[code]
OTScanIt2 logfile created on: 10/23/2008 7:27:52 PM - Run 1
OTScanIt2 by OldTimer - Version 1.0.0.21b     Folder = C:\Documents and Settings\Jenny\Desktop\OTScanIt2
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
494.80 Mb Total Physical Memory | 65.58 Mb Available Physical Memory | 13.25% Memory free
1.13 Gb Paging File | 0.68 Gb Available in Paging File | 59.97% Paging File free
Paging file location(s): C:\pagefile.sys 744 1488;
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.89 Gb Total Space | 24.91 Gb Free Space | 44.58% Space Free | Partition Type: NTFS
Unable to calculate disk information.
E: Drive not present or media not loaded
Drive F: | 5.58 Gb Total Space | 1.13 Gb Free Space | 20.17% Space Free | Partition Type: FAT32
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: TYROME
Current User Name: Jenny
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Whitelist: On
File Age = 90 Days
 
[Processes - Safe List]
s24evmon.exe -> %ProgramFiles%\Intel\Wireless\Bin\S24EvMon.exe -> [2007/10/08 15:06:44 | 01,183,744 | ---- | M] (Intel Corporation )
ccsetmgr.exe -> %CommonProgramFiles%\Symantec Shared\ccSetMgr.exe -> [2006/03/07 17:03:02 | 00,169,632 | ---- | M] (Symantec Corporation)
ccevtmgr.exe -> %CommonProgramFiles%\Symantec Shared\ccEvtMgr.exe -> [2006/03/07 17:02:34 | 00,192,160 | ---- | M] (Symantec Corporation)
spbbcsvc.exe -> %CommonProgramFiles%\Symantec Shared\SPBBC\SPBBCSvc.exe -> [2006/02/06 16:50:24 | 01,160,848 | ---- | M] (Symantec Corporation)
aawservice.exe -> %ProgramFiles%\Lavasoft\Ad-Aware 2007\aawservice.exe -> [2008/01/04 13:27:08 | 00,587,096 | ---- | M] (Lavasoft)
applemobiledeviceservice.exe -> %CommonProgramFiles%\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -> [2008/07/10 09:47:18 | 00,116,040 | ---- | M] (Apple Inc.)
mdnsresponder.exe -> %ProgramFiles%\Bonjour\mDNSResponder.exe -> [2007/07/24 16:17:08 | 00,229,376 | ---- | M] (Apple Inc.)
cfsvcs.exe -> %ProgramFiles%\Toshiba\ConfigFree\CFSvcs.exe -> [2004/06/16 19:44:06 | 00,036,864 | ---- | M] (TOSHIBA CORPORATION)
defwatch.exe -> %ProgramFiles%\Symantec AntiVirus\DefWatch.exe -> [2006/05/27 00:01:36 | 00,030,448 | ---- | M] (Symantec Corporation)
evteng.exe -> %ProgramFiles%\Intel\Wireless\Bin\EvtEng.exe -> [2007/10/08 15:27:02 | 00,794,624 | ---- | M] (Intel Corporation)
regsrvc.exe -> %ProgramFiles%\Intel\Wireless\Bin\RegSrvc.exe -> [2007/10/08 15:01:54 | 00,483,328 | ---- | M] (Intel Corporation)
savroam.exe -> %ProgramFiles%\Symantec AntiVirus\SavRoam.exe -> [2006/05/27 00:01:52 | 00,115,952 | ---- | M] (symantec)
swupdtmr.exe -> %SystemDrive%\TOSHIBA\IVP\swupdate\swupdtmr.exe -> [2004/05/13 16:46:02 | 00,053,248 | ---- | M] ()
rtvscan.exe -> %ProgramFiles%\Symantec AntiVirus\Rtvscan.exe -> [2006/05/27 00:01:48 | 01,799,408 | ---- | M] (Symantec Corporation)
wdfmgr.exe -> %SystemRoot%\system32\wdfmgr.exe -> [2004/08/11 04:45:04 | 00,038,912 | ---- | M] (Microsoft Corporation)
viewpointservice.exe -> %ProgramFiles%\Viewpoint\Common\ViewpointService.exe -> [2007/01/04 17:38:08 | 00,024,652 | ---- | M] (Viewpoint Corporation)
calmain.exe -> %ProgramFiles%\Canon\CAL\CALMAIN.exe -> [2005/09/30 23:22:50 | 00,096,341 | ---- | M] (Canon Inc.)
viewmgr.exe -> %ProgramFiles%\Viewpoint\Viewpoint Manager\ViewMgr.exe -> [2007/01/04 17:38:18 | 00,112,336 | ---- | M] (Viewpoint Corporation)
wscntfy.exe -> %SystemRoot%\system32\wscntfy.exe -> [2004/08/04 08:00:00 | 00,013,824 | ---- | M] (Microsoft Corporation)
wuauclt.exe -> %SystemRoot%\system32\wuauclt.exe -> [2008/07/18 22:10:42 | 00,053,448 | ---- | M] (Microsoft Corporation)
00thotkey.exe -> %SystemRoot%\system32\00THotkey.exe -> [2004/06/28 20:24:28 | 00,258,048 | ---- | M] (TOSHIBA Corporation)
apoint.exe -> %ProgramFiles%\Apoint2K\Apoint.exe -> [2003/10/30 19:46:18 | 00,192,512 | ---- | M] (Alps Electric Co., Ltd.)
igfxtray.exe -> %SystemRoot%\system32\igfxtray.exe -> [2004/01/26 22:03:20 | 00,155,648 | ---- | M] (Intel Corporation)
hkcmd.exe -> %SystemRoot%\system32\hkcmd.exe -> [2004/01/26 22:03:08 | 00,118,784 | ---- | M] (Intel Corporation)
stacmon.exe -> %ProgramFiles%\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe -> [2003/08/03 19:01:14 | 00,086,073 | ---- | M] (SigmaTel Inc.)
ltmoh.exe -> %ProgramFiles%\ltmoh\ltmoh.exe -> [2003/09/26 18:43:16 | 00,184,320 | ---- | M] (Agere Systems)
agrsmmsg.exe -> %SystemRoot%\agrsmmsg.exe -> [2004/02/20 18:00:28 | 00,088,363 | ---- | M] (Agere Systems)
ndstray.exe -> %ProgramFiles%\Toshiba\ConfigFree\NDSTray.exe -> [2004/07/14 00:51:04 | 00,892,928 | ---- | M] (TOSHIBA CORPORATION)
tfnf5.exe -> %SystemRoot%\system32\TFNF5.exe -> [2003/12/02 17:15:46 | 00,073,728 | ---- | M] (TOSHIBA Corp.)
tpsmain.exe -> %SystemRoot%\system32\TPSMain.exe -> [2004/06/01 23:43:28 | 00,278,528 | ---- | M] (TOSHIBA Corporation)
padexe.exe -> %ProgramFiles%\Toshiba\Touch and Launch\PadExe.exe -> [2004/02/03 17:47:06 | 01,089,589 | ---- | M] (TOSHIBA)
smoothview.exe -> %ProgramFiles%\Toshiba\TOSHIBA Zooming Utility\SmoothView.exe -> [2004/03/02 16:45:28 | 00,135,168 | ---- | M] (TOSHIBA Corporation)
touched.exe -> %ProgramFiles%\Toshiba\TouchED\TouchED.exe -> [2003/01/21 21:00:06 | 00,126,976 | ---- | M] (TOSHIBA Corporation)
apntex.exe -> %ProgramFiles%\Apoint2K\ApntEx.exe -> [2003/02/26 14:08:42 | 00,045,056 | ---- | M] (Alps Electric Co., Ltd.)
tpsbattm.exe -> %SystemRoot%\system32\TPSBattM.exe -> [2004/06/01 23:43:10 | 00,045,056 | ---- | M] (TOSHIBA Corporation)
tfswctrl.exe -> %SystemRoot%\system32\dla\tfswctrl.exe -> [2004/07/20 04:04:00 | 00,122,939 | ---- | M] (Sonic Solutions)
pinger.exe -> %SystemDrive%\TOSHIBA\IVP\ISM\pinger.exe -> [2005/03/17 19:37:26 | 00,151,552 | ---- | M] (TOSHIBA Corporation)
ccapp.exe -> %CommonProgramFiles%\Symantec Shared\ccApp.exe -> [2006/03/07 17:02:14 | 00,053,408 | ---- | M] (Symantec Corporation)
vptray.exe -> %ProgramFiles%\Symantec AntiVirus\VPTray.exe -> [2006/05/27 00:01:58 | 00,124,656 | ---- | M] (Symantec Corporation)
cfsserv.exe -> %ProgramFiles%\Toshiba\ConfigFree\CFSServ.exe -> [2004/08/10 22:36:54 | 00,794,624 | ---- | M] (TOSHIBA)
apdproxy.exe -> %ProgramFiles%\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe -> [2005/06/07 00:46:24 | 00,057,344 | ---- | M] (Adobe Systems Incorporated)
hpcmpmgr.exe -> %ProgramFiles%\HP\hpcoretech\hpcmpmgr.exe -> [2004/05/12 16:18:56 | 00,241,664 | ---- | M] (Hewlett-Packard Company)
zcfgsvc.exe -> %ProgramFiles%\Intel\Wireless\Bin\ZCfgSvc.exe -> [2007/10/08 15:18:04 | 00,995,328 | ---- | M] (Intel Corporation)
ifrmewrk.exe -> %ProgramFiles%\Intel\Wireless\Bin\iFrmewrk.exe -> [2007/10/08 15:13:36 | 01,101,824 | ---- | M] (Intel Corporation)
jusched.exe -> %ProgramFiles%\Java\jre1.6.0_07\bin\jusched.exe -> [2008/06/10 04:27:04 | 00,144,784 | ---- | M] (Sun Microsystems, Inc.)
doscan.exe -> %ProgramFiles%\Symantec AntiVirus\DoScan.exe -> [2006/05/27 00:01:36 | 00,024,816 | ---- | M] (Symantec Corporation)
ituneshelper.exe -> %ProgramFiles%\iTunes\iTunesHelper.exe -> [2008/07/10 10:51:32 | 00,289,064 | ---- | M] (Apple Inc.)
