Computer running slower , Will receive black screens on some videos [S

Welcome to your place for tech questions! ( Log In or Join today ) Get answers from experts today. (it's 100% free) Virus removal forum

What the Tech > Spyware / Malware / Virus Removal > Virus, Spyware & Malware Removal

3 Pages

1 2 3 >

Computer running slower , Will receive black screens on some videos [S

Options

ONewbieO View Member Profile	Apr 2 2012, 12:57 AM Post #1
Authentic Member Group: Authentic Member Posts: 77 Joined: 24-October 11 Member No.: 98,517 Operating System: Microsoft Windows XP	Hi . There's something wrong with my machine at the moment . And main issue is with chrome . IE and firefox works fine but google chrome is weird . Tried watching some videos on you tube . Some of them works , some of them show you a black screen while running in the background with audio . But cant watch anything at all . Machine seems slower for now . Not sure why that is the case as i'm not a download junkie . More like a internet browsing junkie . Help is much appreciated . Thanks . Here's the scan which i have done . OTL logfile created on: 2/4/2012 2:46:34 PM - Run 1 OTL by OldTimer - Version 3.2.39.2 Folder = C:\Users\ONewbieO\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00004809 \| Country: Singapore \| Language: ENE \| Date Format: d/M/yyyy 3.92 Gb Total Physical Memory \| 2.06 Gb Available Physical Memory \| 52.63% Memory free 7.83 Gb Paging File \| 5.45 Gb Available in Paging File \| 69.67% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 421.62 Gb Total Space \| 377.53 Gb Free Space \| 89.54% Space Free \| Partition Type: NTFS Drive D: \| 29.30 Gb Total Space \| 26.62 Gb Free Space \| 90.87% Space Free \| Partition Type: NTFS Computer Name: ALVINPC \| User Name: ONewbieO \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\ONewbieO\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\PCPitstop\Info Center\InfoCenter.exe (PC Pitstop LLC) PRC - C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe (IObit) PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) PRC - C:\Program Files (x86)\Online Armor\oaui.exe (Emsi Software GmbH) PRC - C:\Program Files (x86)\Online Armor\oasrv.exe (Emsi Software GmbH) PRC - C:\Program Files (x86)\Online Armor\OAhlp.exe (Emsi Software GmbH) PRC - C:\Program Files (x86)\Online Armor\OAcat.exe (Emsi Software GmbH) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Lenovo\Intelligent Touchpad\TouchZone.exe () PRC - C:\Windows\WebCam\S6000\S6000Mnt.exe (Alcor) PRC - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink) PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) PRC - C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.) ========== Modules (No Company Name) ========== MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\b9942cb07813f553f6d6374dd4541362\System.Xaml.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\bd3685e578c22d17625390d847973de0\PresentationFramework.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\008fbb2e42b3c2569ff58d651575ff29\PresentationCore.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\33eae86e0a5d9bcc4d0e4e469e2ac36a\System.Windows.Forms.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b7409080f31b0a702281b68c37bac326\System.Core.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\68345d6b57fe33c9a94fe6a72ab5e85e\System.Xml.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\c0c7b3ff43f1b29cad7dde24bdbd5b79\WindowsBase.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\2c958d61dd28474ec780db9d18d266ae\System.Drawing.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\6757251401cd9c17d5e608db6e5f964a\System.Configuration.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\1c5b741f270fccb3b527b4fc3a8431f3\PresentationFramework.Aero.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\57e066d0b97757dbd26d59302c3d701a\System.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\e5b31f3bb6508df0dc7c20ddc72f3191\mscorlib.ni.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\ppgooglenaclpluginchrome.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\pdf.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\libglesv2.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\libegl.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\avutil-51.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\avformat-53.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\avcodec-53.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\gcswf32.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\b53dffac744d13ee946b0ff35fc32936\System.Windows.Forms.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\35de7085545a1fb86ec40d2da9865258\System.Drawing.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\300f30d2de5fa69357f9ec5f8b5f4887\System.Xml.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\4ccd2bbe37da506b69dd689f06d749a2\System.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\63819660962a7c4dc4f2a3eebcf8070c\System.Configuration.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\4c2b00c9c2f2109037cd39d7b7a81633\mscorlib.ni.dll () MOD - C:\Program Files (x86)\IObit\Smart Defrag 2\NtfsData.dll () MOD - C:\Program Files (x86)\Lenovo\Intelligent Touchpad\TouchZone.exe () ========== Win32 Services (SafeList) ========== SRV:64bit: - (!SASCORE) -- C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com) SRV:64bit: - (EvtEng) Intel® -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation) SRV:64bit: - (MyWiFiDHCPDNS) -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe () SRV:64bit: - (RegSrvc) Intel® -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation) SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (AMPPALR3) -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel Corporation) SRV:64bit: - (BTHSSecurityMgr) Intel® Centrino® Wireless Bluetooth® -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel® Corporation) SRV:64bit: - (Intel® PROSet Monitoring Service) Intel® -- C:\Windows\SysNative\IProsetMonitor.exe (Intel Corporation) SRV:64bit: - (CxAudMsg) -- C:\Windows\SysNative\CxAudMsg64.exe (Conexant Systems Inc.) SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation) SRV:64bit: - (TPHDEXLGSVC) -- C:\Windows\SysNative\TPHDEXLG64.exe (Lenovo.) SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (SvcOnlineArmor) -- C:\Program Files (x86)\Online Armor\oasrv.exe (Emsi Software GmbH) SRV - (OAcat) -- C:\Program Files (x86)\Online Armor\OAcat.exe (Emsi Software GmbH) SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (Bluetooth OBEX Service) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) SRV - (Bluetooth Media Service) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) SRV - (Bluetooth Device Monitor) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel Corporation) SRV - (UNS) Intel® -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) Intel® -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH) DRV:64bit: - (iBtFltCoex) -- C:\Windows\SysNative\drivers\iBtFltCoex.sys (Intel Corporation) DRV:64bit: - (btmhsf) -- C:\Windows\SysNative\drivers\btmhsf.sys (Intel Corporation) DRV:64bit: - (OAnet) -- C:\Windows\SysNative\drivers\OAnet.sys (Emsisoft) DRV:64bit: - (fbfmon) -- C:\Windows\SysNative\drivers\fbfmon.sys (Lenovo) DRV:64bit: - (BPntDrv) -- C:\Windows\SysNative\drivers\BPntDrv.sys (Lenovo) DRV:64bit: - (LHDmgr) -- C:\Windows\SysNative\drivers\LhdX64.sys (Lenovo.) DRV:64bit: - (ACPIVPC) -- C:\Windows\SysNative\drivers\AcpiVpc.sys (Lenovo Corporation) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH) DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira GmbH) DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated) DRV:64bit: - (S6000KNT) -- C:\Windows\SysNative\drivers\S6000KNT.sys (Windows ® Win 7 DDK provider) DRV:64bit: - (CnxtHdAudService) -- C:\Windows\SysNative\drivers\CHDRT64.sys (Conexant Systems Inc.) DRV:64bit: - (SASDIFSV) -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV:64bit: - (SASKUTIL) -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (e1cexpress) Intel® -- C:\Windows\SysNative\drivers\e1c62x64.sys (Intel Corporation) DRV:64bit: - (NETwNs64) ___ Intel® -- C:\Windows\SysNative\drivers\NETwNs64.sys (Intel Corporation) DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation) DRV:64bit: - (AMPPALP) Intel® Centrino® -- C:\Windows\SysNative\drivers\AmpPal.sys (Windows ® Win 7 DDK provider) DRV:64bit: - (AMPPAL) Intel® Centrino® -- C:\Windows\SysNative\drivers\AmpPal.sys (Windows ® Win 7 DDK provider) DRV:64bit: - (intelkmd) -- C:\Windows\SysNative\drivers\igdpmd64.sys (Intel Corporation) DRV:64bit: - (btmaux) -- C:\Windows\SysNative\drivers\btmaux.sys (Intel Corporation) DRV:64bit: - (wdkmd) -- C:\Windows\SysNative\drivers\WDKMD.sys (Intel Corporation) DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation) DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation) DRV:64bit: - (clwvd) -- C:\Windows\SysNative\drivers\clwvd.sys (CyberLink Corporation) DRV:64bit: - (SmartDefragDriver) -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys () DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation) DRV:64bit: - (MEIx64) Intel® -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation) DRV:64bit: - (IntcDAud) Intel® -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel® Corporation) DRV:64bit: - (Shockprf) -- C:\Windows\SysNative\drivers\ApsX64.sys (Lenovo.) DRV:64bit: - (TPDIGIMN) -- C:\Windows\SysNative\drivers\ApsHM64.sys (Lenovo.) DRV:64bit: - (wsvd) -- C:\Windows\SysNative\drivers\wsvd.sys (CyberLink) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (TPM) -- C:\Windows\SysNative\drivers\tpm.sys (Microsoft Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (oahlpXX) -- C:\Windows\SysWOW64\drivers\oahlp64.sys () DRV - (OADevice) -- C:\Windows\SysWOW64\drivers\OADriver.sys () DRV - (OAmon) -- C:\Windows\SysWOW64\drivers\OAmon.sys (Emsisoft) DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ [binary data] IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}...rc=IE-SearchBox IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm...mp;sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}...rc=IE-SearchBox IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://startsear.ch/?aff=1&src=sp&...q={searchTerms} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm...mp;sourceid=ie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?br...N&bmod=LENN IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}...rc=IE-SearchBox IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://startsear.ch/?aff=1&src=sp&...q={searchTerms} IE - HKCU\..\SearchScopes\{78049031-5A2B-4D32-988A-6418444B6E0A}: "URL" = http://www.google.com/search?sourceid=ie7&...amp;rlz=1I7LENN IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 ========== FireFox ========== FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_228.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_228.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@nsroblox.roblox.com/launcher: C:\Users\ONewbieO\AppData\Local\Roblox\Versions\version-7344c3428f1546a4\\NPRobloxProxy.dll () FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\ONewbieO\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\ONewbieO\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\ONewbieO\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/03/12 19:30:50 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/03/12 19:31:00 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\ONewbieO\AppData\Roaming\Mozilla\Extensions [2012/03/12 19:33:02 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\ONewbieO\AppData\Roaming\Mozilla\Firefox\Profiles\x6t7q09q.default\extensions [2012/03/12 19:30:50 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions () (No name found) -- C:\USERS\ONEWBIEO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X6T7Q09Q.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2012/02/16 22:40:42 \| 000,134,104 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012/02/16 18:42:53 \| 000,002,252 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012/02/16 18:42:53 \| 000,002,040 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro me&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client =chrome&hl={language}&q={searchTerms} CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_228.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Java™ Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Veetle TV Player (Enabled) = C:\Program Files (x86)\Veetle\Player\npvlc.dll CHR - plugin: Veetle TV Core (Enabled) = C:\Program Files (x86)\Veetle\plugins\npVeetle.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Unity Player (Enabled) = C:\Users\ONewbieO\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll CHR - plugin: Google Update (Enabled) = C:\Users\ONewbieO\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Roblox Launcher Plugin (Enabled) = C:\Users\ONewbieO\AppData\Local\Roblox\Versions\version-7344c3428f1546a4\\NPRobloxProxy.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll CHR - Extension: YouTube = C:\Users\ONewbieO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google Search = C:\Users\ONewbieO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: AdBlock = C:\Users\ONewbieO\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.22_0\ CHR - Extension: Gmail = C:\Users\ONewbieO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2009/06/11 05:00:26 \| 000,000,824 \| ---- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O4:64bit: - HKLM..\Run: [@OnlineArmor GUI] C:\Program Files (x86)\Online Armor\oaui.exe (Emsi Software GmbH) O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation) O4:64bit: - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.) O4:64bit: - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited) O4:64bit: - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe (Lenovo(beijing) Limited) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation) O4:64bit: - HKLM..