[2010/08/21 17:24:16 | 000,146,056 | ---- | M] () -- C:\MGlogs.zip
[2010/08/19 11:50:32 | 002,398,955 | ---- | M] () -- C:\MGtools.exe
[2006/06/17 04:41:16 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2007/08/15 12:21:51 | 000,001,076 | ---- | M] () -- C:\net_save.dna
[2004/08/10 14:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/10/07 06:58:20 | 000,250,048 | RHS- | M] () -- C:\ntldr
[2010/08/31 07:40:52 | 1409,286,144 | -HS- | M] () -- C:\pagefile.sys
[2006/08/10 10:02:19 | 000,000,090 | ---- | M] () -- C:\powerdvd.log
[2010/05/26 22:12:15 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm
[2010/06/08 08:02:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm
[2010/07/03 11:17:44 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm
[2010/07/14 18:31:59 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm
[2010/03/24 07:52:58 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm
[2010/03/25 07:11:31 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm
[2010/03/26 07:49:04 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm
[2010/03/26 19:11:14 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm
[2010/04/04 12:22:15 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm
[2010/04/05 07:59:56 | 000,000,232 | -H-- | M] () -- C:\sqmdata09.sqm
[2010/04/08 07:49:20 | 000,000,232 | -H-- | M] () -- C:\sqmdata10.sqm
[2010/04/10 10:37:10 | 000,000,232 | -H-- | M] () -- C:\sqmdata11.sqm
[2010/04/11 22:33:28 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm
[2010/04/12 08:05:28 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm
[2010/04/14 07:57:42 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm
[2010/04/14 08:04:45 | 000,000,232 | -H-- | M] () -- C:\sqmdata15.sqm
[2010/04/15 18:12:24 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm
[2010/04/19 07:20:15 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm
[2010/05/26 00:38:24 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm
[2010/05/26 00:58:07 | 000,000,232 | -H-- | M] () -- C:\sqmdata19.sqm
[2010/05/26 22:12:14 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
[2010/06/08 08:02:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2010/07/03 11:17:44 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2010/07/14 18:31:59 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
[2010/03/24 07:52:57 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm
[2010/03/25 07:11:31 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm
[2010/03/26 07:49:04 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm
[2010/03/26 19:11:14 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm
[2010/04/04 12:22:15 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm
[2010/04/05 07:59:56 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm
[2010/04/08 07:49:20 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm
[2010/04/10 10:37:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm
[2010/04/11 22:33:28 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm
[2010/04/12 08:05:28 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm
[2010/04/14 07:57:42 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm
[2010/04/14 08:04:44 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm
[2010/04/15 18:12:24 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm
[2010/04/19 07:20:15 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm
[2010/05/26 00:38:24 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm
[2010/05/26 00:58:07 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm
[2008/01/12 16:42:21 | 000,000,146 | ---- | M] () -- C:\YServer.txt
 
[color=#A23BEC]< %systemroot%\Fonts\*.com >[/color]
[2006/04/18 15:39:28 | 000,026,040 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | ---- | M] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
 
[color=#A23BEC]< %systemroot%\Fonts\*.dll >[/color]
 
[color=#A23BEC]< %systemroot%\Fonts\*.ini >[/color]
[2006/06/17 04:40:30 | 000,000,067 | -HS- | M] () -- C:\WINDOWS\Fonts\desktop.ini
 
[color=#A23BEC]< %systemroot%\Fonts\*.ini2 >[/color]
 
[color=#A23BEC]< %systemroot%\Fonts\*.exe >[/color]
 
[color=#A23BEC]< %systemroot%\system32\spool\prtprocs\w32x86\*.* >[/color]
[2008/07/06 07:06:10 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2005/03/16 12:32:48 | 000,049,152 | R--- | M] (Zenographics, Inc.) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\IMFPRINT.DLL
[2004/03/22 17:17:08 | 000,025,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 05:50:03 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
 
[color=#A23BEC]< %systemroot%\REPAIR\*.bak1 >[/color]
 
[color=#A23BEC]< %systemroot%\REPAIR\*.ini >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.jpg  >[/color]
 
[color=#A23BEC]< %systemroot%\*.jpg  >[/color]
 
[color=#A23BEC]< %systemroot%\*.png  >[/color]
 
[color=#A23BEC]< %systemroot%\*.scr >[/color]
[2010/06/28 15:57:33 | 000,038,848 | ---- | M] (ALWIL Software) -- C:\WINDOWS\avastSS.scr
 
[color=#A23BEC]< %systemroot%\*._sy >[/color]
 
[color=#A23BEC]< %APPDATA%\Adobe\Update\*.* >[/color]
 
[color=#A23BEC]< %ALLUSERSPROFILE%\Favorites\*.* >[/color]
 
[color=#A23BEC]< %APPDATA%\Microsoft\*.*  >[/color]
 
[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2009/12/19 12:52:48 | 000,308,160 | ---- | M] (ALWIL Software) -- C:\Program Files\avast_home_setup.exe
[2008/12/27 13:42:51 | 015,452,536 | ---- | M] (Microsoft Corporation) -- C:\Program Files\IE7-WindowsXP-x86-enu.exe
[2008/12/28 22:13:23 | 016,168,344 | ---- | M] () -- C:\Program Files\jre-6u11-windows-i586-p.exe
[2010/02/02 08:27:08 | 043,550,760 | ---- | M] () -- C:\Program Files\setup_av_free.exe
 
[color=#A23BEC]< %APPDATA%\Update\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]
 