toscdspd.exe -> %ProgramFiles%\Toshiba\TOSCDSPD\TOSCDSPD.exe -> [2003/09/05 06:24:46 | 00,065,536 | ---- | M] (TOSHIBA)
linksysagent.exe -> %ProgramFiles%\Linksys EasyLink Advisor\LinksysAgent.exe -> [2007/03/15 18:16:42 | 00,454,784 | ---- | M] (Linksys, a Division of Cisco Systems, Inc.)
msmsgs.exe -> %ProgramFiles%\Messenger\msmsgs.exe -> [2004/10/13 12:24:37 | 01,694,208 | ---- | M] (Microsoft Corporation)
aim6.exe -> %ProgramFiles%\AIM6\aim6.exe -> [2007/10/04 11:20:54 | 00,050,528 | ---- | M] (AOL LLC)
ipodservice.exe -> %ProgramFiles%\iPod\bin\iPodService.exe -> [2008/07/10 10:51:22 | 00,532,264 | ---- | M] (Apple Inc.)
dot1xcfg.exe -> %ProgramFiles%\Intel\Wireless\Bin\Dot1XCfg.exe -> [2007/10/08 15:09:26 | 00,659,456 | ---- | M] (Intel Corporation)
otscanit2.exe -> %UserProfile%\Desktop\OTScanIt2\OTScanIt2.exe -> [2008/10/23 10:43:14 | 00,417,792 | ---- | M] (OldTimer Tools)
aolsoftware.exe -> %ProgramFiles%\AIM6\aolsoftware.exe -> [2007/05/25 13:16:08 | 00,042,032 | ---- | M] (AOL LLC)
linksysadvisor.exe -> %ProgramFiles%\Linksys EasyLink Advisor\LinksysAdvisor.exe -> [2007/03/22 19:36:02 | 00,515,200 | ---- | M] (Linksys, a Division of Cisco Systems, Inc.)
firefox.exe -> %ProgramFiles%\Mozilla Firefox\firefox.exe -> [2008/09/27 08:14:00 | 00,307,712 | ---- | M] (Mozilla Corporation)
 
[Win32 Services - Safe List]
(aawservice) Ad-Aware 2007 Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Lavasoft\Ad-Aware 2007\aawservice.exe -> [2008/01/04 13:27:08 | 00,587,096 | ---- | M] (Lavasoft)
(ACS) Atheros Configuration Service [Win32_Own | Auto | Stopped] -> %SystemRoot%\system32\acs.exe -> [2004/12/22 19:50:04 | 00,036,864 | ---- | M] ()
(Apple Mobile Device) Apple Mobile Device [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -> [2008/07/10 09:47:18 | 00,116,040 | ---- | M] (Apple Inc.)
(aspnet_state) ASP.NET State Service [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe -> [2004/07/15 04:49:26 | 00,032,768 | ---- | M] (Microsoft Corporation)
(Bonjour Service) Bonjour Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Bonjour\mDNSResponder.exe -> [2007/07/24 16:17:08 | 00,229,376 | ---- | M] (Apple Inc.)
(CCALib8) Canon Camera Access Library 8 [Win32_Own | Auto | Running] -> %ProgramFiles%\Canon\CAL\CALMAIN.exe -> [2005/09/30 23:22:50 | 00,096,341 | ---- | M] (Canon Inc.)
(ccEvtMgr) Symantec Event Manager [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Symantec Shared\ccEvtMgr.exe -> [2006/03/07 17:02:34 | 00,192,160 | ---- | M] (Symantec Corporation)
(ccSetMgr) Symantec Settings Manager [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Symantec Shared\ccSetMgr.exe -> [2006/03/07 17:03:02 | 00,169,632 | ---- | M] (Symantec Corporation)
(CFSvcs) ConfigFree Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Toshiba\ConfigFree\CFSvcs.exe -> [2004/06/16 19:44:06 | 00,036,864 | ---- | M] (TOSHIBA CORPORATION)
(DefWatch) Symantec AntiVirus Definition Watcher [Win32_Own | Auto | Running] -> %ProgramFiles%\Symantec AntiVirus\DefWatch.exe -> [2006/05/27 00:01:36 | 00,030,448 | ---- | M] (Symantec Corporation)
(EvtEng) Intel(R) PROSet/Wireless Event Log [Win32_Own | Auto | Running] -> %ProgramFiles%\Intel\Wireless\Bin\EvtEng.exe -> [2007/10/08 15:27:02 | 00,794,624 | ---- | M] (Intel Corporation)
(iPod Service) iPod Service [Win32_Own | On_Demand | Running] -> %ProgramFiles%\iPod\bin\iPodService.exe -> [2008/07/10 10:51:22 | 00,532,264 | ---- | M] (Apple Inc.)
(LiveUpdate) LiveUpdate [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Symantec\LiveUpdate\LuComServer_3_0.EXE -> [2006/02/23 15:41:02 | 02,045,632 | ---- | M] (Symantec Corporation)
(odserv) Microsoft Office Diagnostics Service [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Microsoft Shared\OFFICE12\ODSERV.EXE -> [2007/08/24 03:19:12 | 00,443,776 | ---- | M] (Microsoft Corporation)
(ose) Office Source Engine [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Microsoft Shared\Source Engine\OSE.EXE -> [2006/10/26 15:03:08 | 00,145,184 | ---- | M] (Microsoft Corporation)
(Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | On_Demand | Stopped] -> %SystemRoot%\system32\HPZipm12.exe -> [2004/03/18 17:55:48 | 00,065,536 | ---- | M] (HP)
(RegSrvc) Intel(R) PROSet/Wireless Registry Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Intel\Wireless\Bin\RegSrvc.exe -> [2007/10/08 15:01:54 | 00,483,328 | ---- | M] (Intel Corporation)
(S24EventMonitor) Intel(R) PROSet/Wireless Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Intel\Wireless\Bin\S24EvMon.exe -> [2007/10/08 15:06:44 | 01,183,744 | ---- | M] (Intel Corporation )
(SavRoam) SavRoam [Win32_Own | Auto | Running] -> %ProgramFiles%\Symantec AntiVirus\SavRoam.exe -> [2006/05/27 00:01:52 | 00,115,952 | ---- | M] (symantec)
(SNDSrvc) Symantec Network Drivers Service [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Symantec Shared\SNDSrvc.exe -> [2006/01/25 00:06:58 | 00,214,720 | ---- | M] (Symantec Corporation)
(SPBBCSvc) Symantec SPBBCSvc [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Symantec Shared\SPBBC\SPBBCSvc.exe -> [2006/02/06 16:50:24 | 01,160,848 | ---- | M] (Symantec Corporation)
(Swupdtmr) Swupdtmr [Win32_Own | Auto | Running] -> %SystemDrive%\TOSHIBA\IVP\swupdate\swupdtmr.exe -> [2004/05/13 16:46:02 | 00,053,248 | ---- | M] ()
(Symantec AntiVirus) Symantec AntiVirus [Win32_Own | Auto | Running] -> %ProgramFiles%\Symantec AntiVirus\Rtvscan.exe -> [2006/05/27 00:01:48 | 01,799,408 | ---- | M] (Symantec Corporation)
(UMWdf) Windows User Mode Driver Framework [Win32_Own | Auto | Running] -> %SystemRoot%\system32\wdfmgr.exe -> [2004/08/11 04:45:04 | 00,038,912 | ---- | M] (Microsoft Corporation)
(Viewpoint Manager Service) Viewpoint Manager Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Viewpoint\Common\ViewpointService.exe -> [2007/01/04 17:38:08 | 00,024,652 | ---- | M] (Viewpoint Corporation)
 
[Driver Services - Safe List]
(AegisP) AEGIS Protocol (IEEE 802.1x) v3.7.5.0 [Kernel | Auto | Running] -> %SystemRoot%\system32\drivers\AegisP.sys -> [2008/02/27 19:25:05 | 00,021,361 | ---- | M] (Cisco Systems, Inc.)
(AgereSoftModem) TOSHIBA V92 Software Modem [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\AGRSM.sys -> [2004/02/20 18:00:44 | 01,265,388 | ---- | M] (Agere Systems)
(ApfiltrService) Alps Pointing-device Filter Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\Apfiltr.sys -> [2003/12/10 20:11:26 | 00,100,153 | ---- | M] (Alps Electric Co., Ltd.)
(ASCTRM) ASCTRM [Kernel | Auto | Running] -> %SystemRoot%\System32\drivers\asctrm.sys -> [2005/05/13 13:24:34 | 00,008,552 | ---- | M] (Windows (R) 2000 DDK provider)
(catchme) catchme [Kernel | On_Demand | Running] ->  -> File not found
(Cdr4_xp) Cdr4_xp [Kernel | System | Running] -> %SystemRoot%\System32\drivers\cdr4_xp.sys -> [2007/12/04 03:08:46 | 00,009,336 | ---- | M] (Sonic Solutions)
(Cdralw2k) Cdralw2k [Kernel | System | Running] -> %SystemRoot%\System32\drivers\cdralw2k.sys -> [2007/12/04 03:08:46 | 00,009,464 | ---- | M] (Sonic Solutions)
(drvmcdb) drvmcdb [Kernel | Boot | Running] -> %SystemRoot%\system32\drivers\drvmcdb.sys -> [2004/07/19 06:21:00 | 00,087,136 | ---- | M] (Sonic Solutions)
(drvnddm) drvnddm [File_System | Auto | Running] -> %SystemRoot%\system32\drivers\drvnddm.sys -> [2004/07/14 05:56:00 | 00,040,448 | ---- | M] (Sonic Solutions)
(E100B) Intel(R) PRO Adapter Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\e100b325.sys -> [2003/12/29 19:00:22 | 00,153,088 | ---- | M] (Intel Corporation)
(eeCtrl) Symantec Eraser Control driver [Kernel | System | Running] -> %CommonProgramFiles%\Symantec Shared\EENGINE\eeCtrl.sys -> [2008/09/07 04:00:00 | 00,371,248 | ---- | M] (Symantec Corporation)
(elagopro) GoProto Protocol Driver for LELA [Kernel | Auto | Running] -> %SystemRoot%\system32\drivers\elagopro.sys -> [2007/03/22 12:57:14 | 00,028,672 | --S- | M] (Gteko Ltd.)
(elaunidr) UniDriver for LELA [Kernel | Auto | Running] -> %SystemRoot%\system32\drivers\elaunidr.sys -> [2007/03/22 12:57:14 | 00,005,376 | --S- | M] (Gteko Ltd.)