\Run: [Lenovo EE Boot Optimizer] C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe (Lenovo) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [SynLenovoGestureMgr] C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe (Synaptics) O4:64bit: - HKLM..\Run: [TpShocks] C:\Windows\SysNative\TpShocks.exe (Lenovo.) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [Info Center] C:\Program Files (x86)\PCPitstop\Info Center\InfoCenter.exe (PC Pitstop LLC) O4 - HKLM..\Run: [Intelligent Touchpad] C:\Program Files (x86)\Lenovo\Intelligent Touchpad\TouchZone.exe () O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [S6000Mnt] C:\Windows\SysWOW64\Rundll32.exe S6000Rmv.dll,WinMainRmv /StartStillMnt File not found O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [UpdateP2GShortCut] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink) O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe (CyberLink Corp.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (PokerStars) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKCU\..Trusted Domains: microsoft.com ([v4.windowsupdate] http in Trusted sites) O15 - HKCU\..Trusted Domains: microsoft.com ([v4.windowsupdate] https in Trusted sites) O15 - HKCU\..Trusted Domains: microsoft.com ([windowsupdate] http in Trusted sites) O15 - HKCU\..Trusted Domains: microsoft.com ([www] http in Trusted sites) O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://utilities.pcpitstop.com/Nirvana/controls/pcmatic.cab (PCPitstop Utility) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{642A322F-8D66-4551-BA4F-177A97B18F81}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18:64bit: - Protocol\Filter\text/xml - No CLSID value found O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk ) O35:64bit:* - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.clmp3enc - C:\Program Files (x86)\Lenovo\Power2Go\CLMP3Enc.ACM (CyberLink Corp.) Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2012/04/02 04:45:04 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\PCPitstop [2012/04/02 04:45:02 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\PCPitstop [2012/04/01 03:55:15 \| 005,559,152 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2012/04/01 03:55:14 \| 003,968,368 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2012/04/01 03:55:14 \| 003,913,584 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2012/04/01 03:51:09 \| 000,000,000 \| -HSD \| C] -- C:\Config.Msi [2012/04/01 03:50:08 \| 000,515,584 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl [2012/04/01 03:50:08 \| 000,509,952 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll [2012/04/01 03:50:07 \| 000,478,720 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl [2012/04/01 01:40:16 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2012/03/31 18:03:05 \| 000,418,464 \| ---- \| C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012/03/14 08:18:23 \| 001,544,192 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2012/03/14 08:17:31 \| 000,009,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe [2012/03/14 08:17:30 \| 001,031,680 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll [2012/03/14 08:17:30 \| 000,826,880 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll [2012/03/14 08:17:30 \| 000,149,504 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll [2012/03/14 08:17:30 \| 000,077,312 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll [2012/03/12 20:00:48 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller [2012/03/12 20:00:47 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\VS Revo Group [2012/03/12 19:30:58 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Roaming\Mozilla [2012/03/12 19:30:58 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Local\Mozilla [2012/03/12 19:30:50 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Mozilla Firefox [2012/03/12 14:19:43 \| 000,070,304 \| ---- \| C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012/03/12 00:42:35 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Roaming\IObit [2012/03/12 00:42:34 \| 000,031,576 \| ---- \| C] (IObit) -- C:\Windows\SysNative\SmartDefragBootTime.exe [2012/03/12 00:42:33 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 2 [2012/03/12 00:42:07 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\IObit [2012/03/12 00:36:52 \| 000,000,000 \| ---D \| C] -- C:\Program Files\CCleaner [2012/03/11 19:32:52 \| 000,000,000 \| ---D \| C] -- C:\Windows\Sun [2012/03/11 16:17:14 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Java [2012/03/11 16:16:10 \| 000,157,472 \| ---- \| C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2012/03/11 16:16:10 \| 000,149,280 \| ---- \| C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2012/03/11 16:16:10 \| 000,149,280 \| ---- \| C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2012/03/11 16:16:02 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Java ========== Files - Modified Within 30 Days ========== [2012/04/02 14:44:00 \| 000,000,920 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001UA.job [2012/04/02 04:53:00 \| 000,000,868 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001Core.job [2012/04/02 04:49:25 \| 000,031,472 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/04/02 04:49:25 \| 000,031,472 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/04/02 04:42:12 \| 000,281,783 \| ---- \| M] () -- C:\Windows\SysNative\fastboot.set [2012/04/02 04:41:23 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012/04/02 04:41:17 \| 3153,268,736 \| -HS- \| M] () -- C:\hiberfil.sys [2012/04/02 01:44:01 \| 000,000,868 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001Core1cd0f6544831698.job [2012/04/01 03:55:04 \| 000,765,178 \| ---- \| M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012/04/01 03:55:04 \| 000,652,360 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2012/04/01 03:55:04 \| 000,121,292 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2012/04/01 03:54:56 \| 000,765,178 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012/04/01 01:40:17 \| 000,002,338 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\Google Chrome.lnk [2012/04/01 00:59:57 \| 000,418,464 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012/04/01 00:59:57 \| 000,070,304 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012/04/01 00:59:57 \| 000,000,830 \| ---- \| M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/03/31 00:14:21 \| 000,133,177 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\E-Filing for YA 2012.png [2012/03/14 12:27:08 \| 000,319,336 \| ---- \| M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012/03/12 20:00:48 \| 000,001,275 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\Revo Uninstaller.lnk [2012/03/12 19:30:53 \| 000,001,141 \| ---- \| M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012/03/12 18:44:33 \| 000,175,819 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\Moneybookers Deposit.png [2012/03/12 00:42:33 \| 000,001,181 \| ---- \| M] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk [2012/03/12 00:39:33 \| 000,068,606 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\cc_20120312_003921.reg [2012/03/12 00:36:58 \| 000,000,833 \| ---- \| M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012/03/11 16:16:04 \| 000,472,808 \| ---- \| M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2012/03/11 16:16:04 \| 000,157,472 \| ---- \| M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2012/03/11 16:16:04 \| 000,149,280 \| ---- \| M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2012/03/11 16:16:04 \| 000,149,280 \| ---- \| M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe ========== Files Created - No Company Name ========== [2012/04/01 01:40:17 \| 000,002,338 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\Google Chrome.lnk [2012/04/01 01:39:48 \| 000,000,920 \| ---- \| C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001UA.job [2012/04/01 01:39:47 \| 000,000,868 \| ---- \| C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001Core1cd0f6544831698.job [2012/03/31 18:03:06 \| 000,000,830 \| ---- \| C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/03/31 00:14:21 \| 000,133,177 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\E-Filing for YA 2012.png [2012/03/12 20:00:48 \| 000,001,275 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\Revo Uninstaller.lnk [2012/03/12 19:30:53 \| 000,001,153 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2012/03/12 19:30:53 \| 000,001,141 \| ---- \| C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012/03/12 18:44:33 \| 000,175,819 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\Moneybookers Deposit.png [2012/03/12 11:24:18 \| 000,000,868 \| ---- \| C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001Core.job [2012/03/12 00:42:34 \| 000,017,720 \| ---- \| C] () -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys [2012/03/12 00:42:33 \| 000,001,181 \| ---- \| C] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk [2012/03/12 00:39:25 \| 000,068,606 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\cc_20120312_003921.reg [2012/03/12 00:36:58 \| 000,000,833 \| ---- \| C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011/11/12 02:19:50 \| 000,000,376 \| ---- \| C] () -- C:\Windows\ODBC.INI [2011/11/12 01:46:07 \| 000,007,605 \| ---- \| C] () -- C:\Users\ONewbieO\AppData\Local\Resmon.ResmonCfg [2011/11/12 01:04:05 \| 000,059,176 \| ---- \| C] () -- C:\Windows\SysWow64\drivers\OADriver.sys [2011/11/12 01:04:05 \| 000,056,648 \| ---- \| C] () -- C:\Windows\SysWow64\drivers\oahlp64.sys [2011/11/12 00:16:37 \| 000,000,000 \| ---- \| C] () -- C:\Windows\firstboot.dat [2011/09/23 14:39:32 \| 000,765,178 \| ---- \| C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011/09/23 14:35:57 \| 000,000,000 \| ---- \| C] () -- C:\Windows\ativpsrm.bin [2011/09/23 14:28:30 \| 000,015,190 \| ---- \| C] () -- C:\Windows\S6000Twn.ini [2011/09/23 14:27:06 \| 000,003,929 \| ---- \| C] () -- C:\Windows\SysWow64\atipblup.dat [2011/08/15 14:41:49 \| 000,066,856 \| ---- \| C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll [2011/07/25 09:26:57 \| 000,963,116 \| ---- \| C] () -- C:\Windows\SysWow64\igkrng600.bin [2011/07/25 09:26:52 \| 000,216,876 \| ---- \| C] () -- C:\Windows\SysWow64\igfcg600m.bin [2011/07/25 09:26:49 \| 000,145,804 \| ---- \| C] () -- C:\Windows\SysWow64\igcompkrng600.bin [2011/07/25 09:26:19 \| 000,003,929 \| ---- \| C] () -- C:\Windows\SysWow64\atipblag.dat [2011/06/01 13:06:38 \| 000,059,904 \| ---- \| C] () -- C:\Windows\SysWow64\OVDecode.dll ========== LOP Check ========== [2012/03/12 00:42:35 \| 000,000,000 \| ---D \| M] -- C:\Users\ONewbieO\AppData\Roaming\IObit [2012/03/30 01:00:09 \| 000,000,000 \| ---D \| M] -- C:\Users\ONewbieO\AppData\Roaming\Microgaming [2011/11/12 01:05:33 \| 000,000,000 \| ---D \| M] -- C:\Users\ONewbieO\AppData\Roaming\OnlineArmor [2011/11/12 15:49:50 \| 000,000,000 \| ---D \| M] -- C:\Users\ONewbieO\AppData\Roaming\PacificPoker [2012/01/05 01:16:40 \| 000,000,000 \| ---D \| M] -- C:\Users\ONewbieO\AppData\Roaming\Unity [2012/01/18 12:19:56 \| 000,032,614 \| ---- \| M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\. > [2010/11/21 11:23:51 \| 000,383,786 \| RHS- \| M] () -- C:\bootmgr [2011/02/25 01:03:41 \| 000,008,192 \| RHS- \| M] () -- C:\BOOTSECT.BAK [2012/04/02 04:41:17 \| 3153,268,736 \| -HS- \| M] () -- C:\hiberfil.sys [2011/11/12 06:30:12 \| 000,000,132 \| ---- \| M] () -- C:\ICSYSINF.log [2011/09/23 16:38:28 \| 000,000,028 \| ---- \| M] () -- C:\IPGPLDOK.TXT [2011/09/23 14:56:50 \| 000,000,064 \| ---- \| M] () -- C:\Lenovo EE Boot Optimizer.log [2012/04/02 04:41:21 \| 4204,359,680 \| -HS- \| M] () -- C:\pagefile.sys < %systemroot%\Fonts\.com > [2009/07/14 13:32:31 \| 000,026,040 \| ---- \| M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont [2009/07/14 13:32:31 \| 000,026,489 \| ---- \| M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont [2009/07/14 13:32:31 \| 000,029,779 \| ---- \| M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont [2009/07/14 13:32:31 \| 000,043,318 \| ---- \| M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont < %systemroot%\Fonts\.dll > < %systemroot%\Fonts\.ini > [2009/06/11 04:49:50 \| 000,000,065 \| ---- \| M] () -- C:\Windows\Fonts\desktop.ini < %systemroot%\Fonts\.ini2 > < %systemroot%\Fonts\.exe > < %systemroot%\system32\spool\prtprocs\w32x86\.* > < %systemroot%\REPAIR\.bak1 > < %systemroot%\REPAIR\.ini > < %systemroot%\system32\.jpg > < %systemroot%\.jpg > < %systemroot%\.png > < %systemroot%\.scr > [2010/11/10 17:28:46 \| 000,301,936 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\WLXPGSS.SCR < %systemroot%\._sy > < %APPDATA%\Adobe\Update\.* > < %ALLUSERSPROFILE%\Favorites\. > < %APPDATA%\Microsoft\. > < %PROGRAMFILES%\. > [2009/07/14 12:54:24 \| 000,000,174 \| -HS- \| M] () -- C:\Program Files (x86)\desktop.ini < %APPDATA%\Update\. > < %systemroot%\. /mp /s > < %systemroot%\System32\config\.sav > < %PROGRAMFILES%\bak. /s > < %systemroot%\system32\bak. /s > < %ALLUSERSPROFILE%\Start Menu\.lnk /x > < %systemroot%\system32\config\systemprofile\.dat /x > < %systemroot%\.config > < %systemroot%\system32\.db > < %PROGRAMFILES%\Internet Explorer\.dat > < %APPDATA%\Microsoft\Internet Explorer\Quick Launch\.lnk /x > [2011/11/12 00:31:31 \| 000,000,221 \| -HS- \| M] () -- C:\Users\ONewbieO\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini < %USERPROFILE%\Desktop\.exe > < %PROGRAMFILES%\Common Files\.* > < %systemroot%\.src > [2003/09/23 20:36:46 \| 000,013,448 \| ---- \| M] () -- C:\Windows\S6000Twn.src < %systemroot%\install\.* > < %systemroot%\system32\DLL\. > < %systemroot%\system32\HelpFiles\. > < %systemroot%\system32\rundll\. > < %systemroot%\winn32\. > < %systemroot%\Java\. > < %systemroot%\system32\test\. > < %systemroot%\system32\Rundll32\. > < %systemroot%\AppPatch\Custom\. > < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\|LastSuccessTime /rs > < End of report >

