OTL logfile created on: 6/2/2012 3:15:55 AM - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 86.00% Memory free 2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free Paging file location(s): d:\pagefile.sys 1524 3048 [binary data] %SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Program Files Drive C: | 20.02 Gb Total Space | 0.01 Gb Free Space | 0.03% Space Free | Partition Type: NTFS Drive D: | 35.87 Gb Total Space | 5.39 Gb Free Space | 15.03% Space Free | Partition Type: NTFS Drive E: | 960.47 Mb Total Space | 590.36 Mb Free Space | 61.47% Space Free | Partition Type: FAT Drive X: | 284.12 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: REATOGO | User Name: SYSTEM Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet001 [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto] -- -- (vToolbarUpdater11.0.2) SRV - File not found [On_Demand] -- -- (TPHDEXLGSVC) SRV - File not found [On_Demand] -- -- (odserv) SRV - File not found [Auto] -- -- (avgwd) SRV - File not found [Auto] -- -- (AVGIDSAgent) SRV - [2012/05/06 13:07:12 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand] -- D:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/05/06 01:17:54 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand] -- D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/03/21 11:57:07 | 000,119,296 | ---- | M] (Yuna Software) [Auto] -- D:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe -- (MsgPlusService) SRV - [2012/02/27 20:39:00 | 000,292,200 | ---- | M] (Lenovo.) [Auto] -- D:\Program Files\ThinkPad\Utilities\DOZESVC.EXE -- (DozeSvc) SRV - [2012/02/27 20:39:00 | 000,244,800 | ---- | M] (Lenovo Group Limited) [Auto] -- D:\Program Files\ThinkPad\Utilities\PWMEWSVC.exe -- (PwmEWSvc) SRV - [2012/02/27 20:39:00 | 000,069,632 | ---- | M] () [Auto] -- D:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe -- (Power Manager DBC Service) SRV - [2012/01/04 09:32:36 | 000,718,888 | ---- | M] (Nokia) [On_Demand] -- D:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2011/10/24 14:58:46 | 000,882,960 | ---- | M] (Intel(R) Corporation) [Auto] -- D:\Program Files\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel(R) SRV - [2011/10/24 13:53:14 | 000,870,672 | ---- | M] (Intel(R) Corporation) [Auto] -- D:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R) SRV - [2011/10/24 13:34:56 | 000,481,552 | ---- | M] (Intel(R) Corporation) [Auto] -- D:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R) SRV - [2011/10/20 07:21:22 | 000,244,800 | ---- | M] (Lenovo ) [Auto] -- D:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe -- (AcSvc) SRV - [2011/10/20 07:21:20 | 000,105,536 | ---- | M] (Lenovo ) [Auto] -- D:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe -- (AcPrfMgrSvc) SRV - [2011/07/25 18:14:00 | 000,028,672 | ---- | M] (Lenovo Group Limited) [Auto] -- D:\Program Files\Lenovo\System Update\SUService.exe -- (SUService) SRV - [2011/07/12 12:53:48 | 000,131,432 | ---- | M] (Lenovo Group Limited) [Auto] -- D:\Program Files\Lenovo\HOTKEY\tphkload.exe -- (TPHKLOAD) SRV - [2011/07/12 12:53:24 | 000,101,736 | ---- | M] (Lenovo Group Limited) [Auto] -- D:\Program Files\Lenovo\HOTKEY\micmute.exe -- (LENOVO.MICMUTE) SRV - [2011/07/12 12:53:18 | 000,142,696 | ---- | M] (Lenovo Group Limited) [Auto] -- D:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe -- (TPHKSVC) SRV - [2009/09/24 11:03:58 | 000,475,220 | ---- | M] (Atheros) [Auto] -- D:\WINDOWS\system32\acs.exe -- (acs) SRV - [2008/05/14 12:25:12 | 000,520,192 | ---- | M] () [Auto] -- D:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe -- (TVT Backup Protection Service) SRV - [2008/05/09 01:50:46 | 000,253,952 | ---- | M] (Lenovo Group Limited) [Auto] -- D:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe -- (TVT_UpdateMonitor) SRV - [2007/09/26 12:34:46 | 000,644,408 | ---- | M] (Lenovo Group Limited) [Auto] -- D:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe -- (ThinkVantage Registry Monitor Service) SRV - [2007/01/30 07:05:02 | 000,108,080 | ---- | M] (Lenovo Group Limited) [Auto] -- D:\WINDOWS\system32\IPSSVC.EXE -- (IPSSVC) SRV - [2006/06/29 16:57:50 | 000,032,768 | ---- | M] () [Auto] -- D:\WINDOWS\system32\TpKmpSvc.exe -- (TpKmpSVC) [color=#E56717]========== Driver Services (All) ==========[/color] DRV - File not found [Kernel | On_Demand] -- -- (winachsf) DRV - File not found [Kernel | On_Demand] -- -- (WDICA) DRV - File not found [Kernel | Disabled] -- -- (ViaIde) DRV - File not found [Kernel | Disabled] -- -- (ultra) DRV - File not found [Kernel | Boot] -- -- (TPDIGIMN) DRV - File not found [Kernel | Disabled] -- -- (TosIde) DRV - File not found [Kernel | Disabled] -- -- (symc8xx) DRV - File not found [Kernel | Disabled] -- -- (symc810) DRV - File not found [Kernel | Disabled] -- -- (sym_u3) DRV - File not found [Kernel | Disabled] -- -- (sym_hi) DRV - File not found [Kernel | Disabled] -- -- (Sparrow) DRV - File not found [Kernel | Disabled] -- -- (Simbad) DRV - File not found [Kernel | Boot] -- -- (Shockprf) DRV - File not found [Kernel | On_Demand] -- -- (ROOTMODEM) DRV - File not found [Kernel | Disabled] -- -- (ql1280) DRV - File not found [Kernel | Disabled] -- -- (ql1240) DRV - File not found [Kernel | Disabled] -- -- (ql12160) DRV - File not found [Kernel | Disabled] -- -- (Ql10wnt) DRV - File not found [Kernel | Disabled] -- -- (ql1080) DRV - File not found [Kernel | On_Demand] -- -- (PptpMiniport) WAN Miniport (PPTP) DRV - File not found [Kernel | Disabled] -- -- (perc2hib) DRV - File not found [Kernel | Disabled] -- -- (perc2) DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP) DRV - File not found [Kernel | System] -- -- (PCIDump) DRV - File not found [Kernel | Disabled] -- -- (mraid35x) DRV - File not found [Kernel | System] -- -- (lenovo.smi) DRV - File not found [Kernel | System] -- -- (lbrtfdc) DRV - File not found [Kernel | On_Demand] -- -- (IpFilterDriver) DRV - File not found [Kernel | Disabled] -- -- (IntelIde) DRV - File not found [Kernel | Disabled] -- -- (ini910u) DRV - File not found [Kernel | On_Demand] -- -- (ialm) DRV - File not found [Kernel | Disabled] -- -- (i2omp) DRV - File not found [Kernel | System] -- -- (i2omgmt) DRV - File not found [Kernel | On_Demand] -- -- (hwdatacard) DRV - File not found [Kernel | Disabled] -- -- (hpn) DRV - File not found [Kernel | On_Demand] -- -- (Gpc) DRV - File not found [Kernel | Auto] -- -- (fssfltr) DRV - File not found [Kernel | On_Demand] -- -- (e1express) Intel(R) DRV - File not found [Kernel | Disabled] -- -- (dpti2o) DRV - File not found [File_System | Auto] -- -- (DLAUDFAM) DRV - File not found [File_System | Auto] -- -- (DLAUDF_M) DRV - File not found [File_System | Auto] -- -- (DLAPoolM) DRV - File not found [File_System | Auto] -- -- (DLAOPIOM) DRV - File not found [File_System | Auto] -- -- (DLAIFS_M) DRV - File not found [File_System | Auto] -- -- (DLADResN) DRV - File not found [File_System | Auto] -- -- (DLABOIOM) DRV - File not found [Kernel | Disabled] -- -- (dac960nt) DRV - File not found [Kernel | Disabled] -- -- (dac2w2k) DRV - File not found [Kernel | Disabled] -- -- (Cpqarray) DRV - File not found [Kernel | Disabled] -- -- (CmdIde) DRV - File not found [Kernel | System] -- -- (Changer) DRV - File not found [Kernel | Disabled] -- -- (cd20xrnt) DRV - File not found [Kernel | Boot] -- -- (BTHidEnum) DRV - File not found [Kernel | On_Demand] -- -- (Btcsrusb) DRV - File not found [Kernel | On_Demand] -- -- (BT) DRV - File not found [Kernel | System] -- -- (Avgtdix) DRV - File not found [File_System | Boot] -- -- (Avgrkx86) DRV - File not found [Kernel | System] -- -- (Avgldx86) DRV - File not found [Kernel | On_Demand] -- -- (AVGIDSShim) DRV - File not found [Kernel | Boot] -- -- (AVGIDSHX) DRV - File not found [Kernel | On_Demand] -- -- (AVGIDSFilter) DRV - File not found [Kernel | On_Demand] -- -- (AVGIDSDriver) DRV - File not found [Kernel | Disabled] -- -- (Atdisk) DRV - File not found [Kernel | Disabled] -- -- (asc3550) DRV - File not found [Kernel | Disabled] -- -- (asc3350p) DRV - File not found [Kernel | Disabled] -- -- (asc) DRV - File not found [Kernel | Disabled] -- -- (amsint) DRV - File not found [Kernel | Disabled] -- -- (AliIde) DRV - File not found [Kernel | Disabled] -- -- (aic78xx) DRV - File not found [Kernel | Disabled] -- -- (aic78u2) DRV - File not found [Kernel | Disabled] -- -- (Aha154x) DRV - File not found [Kernel | On_Demand] -- -- (AEAudioService) DRV - File not found [Kernel | Disabled] -- -- (adpu160m) DRV - File not found [Kernel | On_Demand] -- -- (ADIHdAudAddService) DRV - File not found [Kernel | Disabled] -- -- (abp480n5) DRV - File not found [Kernel | Disabled] -- -- (Abiosdsk) DRV - [2012/03/18 17:40:55 | 000,033,536 | ---- | M] (Lenovo) [File_System | Auto] -- D:\WINDOWS\System32\drivers\tvtfilter.sys -- (tvtfilter) DRV - [2012/02/29 10:14:20 | 000,035,272 | ---- | M] (Lenovo.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ibmpmdrv.sys -- (IBMPMDRV) DRV - [2012/02/27 20:39:00 | 000,025,968 | ---- | M] (Lenovo.) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\DOZEHDD.SYS -- (DozeHDD) DRV - [2012/02/27 20:39:00 | 000,012,144 | ---- | M] (Lenovo Group Limited) [Kernel | System] -- D:\WINDOWS\System32\drivers\TPPWRIF.SYS -- (TPPWRIF) DRV - [2012/01/09 12:20:25 | 000,139,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\rdpwd.sys -- (RDPWD) DRV - [2011/12/23 09:32:38 | 000,309,264 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\SynTP.sys -- (SynTP) DRV - [2011/12/23 08:32:14 | 000,041,040 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System] -- D:\WINDOWS\System32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2011/09/11 17:34:17 | 000,007,012 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- D:\WINDOWS\system32\drivers\pmemnt.sys -- (pmem) DRV - [2011/09/04 03:10:42 | 000,015,190 | ---- | M] (Lenovo Group Limited) [Kernel | Disabled] -- D:\Program Files\Lenovo\System Update\session\tvsutemp\7bwc14ww\tpisysid.sys -- (TPISYSID) DRV - [2011/08/30 15:52:30 | 000,004,224 | ---- | M] () [Kernel | System] -- D:\WINDOWS\system32\drivers\IBMBLDID.sys -- (IBMTPCHK) DRV - [2011/08/30 15:52:28 | 000,011,520 | ---- | M] (IBM Corp.) [Kernel | System] -- D:\WINDOWS\System32\drivers\ANC.sys -- (ANC) DRV - [2011/08/17 09:49:54 | 000,138,496 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\afd.sys -- (AFD) DRV - [2011/08/02 12:38:56 | 000,042,496 | ---- | M] (Apple, Inc.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbaapl.sys -- (USBAAPL) DRV - [2011/07/15 09:29:31 | 000,456,320 | ---- | M] (Microsoft Corporation) [File_System | System] -- D:\WINDOWS\System32\drivers\mrxsmb.sys -- (MRxSmb) DRV - [2011/07/08 10:02:00 | 000,010,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ndistapi.sys -- (NdisTapi) DRV - [2011/04/21 09:37:43 | 000,105,472 | ---- | M] (Microsoft Corporation) [File_System | Boot] -- D:\WINDOWS\System32\drivers\mup.sys -- (Mup) DRV - [2011/03/04 15:44:14 | 000,045,648 | ---- | M] (Sonic Solutions) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\PxHelp20.sys -- (PxHelp20) DRV - [2011/02/17 09:18:03 | 000,357,888 | ---- | M] (Microsoft Corporation) [File_System | On_Demand] -- D:\WINDOWS\System32\drivers\srv.sys -- (Srv) DRV - [2010/11/02 11:17:02 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ndproxy.sys -- (NDProxy) DRV - [2010/10/06 23:11:38 | 006,609,920 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\NETwLx32.sys -- (NETwLx32) Intel(R) DRV - [2010/06/02 09:49:20 | 000,993,464 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\HSF_DPV.sys -- (HSF_DPV) DRV - [2010/06/02 09:49:20 | 000,019,384 | ---- | M] (Conexant) [Kernel | Auto] -- D:\WINDOWS\System32\drivers\mdmxsdk.sys -- (mdmxsdk) DRV - [2010/06/02 09:49:18 | 000,217,016 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\HSFHWAZL.sys -- (HSFHWAZL) DRV - [2010/05/19 18:15:04 | 000,013,952 | ---- | M] (Intel Corporation) [Kernel | Auto] -- D:\WINDOWS\System32\drivers\s24trans.sys -- (s24trans) DRV - [2010/03/25 23:08:00 | 000,004,608 | ---- | M] () [Kernel | System] -- D:\WINDOWS\System32\drivers\TSMAPIP.SYS -- (TSMAPIP) DRV - [2009/10/20 12:20:16 | 000,265,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\http.sys -- (HTTP) DRV - [2009/10/05 09:08:52 | 005,977,216 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\NETw5x32.sys -- (NETw5x32) Intel(R) DRV - [2009/07/14 05:35:16 | 000,444,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\wdf01000.sys -- (Wdf01000) DRV - [2009/06/25 19:20:32 | 000,030,144 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\psadd.sys -- (psadd) DRV - [2009/06/24 07:18:41 | 000,092,928 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\ksecdd.sys -- (KSecDD) DRV - [2009/05/18 09:17:00 | 000,026,600 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV - [2008/08/26 05:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008/07/11 10:47:33 | 000,023,600 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\TVICHW32.SYS -- (TVICHW32) DRV - [2008/06/20 07:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\tcpip.sys -- (Tcpip) DRV - [2008/06/13 07:05:51 | 000,272,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\bthport.sys -- (BTHPORT) DRV - [2008/05/12 18:14:14 | 000,017,844 | ---- | M] (Lenovo Group Limited) [Kernel | System] -- D:\WINDOWS\System32\drivers\TPHKDRV.sys -- (TPHKDRV) DRV - [2008/05/09 01:50:48 | 000,046,144 | ---- | M] (Lenovo) [Kernel | System] -- D:\WINDOWS\System32\drivers\tvtumon.sys -- (tvtumon) DRV - [2008/04/13 20:13:21 | 000,021,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\tdtcp.sys -- (TDTCP) DRV - [2008/04/13 20:13:20 | 000,040,840 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\termdd.sys -- (TermDD) DRV - [2008/04/13 20:13:20 | 000,012,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\tdpipe.sys -- (TDPIPE) DRV - [2008/04/13 15:28:39 | 000,175,744 | ---- | M] (Microsoft Corporation) [File_System | System] -- D:\WINDOWS\System32\drivers\rdbss.sys -- (Rdbss) DRV - [2008/04/13 15:21:00 | 000,162,816 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\netbt.sys -- (NetBT) DRV - [2008/04/13 15:20:42 | 000,091,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ndiswan.sys -- (NdisWan) DRV - [2008/04/13 15:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\ndis.sys -- (NDIS) DRV - [2008/04/13 15:19:43 | 000,051,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\rasl2tp.sys -- (Rasl2tp) WAN Miniport (L2TP) DRV - [2008/04/13 15:19:42 | 000,075,264 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\ipsec.sys -- (IPSec) DRV - [2008/04/13 15:18:00 | 000,052,480 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\i8042prt.sys -- (i8042prt) DRV - [2008/04/13 15:17:18 | 000,083,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\wdmaud.sys -- (wdmaud) DRV - [2008/04/13 15:15:55 | 000,060,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\sysaudio.sys -- (sysaudio) DRV - [2008/04/13 15:15:53 | 000,574,976 | ---- | M] (Microsoft Corporation) [File_System | Disabled] -- D:\WINDOWS\System32\drivers\ntfs.sys -- (Ntfs) DRV - [2008/04/13 15:15:45 | 000,064,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\serial.sys -- (Serial) DRV - [2008/04/13 15:14:29 | 000,143,744 | ---- | M] (Microsoft Corporation) [File_System | Disabled] -- D:\WINDOWS\System32\drivers\fastfat.sys -- (Fastfat) DRV - [2008/04/13 15:14:21 | 000,063,744 | ---- | M] (Microsoft Corporation) [File_System | Disabled] -- D:\WINDOWS\System32\drivers\cdfs.sys -- (Cdfs) DRV - [2008/04/13 15:00:19 | 000,030,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\modem.sys -- (Modem) DRV - [2008/04/13 14:57:32 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\raspppoe.sys -- (RasPppoe) DRV - [2008/04/13 14:57:27 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\asyncmac.sys -- (AsyncMac) DRV - [2008/04/13 14:57:21 | 000,034,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\wanarp.sys -- (Wanarp) DRV - [2008/04/13 14:57:15 | 000,152,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ipnat.sys -- (IpNat) DRV - [2008/04/13 14:57:07 | 000,020,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ipinip.sys -- (IpInIp) DRV - [2008/04/13 14:56:38 | 000,069,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\psched.sys -- (PSched) DRV - [2008/04/13 14:56:02 | 000,034,688 | ---- | M] (Microsoft Corporation) [File_System | System] -- D:\WINDOWS\System32\drivers\netbios.sys -- (NetBIOS) DRV - [2008/04/13 14:55:58 | 000,014,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ndisuio.sys -- (Ndisuio) DRV - [2008/04/13 14:54:36 | 000,088,192 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- D:\WINDOWS\System32\drivers\irda.sys -- (irda) DRV - [2008/04/13 14:54:36 | 000,028,672 | ---- | M] (National Semiconductor Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\nscirda.sys -- (NSCIRDA) DRV - [2008/04/13 14:54:28 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\irenum.sys -- (IRENUM) DRV - [2008/04/13 14:53:34 | 000,036,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ip6fw.sys -- (Ip6Fw) DRV - [2008/04/13 14:51:34 | 000,101,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\bthpan.sys -- (BthPan) Bluetooth Device (Personal Area Network) DRV - [2008/04/13 14:51:25 | 000,059,904 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\atmarpc.sys -- (Atmarpc) DRV - [2008/04/13 14:47:37 | 000,025,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbprint.sys -- (usbprint) DRV - [2008/04/13 14:46:33 | 000,017,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\bthenum.sys -- (BthEnum) DRV - [2008/04/13 14:46:32 | 000,059,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\rfcomm.sys -- (RFCOMM) Bluetooth Device (RFCOMM Protocol TDI) DRV - [2008/04/13 14:46:29 | 000,018,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\bthusb.sys -- (BTHUSB) DRV - [2008/04/13 14:46:25 | 000,085,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\nabtsfec.sys -- (NABTSFEC) DRV - [2008/04/13 14:46:24 | 000,019,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\wstcodec.sys -- (WSTCODEC) DRV - [2008/04/13 14:46:23 | 000,017,024 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ccdecode.sys -- (CCDECODE) DRV - [2008/04/13 14:46:23 | 000,011,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\slip.sys -- (SLIP) DRV - [2008/04/13 14:46:22 | 000,010,880 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ndisip.sys -- (NdisIP) DRV - [2008/04/13 14:46:21 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\streamip.sys -- (streamip) DRV - [2008/04/13 14:46:20 | 000,121,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbvideo.sys -- (usbvideo) USB Video Device (WDM) DRV - [2008/04/13 14:45:39 | 000,032,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbccgp.sys -- (usbccgp) DRV - [2008/04/13 14:45:38 | 000,026,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbstor.sys -- (USBSTOR) DRV - [2008/04/13 14:45:37 | 000,059,520 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbhub.sys -- (usbhub) DRV - [2008/04/13 14:45:36 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbser.sys -- (usbser) DRV - [2008/04/13 14:45:35 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbehci.sys -- (usbehci) DRV - [2008/04/13 14:45:35 | 000,020,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbuhci.sys -- (usbuhci) DRV - [2008/04/13 14:45:34 | 000,015,104 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbscan.sys -- (usbscan) DRV - [2008/04/13 14:45:27 | 000,010,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\hidusb.sys -- (HidUsb) DRV - [2008/04/13 14:45:13 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\drmkaud.sys -- (drmkaud) DRV - [2008/04/13 14:45:12 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\usbaudio.sys -- (usbaudio) USB Audio Driver (WDM) DRV - [2008/04/13 14:45:09 | 000,172,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\kmixer.sys -- (kmixer) DRV - [2008/04/13 14:45:09 | 000,056,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\swmidi.sys -- (swmidi) DRV - [2008/04/13 14:45:07 | 000,006,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\splitter.sys -- (splitter) DRV - [2008/04/13 14:45:01 | 000,052,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\dmusic.sys -- (DMusic) DRV - [2008/04/13 14:44:48 | 000,799,744 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Disabled] -- D:\WINDOWS\System32\drivers\dmboot.sys -- (dmboot) DRV - [2008/04/13 14:44:46 | 000,153,344 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Disabled] -- D:\WINDOWS\System32\drivers\dmio.sys -- (dmio) DRV - [2008/04/13 14:44:40 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\vga.sys -- (VgaSave) DRV - [2008/04/13 14:41:01 | 000,052,352 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\volsnap.sys -- (VolSnap) DRV - [2008/04/13 14:40:58 | 000,042,112 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\imapi.sys -- (Imapi) DRV - [2008/04/13 14:40:49 | 000,019,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\partmgr.sys -- (PartMgr) DRV - [2008/04/13 14:40:48 | 000,011,392 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\sfloppy.sys -- (Sfloppy) DRV - [2008/04/13 14:40:47 | 000,036,352 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\disk.sys -- (Disk) DRV - [2008/04/13 14:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\cdrom.sys -- (Cdrom) DRV - [2008/04/13 14:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\atapi.sys -- (atapi) DRV - [2008/04/13 14:40:27 | 000,057,600 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\redbook.sys -- (redbook) DRV - [2008/04/13 14:40:25 | 000,027,392 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\fdc.sys -- (Fdc) DRV - [2008/04/13 14:40:25 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\flpydisk.sys -- (Flpydisk) DRV - [2008/04/13 14:40:12 | 000,015,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\serenum.sys -- (Serenum) DRV - [2008/04/13 14:40:10 | 000,080,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\parport.sys -- (Parport) DRV - [2008/04/13 14:39:53 | 000,004,352 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\swenum.sys -- (swenum) DRV - [2008/04/13 14:39:52 | 000,007,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\mskssrv.sys -- (MSKSSRV) DRV - [2008/04/13 14:39:51 | 000,004,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\mspqm.sys -- (MSPQM) DRV - [2008/04/13 14:39:50 | 000,005,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\mstee.sys -- (MSTEE) DRV - [2008/04/13 14:39:50 | 000,005,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\mspclock.sys -- (MSPCLOCK) DRV - [2008/04/13 14:39:48 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\mouclass.sys -- (Mouclass) DRV - [2008/04/13 14:39:47 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\kbdclass.sys -- (Kbdclass) DRV - [2008/04/13 14:39:46 | 000,384,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\update.sys -- (Update) DRV - [2008/04/13 14:39:46 | 000,042,368 