(EraserUtilRebootDrv) EraserUtilRebootDrv [Kernel | On_Demand | Running] -> %CommonProgramFiles%\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -> [2008/09/16 04:00:00 | 00,099,376 | ---- | M] (Symantec Corporation)
(GEARAspiWDM) GEARAspiWDM [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\GEARAspiWDM.sys -> [2008/01/29 12:01:28 | 00,016,168 | ---- | M] (GEAR Software Inc.)
(HPZid412) IEEE-1284.4 Driver HPZid412 [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\hpzid412.sys -> [2004/06/22 09:05:12 | 00,051,088 | ---- | M] (HP)
(HPZipr12) Print Class Driver for IEEE-1284.4 HPZipr12 [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\HPZipr12.sys -> [2004/06/22 09:05:12 | 00,016,496 | ---- | M] (HP)
(HPZius12) USB to IEEE-1284.4 Translation Driver HPZius12 [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\HPZius12.sys -> [2004/06/22 09:05:12 | 00,021,744 | ---- | M] (HP)
(ialm) ialm [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\ialmnt5.sys -> [2004/01/26 22:03:12 | 00,095,579 | ---- | M] (Intel Corporation)
(KR10N) KR10N [Kernel | Boot | Running] -> %SystemRoot%\system32\drivers\KR10N.sys -> [2005/01/12 04:05:46 | 00,204,160 | ---- | M] (TOSHIBA CORPORATION)
(NAVENG) NAVENG [Kernel | On_Demand | Running] -> %CommonProgramFiles%\Symantec Shared\VirusDefs\20081018.004\NAVENG.SYS -> [2008/09/17 10:55:42 | 00,089,104 | ---- | M] (Symantec Corporation)
(NAVEX15) NAVEX15 [Kernel | On_Demand | Running] -> %CommonProgramFiles%\Symantec Shared\VirusDefs\20081018.004\NAVEX15.SYS -> [2008/09/17 10:55:42 | 00,873,552 | ---- | M] (Symantec Corporation)
(Netdevio) TOSHIBA Network Device Usermode I/O Protocol [Kernel | Auto | Running] -> %SystemRoot%\system32\drivers\Netdevio.sys -> [2003/01/29 17:35:00 | 00,012,032 | ---- | M] (TOSHIBA Corporation.)
(Pcouffin) Low level access layer for CD devices [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\Pcouffin.sys -> [2007/05/29 14:04:35 | 00,039,264 | ---- | M] (VSO Software)
(pfc) Padus ASPI Shell [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\pfc.sys -> [2003/09/19 18:45:48 | 00,021,248 | ---- | M] (Padus, Inc.)
(Ptilink) Direct Parallel Link Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\ptilink.sys -> [2004/08/04 08:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.)
(PxHelp20) PxHelp20 [Kernel | Boot | Running] -> %SystemRoot%\system32\drivers\pxhelp20.sys -> [2007/12/04 03:08:48 | 00,043,528 | ---- | M] (Sonic Solutions)
(s24trans) WLAN Transport [Kernel | Auto | Running] -> %SystemRoot%\system32\drivers\s24trans.sys -> [2007/08/27 12:10:36 | 00,012,288 | ---- | M] (Intel Corporation)
(SAVRT) SAVRT [Kernel | System | Running] -> %ProgramFiles%\Symantec AntiVirus\savrt.sys -> [2005/12/20 00:41:56 | 00,337,592 | ---- | M] (Symantec Corporation)
(SAVRTPEL) SAVRTPEL [Kernel | System | Running] -> %ProgramFiles%\Symantec AntiVirus\Savrtpel.sys -> [2005/12/20 00:41:58 | 00,054,968 | ---- | M] (Symantec Corporation)
(Secdrv) Secdrv [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\secdrv.sys -> [2007/11/13 06:25:53 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
(SPBBCDrv) SPBBCDrv [Kernel | System | Running] -> %CommonProgramFiles%\Symantec Shared\SPBBC\SPBBCDrv.sys -> [2006/02/06 16:50:22 | 00,389,776 | ---- | M] (Symantec Corporation)
(sscdbhk5) sscdbhk5 [File_System | System | Running] -> %SystemRoot%\system32\drivers\sscdbhk5.sys -> [2004/07/14 14:29:04 | 00,005,627 | ---- | M] (Sonic Solutions)
(ssrtln) ssrtln [File_System | System | Running] -> %SystemRoot%\system32\drivers\ssrtln.sys -> [2004/07/14 14:28:50 | 00,023,545 | ---- | M] (Sonic Solutions)
(STAC97) Audio Driver (WDM) - SigmaTel CODEC [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\stac97.sys -> [2003/07/17 20:19:32 | 00,230,416 | ---- | M] (SigmaTel, Inc.)
(SymEvent) SymEvent [Kernel | On_Demand | Running] -> %ProgramFiles%\Symantec\SYMEVENT.SYS -> [2006/01/31 17:29:20 | 00,107,696 | ---- | M] (Symantec Corporation)
(SYMREDRV) SYMREDRV [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\symredrv.sys -> [2006/01/25 00:06:32 | 00,024,768 | ---- | M] (Symantec Corporation)
(SYMTDI) SYMTDI [Kernel | System | Running] -> %SystemRoot%\system32\drivers\symtdi.sys -> [2006/01/25 00:06:36 | 00,195,776 | ---- | M] (Symantec Corporation)
(TBiosDrv) TBiosDrv [Kernel | Auto | Running] -> %SystemRoot%\system32\drivers\tbiosdrv.sys -> [2003/06/11 11:53:22 | 00,006,867 | ---- | M] ()
(tfsnboio) tfsnboio [File_System | Auto | Running] -> %SystemRoot%\system32\dla\tfsnboio.sys -> [2004/07/20 04:04:00 | 00,025,723 | ---- | M] (Sonic Solutions)
(tfsncofs) tfsncofs [File_System | Auto | Running] -> %SystemRoot%\system32\dla\tfsncofs.sys -> [2004/07/20 04:04:00 | 00,034,843 | ---- | M] (Sonic Solutions)
(tfsndrct) tfsndrct [File_System | Auto | Running] -> %SystemRoot%\system32\dla\tfsndrct.sys -> [2004/07/20 04:04:00 | 00,004,123 | ---- | M] (Sonic Solutions)
(tfsndres) tfsndres [File_System | Auto | Running] -> %SystemRoot%\system32\dla\tfsndres.sys -> [2004/07/20 04:04:00 | 00,002,239 | ---- | M] (Sonic Solutions)
(tfsnifs) tfsnifs [File_System | Auto | Running] -> %SystemRoot%\system32\dla\tfsnifs.sys -> [2004/07/20 04:04:00 | 00,086,138 | ---- | M] (Sonic Solutions)
(tfsnopio) tfsnopio [File_System | Auto | Running] -> %SystemRoot%\system32\dla\tfsnopio.sys -> [2004/07/20 04:04:00 | 00,014,587 | ---- | M] (Sonic Solutions)
(tfsnpool) tfsnpool [File_System | Auto | Running] -> %SystemRoot%\system32\dla\tfsnpool.sys -> [2004/07/20 04:04:00 | 00,006,363 | ---- | M] (Sonic Solutions)
(tfsnudf) tfsnudf [File_System | Auto | Running] -> %SystemRoot%\system32\dla\tfsnudf.sys -> [2004/07/20 04:04:00 | 00,098,714 | ---- | M] (Sonic Solutions)
(tfsnudfa) tfsnudfa [File_System | Auto | Running] -> %SystemRoot%\system32\dla\tfsnudfa.sys -> [2004/07/20 04:04:00 | 00,100,603 | ---- | M] (Sonic Solutions)
(TVALZ) TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver [Kernel | Boot | Running] -> %SystemRoot%\system32\drivers\TVALZ.SYS -> [2004/02/16 15:34:28 | 00,009,216 | ---- | M] (TOSHIBA Corporation)
(USBAAPL) Apple Mobile USB Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\usbaapl.sys -> [2008/07/10 09:35:22 | 00,032,000 | ---- | M] (Apple, Inc.)
(w22n51) Intel(R) PRO/Wireless 2200 Adapter Driver [Kernel | On_Demand | Stopped] -> %SystemRoot%\system32\drivers\w22n51.sys -> [2004/01/02 06:52:34 | 01,646,720 | ---- | M] (Intel® Corporation)
(w29n51) Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows XP [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\w29n51.sys -> [2007/07/25 18:44:28 | 02,210,048 | ---- | M] (Intel® Corporation)
({6080A529-897E-4629-A488-ABA0C29B635E}) Intel(R) Graphics Platform (SoftBIOS) Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\ialmsbw.sys -> [2004/01/26 22:03:12 | 00,122,110 | ---- | M] (Intel Corporation)
({D31A0762-0CEB-444e-ACFF-B049A1F6FE91}) Intel(R) Graphics Chipset (KCH) Driver [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\ialmkchw.sys -> [2004/01/26 22:03:12 | 00,099,002 | ---- | M] (Intel Corporation)
({E2B953A6-195A-44F9-9BA3-3D5F4E32BB55}) AIM 3.0 Part 01 Codec Driver CH-7009-A/CH-7011 [Kernel | On_Demand | Running] -> %SystemRoot%\system32\drivers\wa301a.sys -> [2004/01/26 22:03:20 | 00,033,847 | ---- | M] (Intel Corporation)
 
[Registry - Safe List]
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome -> 
HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://www.google.com/ie -> 
HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> C:\windows\system32\blank.htm -> 
HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://www.google.com -> 
HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://www.google.com -> 
HKEY_LOCAL_MACHINE\: Search\\"CustomizeSearch" -> http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm -> 
HKEY_LOCAL_MACHINE\: Search\\"Default_Search_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_LOCAL_MACHINE\: Search\\"SearchAssistant" -> http://www.google.com -> 
< Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> 
HKEY_CURRENT_USER\: Main\\"Default_Search_URL" -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> 
HKEY_CURRENT_USER\: Main\\"Local Page" -> C:\windows\system32\blank.htm -> 
HKEY_CURRENT_USER\: Main\\"Search Page" -> http://www.google.com -> 
HKEY_CURRENT_USER\: Main\\"Start Page" -> http://www.google.com -> 
HKEY_CURRENT_USER\: Search\\"SearchAssistant" -> http://www.google.com -> 
HKEY_CURRENT_USER\: SearchURL\\"" -> http://home.microsoft.com/access/autosearch.asp?p=%s -> 
HKEY_CURRENT_USER\: SearchURL\\"provider" -> gogl -> 
HKEY_CURRENT_USER\: "ProxyEnable" -> 1 -> 
HKEY_CURRENT_USER\: "ProxyOverride" -> *.local -> 
< HOSTS File > (686 bytes and 19 lines) -> C:\WINDOWS\System32\drivers\etc\Hosts -> 
127.0.0.1 localhost
< Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> 
WebBrowser\\"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.] -> File not found
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> 
"000StTHK" -> %SystemRoot%\system32\000StTHK.exe [000StTHK.exe] -> [2001/06/23 23:28:06 | 00,024,576 | ---- | M] ()
"00THotkey" -> %SystemRoot%\system32\00THotkey.exe [C:\WINDOWS\system32\00THotkey.exe] -> [2004/06/28 20:24:28 | 00,258,048 | ---- | M] (TOSHIBA Corporation)
"Adobe Photo Downloader" -> %ProgramFiles%\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe ["C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"] -> [2005/06/07 00:46:24 | 00,057,344 | ---- | M] (Adobe Systems Incorporated)
"AGRSMMSG" -> %SystemRoot%\agrsmmsg.exe [AGRSMMSG.exe] -> [2004/02/20 18:00:28 | 00,088,363 | ---- | M] (Agere Systems)
"Apoint" -> %ProgramFiles%\Apoint2K\Apoint.exe [C:\Program Files\Apoint2K\Apoint.exe] -> [2003/10/30 19:46:18 | 00,192,512 | ---- | M] (Alps Electric Co., Ltd.)