jeffce View Member Profile	Apr 5 2012, 04:13 PM Post #2
Super Saiyan Group: Malware Team Posts: 7,220 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following: I will be working on your Malware issues, this may or may not, solve other issues you have with your machine. The fixes are specific to your problem and should only be used for the issues on this machine. Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear. It's often worth reading through these instructions and printing them for ease of reference. If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry. Please reply to this thread. Do not start a new topic. IMPORTANT NOTE : Please do not delete anything unless instructed to. DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your OS losing all your programs and data. Vista and Windows 7 users: These tools MUST be run from the executable (.exe) every time you run them with Admin Rights (Right click, choose "Run as Administrator") Stay with this topic until I give you the all clean post. First we need to make all files and folders VISIBLE: Go to start>control panel>folder options>view Choose to "show hidden files and folders," Uncheck the "hide protected operating system files" and the "hide extensions for know file types" boxes. Close the window with OK Download CKScanner by askey127 from Here & save it to your Desktop. Right-click and Run as Administrator CKScanner.exe then click Search For Files When the cursor hourglass disappears, click Save List To File A message box will verify the file saved Double-click the CKFiles.txt icon on your desktop then copy/paste the contents in your next reply ---------- Please download aswMBR to your desktop. Right click and Run as Administrator the aswMBR icon to run it. Click the Scan button to start scan. When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply. Click the image to enlarge it ----------