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\mountmgr.sys -- (MountMgr) DRV - [2008/04/13 14:36:52 | 000,073,472 | ---- | M] (Microsoft Corporation) [File_System | Boot] -- D:\WINDOWS\System32\drivers\sr.sys -- (sr) DRV - [2008/04/13 14:36:46 | 000,015,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\mssmbios.sys -- (mssmbios) DRV - [2008/04/13 14:36:44 | 000,068,224 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\pci.sys -- (PCI) DRV - [2008/04/13 14:36:43 | 000,120,192 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\pcmcia.sys -- (Pcmcia) DRV - [2008/04/13 14:36:41 | 000,037,248 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\isapnp.sys -- (isapnp) DRV - [2008/04/13 14:36:37 | 000,013,952 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\cmbatt.sys -- (CmBatt) DRV - [2008/04/13 14:36:37 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\compbatt.sys -- (Compbatt) DRV - [2008/04/13 14:36:35 | 000,187,776 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\acpi.sys -- (ACPI) DRV - [2008/04/13 14:33:28 | 000,044,544 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\fips.sys -- (Fips) DRV - [2008/04/13 14:32:59 | 000,129,792 | ---- | M] (Microsoft Corporation) [File_System | Boot] -- D:\WINDOWS\System32\drivers\fltmgr.sys -- (FltMgr) DRV - [2008/04/13 14:32:51 | 000,196,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\rdpdr.sys -- (rdpdr) DRV - [2008/04/13 14:32:44 | 000,180,608 | ---- | M] (Microsoft Corporation) [File_System | On_Demand] -- D:\WINDOWS\System32\drivers\mrxdav.sys -- (MRxDAV) DRV - [2008/04/13 14:32:39 | 000,030,848 | ---- | M] (Microsoft Corporation) [File_System | System] -- D:\WINDOWS\System32\drivers\npfs.sys -- (Npfs) DRV - [2008/04/13 14:32:39 | 000,019,072 | ---- | M] (Microsoft Corporation) [File_System | System] -- D:\WINDOWS\System32\drivers\msfs.sys -- (Msfs) DRV - [2008/04/13 14:32:36 | 000,066,048 | ---- | M] (Microsoft Corporation) [File_System | Disabled] -- D:\WINDOWS\System32\drivers\udfs.sys -- (Udfs) DRV - [2008/04/13 14:31:32 | 000,036,352 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\intelppm.sys -- (intelppm) DRV - [2008/04/13 12:39:23 | 000,142,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\aec.sys -- (aec) DRV - [2008/04/13 12:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008/02/22 12:54:40 | 000,037,312 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\tvti2c.sys -- (TVTI2C) DRV - [2008/02/08 05:46:36 | 000,057,408 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\wsimd.sys -- (WSIMD) DRV - [2007/11/13 06:25:53 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\secdrv.sys -- (Secdrv) DRV - [2007/09/26 01:01:32 | 002,236,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\NETw4x32.sys -- (NETw4x32) Intel(R) DRV - [2007/05/10 23:10:50 | 000,034,704 | ---- | M] (IVT Corporation.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\blueletaudio.sys -- (BlueletAudio) DRV - [2007/03/05 02:00:04 | 000,027,792 | ---- | M] (IVT Corporation.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio) DRV - [2007/03/05 01:56:18 | 000,035,600 | ---- | M] (IVT Corporation.) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\BTHidMgr.sys -- (BTHidMgr) DRV - [2007/03/05 01:53:18 | 000,044,304 | ---- | M] (IVT Corporation.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\VcommMgr.sys -- (VcommMgr) DRV - [2007/03/05 01:52:18 | 000,034,448 | ---- | M] (IVT Corporation.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\VComm.sys -- (VComm) DRV - [2006/11/21 18:41:18 | 000,022,416 | ---- | M] (IVT Corporation.) [Kernel | On_Demand] -- D:\Program Files\IVT Corporation\BlueSoleil\device\Win2k\BTNetFilter.sys -- (BTNetFilter) DRV - [2006/11/06 12:24:56 | 000,012,080 | ---- | M] (Lenovo Group Limited) [Kernel | Auto] -- D:\WINDOWS\System32\drivers\PROCDD.SYS -- (PROCDD) DRV - [2006/10/18 15:00:00 | 000,038,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\wpdusb.sys -- (WpdUsb) DRV - [2006/10/01 20:55:00 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\SMAPINT.SYS -- (Smapint) DRV - [2006/10/01 20:55:00 | 000,009,343 | ---- | M] () [Kernel | System] -- D:\WINDOWS\System32\drivers\TDSMAPI.SYS -- (TDSMAPI) DRV - [2006/09/28 14:00:34 | 000,082,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\WudfRd.sys -- (WudfRd) DRV - [2006/09/28 13:55:50 | 000,077,568 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\WudfPf.sys -- (WudfPf) DRV - [2006/07/19 13:06:02 | 000,021,376 | R--- | M] (DAVICOM Semiconductor, Inc. ) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ADM851X.sys -- (ADM851X) DRV - [2006/02/28 22:30:00 | 000,089,472 | ---- | M] (Sonic Solutions) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\DRVMCDB.SYS -- (DRVMCDB) DRV - [2006/02/28 08:00:00 | 000,125,056 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\ftdisk.sys -- (Ftdisk) DRV - [2006/02/28 08:00:00 | 000,032,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\nwlnkfwd.sys -- (NwlnkFwd) DRV - [2006/02/28 08:00:00 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\cdaudio.sys -- (Cdaudio) DRV - [2006/02/28 08:00:00 | 000,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\ptilink.sys -- (Ptilink) DRV - [2006/02/28 08:00:00 | 000,016,512 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\raspti.sys -- (Raspti) DRV - [2006/02/28 08:00:00 | 000,013,952 | ---- | M] (Microsoft Corporation) [Kernel | Disabled] -- D:\WINDOWS\System32\drivers\cbidf2k.sys -- (cbidf2k) DRV - [2006/02/28 08:00:00 | 000,012,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\nwlnkflt.sys -- (NwlnkFlt) DRV - [2006/02/28 08:00:00 | 000,011,648 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\acpiec.sys -- (ACPIEC) DRV - [2006/02/28 08:00:00 | 000,008,832 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\rasacd.sys -- (RasAcd) DRV - [2006/02/28 08:00:00 | 000,007,936 | ---- | M] (Microsoft Corporation) [Recognizer | System] -- D:\WINDOWS\System32\drivers\fs_rec.sys -- (Fs_Rec) DRV - [2006/02/28 08:00:00 | 000,006,784 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- D:\WINDOWS\System32\drivers\parvdm.sys -- (ParVdm) DRV - [2006/02/28 08:00:00 | 000,005,888 | ---- | M] (Microsoft Corp., Veritas Software.) [Kernel | Disabled] -- D:\WINDOWS\System32\drivers\dmload.sys -- (dmload) DRV - [2006/02/28 08:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\rdpcdd.sys -- (RDPCDD) DRV - [2006/02/28 08:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\mnmdd.sys -- (mnmdd) DRV - [2006/02/28 08:00:00 | 000,004,224 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\beep.sys -- (Beep) DRV - [2006/02/28 08:00:00 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\null.sys -- (Null) DRV - [2006/02/28 08:00:00 | 000,002,864 | ---- | M] (Microsoft Corporation) [Adapter | On_Demand] -- D:\WINDOWS\System32\winsock.dll -- (Winsock) DRV - [2005/11/18 07:02:50 | 000,005,660 | ---- | M] (Sonic Solutions) [File_System | System] -- D:\WINDOWS\System32\drivers\DLACDBHM.SYS -- (DLACDBHM) DRV - [2005/11/18 07:02:10 | 000,022,684 | ---- | M] (Sonic Solutions) [File_System | System] -- D:\WINDOWS\System32\drivers\DLARTL_N.SYS -- (DLARTL_N) DRV - [2005/11/18 00:20:00 | 000,040,544 | ---- | M] (Sonic Solutions) [File_System | Auto] -- D:\WINDOWS\System32\drivers\DRVNDDM.SYS -- (DRVNDDM) DRV - [2005/05/17 05:20:08 | 000,015,872 | ---- | M] (Atmel, Inc.) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\atmeltpm.sys -- (atmeltpm) DRV - [2001/08/17 09:59:44 | 000,003,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\audstub.sys -- (audstub) DRV - [2001/08/17 09:48:14 | 000,011,520 | ---- | M] (IBM Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\TwoTrack.sys -- (TwoTrack) DRV - [2001/08/17 08:51:52 | 000,003,328 | ---- | M] (Microsoft Corporation) [Kernel | Boot] -- D:\WINDOWS\System32\drivers\pciide.sys -- (PCIIde) DRV - [2001/08/17 08:51:32 | 000,019,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\rasirda.sys -- (Rasirda) WAN Miniport (IrDA) DRV - [2001/08/17 08:48:00 | 000,012,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\System32\drivers\mouhid.sys -- (mouhid) [color=#E56717]========== Standard Registry (All) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\Software\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr8/*http://www.yahoo.com/ext/search/search.html IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\Guest_ON_D\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.msn.com/?ocid=OIE8HP&PC=B8DF IE - HKU\Guest_ON_D\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1me10IE8ENGB02/110 IE - HKU\Guest_ON_D\Software\Microsoft\Internet Explorer\Main,Local Page = D:\WINDOWS\system32\blank.htm IE - HKU\Guest_ON_D\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKU\Guest_ON_D\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\Guest_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.msn.com/?ocid=OIE8HP&PC=B8DF IE - HKU\Guest_ON_D\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - D:\WINDOWS\system32\ieframe.dll (Microsoft Corporation) IE - HKU\Guest_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\kursad_ON_D\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://uk.msn.com/?ocid=OIE8HP&PC=B8DF IE - HKU\kursad_ON_D\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com IE - HKU\kursad_ON_D\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\kursad_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/ IE - HKU\kursad_ON_D\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\kursad_ON_D\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - D:\WINDOWS\system32\ieframe.dll (Microsoft Corporation) IE - HKU\kursad_ON_D\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found IE - HKU\kursad_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll () FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: File not found FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: D:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: D:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: D:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: D:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: D:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: D:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: D:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: D:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/09/03 21:35:35 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\jqs@sun.com: D:\Program Files\Java\jre6\lib\deploy\jqs\ff [2012/02/16 17:05:39 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: D:\Program Files\AVG\AVG2012\Firefox4\ FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F53C93F1-07D5-430c-86D4-C9531B27DFAF}: D:\Program Files\AVG\AVG2012\Firefox\DoNotTrack\ FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: D:\Documents and Settings\All Users\Application Data\AVG Secure Search\11.0.0.9\ FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2012/05/06 13:07:14 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2012/05/17 17:07:10 | 000,000,000 | ---D | M] [2012/05/13 20:10:09 | 000,000,000 | ---D | M] (No name found) -- D:\Program Files\Mozilla Firefox\extensions [2012/05/06 13:07:14 | 000,000,000 | ---D | M] (Default) -- D:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2012/05/06 13:07:08 | 000,097,208 | ---- | M] (Mozilla Foundation) -- D:\Program Files\mozilla firefox\components\browsercomps.dll [2012/02/16 17:05:38 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- D:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2006/10/26 15:12:16 | 000,016,192 | ---- | M] (Microsoft Corporation) -- D:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2012/04/04 01:53:56 | 000,182,160 | ---- | M] (Adobe Systems Inc.) -- D:\Program Files\mozilla firefox\plugins\nppdf32.dll [2012/01/10 17:52:50 | 000,159,744 | ---- | M] (Apple Inc.) -- D:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2012/01/10 17:52:50 | 000,159,744 | ---- | M] (Apple Inc.) -- D:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2012/01/10 17:52:50 | 000,159,744 | ---- | M] (Apple Inc.) -- D:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2012/01/10 17:52:50 | 000,159,744 | ---- | M] (Apple Inc.) -- D:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2012/01/10 17:52:50 | 000,159,744 | ---- | M] (Apple Inc.) -- D:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2012/01/10 17:52:50 | 000,159,744 | ---- | M] (Apple Inc.) -- D:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2012/01/10 17:52:50 | 000,159,744 | ---- | M] (Apple Inc.) -- D:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2012/05/06 13:05:23 | 000,001,525 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml [2012/02/03 12:30:34 | 000,002,252 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\bing.xml [2012/05/06 13:05:23 | 000,000,935 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml [2012/05/06 13:05:22 | 000,001,166 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml [2012/05/06 13:05:22 | 000,003,413 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\google.xml [2011/11/23 14:55:44 | 000,002,519 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\Search_Results.xml [2012/05/06 13:07:12 | 000,002,040 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\twitter.xml [2012/02/03 12:30:34 | 000,001,178 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\wikipedia.xml [2012/05/06 13:05:22 | 000,001,121 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml [2012/02/02 18:13:46 | 000,000,894 | ---- | M] () -- D:\Program Files\mozilla firefox\searchplugins\yahoo.xml O1 HOSTS File: ([2006/02/28 08:00:00 | 000,000,734 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Do Not Track) - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - File not found O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - File not found O2 - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - D:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - D:\WINDOWS\system32\DLA\DLASHX_W.DLL (Sonic Solutions) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - File not found O2 - BHO: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found. O2 - BHO: (FACECONS Class) - {B2A44031-7EAD-434C-AC9E-7F1DA176BA8C} - D:\Program Files\facecons\Facecons.dll (Facecons) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O2 - BHO: (CPwmIEBrowserHelper Object) - {F040E541-A427-4CF7-85D8-75E3E0F476C5} - D:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited) O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - File not found O3 - HKLM\..\Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKU\kursad_ON_D\..\Toolbar\ShellBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - D:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O3 - HKU\kursad_ON_D\..\Toolbar\WebBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - D:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O3 - HKU\kursad_ON_D\..\Toolbar\WebBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - D:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O4 - HKLM..\Run: [ACTray] D:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe (Lenovo ) O4 - HKLM..\Run: [ACWLIcon] D:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe (Lenovo ) O4 - HKLM..\Run: [Adobe ARM] D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AMSG] D:\Program Files\ThinkVantage\AMSG\Amsg.exe (LENOVO) O4 - HKLM..