"AppleSyncNotifier" -> %CommonProgramFiles%\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe] -> [2008/07/10 09:47:28 | 00,116,040 | ---- | M] (Apple Inc.)
"ccApp" -> %CommonProgramFiles%\Symantec Shared\ccApp.exe ["c:\Program Files\Common Files\Symantec Shared\ccApp.exe"] -> [2006/03/07 17:02:14 | 00,053,408 | ---- | M] (Symantec Corporation)
"CFSServ.exe" ->  [CFSServ.exe -NoClient] -> File not found
"dla" -> %SystemRoot%\system32\dla\tfswctrl.exe [C:\WINDOWS\system32\dla\tfswctrl.exe] -> [2004/07/20 04:04:00 | 00,122,939 | ---- | M] (Sonic Solutions)
"HotKeysCmds" -> %SystemRoot%\system32\hkcmd.exe [C:\WINDOWS\system32\hkcmd.exe] -> [2004/01/26 22:03:08 | 00,118,784 | ---- | M] (Intel Corporation)
"HP Component Manager" -> %ProgramFiles%\HP\hpcoretech\hpcmpmgr.exe ["C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"] -> [2004/05/12 16:18:56 | 00,241,664 | ---- | M] (Hewlett-Packard Company)
"IgfxTray" -> %SystemRoot%\system32\igfxtray.exe [C:\WINDOWS\system32\igfxtray.exe] -> [2004/01/26 22:03:20 | 00,155,648 | ---- | M] (Intel Corporation)
"IntelWireless" -> %ProgramFiles%\Intel\Wireless\Bin\iFrmewrk.exe ["C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless] -> [2007/10/08 15:13:36 | 01,101,824 | ---- | M] (Intel Corporation)
"IntelZeroConfig" -> %ProgramFiles%\Intel\Wireless\Bin\ZCfgSvc.exe ["C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"] -> [2007/10/08 15:18:04 | 00,995,328 | ---- | M] (Intel Corporation)
"iTunesHelper" -> %ProgramFiles%\iTunes\iTunesHelper.exe ["C:\Program Files\iTunes\iTunesHelper.exe"] -> [2008/07/10 10:51:32 | 00,289,064 | ---- | M] (Apple Inc.)
"KernelFaultCheck" ->  [%systemroot%\system32\dumprep 0 -k] -> File not found
"LtMoh" -> %ProgramFiles%\ltmoh\ltmoh.exe [C:\Program Files\ltmoh\Ltmoh.exe] -> [2003/09/26 18:43:16 | 00,184,320 | ---- | M] (Agere Systems)
"NDSTray.exe" ->  [NDSTray.exe] -> File not found
"Notebook Maximizer" -> %ProgramFiles%\Notebook Maximizer\maximizer_startup.exe [C:\Program Files\Notebook Maximizer\maximizer_startup.exe] -> [2004/05/25 17:35:59 | 00,028,672 | ---- | M] ()
"PadTouch" -> %ProgramFiles%\Toshiba\Touch and Launch\PadExe.exe [C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe] -> [2004/02/03 17:47:06 | 01,089,589 | ---- | M] (TOSHIBA)
"Pinger" -> %SystemDrive%\TOSHIBA\IVP\ISM\pinger.exe [c:\toshiba\ivp\ism\pinger.exe /run] -> [2005/03/17 19:37:26 | 00,151,552 | ---- | M] (TOSHIBA Corporation)
"QuickTime Task" -> %ProgramFiles%\QuickTime\QTTask.exe ["C:\Program Files\QuickTime\qttask.exe" -atboottime] -> [2008/05/27 10:50:30 | 00,413,696 | ---- | M] (Apple Inc.)
"SigmaTel StacMon" -> %ProgramFiles%\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe [C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe] -> [2003/08/03 19:01:14 | 00,086,073 | ---- | M] (SigmaTel Inc.)
"SmoothView" -> %ProgramFiles%\Toshiba\TOSHIBA Zooming Utility\SmoothView.exe [C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe] -> [2004/03/02 16:45:28 | 00,135,168 | ---- | M] (TOSHIBA Corporation)
"SunJavaUpdateSched" -> %ProgramFiles%\Java\jre1.6.0_07\bin\jusched.exe ["C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"] -> [2008/06/10 04:27:04 | 00,144,784 | ---- | M] (Sun Microsystems, Inc.)
"TFNF5" -> %SystemRoot%\system32\TFNF5.exe [TFNF5.exe] -> [2003/12/02 17:15:46 | 00,073,728 | ---- | M] (TOSHIBA Corp.)
"TouchED" -> %ProgramFiles%\Toshiba\TouchED\TouchED.exe [C:\Program Files\TOSHIBA\TouchED\TouchED.Exe] -> [2003/01/21 21:00:06 | 00,126,976 | ---- | M] (TOSHIBA Corporation)
"TPSMain" -> %SystemRoot%\system32\TPSMain.exe [TPSMain.exe] -> [2004/06/01 23:43:28 | 00,278,528 | ---- | M] (TOSHIBA Corporation)
"vptray" -> %ProgramFiles%\Symantec AntiVirus\VPTray.exe [c:\PROGRA~1\SYMANT~1\VPTray.exe] -> [2006/05/27 00:01:58 | 00,124,656 | ---- | M] (Symantec Corporation)
< Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> 
"Aim6" -> %ProgramFiles%\AIM6\aim6.exe ["C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp] -> [2007/10/04 11:20:54 | 00,050,528 | ---- | M] (AOL LLC)
"EasyLinkAdvisor" -> %ProgramFiles%\Linksys EasyLink Advisor\LinksysAgent.exe ["C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup] -> [2007/03/15 18:16:42 | 00,454,784 | ---- | M] (Linksys, a Division of Cisco Systems, Inc.)
"MSMSGS" -> %ProgramFiles%\Messenger\msmsgs.exe ["C:\Program Files\Messenger\msmsgs.exe" /background] -> [2004/10/13 12:24:37 | 01,694,208 | ---- | M] (Microsoft Corporation)
"TOSCDSPD" -> %ProgramFiles%\Toshiba\TOSCDSPD\TOSCDSPD.exe [C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe] -> [2003/09/05 06:24:46 | 00,065,536 | ---- | M] (TOSHIBA)
"Uniblue RegistryBooster 2" -> %ProgramFiles%\Uniblue\RegistryBooster 2\RegistryBooster.exe [C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S] -> File not found
< All Users Startup Folder > -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup -> 
< Jenny Startup Folder > -> C:\Documents and Settings\Jenny\Start Menu\Programs\Startup -> 
< Software Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer -> 
< Software Policy Settings [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer -> 
< CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> 
< CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
\\"dontdisplaylastusername" ->  [0] -> File not found
\\"legalnoticecaption" ->  [] -> File not found
\\"legalnoticetext" ->  [] -> File not found
\\"shutdownwithoutlogon" ->  [1] -> File not found
\\"undockwithoutlogon" ->  [1] -> File not found
< CurrentVersion Policy Settings - Explorer [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
\\"NoDriveTypeAutoRun" ->  [145] -> File not found
< CurrentVersion Policy Settings - System [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> 
< Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> 
E&xport to Microsoft Excel -> %ProgramFiles%\Microsoft Office\Office12\EXCEL.EXE [res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000] -> [2008/07/30 03:25:02 | 17,930,264 | ---- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> 
{08B0E5C0-4FCB-11CF-AAA5-00401C608501}:{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} [HKLM] -> %ProgramFiles%\Java\jre1.6.0_07\bin\npjpi160_07.dll [Menu: Sun Java Console] -> [2008/06/10 04:27:02 | 00,132,496 | ---- | M] (Sun Microsystems, Inc.)
{92780B25-18CC-41C8-B9BE-3C9C571A8263}:{FF059E31-CC5A-4E2E-BF3B-96E929D65503} [HKLM] -> %ProgramFiles%\Microsoft Office\OFFICE11\REFIEBAR.DLL [Button: Research] -> [2007/04/19 15:10:18 | 00,063,840 | ---- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Button: Messenger] -> [2004/10/13 12:24:37 | 01,694,208 | ---- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Menu: Windows Messenger] -> [2004/10/13 12:24:37 | 01,694,208 | ---- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\ -> 
CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> %ProgramFiles%\Java\jre1.6.0_07\bin\npjpi160_07.dll [Sun Java Console] -> [2008/06/10 04:27:02 | 00,132,496 | ---- | M] (Sun Microsystems, Inc.)