ONewbieO View Member Profile	Apr 5 2012, 09:36 PM Post #3
Authentic Member Group: Authentic Member Posts: 77 Joined: 24-October 11 Member No.: 98,517 Operating System: Microsoft Windows XP	Many thanks for your response . I appreciate it and hope to get them resolved very soon I'm using Chrome and i'm already the Administrator for my machine as i had created a guest account as well . Do i still need to click run as administrator ? I clicked on the links provided and they were downloaded and not giving me a chance to save them to my desktop . Would that be ok ? Anyway , just an update of my machine . My system is Windows 7 and not windows XP as i have previously got you guys to fix a machine for me before . This machine though belongs to me . CK Scanner Results CKScanner - Additional Security Risks - These are not necessarily bad c:\casino\betfair casino\data\slots_pinkpanther40line\animations\bonus_crack\crack_intro.swf c:\casino\betfair casino\data\slots_safecracker\3d\reel0.slt c:\casino\betfair casino\data\slots_safecracker\3d\reel1.slt c:\casino\betfair casino\data\slots_safecracker\3d\reel2.slt c:\microgaming\casino\ladbrokes\local\en\clariondescriptions\txt_desc_crackerjack1.dat scanner sequence 3.BC.11.CKAPDD ----- EOF ----- ASWMBR scan aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software Run date: 2012-04-06 11:19:30 ----------------------------- 11:19:30.547 OS Version: Windows x64 6.1.7601 Service Pack 1 11:19:30.547 Number of processors: 4 586 0x2A07 11:19:30.547 ComputerName: ALVINPC UserName: 11:19:33.882 Initialize success 11:20:31.655 AVAST engine defs: 12040501 11:20:39.112 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 11:20:39.114 Disk 0 Vendor: WDC_WD50 03.0 Size: 476940MB BusType: 3 11:20:39.129 Disk 0 MBR read successfully 11:20:39.131 Disk 0 MBR scan 11:20:39.151 Disk 0 Windows 7 default MBR code 11:20:39.160 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 200 MB offset 2048 11:20:39.176 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 431738 MB offset 411648 11:20:39.207 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 30000 MB offset 884611072 11:20:39.225 Disk 0 Partition 4 00 12 Compaq diag NTFS 15000 MB offset 946051072 11:20:39.272 Disk 0 scanning C:\Windows\system32\drivers 11:21:18.831 Service scanning 11:22:10.164 Modules scanning 11:22:10.169 Disk 0 trace - called modules: 11:22:10.512 ntoskrnl.exe CLASSPNP.SYS disk.sys iaStor.sys hal.dll 11:22:10.515 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8006c84060] 11:22:10.517 3 CLASSPNP.SYS[fffff88001db243f] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa80047e8050] 11:22:11.935 AVAST engine scan C:\Windows 11:22:14.712 AVAST engine scan C:\Windows\system32 11:26:34.974 AVAST engine scan C:\Windows\system32\drivers 11:26:52.618 AVAST engine scan C:\Users\ONewbieO 11:26:55.102 File: C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.142\Installer\setup.exe INFECTED Win32:Malware-gen 11:33:48.583 AVAST engine scan C:\ProgramData 11:35:05.474 Scan finished successfully 11:35:29.479 Disk 0 MBR has been saved successfully to "C:\Users\ONewbieO\Desktop\MBR.dat" 11:35:29.484 The log file has been saved successfully to "C:\Users\ONewbieO\Desktop\aswMBR.txt"

jeffce View Member Profile	Apr 6 2012, 11:15 AM Post #4
Super Saiyan Group: Malware Team Posts: 7,220 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi, Please download and run ERUNT (Emergency Recovery Utility NT). This program allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed. Remember if you are using Windows Vista as your operating system right-click the executable and Run as Administrator. ---------- Run OTL.exe Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL CODE :Services :OTL PRC - C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe (IObit) MOD - C:\Program Files (x86)\IObit\Smart Defrag 2\NtfsData.dll () IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}...rc=IE-SearchBox IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}...rc=IE-SearchBox IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}...rc=IE-SearchBox IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O15 - HKCU\..Trusted Domains: microsoft.com ([v4.windowsupdate] http in Trusted sites) O15 - HKCU\..Trusted Domains: microsoft.com ([v4.windowsupdate] https in Trusted sites) O15 - HKCU\..Trusted Domains: microsoft.com ([windowsupdate] http in Trusted sites) O15 - HKCU\..Trusted Domains: microsoft.com ([www] http in Trusted sites) O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18:64bit: - Protocol\Filter\text/xml - No CLSID value found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. [2012/03/12 00:42:35 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Roaming\IObit [2012/03/12 00:42:07 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\IObit :Files ipconfig /flushdns /c :Commands [purity] [resethosts] [emptytemp] [start explorer] [Reboot] Then click the Run Fix button at the top Let the program run unhindered, reboot when it is done Then run a new scan and post a new OTL log ( don't check** the boxes beside LOP Check or Purity this time ) ----------