[color=#A23BEC]< %systemroot%\System32\config\*.sav  >[/color]
[2006/06/16 21:30:11 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2006/06/16 21:30:11 | 000,659,456 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2006/06/16 21:30:11 | 000,897,024 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
 
[color=#A23BEC]< %PROGRAMFILES%\bak. /s >[/color]
 
[color=#A23BEC]< %systemroot%\system32\bak. /s >[/color]
 
[color=#A23BEC]< %ALLUSERSPROFILE%\Start Menu\*.lnk /x  >[/color]
[2008/10/07 07:03:08 | 000,000,272 | -HS- | M] () -- C:\Documents and Settings\All Users\Start Menu\desktop.ini
 
[color=#A23BEC]< %systemroot%\system32\config\systemprofile\*.dat /x >[/color]
 
[color=#A23BEC]< %systemroot%\*.config >[/color]
 
[color=#A23BEC]< %systemroot%\system32\*.db >[/color]
 
[color=#A23BEC]< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >[/color]
[2008/10/07 07:12:04 | 000,000,170 | -HS- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2006/06/17 04:46:25 | 000,000,079 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
 
[color=#A23BEC]< %USERPROFILE%\Desktop\*.exe >[/color]
[2010/01/18 16:00:37 | 001,228,296 | ---- | M] (Adobe Systems Incorporated) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\ADBESTDSCS4_LS1.exe
[2010/08/19 11:49:00 | 003,819,566 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\ComboFix.exe
[2010/08/19 11:40:11 | 000,050,477 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\Defogger.exe
[2010/08/30 17:26:46 | 000,791,393 | ---- | M] (Lars Hederer                                                ) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\erunt-setup.exe
[2009/05/09 10:48:47 | 000,685,988 | ---- | M] (Igor Pavlov) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\isw2.exe
[2010/08/19 11:46:37 | 006,153,376 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\mb.exe
[2010/08/31 18:22:42 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\OTL.exe
[2010/02/03 21:12:50 | 043,550,760 | ---- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Desktop\setup_av_free.exe
[2010/08/19 11:45:12 | 009,242,552 | ---- | M] (SUPERAntiSpyware.com) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\SUPERAntiSpyware.exe
[2010/08/30 17:25:49 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Owner.DESKTOP\Desktop\TFC.exe
 
[color=#A23BEC]< %PROGRAMFILES%\Common Files\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\*.src >[/color]
 
[color=#A23BEC]< %systemroot%\install\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\system32\DLL\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\system32\HelpFiles\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\system32\rundll\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\winn32\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\Java\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\system32\test\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\system32\Rundll32\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\AppPatch\Custom\*.* >[/color]
 
[color=#A23BEC]< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >[/color]
 
[color=#A23BEC]< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >[/color]
 
[color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.tmp >[/color]
 
[color=#A23BEC]< %PROGRAMFILES%\Internet Explorer\*.dat >[/color]
 
[color=#A23BEC]< %USERPROFILE%\My Documents\*.exe >[/color]
 
[color=#A23BEC]< %USERPROFILE%\*.exe >[/color]
 
[color=#A23BEC]< %systemroot%\ADDINS\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\assembly\*.bak2 >[/color]
 
[color=#A23BEC]< %systemroot%\Config\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\REPAIR\*.bak2 >[/color]
 
[color=#A23BEC]< %systemroot%\SECURITY\Database\*.sdb /x >[/color]
 
[color=#A23BEC]< %systemroot%\SYSTEM\*.bak2 >[/color]
 
[color=#A23BEC]< %systemroot%\Web\*.bak2 >[/color]
 
[color=#A23BEC]< %systemroot%\Driver Cache\*.* >[/color]
[2000/01/18 16:10:02 | 000,021,288 | ---- | M] (Microtek International Inc.) -- C:\WINDOWS\Driver Cache\msmusd.dll
 
[color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\0*.exe >[/color]
 
[color=#A23BEC]< %ProgramFiles%\Microsoft Common\*.* >[/color]
 
[color=#A23BEC]< %ProgramFiles%\TinyProxy. >[/color]
 
[color=#A23BEC]< %USERPROFILE%\Favorites\*.url /x >[/color]
[2008/10/07 07:12:05 | 000,000,122 | -HS- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Favorites\Desktop.ini
 
[color=#A23BEC]< %systemroot%\system32\*.bk >[/color]
 
[color=#A23BEC]< %systemroot%\*.te >[/color]
 
[color=#A23BEC]< %systemroot%\system32\system32\*.* >[/color]
 
[color=#A23BEC]< %ALLUSERSPROFILE%\*.dat /x >[/color]
 
[color=#A23BEC]< %systemroot%\system32\drivers\*.rmv >[/color]
 
[color=#A23BEC]< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >[/color]
 
[color=#A23BEC]< dir /b "%systemroot%\*.exe" | find /i " " /c >[/color]
 
[color=#A23BEC]< %PROGRAMFILES%\Microsoft\*.* >[/color]
 
[color=#A23BEC]< %systemroot%\System32\Wbem\proquota.exe >[/color]
 
[color=#A23BEC]< %PROGRAMFILES%\Mozilla Firefox\*.dat >[/color]
 
[color=#A23BEC]< %USERPROFILE%\Cookies\*.txt /x >[/color]
[2010/08/31 18:24:16 | 000,032,768 | -HS- | M] () -- C:\Documents and Settings\Owner.DESKTOP\Cookies\index.dat
 
[color=#A23BEC]< %SystemRoot%\system32\fonts\*.* >[/color]
 
[color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >[/color]
 
[color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >[/color]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-08-13 00:07:17
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1CA73D29
< End of report >