CmdMapping\\"{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}" [HKLM] ->  [Reg Error: Key does not exist or could not be opened.] -> File not found
CmdMapping\\"{92780B25-18CC-41C8-B9BE-3C9C571A8263}" [HKLM] -> %ProgramFiles%\Microsoft Office\OFFICE11\REFIEBAR.DLL [Research] -> [2007/04/19 15:10:18 | 00,063,840 | ---- | M] (Microsoft Corporation)
CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2004/10/13 12:24:37 | 01,694,208 | ---- | M] (Microsoft Corporation)
< Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ -> 
PluginsPageFriendlyName -> Microsoft ActiveX Gallery -> 
PluginsPage -> http://activex.microsoft.com/controls/find.asp?ext=%s&mime=%s -> 
Extension\.spop -> %ProgramFiles%\Internet Explorer\PLUGINS\NPDocBox.dll [] -> [2001/01/30 16:56:24 | 00,225,280 | ---- | M] (InterTrust Technologies Corporation, Inc.)
< Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 1 domain(s) found. -> 
1 domain(s) and sub-domain(s) not assigned to a zone.
< Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> 
< Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 28 domain(s) found. -> 
< Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> 
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 30 range(s) found. -> 
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> 
{8AD9C840-044E-11D1-B3E9-00805F499D93} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab[Java Plug-in 1.6.0_07] -> 
{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab[Java Plug-in 1.6.0_03] -> 
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab[Java Plug-in 1.6.0_07] -> 
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab[Java Plug-in 1.6.0_07] -> 
< DNS Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> 
{15F19100-D893-4C66-A549-E09CF011EE40} ->    (1394 Net Adapter) -> 
{92E5BB46-67F0-4F21-8BEC-824A6DD4D035} ->    (Intel(R) PRO/Wireless 2200BG Network Connection) -> 
{B308E5D3-4A7C-4C53-B158-DEE3FCDE4B47} ->    (Intel(R) PRO/100 VE Network Connection) -> 
< Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> 
igfxcui -> %SystemRoot%\system32\igfxsrvc.dll -> [2004/01/26 22:03:20 | 00,323,584 | ---- | M] (Intel Corporation)
NavLogon -> %SystemRoot%\system32\NavLogon.dll -> [2006/05/27 00:02:06 | 00,043,760 | ---- | M] (Symantec Corporation)
< Domain Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List -> 
"%windir%\system32\sessmgr.exe" -> C:\WINDOWS\system32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> [2004/08/04 08:00:00 | 00,140,800 | ---- | M] (Microsoft Corporation)
"C:\Program Files\America Online 9.0\waol.exe" -> C:\Program Files\America Online 9.0\waol.exe [C:\Program Files\America Online 9.0\waol.exe:*:Enabled:AOL] -> File not found
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" -> C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe [C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL] -> File not found
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" -> C:\Program Files\Common Files\AOL\ACS\AOLDial.exe [C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL] -> File not found
< Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List -> 
"%windir%\system32\sessmgr.exe" -> C:\WINDOWS\system32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> [2004/08/04 08:00:00 | 00,140,800 | ---- | M] (Microsoft Corporation)
"C:\Program Files\AIM6\aim6.exe" -> C:\Program Files\AIM6\aim6.exe [C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM] -> [2007/10/04 11:20:54 | 00,050,528 | ---- | M] (AOL LLC)
"C:\Program Files\America Online 9.0\waol.exe" -> C:\Program Files\America Online 9.0\waol.exe [C:\Program Files\America Online 9.0\waol.exe:*:Enabled:AOL] -> File not found
"C:\Program Files\Bonjour\mDNSResponder.exe" -> C:\Program Files\Bonjour\mDNSResponder.exe [C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour] -> [2007/07/24 16:17:08 | 00,229,376 | ---- | M] (Apple Inc.)
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" -> C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe [C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL] -> File not found
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" -> C:\Program Files\Common Files\AOL\ACS\AOLDial.exe [C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL] -> File not found
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" -> C:\Program Files\Common Files\AOL\Loader\aolload.exe [C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader] -> [2006/11/03 03:17:27 | 00,010,800 | ---- | M] (AOL LLC)
"C:\Program Files\iTunes\iTunes.exe" -> C:\Program Files\iTunes\iTunes.exe [C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes] -> [2008/07/10 10:51:26 | 20,246,824 | ---- | M] (Apple Inc.)
"C:\Program Files\LimeWire\LimeWire.exe" -> C:\Program Files\LimeWire\LimeWire.exe [C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire] -> [2007/06/22 20:15:20 | 00,122,880 | ---- | M] (Lime Wire, LLC)
"C:\Program Files\myTunes Redux\mDNSResponder.exe" -> C:\Program Files\myTunes Redux\mDNSResponder.exe [C:\Program Files\myTunes Redux\mDNSResponder.exe:*:Enabled:mDNSResponder] -> File not found
"C:\Program Files\Ruckus Player\Ruckus.exe" -> C:\Program Files\Ruckus Player\Ruckus.exe [C:\Program Files\Ruckus Player\Ruckus.exe:*:Enabled:Ruckus] -> [2007/01/02 16:54:54 | 01,916,928 | ---- | M] ( )
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -> C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger] -> File not found
"C:\Program Files\Yahoo!\Messenger\YServer.exe" -> C:\Program Files\Yahoo!\Messenger\YServer.exe [C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server] -> File not found
"C:\TOSHIBA\Ivp\ISM\pinger.exe" -> C:\TOSHIBA\IVP\ISM\pinger.exe [C:\TOSHIBA\IVP\ISM\pinger.exe:*:Enabled:Toshiba Software Upgrades Pinger] -> [2005/03/17 19:37:26 | 00,151,552 | ---- | M] (TOSHIBA Corporation)
"C:\TOSHIBA\ivp\NetInt\Netint.exe" -> C:\TOSHIBA\IVP\NetInt\netint.exe [C:\TOSHIBA\ivp\NetInt\Netint.exe:*:Enabled:NIE - Toshiba Software Upgrade Engine] -> [2004/11/03 17:06:34 | 00,462,848 | ---- | M] (TOSHIBA Corporation)
"C:\WINDOWS\system32\drivers\svchost.exe" -> C:\WINDOWS\system32\drivers\svchost.exe [C:\WINDOWS\system32\drivers\svchost.exe:*:Disabled:svchost] -> File not found
< SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot -> 
"AlternateShell" -> cmd.exe -> 
< CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom ->
"AutoRun" -> 1 -> 
"DisplayName" -> CD-ROM Driver -> 
"ImagePath" -> %SystemRoot%\system32\drivers\cdrom.sys [system32\DRIVERS\cdrom.sys] -> [2004/08/04 08:00:00 | 00,049,536 | ---- | M] (Microsoft Corporation)
< Drives with AutoRun files > ->  -> 
C:\AUTOEXEC.BAT [] -> %SystemDrive%\AUTOEXEC.BAT [ NTFS ] -> [2005/05/12 19:48:25 | 00,000,000 | ---- | M] ()
< MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 -> 
 
[Registry - Additional Scans - Safe List]
< App Paths [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ -> 
AcroRd32.exe -> %ProgramFiles%\Adobe\Acrobat 5.0\Reader\AcroRd32.exe [C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe] -> [2001/03/27 23:44:58 | 03,870,784 | ---- | M] (Adobe Systems Incorporated)
ACU.exe -> %ProgramFiles%\Atheros\ACU.exe [C:\Program Files\Atheros\ACU.exe] -> [2005/03/28 17:28:48 | 00,290,816 | ---- | M] (Atheros Communications, Inc.)
Apoint.exe -> %ProgramFiles%\Apoint2K\Apoint.exe [C:\Program Files\Apoint2K\Apoint.exe] -> [2003/10/30 19:46:18 | 00,192,512 | ---- | M] (Alps Electric Co., Ltd.)
bckgzm.exe -> %ProgramFiles%\MSN Gaming Zone\Windows\bckgzm.exe [C:\Program Files\MSN Gaming Zone\Windows\bckgzm.exe] -> [2004/08/04 08:00:00 | 00,042,577 | ---- | M] (Microsoft Corporation)
ccApp.exe -> %CommonProgramFiles%\Symantec Shared\ccApp.exe [c:\Program Files\Common Files\Symantec Shared\ccApp.exe] -> [2006/03/07 17:02:14 | 00,053,408 | ---- | M] (Symantec Corporation)
CFSServ.exe -> %ProgramFiles%\Toshiba\ConfigFree\CFSServ.exe [C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe] -> [2004/08/10 22:36:54 | 00,794,624 | ---- | M] (TOSHIBA)
chkrzm.exe -> %ProgramFiles%\MSN Gaming Zone\Windows\chkrzm.exe [C:\Program Files\MSN Gaming Zone\Windows\chkrzm.exe] -> [2004/08/04 08:00:00 | 00,042,575 | ---- | M] (Microsoft Corporation)
cmmgr32.exe -> %SystemRoot%\system32\cmmgr32.exe [C:\WINDOWS\system32\cmmgr32.exe] -> File not found
CONF.EXE -> %ProgramFiles%\NetMeeting\conf.exe [C:\Program Files\NetMeeting\conf.exe] -> [2004/08/04 08:00:00 | 01,032,192 | ---- | M] (Microsoft Corporation)
dialer.exe -> %ProgramFiles%\Windows NT\dialer.exe [C:\Program Files\Windows NT\dialer.exe] -> [2004/08/04 08:00:00 | 00,539,136 | ---- | M] (Microsoft Corporation)
excel.exe -> %ProgramFiles%\Microsoft Office\OFFICE11\EXCEL.EXE [C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE] -> [2008/08/04 16:12:50 | 10,354,176 | ---- | M] (Microsoft Corporation)
firefox.exe -> %ProgramFiles%\Mozilla Firefox\firefox.exe [C:\Program Files\Mozilla Firefox\firefox.exe] -> [2008/09/27 08:14:00 | 00,307,712 | ---- | M] (Mozilla Corporation)
HELPCTR.EXE -> %SystemRoot%\pchealth\helpctr\binaries\HelpCtr.exe [C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe] -> [2004/08/04 08:00:00 | 00,768,512 | ---- | M] (Microsoft Corporation)
HijackThis.exe -> %ProgramFiles%\Hijackthis\HijackThis.exe [C:\Program Files\Hijackthis\hijackthis.exe] -> [2005/02/16 11:06:16 | 00,218,112 | ---- | M] (Soeperman Enterprises Ltd.)
HpqApkil.exe -> %ProgramFiles%\HP\Digital Imaging\Unload\HpqApkil.exe [c:\Program Files\HP\Digital Imaging\Unload\HpqApkil.exe] -> [2004/03/12 01:50:38 | 00,022,528 | ---- | M] ()
hpqgalry.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqgalry.exe [c:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe] -> [2004/05/29 00:08:52 | 00,520,192 | ---- | M] (Hewlett-Packard Co.)