ONewbieO View Member Profile	Apr 6 2012, 03:58 PM Post #5
Authentic Member Group: Authentic Member Posts: 77 Joined: 24-October 11 Member No.: 98,517 Operating System: Microsoft Windows XP	This was when the initial command was typed into OTL . All processes killed ========== SERVICES/DRIVERS ========== ========== OTL ========== No active process named Program Files was found! 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable\|dword:0 /E : value set successfully! 64bit-Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ not found. Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ not found. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoft.com\v4.windowsupdate\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoft.com\v4.windowsupdate\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoft.com\windowsupdate\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoft.com\www\ not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ not found. File Protocol\Handler\livecall - No CLSID value found not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\ not found. File Protocol\Handler\msdaipp - No CLSID value found not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\0x00000001\ not found. File Protocol\Handler\msdaipp\0x00000001 - No CLSID value found not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\oledb\ not found. File Protocol\Handler\msdaipp\oledb - No CLSID value found not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ not found. File Protocol\Handler\msnim - No CLSID value found not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\mso-offdap11\ not found. File Protocol\Handler\mso-offdap11 - No CLSID value found not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ not found. File Protocol\Handler\wlmailhtml - No CLSID value found not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ not found. File Protocol\Handler\wlpg - No CLSID value found not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ not found. 64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. Folder C:\Users\ONewbieO\AppData\Roaming\IObit\ not found. Folder C:\Program Files (x86)\IObit\ not found. ========== FILES ========== < ipconfig /flushdns /c > Windows IP Configuration Successfully flushed the DNS Resolver Cache. C:\Users\ONewbieO\Downloads\cmd.bat deleted successfully. C:\Users\ONewbieO\Downloads\cmd.txt deleted successfully. ========== COMMANDS ========== HOSTS file reset successfully [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 56475 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: ONewbieO ->Temp folder emptied: 93508411 bytes ->Temporary Internet Files folder emptied: 123236095 bytes ->Java cache emptied: 13588495 bytes ->FireFox cache emptied: 21033789 bytes ->Google Chrome cache emptied: 376016295 bytes ->Flash cache emptied: 48761 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 22201065 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50333 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 620.00 mb OTL by OldTimer - Version 3.2.39.2 log created on 04072012_055052 Files\Folders moved on Reboot... C:\Users\ONewbieO\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. Registry entries deleted on Reboot... This is the log file from new scan . OTL logfile created on: 7/4/2012 6:06:42 AM - Run 2 OTL by OldTimer - Version 3.2.39.2 Folder = C:\Users\ONewbieO\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00004809 \| Country: Singapore \| Language: ENE \| Date Format: d/M/yyyy 3.92 Gb Total Physical Memory \| 2.24 Gb Available Physical Memory \| 57.10% Memory free 7.83 Gb Paging File \| 5.74 Gb Available in Paging File \| 73.26% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 421.62 Gb Total Space \| 378.87 Gb Free Space \| 89.86% Space Free \| Partition Type: NTFS Drive D: \| 29.30 Gb Total Space \| 26.62 Gb Free Space \| 90.87% Space Free \| Partition Type: NTFS Computer Name: ALVINPC \| User Name: ONewbieO \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\ONewbieO\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\PCPitstop\Info Center\InfoCenter.exe (PC Pitstop LLC) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) PRC - C:\Program Files (x86)\Online Armor\oaui.exe (Emsi Software GmbH) PRC - C:\Program Files (x86)\Online Armor\oasrv.exe (Emsi Software GmbH) PRC - C:\Program Files (x86)\Online Armor\OAReg.exe (Emsi Software GmbH) PRC - C:\Program Files (x86)\Online Armor\oahlp.exe (Emsi Software GmbH) PRC - C:\Program Files (x86)\Online Armor\oacat.exe (Emsi Software GmbH) PRC - C:\Program Files (x86)\Lenovo\Intelligent Touchpad\TouchZone.exe () PRC - C:\Windows\Webcam\S6000\S6000Mnt.exe (Alcor) PRC - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation) PRC - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink) PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) PRC - C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.) ========== Modules (No Company Name) ========== MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.151\ppgooglenaclpluginchrome.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.151\pdf.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.151\avutil-51.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.151\avformat-53.dll () MOD - C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.151\avcodec-53.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\b9942cb07813f553f6d6374dd4541362\System.Xaml.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\bd3685e578c22d17625390d847973de0\PresentationFramework.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\008fbb2e42b3c2569ff58d651575ff29\PresentationCore.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\33eae86e0a5d9bcc4d0e4e469e2ac36a\System.Windows.Forms.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b7409080f31b0a702281b68c37bac326\System.Core.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\68345d6b57fe33c9a94fe6a72ab5e85e\System.Xml.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\c0c7b3ff43f1b29cad7dde24bdbd5b79\WindowsBase.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\2c958d61dd28474ec780db9d18d266ae\System.Drawing.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\6757251401cd9c17d5e608db6e5f964a\System.Configuration.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\1c5b741f270fccb3b527b4fc3a8431f3\PresentationFramework.Aero.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\System\57e066d0b97757dbd26d59302c3d701a\System.ni.dll () MOD - C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\e5b31f3bb6508df0dc7c20ddc72f3191\mscorlib.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\b53dffac744d13ee946b0ff35fc32936\System.Windows.Forms.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\35de7085545a1fb86ec40d2da9865258\System.Drawing.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\4ccd2bbe37da506b69dd689f06d749a2\System.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\4c2b00c9c2f2109037cd39d7b7a81633\mscorlib.ni.dll () MOD - C:\Program Files (x86)\Lenovo\Intelligent Touchpad\TouchZone.exe () ========== Win32 Services (SafeList) ========== SRV:64bit: - (!SASCORE) -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe (SUPERAntiSpyware.com) SRV:64bit: - (EvtEng) Intel® -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation) SRV:64bit: - (MyWiFiDHCPDNS) -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe () SRV:64bit: - (RegSrvc) Intel® -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation) SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (AMPPALR3) -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel Corporation) SRV:64bit: - (BTHSSecurityMgr) Intel® Centrino® Wireless Bluetooth® -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (Intel® Corporation) SRV:64bit: - (Intel® PROSet Monitoring Service) Intel® -- C:\Windows\SysNative\IPROSetMonitor.exe (Intel Corporation) SRV:64bit: - (CxAudMsg) -- C:\Windows\SysNative\CxAudMsg64.exe (Conexant Systems Inc.) SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation) SRV:64bit: - (TPHDEXLGSVC) -- C:\Windows\SysNative\TPHDEXLG64.exe (Lenovo.) SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated) SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (SvcOnlineArmor) -- C:\Program Files (x86)\Online Armor\oasrv.exe (Emsi Software GmbH) SRV - (OAcat) -- C:\Program Files (x86)\Online Armor\oacat.exe (Emsi Software GmbH) SRV - (Bluetooth OBEX Service) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Intel Corporation) SRV - (Bluetooth Media Service) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) SRV - (Bluetooth Device Monitor) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Intel Corporation) SRV - (UNS) Intel® -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) Intel® -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH) DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH) DRV:64bit: - (iBtFltCoex) -- C:\Windows\SysNative\drivers\iBtFltCoex.sys (Intel Corporation) DRV:64bit: - (btmhsf) -- C:\Windows\SysNative\drivers\btmhsf.sys (Intel Corporation) DRV:64bit: - (OAnet) -- C:\Windows\SysNative\drivers\OAnet.sys (Emsisoft) DRV:64bit: - (fbfmon) -- C:\Windows\SysNative\drivers\fbfmon.sys (Lenovo) DRV:64bit: - (BPntDrv) -- C:\Windows\SysNative\drivers\BPntDrv.sys (Lenovo) DRV:64bit: - (LHDmgr) -- C:\Windows\SysNative\drivers\LhdX64.sys (Lenovo.) DRV:64bit: - (ACPIVPC) -- C:\Windows\SysNative\drivers\AcpiVpc.sys (Lenovo Corporation) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira GmbH) DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated) DRV:64bit: - (S6000KNT) -- C:\Windows\SysNative\drivers\S6000KNT.sys (Windows ® Win 7 DDK provider) DRV:64bit: - (CnxtHdAudService) -- C:\Windows\SysNative\drivers\CHDRT64.sys (Conexant Systems Inc.) DRV:64bit: - (SASDIFSV) -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV:64bit: - (SASKUTIL) -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (e1cexpress) Intel® -- C:\Windows\SysNative\drivers\e1c62x64.sys (Intel Corporation) DRV:64bit: - (NETwNs64) ___ Intel® -- C:\Windows\SysNative\drivers\NETwNs64.sys (Intel Corporation) DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation) DRV:64bit: - (AMPPALP) Intel® Centrino® -- C:\Windows\SysNative\drivers\AmpPal.sys (Windows ® Win 7 DDK provider) DRV:64bit: - (AMPPAL) Intel® Centrino® -- C:\Windows\SysNative\drivers\AmpPal.sys (Windows ® Win 7 DDK provider) DRV:64bit: - (intelkmd) -- C:\Windows\SysNative\drivers\igdpmd64.sys (Intel Corporation) DRV:64bit: - (btmaux) -- C:\Windows\SysNative\drivers\btmaux.sys (Intel Corporation) DRV:64bit: - (wdkmd) -- C:\Windows\SysNative\drivers\WDKMD.sys (Intel Corporation) DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation) DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation) DRV:64bit: - (clwvd) -- C:\Windows\SysNative\drivers\clwvd.sys (CyberLink Corporation) DRV:64bit: - (SmartDefragDriver) -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys () DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation) DRV:64bit: - (MEIx64) Intel® -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation) DRV:64bit: - (IntcDAud) Intel® -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel® Corporation) DRV:64bit: - (Shockprf) -- C:\Windows\SysNative\drivers\ApsX64.sys (Lenovo.) DRV:64bit: - (TPDIGIMN) -- C:\Windows\SysNative\drivers\ApsHM64.sys (Lenovo.) DRV:64bit: - (wsvd) -- C:\Windows\SysNative\drivers\wsvd.sys (CyberLink) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (TPM) -- C:\Windows\SysNative\drivers\tpm.sys (Microsoft Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (oahlpXX) -- C:\Windows\SysWOW64\drivers\oahlp64.sys () DRV - (OADevice) -- C:\Windows\SysWOW64\drivers\OADriver.sys () DRV - (OAmon) -- C:\Windows\SysWOW64\drivers\OAmon.sys (Emsisoft) DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ [binary data] IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.msn.com IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm...mp;sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/ [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://startsear.ch/?aff=1&src=sp&...q={searchTerms} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm...mp;sourceid=ie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?br...N&bmod=LENN IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64} IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://startsear.ch/?aff=1&src=sp&...q={searchTerms} IE - HKCU\..\SearchScopes\{78049031-5A2B-4D32-988A-6418444B6E0A}: "URL" = http://www.google.com/search?sourceid=ie7&...amp;rlz=1I7LENN IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_228.dll File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_228.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@nsroblox.roblox.com/launcher: C:\Users\ONewbieO\AppData\Local\Roblox\Versions\version-7344c3428f1546a4\\NPRobloxProxy.dll () FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\ONewbieO\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\ONewbieO\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\ONewbieO\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/03/12 19:30:50 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/03/12 19:31:00 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\ONewbieO\AppData\Roaming\Mozilla\Extensions [2012/03/12 19:33:02 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\ONewbieO\AppData\Roaming\Mozilla\Firefox\Profiles\x6t7q09q.default\extensions [2012/03/12 19:30:50 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions () (No name found) -- C:\USERS\ONEWBIEO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X6T7Q09Q.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2012/02/16 22:40:42 \| 000,134,104 \| ---- \| M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012/02/16 18:42:53 \| 000,002,252 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml [2012/02/16 18:42:53 \| 000,002,040 \| ---- \| M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro me&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client =chrome&hl={language}&q={searchTerms} CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.151\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.151\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\ONewbieO\AppData\Local\Google\Chrome\Application\18.0.1025.151\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_228.