\Run: [AVG_TRAY] File not found O4 - HKLM..\Run: [AwaySch] D:\Program Files\Lenovo\AwayTask\AwaySch.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [cssauth] D:\Program Files\Lenovo\Client Security Solution\cssauth.exe (Lenovo Group Limited) O4 - HKLM..\Run: [DLA] D:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions) O4 - HKLM..\Run: [EZEJMNAP] D:\Program Files\ThinkPad\Utilities\EZEJMNAP.EXE (Lenovo Group Ltd.) O4 - HKLM..\Run: [ISUSPM Startup] D:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation) O4 - HKLM..\Run: [ISUSScheduler] D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation) O4 - HKLM..\Run: [LenovoAutoScrollUtility] D:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Lenovo Group Limited) O4 - HKLM..\Run: [LPMailChecker] D:\Program Files\ThinkVantage\PrdCtr\LPMLCHK.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [LPManager] D:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE (Lenovo Group Limited) O4 - HKLM..\Run: [MessengerPlusForSkypeService] D:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe (Yuna Software) O4 - HKLM..\Run: [PlusService] D:\Program Files\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software) O4 - HKLM..\Run: [PWRMGRTR] D:\Program Files\ThinkPad\Utilities\PWRMGRTR.DLL (Lenovo Group Limited) O4 - HKLM..\Run: [SoundMAX] D:\Program Files\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SoundMAXPnP] D:\Program Files\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] D:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [SynTPEnh] D:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated) O4 - HKLM..\Run: [TP4EX] File not found O4 - HKLM..\Run: [TPFNF7] D:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe (Lenovo Group Limited) O4 - HKLM..\Run: [TPKMAPHELPER] D:\Program Files\ThinkPad\Utilities\TpKmapAp.exe (Lenovo) O4 - HKLM..\Run: [TpShocks] File not found O4 - HKLM..\Run: [TVT Scheduler Proxy] D:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe (Lenovo Group Limited) O4 - HKLM..\Run: [vProt] File not found O4 - HKU\Guest_ON_D..\Run: [QuickTime Task] File not found O4 - HKU\kursad_ON_D..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation) O4 - HKU\kursad_ON_D..\Run: [MSMSGS] D:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O4 - HKU\kursad_ON_D..\Run: [msnmsgr] D:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) O4 - Startup: D:\Documents and Settings\All Users\Start Menu\Programs\Startup\BlueSoleil.lnk = D:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe () O4 - Startup: D:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk = D:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software ) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 36 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\Guest_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\kursad_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\LocalService_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\NetworkService_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\systemprofile_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra 'Tools' menuitem : ThinkVantage Password Manager... - {0045D4BC-5189-4b67-969C-83BB1906C421} - D:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited) O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - File not found O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - File not found O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - Reg Error: Value error. File not found O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - D:\WINDOWS\system32\winrnr.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - D:\WINDOWS\system32\wshbth.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - D:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - D:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - D:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) O16 - DPF: {2DAD3559-2923-4935-AD49-B673D2539944} https://www-307.ibm.com/pc/support/access/aslibmain/content/AcpIR.cab (IASRunner Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 194.168.4.100 194.168.8.100 O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - D:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - D:\WINDOWS\system32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - File not found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - D:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - D:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - D:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - D:\WINDOWS\system32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - D:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - D:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - D:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - File not found O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - D:\WINDOWS\system32\wiascr.dll (Microsoft Corporation) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - D:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - File not found O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - D:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - D:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) - File not found O20 - HKLM Winlogon: UserInit - (D:\WINDOWS\system32\userinit.exe) - D:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: UIHost - (logonui.exe) - File not found O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - D:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - File not found O20 - Winlogon\Notify\ACNotify: DllName - ACNotify.dll - File not found O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - File not found O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - File not found O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - File not found O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - D:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - File not found O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - File not found O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - File not found O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - File not found O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - File not found O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - File not found O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - File not found O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - File not found O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - D:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - D:\WINDOWS\system32\shell32.dll (Microsoft Corporation) O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - D:\WINDOWS\system32\stobject.dll (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - D:\WINDOWS\system32\webcheck.dll (Microsoft Corporation) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - D:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - D:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - D:\WINDOWS\system32\browseui.dll (Microsoft Corporation) O24 - Desktop Components:0 (My Current Home Page) - About:Home O24 - Desktop WallPaper: D:\WINDOWS\Web\Wallpaper\Bliss.bmp O24 - Desktop BackupWallPaper: D:\WINDOWS\Web\Wallpaper\Bliss.bmp O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - File not found O29 - HKLM SecurityProviders - (msapsspc.dll) - File not found O29 - HKLM SecurityProviders - (schannel.dll) - File not found O29 - HKLM SecurityProviders - (digest.dll) - File not found O29 - HKLM SecurityProviders - (msnsspc.dll) - File not found O30 - LSA: Authentication Packages - (msv1_0) - D:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - D:\WINDOWS\System32\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - D:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - D:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - D:\WINDOWS\System32\wdigest.