HpqPhUnl.exe -> %ProgramFiles%\HP\Digital Imaging\Unload\HpqPhUnl.exe [c:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe] -> [2004/03/12 01:45:16 | 00,368,640 | ---- | M] ()
HpqPSmon.exe -> %ProgramFiles%\HP\Digital Imaging\Unload\HpqPSmon.exe [c:\Program Files\HP\Digital Imaging\Unload\HpqPSmon.exe] -> [2004/03/12 01:50:38 | 00,065,536 | ---- | M] ()
hpqthb08.exe -> %ProgramFiles%\HP\Digital Imaging\bin\hpqthb08.exe [c:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe] -> [2004/05/29 00:06:36 | 00,053,248 | ---- | M] (Hewlett-Packard Co.)
HpqUnSet.exe -> %ProgramFiles%\HP\Digital Imaging\Unload\HpqUnSet.exe [c:\Program Files\HP\Digital Imaging\Unload\HpqUnSet.exe] -> [2004/03/12 01:45:18 | 00,053,248 | ---- | M] (TODO: <Company name>)
hrtzzm.exe -> %ProgramFiles%\MSN Gaming Zone\Windows\hrtzzm.exe [C:\Program Files\MSN Gaming Zone\Windows\hrtzzm.exe] -> [2004/08/04 08:00:00 | 00,042,573 | ---- | M] (Microsoft Corporation)
hypertrm.exe -> %ProgramFiles%\Windows NT\hypertrm.exe ["C:\Program Files\Windows NT\hypertrm.exe"] -> [2004/08/04 08:00:00 | 00,028,160 | ---- | M] (Hilgraeve, Inc.)
ICWCONN1.EXE -> %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn1.exe ["C:\Program Files\Internet Explorer\Connection Wizard\ICWCONN1.EXE"] -> [2004/08/04 08:00:00 | 00,214,528 | ---- | M] (Microsoft Corporation)
ICWCONN2.EXE -> %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn2.exe ["C:\Program Files\Internet Explorer\Connection Wizard\ICWCONN2.EXE"] -> [2004/08/04 08:00:00 | 00,086,016 | ---- | M] (Microsoft Corporation)
IEXPLORE.EXE -> %ProgramFiles%\Internet Explorer\IEXPLORE.EXE [C:\Program Files\Internet Explorer\iexplore.exe] -> [2004/08/04 08:00:00 | 00,093,184 | ---- | M] (Microsoft Corporation)
INETWIZ.EXE -> %ProgramFiles%\Internet Explorer\Connection Wizard\inetwiz.exe ["C:\Program Files\Internet Explorer\Connection Wizard\INETWIZ.EXE"] -> [2004/08/04 08:00:00 | 00,020,480 | ---- | M] (Microsoft Corporation)
install.exe -> Reg Error: Value  does not exist or could not be read. [Reg Error: Value  does not exist or could not be read.] -> File not found
InterActual Player -> Reg Error: Value  does not exist or could not be read. [Reg Error: Value  does not exist or could not be read.] -> File not found
ISIGNUP.EXE -> %ProgramFiles%\Internet Explorer\Connection Wizard\isignup.exe ["C:\Program Files\Internet Explorer\Connection Wizard\ISIGNUP.EXE"] -> [2004/08/04 08:00:00 | 00,016,384 | ---- | M] (Microsoft Corporation)
iTunes.exe -> %ProgramFiles%\iTunes\iTunes.exe [C:\Program Files\iTunes\iTunes.exe] -> [2008/07/10 10:51:26 | 20,246,824 | ---- | M] (Apple Inc.)
javaws.exe -> %ProgramFiles%\Java\jre1.6.0_07\bin\javaws.exe [C:\Program Files\Java\jre1.6.0_07\bin\javaws.exe] -> [2008/06/10 02:32:34 | 00,139,264 | ---- | M] (Sun Microsystems, Inc.)
LUALL.EXE -> %ProgramFiles%\Symantec\LiveUpdate\LUALL.EXE [C:\Program Files\Symantec\LiveUpdate\LUALL.EXE] -> [2006/02/23 15:41:02 | 01,255,104 | ---- | M] (Symantec Corporation)
mbam.exe -> %ProgramFiles%\Malwarebytes' Anti-Malware\mbam.exe [C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe] -> [2008/07/07 17:35:30 | 01,175,160 | ---- | M] (Malwarebytes Corporation)
migwiz.exe -> %SystemRoot%\system32\usmt\migwiz.exe [%SystemRoot%\system32\usmt\migwiz.exe] -> [2004/08/04 08:00:00 | 00,240,128 | ---- | M] (Microsoft Corporation)
moviemk.exe -> %ProgramFiles%\Movie Maker\moviemk.exe [C:\Program Files\Movie Maker\moviemk.exe] -> [2004/08/04 08:00:00 | 03,555,328 | ---- | M] (Microsoft Corporation)
mplayer2.exe -> %ProgramFiles%\Windows Media Player\mplayer2.exe ["C:\Program Files\Windows Media Player\mplayer2.exe"] -> [2004/08/04 08:00:00 | 00,004,639 | ---- | M] ()
MSCONFIG.EXE -> %SystemRoot%\pchealth\helpctr\binaries\msconfig.exe [C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe] -> [2004/08/04 08:00:00 | 00,158,208 | ---- | M] (Microsoft Corporation)
msimn.exe -> %ProgramFiles%\Outlook Express\msimn.exe [%ProgramFiles%\Outlook Express\msimn.exe] -> [2004/08/04 08:00:00 | 00,060,416 | ---- | M] (Microsoft Corporation)
msinfo32.exe -> %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe [C:\Program Files\Common Files\Microsoft Shared\MSInfo\MSInfo32.exe] -> [2004/08/04 08:00:00 | 00,039,936 | ---- | M] (Microsoft Corporation)
MSMSGS.EXE -> %ProgramFiles%\Messenger\msmsgs.exe [C:\Program Files\Messenger\msmsgs.exe] -> [2004/10/13 12:24:37 | 01,694,208 | ---- | M] (Microsoft Corporation)
MsoHtmEd.exe -> Reg Error: Value  does not exist or could not be read. [Reg Error: Value  does not exist or could not be read.] -> File not found
msoxmled.exe -> %CommonProgramFiles%\Microsoft Shared\OFFICE12\MSOXMLED.EXE [C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLED.EXE] -> [2006/10/26 21:41:50 | 00,059,152 | ---- | M] (Microsoft Corporation)
mspview.exe -> %CommonProgramFiles%\Microsoft Shared\MODI\11.0\MSPVIEW.EXE [C:\PROGRA~1\COMMON~1\MICROS~1\MODI\11.0\MSPVIEW.EXE] -> [2007/04/09 14:24:00 | 00,367,496 | ---- | M] (Microsoft Corporation)
msworks.exe -> %ProgramFiles%\Microsoft Works\MSWorks.exe [C:\Program Files\Microsoft Works\msworks.exe] -> [2004/06/29 19:42:15 | 00,532,480 | ---- | M] (Microsoft® Corporation)
NDSTray.exe -> %ProgramFiles%\Toshiba\ConfigFree\NDSTray.exe [C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe] -> [2004/07/14 00:51:04 | 00,892,928 | ---- | M] (TOSHIBA CORPORATION)
ois.exe -> %ProgramFiles%\Microsoft Office\OFFICE11\OIS.EXE [C:\PROGRA~1\MICROS~2\OFFICE11\OIS.EXE] -> [2007/03/22 20:06:22 | 00,287,576 | ---- | M] (Microsoft Corporation)
OneNote.exe -> %ProgramFiles%\Microsoft Office\OFFICE11\ONENOTE.EXE [C:\PROGRA~1\MICROS~2\OFFICE11\ONENOTE.EXE] -> [2007/04/30 15:43:40 | 00,715,616 | ---- | M] (Microsoft Corporation)
OUTLOOK.EXE -> %ProgramFiles%\Microsoft Office\OFFICE11\OUTLOOK.EXE [C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE] -> [2008/04/23 15:09:50 | 00,199,688 | ---- | M] (Microsoft Corporation)
PadExe.exe -> %ProgramFiles%\Toshiba\Touch and Launch\PadExe.exe [C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe] -> [2004/02/03 17:47:06 | 01,089,589 | ---- | M] (TOSHIBA)
pbrush.exe -> %SystemRoot%\system32\mspaint.exe [%SystemRoot%\system32\mspaint.exe] -> [2004/08/04 08:00:00 | 00,343,040 | ---- | M] (Microsoft Corporation)
PCDiag.exe -> %ProgramFiles%\Toshiba\PCDiag\PCDiag.exe [C:\Program Files\TOSHIBA\PCDiag\PCDiag.exe] -> [2004/04/21 13:49:06 | 00,049,152 | ---- | M] ()
PictureViewer.exe -> %ProgramFiles%\QuickTime\PictureViewer.exe [C:\Program Files\QuickTime\PictureViewer.exe] -> [2008/05/27 10:50:24 | 00,548,864 | ---- | M] (Apple Inc.)
pinball.exe -> %ProgramFiles%\Windows NT\Pinball\PINBALL.EXE [C:\Program Files\Windows NT\Pinball\pinball.exe] -> [2004/08/04 08:00:00 | 00,281,088 | ---- | M] (Cinematronics)
powerpnt.exe -> %ProgramFiles%\Microsoft Office\OFFICE11\POWERPNT.EXE [C:\PROGRA~1\MICROS~2\OFFICE11\POWERPNT.EXE] -> [2008/07/03 18:33:40 | 06,421,512 | ---- | M] (Microsoft Corporation)
QuickTimePlayer.exe -> %ProgramFiles%\QuickTime\QuickTimePlayer.exe [C:\Program Files\QuickTime\QuickTimePlayer.exe] -> [2008/05/27 10:50:48 | 07,677,232 | ---- | M] (Apple Inc.)
RealPlay.exe -> %ProgramFiles%\Real\RealPlayer\realplay.exe [C:\Program Files\Real\RealPlayer\realplay.exe] -> [2005/05/13 13:24:31 | 00,026,112 | ---- | M] (RealNetworks, Inc.)