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Java™ Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Veetle TV Player (Enabled) = C:\Program Files (x86)\Veetle\Player\npvlc.dll CHR - plugin: Veetle TV Core (Enabled) = C:\Program Files (x86)\Veetle\plugins\npVeetle.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Unity Player (Enabled) = C:\Users\ONewbieO\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll CHR - plugin: Google Update (Enabled) = C:\Users\ONewbieO\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Roblox Launcher Plugin (Enabled) = C:\Users\ONewbieO\AppData\Local\Roblox\Versions\version-7344c3428f1546a4\\NPRobloxProxy.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll CHR - Extension: YouTube = C:\Users\ONewbieO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google Search = C:\Users\ONewbieO\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: AdBlock = C:\Users\ONewbieO\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.25_0\ CHR - Extension: Gmail = C:\Users\ONewbieO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2012/04/07 05:50:53 \| 000,000,098 \| ---- \| M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O4:64bit: - HKLM..\Run: [@OnlineArmor GUI] C:\Program Files (x86)\Online Armor\oaui.exe (Emsi Software GmbH) O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation) O4:64bit: - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.) O4:64bit: - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited) O4:64bit: - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation) O4:64bit: - HKLM..\Run: [Lenovo EE Boot Optimizer] C:\Program Files (x86)\Lenovo\Boot Optimizer\PopWnd.exe (Lenovo) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [SynLenovoGestureMgr] C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe (Synaptics) O4:64bit: - HKLM..\Run: [TpShocks] C:\Windows\SysNative\TpShocks.exe (Lenovo.) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [Info Center] C:\Program Files (x86)\PCPitstop\Info Center\InfoCenter.exe (PC Pitstop LLC) O4 - HKLM..\Run: [Intelligent Touchpad] C:\Program Files (x86)\Lenovo\Intelligent Touchpad\TouchZone.exe () O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [S6000Mnt] C:\Windows\SysWOW64\Rundll32.exe S6000Rmv.dll,WinMainRmv /StartStillMnt File not found O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [UpdateP2GShortCut] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files\Lenovo\OneKey App\OneKey Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink) O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\Lenovo\YouCam\YouCam.exe (CyberLink Corp.) O4 - Startup: C:\Users\ONewbieO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files (x86)\ERUNT\AUTOBACK.EXE () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html File not found O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files (x86)\PokerStars\PokerStarsUpdate.exe (PokerStars) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://utilities.pcpitstop.com/Nirvana/controls/pcmatic.cab (PCPitstop Utility) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{642A322F-8D66-4551-BA4F-177A97B18F81}: DhcpNameServer = 192.168.1.1 192.168.1.1 O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk ) O35:64bit:* - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012/04/07 06:08:39 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Roaming\Avira [2012/04/07 06:03:24 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira [2012/04/07 06:03:09 \| 000,132,320 \| ---- \| C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys [2012/04/07 06:03:09 \| 000,097,312 \| ---- \| C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys [2012/04/07 06:03:09 \| 000,027,760 \| ---- \| C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avkmgr.sys [2012/04/07 06:03:09 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Avira [2012/04/07 06:03:09 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Avira [2012/04/07 05:48:41 \| 000,000,000 \| ---D \| C] -- C:\_OTL [2012/04/07 05:46:57 \| 000,000,000 \| ---D \| C] -- C:\Windows\ERDNT [2012/04/07 05:46:27 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT [2012/04/07 05:46:26 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\ERUNT [2012/04/02 04:45:04 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\PCPitstop [2012/04/02 04:45:02 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\PCPitstop [2012/04/01 03:55:15 \| 005,559,152 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2012/04/01 03:55:14 \| 003,968,368 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2012/04/01 03:55:14 \| 003,913,584 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2012/04/01 03:51:09 \| 000,000,000 \| -HSD \| C] -- C:\Config.Msi [2012/04/01 03:50:08 \| 000,515,584 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl [2012/04/01 03:50:08 \| 000,509,952 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll [2012/04/01 03:50:07 \| 000,478,720 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl [2012/04/01 01:40:16 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2012/03/31 18:03:05 \| 000,418,464 \| ---- \| C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012/03/14 08:18:23 \| 001,544,192 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [2012/03/14 08:17:31 \| 000,009,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe [2012/03/14 08:17:30 \| 001,031,680 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll [2012/03/14 08:17:30 \| 000,826,880 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll [2012/03/14 08:17:30 \| 000,149,504 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll [2012/03/14 08:17:30 \| 000,077,312 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll [2012/03/12 20:00:48 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller [2012/03/12 20:00:47 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\VS Revo Group [2012/03/12 19:30:58 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Roaming\Mozilla [2012/03/12 19:30:58 \| 000,000,000 \| ---D \| C] -- C:\Users\ONewbieO\AppData\Local\Mozilla [2012/03/12 19:30:50 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Mozilla Firefox [2012/03/12 14:19:43 \| 000,070,304 \| ---- \| C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012/03/12 00:42:34 \| 000,031,576 \| ---- \| C] (IObit) -- C:\Windows\SysNative\SmartDefragBootTime.exe [2012/03/12 00:42:33 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 2 [2012/03/12 00:36:52 \| 000,000,000 \| ---D \| C] -- C:\Program Files\CCleaner [2012/03/11 19:32:52 \| 000,000,000 \| ---D \| C] -- C:\Windows\Sun [2012/03/11 16:17:14 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Java [2012/03/11 16:16:10 \| 000,157,472 \| ---- \| C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2012/03/11 16:16:10 \| 000,149,280 \| ---- \| C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2012/03/11 16:16:10 \| 000,149,280 \| ---- \| C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2012/03/11 16:16:02 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Java ========== Files - Modified Within 30 Days ========== [2012/04/07 06:06:39 \| 000,031,472 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/04/07 06:06:39 \| 000,031,472 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/04/07 06:03:24 \| 000,002,077 \| ---- \| M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk [2012/04/07 06:00:10 \| 000,143,965 \| ---- \| M] () -- C:\Windows\SysNative\fastboot.set [2012/04/07 05:59:17 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012/04/07 05:59:11 \| 3153,268,736 \| -HS- \| M] () -- C:\hiberfil.sys [2012/04/07 05:50:53 \| 000,000,098 \| ---- \| M] () -- C:\Windows\SysNative\drivers\etc\Hosts [2012/04/07 05:46:35 \| 000,001,115 \| ---- \| M] () -- C:\Users\ONewbieO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk [2012/04/07 05:46:27 \| 000,000,935 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\NTREGOPT.lnk [2012/04/07 05:46:27 \| 000,000,916 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\ERUNT.lnk [2012/04/07 05:44:00 \| 000,000,920 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001UA.job [2012/04/07 04:53:00 \| 000,000,868 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001Core.job [2012/04/07 01:44:00 \| 000,000,868 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001Core1cd0f6544831698.job [2012/04/06 12:46:57 \| 000,002,423 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\Google Chrome.lnk [2012/04/06 11:35:29 \| 000,000,512 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\MBR.dat [2012/04/01 03:55:04 \| 000,765,178 \| ---- \| M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012/04/01 03:55:04 \| 000,652,360 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2012/04/01 03:55:04 \| 000,121,292 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2012/04/01 03:54:56 \| 000,765,178 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012/04/01 00:59:57 \| 000,418,464 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012/04/01 00:59:57 \| 000,070,304 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012/04/01 00:59:57 \| 000,000,830 \| ---- \| M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/03/31 00:14:21 \| 000,133,177 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\E-Filing for YA 2012.png [2012/03/14 12:27:08 \| 000,319,336 \| ---- \| M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012/03/12 20:00:48 \| 000,001,275 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\Revo Uninstaller.lnk [2012/03/12 19:30:53 \| 000,001,141 \| ---- \| M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012/03/12 18:44:33 \| 000,175,819 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\Moneybookers Deposit.png [2012/03/12 00:42:33 \| 000,001,181 \| ---- \| M] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk [2012/03/12 00:39:33 \| 000,068,606 \| ---- \| M] () -- C:\Users\ONewbieO\Desktop\cc_20120312_003921.reg [2012/03/12 00:36:58 \| 000,000,833 \| ---- \| M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012/03/11 16:16:04 \| 000,472,808 \| ---- \| M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2012/03/11 16:16:04 \| 000,157,472 \| ---- \| M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2012/03/11 16:16:04 \| 000,149,280 \| ---- \| M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2012/03/11 16:16:04 \| 000,149,280 \| ---- \| M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe ========== Files Created - No Company Name ========== [2012/04/07 06:03:24 \| 000,002,077 \| ---- \| C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk [2012/04/07 05:46:35 \| 000,001,115 \| ---- \| C] () -- C:\Users\ONewbieO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk [2012/04/07 05:46:27 \| 000,000,935 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\NTREGOPT.lnk [2012/04/07 05:46:27 \| 000,000,916 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\ERUNT.lnk [2012/04/06 11:35:29 \| 000,000,512 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\MBR.dat [2012/04/01 01:40:17 \| 000,002,423 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\Google Chrome.lnk [2012/04/01 01:39:48 \| 000,000,920 \| ---- \| C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001UA.job [2012/04/01 01:39:47 \| 000,000,868 \| ---- \| C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001Core1cd0f6544831698.job [2012/03/31 18:03:06 \| 000,000,830 \| ---- \| C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/03/31 00:14:21 \| 000,133,177 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\E-Filing for YA 2012.png [2012/03/12 20:00:48 \| 000,001,275 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\Revo Uninstaller.lnk [2012/03/12 19:30:53 \| 000,001,153 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2012/03/12 19:30:53 \| 000,001,141 \| ---- \| C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012/03/12 18:44:33 \| 000,175,819 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\Moneybookers Deposit.png [2012/03/12 11:24:18 \| 000,000,868 \| ---- \| C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4176799644-1864613857-429760169-1001Core.job [2012/03/12 00:42:34 \| 000,017,720 \| ---- \| C] () -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys [2012/03/12 00:42:33 \| 000,001,181 \| ---- \| C] () -- C:\Users\Public\Desktop\Smart Defrag 2.lnk [2012/03/12 00:39:25 \| 000,068,606 \| ---- \| C] () -- C:\Users\ONewbieO\Desktop\cc_20120312_003921.reg [2012/03/12 00:36:58 \| 000,000,833 \| ---- \| C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2011/11/12 02:19:50 \| 000,000,376 \| ---- \| C] () -- C:\Windows\ODBC.INI [2011/11/12 01:46:07 \| 000,007,605 \| ---- \| C] () -- C:\Users\ONewbieO\AppData\Local\Resmon.ResmonCfg [2011/11/12 01:04:05 \| 000,059,176 \| ---- \| C] () -- C:\Windows\SysWow64\drivers\OADriver.sys [2011/11/12 01:04:05 \| 000,056,648 \| ---- \| C] () -- C:\Windows\SysWow64\drivers\oahlp64.sys [2011/11/12 00:16:37 \| 000,000,000 \| ---- \| C] () -- C:\Windows\firstboot.dat [2011/09/23 14:39:32 \| 000,765,178 \| ---- \| C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011/09/23 14:35:57 \| 000,000,000 \| ---- \| C] () -- C:\Windows\ativpsrm.bin [2011/09/23 14:28:30 \| 000,015,190 \| ---- \| C] () -- C:\Windows\S6000Twn.ini [2011/09/23 14:27:06 \| 000,003,929 \| ---- \| C] () -- C:\Windows\SysWow64\atipblup.dat [2011/08/15 14:41:49 \| 000,066,856 \| ---- \| C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll [2011/07/25 09:26:57 \| 000,963,116 \| ---- \| C] () -- C:\Windows\SysWow64\igkrng600.bin [2011/07/25 09:26:52 \| 000,216,876 \| ---- \| C] () -- C:\Windows\SysWow64\igfcg600m.bin [2011/07/25 09:26:49 \| 000,145,804 \| ---- \| C] () -- C:\Windows\SysWow64\igcompkrng600.bin [2011/07/25 09:26:19 \| 000,003,929 \| ---- \| C] () -- C:\Windows\SysWow64\atipblag.dat [2011/06/01 13:06:38 \| 000,059,904 \| ---- \| C] () -- C:\Windows\SysWow64\OVDecode.dll < End of report > This post has been edited by ONewbieO: Apr 6 2012, 04:10 PM