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 0 O32 - AutoRun File - [2008/07/06 10:42:22 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009/11/19 16:24:41 | 000,000,090 | ---- | M] () - C:\AUTORUN.INF -- [ NTFS ] O32 - AutoRun File - [2008/07/06 20:24:36 | 000,000,090 | ---- | M] () - D:\AUTORUN.INF -- [ NTFS ] O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (D:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/05/19 08:17:08 | 000,000,000 | ---D | C] -- D:\WINDOWS\LastGood [2012/05/19 05:37:11 | 000,000,000 | ---D | C] -- D:\Documents and Settings\kursad\plugtmp [2012/05/19 05:19:51 | 000,000,000 | ---D | C] -- D:\Documents and Settings\kursad\MessengerCache [2012/05/19 05:18:05 | 000,000,000 | ---D | C] -- D:\Documents and Settings\kursad\WPDNSE [2012/05/18 19:59:36 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\SureThing Shared [2012/05/18 19:59:35 | 000,000,000 | ---D | C] -- D:\Program Files\Sonic [2012/05/18 19:58:07 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\Sonic Shared [2012/05/17 18:20:54 | 000,000,000 | -H-D | C] -- D:\Documents and Settings\All Users\Application Data\Common Files [2012/05/17 18:15:21 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Application Data\MFAData [2012/05/17 17:07:10 | 000,000,000 | ---D | C] -- D:\Program Files\Microsoft Works [2012/05/17 17:06:25 | 000,000,000 | ---D | C] -- D:\Program Files\Microsoft Visual Studio [2012/05/17 17:06:24 | 000,000,000 | ---D | C] -- D:\Program Files\Common Files\DESIGNER [2012/05/17 16:58:45 | 000,000,000 | ---D | C] -- D:\WINDOWS\SHELLNEW [2012/05/17 16:56:39 | 000,000,000 | RH-D | C] -- D:\MSOCache [2012/05/13 20:29:57 | 000,000,000 | ---D | C] -- D:\Documents and Settings\kursad\Local Settings\Application Data\Microsoft Help [2012/05/13 20:29:07 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Application Data\Microsoft Help [2012/05/12 14:00:23 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\msmq [2012/05/12 14:00:22 | 000,000,000 | ---D | C] -- D:\Inetpub [2012/05/11 18:25:16 | 000,000,000 | ---D | C] -- D:\d226b25f2e32d71ea0d593 [2012/05/06 13:10:41 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Application Data\Mozilla [2012/05/06 13:10:24 | 000,000,000 | ---D | C] -- D:\Program Files\Mozilla Maintenance Service [6 D:\WINDOWS\Fonts\*.tmp files -> D:\WINDOWS\Fonts\*.tmp -> ] [3 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ] [28 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ] [1 D:\Documents and Settings\Guest\Local Settings\Application Data\*.tmp files -> D:\Documents and Settings\Guest\Local Settings\Application Data\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/05/31 08:30:37 | 000,000,829 | ---- | M] () -- D:\Documents and Settings\kursad\Desktop\Shortcut CV.lnk [2012/05/19 16:35:03 | 000,868,296 | ---- | M] () -- D:\eset_smart_security_live_installer.exe [2012/05/19 10:37:00 | 000,000,424 | -H-- | M] () -- D:\WINDOWS\tasks\User_Feed_Synchronization-{DB4DCA6C-349D-4140-B4C3-8E39FBF9B3CA}.job [2012/05/19 10:33:02 | 000,000,424 | -H-- | M] () -- D:\WINDOWS\tasks\User_Feed_Synchronization-{FA085490-05B8-4599-8894-F3BCE4E71103}.job [2012/05/19 10:14:02 | 000,000,830 | ---- | M] () -- D:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012/05/19 10:08:02 | 000,000,886 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2012/05/19 07:19:42 | 000,000,146 | ---- | M] () -- D:\Documents and Settings\LocalService\avginfo.id [2012/05/19 07:16:55 | 000,000,302 | ---- | M] () -- D:\WINDOWS\tasks\PMTask.job [2012/05/19 05:19:10 | 000,025,357 | ---- | M] () -- D:\WINDOWS\System32\PROCDB.INI [2012/05/19 05:17:52 | 000,013,646 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl [2012/05/19 05:17:51 | 000,000,882 | ---- | M] () -- D:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2012/05/19 05:17:34 | 000,000,380 | ---- | M] () -- D:\WINDOWS\System32\IPSCtrl.INI [2012/05/19 05:17:14 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat [2012/05/19 05:17:12 | 1063,702,528 | -HS- | M] () -- D:\hiberfil.sys [2012/05/18 20:02:35 | 000,734,832 | ---- | M] () -- D:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat [2012/05/18 20:01:34 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Start Menu\Programs\ThinkVantage [2012/05/18 19:59:42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Start Menu\Programs\Multimedia Center For Think Offerings [2012/05/18 19:40:16 | 000,005,372 | ---- | M] () -- D:\WINDOWS\imsins.BAK [2012/05/18 19:38:37 | 000,477,704 | ---- | M] () -- D:\WINDOWS\System32\perfh009.dat [2012/05/18 19:38:37 | 000,078,230 | ---- | M] () -- D:\WINDOWS\System32\perfc009.dat [2012/05/18 06:35:23 | 000,268,600 | ---- | M] () -- D:\WINDOWS\System32\FNTCACHE.DAT [2012/05/17 19:21:21 | 000,034,814 | ---- | M] () -- D:\Documents and Settings\kursad\Local Settings\Application Data\dt.dat [2012/05/13 20:42:48 | 000,000,000 | R--D | M] -- D:\Documents and Settings\All Users\Start Menu\Programs\Startup [2012/05/12 18:10:51 | 000,000,376 | ---- | M] () -- D:\WINDOWS\ODBC.INI [2012/05/12 07:56:27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Silverlight [2012/05/12 06:32:46 | 000,000,528 | ---- | M] () -- D:\WINDOWS\tasks\PCDoctorBackgroundMonitorTask.job [2012/05/06 01:17:19 | 000,419,488 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\FlashPlayerApp.exe [2012/05/06 01:17:14 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\FlashPlayerCPLApp.cpl [3 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ] [28 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ] [1 D:\Documents and Settings\Guest\Local Settings\Application Data\*.tmp files -> D:\Documents and Settings\Guest\Local Settings\Application Data\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/05/19 16:34:54 | 000,868,296 | ---- | C] () -- D:\eset_smart_security_live_installer.exe [2012/05/19 05:22:57 | 000,000,146 | ---- | C] () -- D:\Documents and Settings\LocalService\avginfo.id [2012/05/17 19:21:21 | 000,034,814 | ---- | C] () -- D:\Documents and Settings\kursad\Local Settings\Application Data\dt.dat [2012/05/12 07:24:42 | 000,734,832 | ---- | C] () -- D:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat [2012/03/15 16:49:43 | 001,048,576 | ---- | C] () -- D:\WINDOWS\System32\syndata.bin [2012/02/16 07:32:46 | 000,003,072 | ---- | C] () -- D:\WINDOWS\System32\iacenc.dll [2012/02/02 18:18:03 | 000,130,866 | ---- | C] () -- D:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat [2011/10/19 13:32:48 | 000,024,048 | -H-- | C] () -- D:\WINDOWS\System32\mlfcache.dat [2011/10/16 16:22:33 | 000,017,408 | ---- | C] () -- D:\Documents and Settings\kursad\Local Settings\Application Data\WebpageIcons.db [2011/09/06 08:11:22 | 000,000,267 | ---- | C] () -- D:\WINDOWS\wininit.ini [2011/09/04 11:10:19 | 000,045,056 | ---- | C] () -- D:\WINDOWS\System32\FPCALL.dll [2011/09/04 07:03:35 | 000,032,768 | ---- | C] () -- D:\WINDOWS\System32\TpKmpSvc.exe [2011/09/04 06:42:25 | 000,009,343 | ---- | C] () -- D:\WINDOWS\System32\drivers\TDSMAPI.SYS [2011/03/26 23:18:41 | 000,000,664 | ---- | C] () -- D:\WINDOWS\System32\d3d9caps.dat [2010/08/28 16:04:17 | 000,000,056 | -H-- | C] () -- D:\WINDOWS\System32\ezsidmv.dat [2010/07/12 08:40:14 | 000,001,804 | ---- | C] () -- D:\WINDOWS\System32\dcache.bin [2009/11/23 13:56:42 | 000,262,216 | ---- | C] () -- D:\WINDOWS\System32\IPTests.dll [2009/11/12 14:50:35 | 000,069,361 | ---- | C] () -- D:\WINDOWS\Huawei ModemsUninstall.exe [2009/08/03 11:07:42 | 000,403,816 | ---- | C] () -- D:\WINDOWS\System32\OGACheckControl.dll [2009/08/03 11:07:42 | 000,230,768 | ---- | C] () -- D:\WINDOWS\System32\OGAEXEC.exe [2008/10/05 20:39:47 | 000,000,185 | ---- | C] () -- D:\WINDOWS\DVDCreator.INI [2008/08/31 20:43:59 | 000,000,000 | ---- | C] () -- D:\WINDOWS\nsreg.dat [2008/07/30 19:34:29 | 000,000,376 | ---- | C] () -- D:\WINDOWS\ODBC.INI [2008/07/14 09:05:42 | 000,000,092 | ---- | C] () -- D:\WINDOWS\dellstat.ini [2008/07/14 09:05:40 | 000,000,422 | ---- | C] () -- D:\WINDOWS\lexstat.ini [2008/07/11 12:57:23 | 000,025,088 | ---- | C] () -- D:\Documents and Settings\kursad\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008/07/11 12:16:43 | 000,004,224 | ---- | C] () -- D:\WINDOWS\System32\drivers\IBMBLDID.sys [2008/07/11 11:42:51 | 000,147,456 | ---- | C] () -- D:\WINDOWS\System32\igfxCoIn_v4906.dll [2008/07/11 10:39:12 | 000,651,264 | ---- | C] () -- D:\WINDOWS\System32\libeay32.dll [2008/07/11 10:39:12 | 000,147,456 | ---- | C] () -- D:\WINDOWS\System32\ssleay32.dll [2008/07/07 12:17:31 | 000,006,954 | ---- | C] () -- D:\Documents and Settings\kursad\Ethernet Controller - Device Information.html [2008/07/07 10:44:43 | 000,004,161 | ---- | C] () -- D:\WINDOWS\ODBCINST.INI [2008/07/07 10:43:31 | 000,268,600 | ---- | C] () -- D:\WINDOWS\System32\FNTCACHE.DAT [2008/07/07 10:04:22 | 000,002,048 | --S- | C] () -- D:\WINDOWS\bootstat.dat [2008/07/07 09:52:24 | 000,022,720 | ---- | C] () -- D:\WINDOWS\System32\emptyregdb.dat [2008/01/04 10:13:58 | 000,073,728 | ---- | C] () -- D:\WINDOWS\System32\DEVMAN.DLL [2007/06/19 09:13:40 | 000,000,380 | ---- | C] () -- D:\WINDOWS\System32\IPSCtrl.INI [2007/02/05 06:25:52 | 000,000,000 | ---- | C] () -- D:\WINDOWS\System32\px.ini [2007/01/29 06:36:32 | 000,025,357 | ---- | C] () -- D:\WINDOWS\System32\PROCDB.INI [2006/02/28 08:00:00 | 013,107,200 | ---- | C] () -- D:\WINDOWS\System32\oembios.bin [2006/02/28 08:00:00 | 000,673,088 | ---- | C] () -- D:\WINDOWS\System32\mlang.dat [2006/02/28 08:00:00 | 000,477,704 | ---- | C] () -- D:\WINDOWS\System32\perfh009.dat [2006/02/28 08:00:00 | 000,272,128 | ---- | C] () -- D:\WINDOWS\System32\perfi009.dat [2006/02/28 08:00:00 | 000,218,003 | ---- | C] () -- D:\WINDOWS\System32\dssec.dat [2006/02/28 08:00:00 | 000,078,230 | ---- | C] () -- D:\WINDOWS\System32\perfc009.dat [2006/02/28 08:00:00 | 000,046,258 | ---- | C] () -- D:\WINDOWS\System32\mib.bin [2006/02/28 08:00:00 | 000,028,626 | ---- | C] () -- D:\WINDOWS\System32\perfd009.dat [2006/02/28 08:00:00 | 000,004,569 | ---- | C] () -- D:\WINDOWS\System32\secupd.dat [2006/02/28 08:00:00 | 000,004,461 | ---- | C] () -- D:\WINDOWS\System32\oembios.dat [2006/02/28 08:00:00 | 000,000,741 | ---- | C] () -- D:\WINDOWS\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2011/10/18 15:00:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Guest\Application Data\Lenovo [2011/04/26 07:39:48 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Guest\Application Data\PC Suite [2011/10/18 15:24:40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Guest\Application Data\PwrMgr [2011/04/03 13:58:02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\Auslogics [2009/11/21 12:59:22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\Avaya [2009/08/26 07:49:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\bppeng11 [2009/11/07 13:54:37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 [2009/06/25 19:20:28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\Downloaded Installations [2011/09/07 07:10:45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\ElevatedDiagnostics [2009/08/23 10:57:20 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\EmailNotifier [2011/10/28 16:43:56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\Juniper Networks [2009/07/24 08:45:54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\Leadertech [2011/10/18 09:30:23 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\Lenovo [2011/09/06 12:37:51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\LimeWire [2012/03/06 10:00:15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\Nokia [2011/01/15 15:34:49 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\ooVoo Details [2009/08/23 11:01:43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\oovootb [2012/03/22 11:20:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\OpenCandy [2012/03/14 07:30:17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\PC Suite [2011/09/04 06:22:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\PCDr [2010/09/28 15:43:02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\PriceGong [2011/09/04 04:40:47 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\PwrMgr [2012/03/22 11:27:02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\Registry Mechanic [2011/12/01 10:44:11 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\TSO [2009/11/23 13:12:59 | 000,000,000 | ---D | M] -- D:\Documents and Settings\kursad\Application Data\URSoft [2012/02/02 18:13:48 | 000,000,000 | ---D | M] -- D:\WINDOWS\system32\config\systemprofile\Application Data\Application Updater [2009/11/13 15:26:44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Birdstep Technology [2009/02/07 08:52:00 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Bluetooth [2012/05/13 20:10:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\boost_interprocess [2008/07/14 09:07:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\BVRP Software [2012/05/17 18:20:54 | 000,000,000 | -H-D | M] -- D:\Documents and Settings\All Users\Application Data\Common Files [2009/08/23 07:57:46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\EmailNotifier [2012/03/06 09:17:25 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Installations [2009/08/26 07:43:17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\IsolatedStorage [2011/10/28 16:43:58 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Juniper Networks [2012/05/13 20:33:58 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Lenovo [2012/02/14 12:57:50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Messenger Plus! [2012/04/10 11:21:19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Messenger Plus! for Skype [2012/05/19 05:26:46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\MFAData [2012/03/06 09:48:59 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Nokia [2012/03/14 08:15:57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\NokiaInstallerCache [2011/09/04 07:16:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\PC Suite [2011/09/10 05:57:18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\PCDr [2012/03/22 11:37:30 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\TEMP [2009/04/30 09:52:07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\Viper [2010/04/22 14:39:49 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2009/10/08 10:50:05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2009/06/25 10:50:38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} [2012/05/12 06:32:46 | 000,000,528 | ---- | M] () -- D:\WINDOWS\Tasks\PCDoctorBackgroundMonitorTask.job [2012/05/19 07:16:55 | 000,000,302 | ---- | M] () -- D:\WINDOWS\Tasks\PMTask.job [2012/05/19 10:37:00 | 000,000,424 | -H-- | M] () -- D:\WINDOWS\Tasks\User_Feed_Synchronization-{DB4DCA6C-349D-4140-B4C3-8E39FBF9B3CA}.job [2012/05/19 10:33:02 | 000,000,424 | -H-- | M] () -- D:\WINDOWS\Tasks\User_Feed_Synchronization-{FA085490-05B8-4599-8894-F3BCE4E71103}.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 112 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1 < End of report >