RecordNow.exe -> %ProgramFiles%\Sonic\RecordNow!\RecordNow.exe [C:\Program Files\Sonic\RecordNow!\RecordNow.exe] -> [2004/07/12 10:02:00 | 01,912,832 | ---- | M] ()
rvsezm.exe -> %ProgramFiles%\MSN Gaming Zone\Windows\Rvsezm.exe [C:\Program Files\MSN Gaming Zone\Windows\rvsezm.exe] -> [2004/08/04 08:00:00 | 00,042,574 | ---- | M] (Microsoft Corporation)
setup.exe -> %ProgramFiles%\Cypress Semiconductor\Cypress USB Mass Storage Driver Installation\setup.exe [C:\Program Files\Cypress Semiconductor\Cypress USB Mass Storage Driver Installation\setup.exe] -> File not found
shvlzm.exe -> %ProgramFiles%\MSN Gaming Zone\Windows\shvlzm.exe [C:\Program Files\MSN Gaming Zone\Windows\shvlzm.exe] -> [2004/08/04 08:00:00 | 00,042,573 | ---- | M] (Microsoft Corporation)
SmoothView.exe -> %ProgramFiles%\Toshiba\TOSHIBA Zooming Utility\SmoothView.exe [C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe] -> [2004/03/02 16:45:28 | 00,135,168 | ---- | M] (TOSHIBA Corporation)
soffice.exe -> %ProgramFiles%\OpenOffice.org 2.2\program\soffice.exe [C:\Program Files\OpenOffice.org 2.2\program\soffice.exe] -> [2007/03/22 03:04:48 | 02,359,296 | ---- | M] (OpenOffice.org)
swupdate.exe -> %SystemDrive%\TOSHIBA\IVP\swupdate\swupdate.exe [C:\TOSHIBA\IVP\swupdate\swupdate.exe] -> [2005/02/15 21:18:38 | 01,024,000 | ---- | M] (TOSHIBA Corporation)
table30.exe -> Reg Error: Value  does not exist or could not be read. [Reg Error: Value  does not exist or could not be read.] -> File not found
TInTouch.exe -> %ProgramFiles%\Toshiba\TOSHIBA Console\TInTouch.exe [C:\Program Files\TOSHIBA\TOSHIBA Console\TInTouch.exe] -> [2004/04/03 00:59:12 | 00,507,904 | ---- | M] (TOSHIBA Corporation)
TOSCDSPD.exe -> %ProgramFiles%\Toshiba\TOSCDSPD\TOSCDSPD.exe [C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe] -> [2003/09/05 06:24:46 | 00,065,536 | ---- | M] (TOSHIBA)
Toshiba Tbiosdrv Driver ->  [C:\Documents and Settings\Owner\Local Settings\Temp\WZS6.tmp\Toshiba Tbiosdrv Driver] -> File not found
TosSrWsN.exe -> %ProgramFiles%\Toshiba\Speech System NLS\TosSrWsN.exe [C:\Program Files\TOSHIBA\Speech System NLS\TosSrWsN.exe] -> [2004/03/31 04:00:00 | 00,045,056 | ---- | M] (TOSHIBA Corporation.)
TosvceN.exe -> %ProgramFiles%\Toshiba\Speech System NLS\TosvceN.exe [C:\Program Files\TOSHIBA\Speech System NLS\TosvceN.exe] -> [2004/03/31 04:00:00 | 00,536,576 | ---- | M] (TOSHIBA Corporation.)
ToswbrN.exe -> %ProgramFiles%\Toshiba\Speech System NLS\ToswbrN.exe [C:\Program Files\TOSHIBA\Speech System NLS\ToswbrN.exe] -> [2004/03/31 04:00:00 | 00,102,400 | ---- | M] (TOSHIBA Corporation.)
TouchED.Exe -> %ProgramFiles%\Toshiba\TouchED\TouchED.exe [C:\Program Files\TOSHIBA\TouchED\TouchED.Exe] -> [2003/01/21 21:00:06 | 00,126,976 | ---- | M] (TOSHIBA Corporation)
TPSMain.exe -> %ProgramFiles%\TOSHIBA\Power Saver\TPSMain.exe [C:\Program Files\TOSHIBA\Power Saver\TPSMain.exe] -> File not found
VPC32.exe -> %ProgramFiles%\Symantec AntiVirus\VPC32.exe [c:\Program Files\Symantec AntiVirus\VPC32.exe] -> [2006/05/27 00:01:56 | 00,278,768 | ---- | M] (Symantec Corporation)
vptray.exe -> %ProgramFiles%\Symantec AntiVirus\VPTray.exe [c:\PROGRA~1\SYMANT~1\VPTray.exe] -> [2006/05/27 00:01:58 | 00,124,656 | ---- | M] (Symantec Corporation)
wab.exe -> %ProgramFiles%\Outlook Express\wab.exe [%ProgramFiles%\Outlook Express\wab.exe] -> [2004/08/04 08:00:00 | 00,046,080 | ---- | M] (Microsoft Corporation)
wabmig.exe -> %ProgramFiles%\Outlook Express\wabmig.exe [%ProgramFiles%\Outlook Express\wabmig.exe] -> [2004/08/04 08:00:00 | 00,030,208 | ---- | M] (Microsoft Corporation)
WCreator.exe -> %ProgramFiles%\InterVideo\WCreator2\WCreator.exe [C:\Program Files\InterVideo\WCreator2\WCreator.exe] -> [2004/03/30 04:04:52 | 02,822,248 | ---- | M] (InterVideo Inc.)
WinDVD.exe -> %ProgramFiles%\InterVideo\WinDVD\WinDVD.exe [C:\Program Files\InterVideo\WinDVD\WinDVD.exe] -> [2004/03/12 17:01:12 | 00,102,400 | ---- | M] (InterVideo Inc.)
winnt32.exe -> Reg Error: Value  does not exist or could not be read. [Reg Error: Value  does not exist or could not be read.] -> File not found
Winword.exe -> %ProgramFiles%\Microsoft Office\Office12\WINWORD.EXE [C:\PROGRA~1\MICROS~2\Office12\WINWORD.EXE] -> [2008/03/22 18:20:46 | 00,349,720 | ---- | M] (Microsoft Corporation)
WKPLMSTP.EXE -> %ProgramFiles%\Microsoft Works\wkplmstp.exe [C:\Program Files\Microsoft Works\wkplmstp.exe] -> [2004/06/23 20:18:48 | 00,033,280 | ---- | M] (Microsoft Corporation)
WKSAB.EXE -> %ProgramFiles%\Microsoft Works\wksab.exe [C:\Program Files\Microsoft Works\WKSAB.exe] -> [2004/06/23 20:26:05 | 00,006,656 | ---- | M] (Microsoft® Corporation)
wkscal.exe -> %CommonProgramFiles%\Microsoft Shared\Works Shared\WksCal.exe [C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkscal.exe] -> [2004/06/23 20:15:58 | 00,110,592 | ---- | M] (Microsoft® Corporation)
wksdb.exe -> %ProgramFiles%\Microsoft Works\wksdb.exe [C:\Program Files\Microsoft Works\wksdb.exe] -> [2004/06/23 20:25:44 | 02,240,512 | ---- | M] (Microsoft® Corporation)
WKSSB.EXE -> %ProgramFiles%\Microsoft Works\WksSb.exe [C:\Program Files\Microsoft Works\WKSSB.exe] -> [2004/06/23 20:22:16 | 00,729,088 | ---- | M] (Microsoft® Corporation)
wksss.exe -> %ProgramFiles%\Microsoft Works\wksss.exe [C:\Program Files\Microsoft Works\wksss.exe] -> [2004/07/02 20:18:07 | 01,892,352 | ---- | M] (Microsoft® Corporation)
wkswp.exe -> %ProgramFiles%\Microsoft Works\WksWP.exe [C:\Program Files\Microsoft Works\wkswp.exe] -> [2004/06/23 20:10:06 | 00,114,688 | ---- | M] (Microsoft® Corporation)
WKWCESTP.EXE -> %ProgramFiles%\Microsoft Works\wkwcestp.exe [C:\Program Files\Microsoft Works\wkwcestp.exe] -> [2004/06/23 20:18:50 | 00,031,232 | ---- | M] ()
wmplayer.exe -> %ProgramFiles%\Windows Media Player\wmplayer.exe [C:\Program Files\Windows Media Player\wmplayer.exe] -> [2004/08/11 04:45:04 | 00,073,728 | ---- | M] (Microsoft Corporation)
WORDPAD.EXE -> %ProgramFiles%\Windows NT\Accessories\wordpad.exe ["%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE"] -> [2004/08/04 08:00:00 | 00,214,528 | ---- | M] (Microsoft Corporation)
WRITE.EXE -> %ProgramFiles%\Windows NT\Accessories\wordpad.exe ["%ProgramFiles%\Windows NT\Accessories\WORDPAD.EXE"] -> [2004/08/04 08:00:00 | 00,214,528 | ---- | M] (Microsoft Corporation)
yourapp.Exe -> %ProgramFiles%\HP\Non Driver CIO Components\yourapp.Exe [C:\Program Files\HP\Non Driver CIO Components\yourapp.Exe] -> File not found
< Disabled MSConfig Services [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services -> 
"Themes" -> -> 
< Disabled MSConfig Folder Items [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\ -> 
C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqtra08.exe -> [2004/05/28 23:31:38 | 00,241,664 | ---- | M] (Hewlett-Packard Co.)
C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Image Zone Fast Start.lnk -> %ProgramFiles%\HP\Digital Imaging\bin\hpqthb08.exe -> [2004/05/29 00:06:36 | 00,053,248 | ---- | M] (Hewlett-Packard Co.)
C:^Documents and Settings^Jenny^Start Menu^Programs^Startup^OpenOffice.org 2.2.lnk -> %ProgramFiles%\OpenOffice.org 2.2\program\quickstart.exe -> [2007/02/02 17:54:56 | 00,393,216 | ---- | M] ()
< Disabled MSConfig Registry Items [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ -> 
Aim6 hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\AIM6\aim6.exe -> [2007/10/04 11:20:54 | 00,050,528 | ---- | M] (AOL LLC)
HP Software Update hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\HP\HP Software Update\hpwuSchd2.exe -> [2004/02/12 14:38:56 | 00,049,152 | ---- | M] (Hewlett-Packard Company)
iTunesHelper hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\iTunes\iTunesHelper.exe -> [2008/07/10 10:51:32 | 00,289,064 | ---- | M] (Apple Inc.)