jeffce View Member Profile	Apr 6 2012, 04:07 PM Post #6
Super Saiyan Group: Malware Team Posts: 7,220 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi, That log looked good with what was removed. When you get the new scan with OTL completed please post that too.

ONewbieO View Member Profile	Apr 6 2012, 04:11 PM Post #7
Authentic Member Group: Authentic Member Posts: 77 Joined: 24-October 11 Member No.: 98,517 Operating System: Microsoft Windows XP	I restarted my computer when doing the things . So i have edited my post already . Didnt know you will reply so soon .

jeffce View Member Profile	Apr 6 2012, 06:30 PM Post #8
Super Saiyan Group: Malware Team Posts: 7,220 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Oh ok... Please download Malwarebytes' Anti-Malware to your desktop. Right-click and Run as Administrator mbam-setup.exe and follow the prompts to install the program. At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If an update is found, it will download and install the latest version. Once the program has loaded, select Perform quick scan, then click Scan as shown below. When the scan is complete, click OK, then Show Results to view the results. Be sure that everything is checked, and click Remove Selected. When completed, a log will open in Notepad. Please save it to a convenient location and post the results. The log can also be found here: C:\Documents and Settings\<User name>\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt ---------- ESET Online Scanner: Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here. Vista users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu. Please go here then click on: QUOTE Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install. All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox. Select the option YES, I accept the Terms of Use then click on: When prompted allow the Add-On/Active X to install. Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked. Now click on Advanced Settings and select the following: Scan for potentially unwanted applications Scan for potentially unsafe applications Enable Anti-Stealth Technology Now click on: The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection. When completed the Online Scan will begin automatically. Do not touch either the Mouse or keyboard during the scan otherwise it may stall. When completed select Uninstall application on close if you so wish, make sure you copy the logfile first! Now click on: Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt. Copy and paste that log as a reply to this topic. Note: Do not forget to re-enable your Anti-Virus application after running the above scan! ---------- In your next reply please post the logs made by Malwarebytes and ESET online scanner.

ONewbieO View Member Profile	Apr 6 2012, 09:34 PM Post #9
Authentic Member Group: Authentic Member Posts: 77 Joined: 24-October 11 Member No.: 98,517 Operating System: Microsoft Windows XP	Log for Malware Bytes Malwarebytes Anti-Malware 1.60.1.1000 www.malwarebytes.org Database version: v2012.03.31.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 ONewbieO :: ALVINPC [administrator] 7/4/2012 11:30:21 AM mbam-log-2012-04-07 (11-30-21).txt Scan type: Quick scan Scan options enabled: Memory \| Startup \| Registry \| File System \| Heuristics/Extra \| Heuristics/Shuriken \| PUP \| PUM Scan options disabled: P2P Objects scanned: 191173 Time elapsed: 3 minute(s), 13 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 16 C:\Users\ONewbieO\Downloads\32Red (1).exe (PUP.Casino.Gen) -> No action taken. C:\Users\ONewbieO\Downloads\32Red.exe (PUP.Casino.Gen) -> No action taken. C:\Users\ONewbieO\Downloads\betwaypoker.exe (PUP.Casino.Gen) -> No action taken. C:\Users\ONewbieO\Downloads\Ladbrokes.exe (PUP.Casino.Gen) -> No action taken. C:\Users\ONewbieO\Downloads\NordicBet.exe (PUP.Casino.Gen) -> No action taken. C:\Users\ONewbieO\Downloads\SetupCasino_25ed.exe (PUP.Casino) -> No action taken. C:\Users\ONewbieO\Downloads\SetupCasino_b0c4.exe (PUP.Casino) -> No action taken. C:\Users\ONewbieO\Downloads\SetupPoker_20469a_entupPoker.exe (PUP.Casino) -> No action taken. C:\Users\ONewbieO\Downloads\SetupPoker_25ed.exe (PUP.Casino) -> No action taken. C:\Users\ONewbieO\Downloads\SetupPoker_5025.exe (PUP.Casino) -> No action taken. C:\Users\ONewbieO\Downloads\SetupPoker_618.exe (PUP.Casino) -> No action taken. C:\Users\ONewbieO\Downloads\SetupPoker_73de0.exe (PUP.Casino) -> No action taken. C:\Users\ONewbieO\Downloads\SetupPoker_8e836.exe (PUP.Casino) -> No action taken. C:\Users\ONewbieO\Downloads\Setup_LadbrokesCasino.exe (PUP.Casino.Gen) -> No action taken. C:\Users\ONewbieO\Downloads\stanjames.exe (PUP.Casino.Gen) -> No action taken. C:\Users\ONewbieO\Downloads\Unibet.exe (PUP.Casino.Gen) -> No action taken. (end)

jeffce View Member Profile	Apr 7 2012, 06:07 AM Post #10
Super Saiyan Group: Malware Team Posts: 7,220 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi, Run Malwarebytes again and remove the entries found this time. Were you able to get ESET ran yet? If so please post that log as well. Let me know how your system is running.

ONewbieO View Member Profile	Apr 7 2012, 06:13 AM Post #11
Authentic Member Group: Authentic Member Posts: 77 Joined: 24-October 11 Member No.: 98,517 Operating System: Microsoft Windows XP	Eset Online scanner . Very frustrating . Did 2 scans . I uninstalled the first one . 2nd time i left it in my machine . Question is , i cant find the log file . Using your directory already , but nothing has been found . Any ideas how best to advise me ?

ONewbieO View Member Profile	Apr 7 2012, 06:14 AM Post #12
Authentic Member Group: Authentic Member Posts: 77 Joined: 24-October 11 Member No.: 98,517 Operating System: Microsoft Windows XP	Update on the system , the black screen seems to have disappeared . The videos was horrible this morning , but now it seems better and not laggy . The lag is back on again though , not sure why . Might be a flash problem . Not sure about that though . Not certain why is there a lag . Sometimes , its perfect . Other times , its awful . Kindly advise . This post has been edited by ONewbieO: Apr 7 2012, 06:27 AM

ONewbieO View Member Profile	Apr 7 2012, 06:28 AM Post #13
Authentic Member Group: Authentic Member Posts: 77 Joined: 24-October 11 Member No.: 98,517 Operating System: Microsoft Windows XP	Update on malware bytes log . Malwarebytes Anti-Malware 1.60.1.1000 www.malwarebytes.org Database version: v2012.04.07.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 ONewbieO :: ALVINPC [administrator] 7/4/2012 8:16:36 PM mbam-log-2012-04-07 (20-16-36).txt Scan type: Quick scan Scan options enabled: Memory \| Startup \| Registry \| File System \| Heuristics/Extra \| Heuristics/Shuriken \| PUP \| PUM Scan options disabled: P2P Objects scanned: 192881 Time elapsed: 3 minute(s), 8 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 16 C:\Users\ONewbieO\Downloads\32Red (1).exe (PUP.Casino.Gen) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\32Red.exe (PUP.Casino.Gen) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\betwaypoker.exe (PUP.Casino.Gen) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\Ladbrokes.exe (PUP.Casino.Gen) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\NordicBet.exe (PUP.Casino.Gen) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\SetupCasino_25ed.exe (PUP.Casino) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\SetupCasino_b0c4.exe (PUP.Casino) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\SetupPoker_20469a_entupPoker.exe (PUP.Casino) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\SetupPoker_25ed.exe (PUP.Casino) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\SetupPoker_5025.exe (PUP.Casino) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\SetupPoker_618.exe (PUP.Casino) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\SetupPoker_73de0.exe (PUP.Casino) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\SetupPoker_8e836.exe (PUP.Casino) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\Setup_LadbrokesCasino.exe (PUP.Casino.Gen) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\stanjames.exe (PUP.Casino.Gen) -> Quarantined and deleted successfully. C:\Users\ONewbieO\Downloads\Unibet.exe (PUP.Casino.Gen) -> Quarantined and deleted successfully. (end)

ONewbieO View Member Profile	Apr 7 2012, 06:33 AM Post #14
Authentic Member Group: Authentic Member Posts: 77 Joined: 24-October 11 Member No.: 98,517 Operating System: Microsoft Windows XP	Just one note to note . When i did the ESET scan , i Disabled Windows Defender , Online Armour , Avira Antivirus and the lag on my videos disappeared . It appears that one of them conflicts with my chrome which probably explains the lag . Hope you can help thanks .

ONewbieO View Member Profile	Apr 7 2012, 09:01 AM Post #15
Authentic Member Group: Authentic Member Posts: 77 Joined: 24-October 11 Member No.: 98,517 Operating System: Microsoft Windows XP	ESET scanner results C:\Microgaming\Casino\32Red\install.exe a variant of Win32/PrimeCasino application C:\Microgaming\Casino\Ladbrokes\install.exe a variant of Win32/PrimeCasino application C:\Microgaming\Poker\32RedMPP\install.exe a variant of Win32/PrimeCasino application C:\Microgaming\Poker\BetwaypokerMPP\install.exe a variant of Win32/PrimeCasino application C:\Microgaming\Poker\LadbrokesMPP\install.exe a variant of Win32/PrimeCasino application C:\Microgaming\Poker\NordicBetMPP\install.exe a variant of Win32/PrimeCasino application C:\Microgaming\Poker\stanjamesgibMPP\install.exe a variant of Win32/PrimeCasino application C:\Microgaming\Poker\unibetpokerMPP\install.exe a variant of Win32/PrimeCasino application C:\Users\ONewbieO\Downloads\setup.exe a variant of Win32/CasOnline.B application

« Next Oldest · Virus, Spyware & Malware Removal · Next Newest »

3 Pages

1 2 3 >

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

Topic Title	Replies	Topic Starter	Views	Last Action
Virus, Spyware & Malware Removal Computer slow down and no net	0	ethycs	2,604	22nd August 2006 - 07:25 PM Last post by: ethycs
Virus, Spyware & Malware Removal Can't Control My Computer	6	-James Foster-	3,039	22nd December 2003 - 10:13 AM Last post by: cnm
Virus, Spyware & Malware Removal Hijack Log...popups Still After Running Spybot	4	Spurge13	1,767	4th April 2004 - 04:45 AM Last post by: Daemon
Virus, Spyware & Malware Removal Computer Acting Up	3	EasTexan2	2,467	5th April 2004 - 01:28 PM Last post by: Daemon
Virus, Spyware & Malware Removal Hey there, I think my computer is about to explode!	0	Doug P.	1,733	3rd October 2006 - 09:33 PM Last post by: Doug P.