SpyHunter Security Suite hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\Enigma Software Group\SpyHunter\SpyHunter3.exe -> [2008/01/23 15:47:10 | 00,847,872 | ---- | M] (Enigma Software Group, Inc.)
swg hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe -> File not found
< Disabled MSConfig State [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\state -> 
"bootini" -> 0 -> 
"services" -> 2 -> 
"startup" -> 2 -> 
"system.ini" -> 0 -> 
"win.ini" -> 0 -> 
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>\ -> 
.bat [@ = batfile] -> "%1" %* -> 
.chm [@ = chm.file] -> %SystemRoot%\hh.exe -> [2005/05/26 19:22:01 | 00,010,752 | ---- | M] (Microsoft Corporation)
.cmd [@ = cmdfile] -> "%1" %* -> 
.com [@ = comfile] -> "%1" %* -> 
.exe [@ = exefile] -> "%1" %* -> 
.hlp [@ = hlpfile] -> %SystemRoot%\system32\winhlp32.exe -> [2004/08/04 08:00:00 | 00,008,192 | ---- | M] (Microsoft Corporation)
.hta [@ = htafile] -> %SystemRoot%\system32\mshta.exe -> [2004/08/04 08:00:00 | 00,029,184 | ---- | M] (Microsoft Corporation)
.html [@ = FirefoxHTML] -> %ProgramFiles%\Mozilla Firefox\firefox.exe -> [2008/09/27 08:14:00 | 00,307,712 | ---- | M] (Mozilla Corporation)
.inf [@ = inffile] -> %SystemRoot%\system32\notepad.exe -> [2004/08/04 08:00:00 | 00,069,120 | ---- | M] (Microsoft Corporation)
.ini [@ = inifile] -> %SystemRoot%\system32\notepad.exe -> [2004/08/04 08:00:00 | 00,069,120 | ---- | M] (Microsoft Corporation)
.js [@ = JSFile] -> %SystemRoot%\system32\wscript.exe -> [2004/08/04 08:00:00 | 00,114,688 | ---- | M] (Microsoft Corporation)
.jse [@ = JSEFile] -> %SystemRoot%\system32\wscript.exe -> [2004/08/04 08:00:00 | 00,114,688 | ---- | M] (Microsoft Corporation)
.pif [@ = piffile] -> "%1" %* -> 
.reg [@ = regfile] -> %SystemRoot%\regedit.exe -> [2004/08/04 08:00:00 | 00,146,432 | ---- | M] (Microsoft Corporation)
.scr [@ = scrfile] -> "%1" %* -> 
.txt [@ = txtfile] -> %SystemRoot%\system32\notepad.exe -> [2004/08/04 08:00:00 | 00,069,120 | ---- | M] (Microsoft Corporation)
.vbe [@ = VBEFile] -> %SystemRoot%\system32\wscript.exe -> [2004/08/04 08:00:00 | 00,114,688 | ---- | M] (Microsoft Corporation)
.vbs [@ = VBSFile] -> %SystemRoot%\system32\wscript.exe -> [2004/08/04 08:00:00 | 00,114,688 | ---- | M] (Microsoft Corporation)
.wsf [@ = WSFFile] -> %SystemRoot%\system32\wscript.exe -> [2004/08/04 08:00:00 | 00,114,688 | ---- | M] (Microsoft Corporation)
.wsh [@ = WSHFile] -> %SystemRoot%\system32\wscript.exe -> [2004/08/04 08:00:00 | 00,114,688 | ---- | M] (Microsoft Corporation)
< EventViewer Logs - Last 10 Errors > -> Event Information -> Description
Application [ Error ] 6/29/2008 5:09:47 PM Computer Name = TYROME | Source = Symantec AntiVirus | ID = 16711726 -> Description =       Security Risk Found!Risk: Trojan.Startpage in File: C:\Program Files\Web Technologies\wcs.exe by: Auto-Protect scan.  Action: Cleaned by Deletion.  Action Description:      
Application [ Error ] 6/29/2008 5:10:08 PM Computer Name = TYROME | Source = Symantec AntiVirus | ID = 16711685 -> Description =       Risk Found!Risk: Trojan.Startpage in File: C:\Program Files\Web Technologies\wcs.exe by: Auto-Protect scan.  Action: Cleaned by Deletion.  Action Description:      
Application [ Error ] 6/29/2008 5:10:31 PM Computer Name = TYROME | Source = Symantec AntiVirus | ID = 16711731 -> Description =       Security Risk Found!Risk: Trojan.Startpage in File: C:\Program Files\Web Technologies\wcs.exe by: Auto-Protect scan.  Action: Cleaned by Deletion.  Action Description:      
Application [ Error ] 6/29/2008 5:11:14 PM Computer Name = TYROME | Source = Symantec AntiVirus | ID = 16711726 -> Description =       Security Risk Found!Risk: Trojan.Startpage in File: C:\Program Files\Web Technologies\iebtu.exe by: Auto-Protect scan.  Action: Cleaned by Deletion.  Action Description:      
Application [ Error ] 6/29/2008 5:11:35 PM Computer Name = TYROME | Source = Symantec AntiVirus | ID = 16711685 -> Description =       Risk Found!Risk: Trojan.Startpage in File: C:\Program Files\Web Technologies\iebtu.exe by: Auto-Protect scan.  Action: Cleaned by Deletion.  Action Description:      
Application [ Error ] 6/29/2008 5:11:36 PM Computer Name = TYROME | Source = Symantec AntiVirus | ID = 16711731 -> Description =       Security Risk Found!Risk: Trojan.Startpage in File: C:\Program Files\Web Technologies\iebtu.exe by: Auto-Protect scan.  Action: Cleaned by Deletion.  Action Description:      
Application [ Error ] 6/29/2008 5:23:58 PM Computer Name = TYROME | Source = Symantec AntiVirus | ID = 16711726 -> Description =       Security Risk Found!Risk: Trojan.Zlob in File: C:\Program Files\Web Technologies\iebt.dll by: Auto-Protect scan.  Action: Cleaned by Deletion.  Action Description:      
System [ Error ] 10/23/2008 6:40:14 PM Computer Name = TYROME | Source = DCOM | ID = 10005 -> Description = DCOM got error "%1084" attempting to start the service netman with arguments ""  in order to run the server:  {BA126AE5-2166-11D1-B1D0-00805FC1270E}
System [ Error ] 10/23/2008 6:40:40 PM Computer Name = TYROME | Source = Service Control Manager | ID = 7001 -> Description = The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:   %%31
System [ Error ] 10/23/2008 6:40:40 PM Computer Name = TYROME | Source = Service Control Manager | ID = 7001 -> Description = The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:   %%31
System [ Error ] 10/23/2008 6:40:40 PM Computer Name = TYROME | Source = Service Control Manager | ID = 7001 -> Description = The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error:   %%31
System [ Error ] 10/23/2008 6:40:40 PM Computer Name = TYROME | Source = Service Control Manager | ID = 7001 -> Description = The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:   %%31
System [ Error ] 10/23/2008 6:40:40 PM Computer Name = TYROME | Source = Service Control Manager | ID = 7001 -> Description = The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:   %%31
System [ Error ] 10/23/2008 6:40:40 PM Computer Name = TYROME | Source = Service Control Manager | ID = 7001 -> Description = The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:   %%31
System [ Error ] 10/23/2008 6:40:40 PM Computer Name = TYROME | Source = Service Control Manager | ID = 7026 -> Description = The following boot-start or system-start driver(s) failed to load:   AFD  eeCtrl  Fips  intelppm  IPSec  MRxSmb  NetBIOS  NetBT  RasAcd  Rdbss  SAVRT  SAVRTPEL  SPBBCDrv  SYMTDI  Tcpip
System [ Error ] 10/23/2008 6:41:14 PM Computer Name = TYROME | Source = DCOM | ID = 10005 -> Description = DCOM got error "%1084" attempting to start the service netman with arguments ""  in order to run the server:  {BA126AE5-2166-11D1-B1D0-00805FC1270E}
System [ Error ] 10/23/2008 6:42:35 PM Computer Name = TYROME | Source = DCOM | ID = 10005 -> Description = DCOM got error "%1084" attempting to start the service StiSvc with arguments ""  in order to run the server:  {A1F4E726-8CF1-11D1-BF92-0060081ED811}
 
[Files/Folders - Created Within 90 Days]
1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> 
OTScanIt2 -> %UserProfile%\Desktop\OTScanIt2 -> [2008/10/23 19:25:27 | 00,000,000 | ---D | C]
msln.exe -> %SystemRoot%\System32\msln.exe -> [2008/10/23 19:20:01 | 00,046,640 | ---- | C] (Symantec Corporation)
hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [2008/10/23 19:03:55 | 51,890,1760 | -HS- | C] ()
ERUNT -> %SystemRoot%\ERUNT -> [2008/10/23 18:43:03 | 00,000,000 | ---D | C]
SDFix -> %SystemDrive%\SDFix -> [2008/10/23 18:35:31 | 00,000,000 | ---D | C]
SDFix.exe -> %UserProfile%\Desktop\SDFix.exe -> [2008/10/23 18:35:26 | 01,554,567 | ---- | C] ()
OTScanIt2.exe -> %UserProfile%\Desktop\OTScanIt2.exe -> [2008/10/23 18:33:00 | 00,588,346 | ---- | C] ()
bedroom.jpg -> %UserProfile%\Desktop\bedroom.jpg -> [2008/10/20 19:35:59 | 00,005,325 | ---- | C] ()
beep.sys -> %SystemRoot%\System32\drivers\beep.sys -> [2008/10/19 14:31:31 | 00,004,224 | ---- | C] (Microsoft Corporation)
beep.sys -> %SystemRoot%\System32\dllcache\beep.sys -> [2008/10/19 14:31:31 | 00,004,224 | ---- | C] (Microsoft Corporation)
cufi.db -> %CommonProgramFiles%\cufi.db -> [2008/10/19 13:21:40 | 00,019,387 | ---- | C] ()
xudizu.reg -> %AllUsersProfile%\Application Data\xudizu.reg -> [2008/10/19 13:21:40 | 00,019,063 | ---- | C] ()
acefir.inf -> %CommonProgramFiles%\acefir.inf -> [2008/10/19 13:21:40 | 00,017,907 | ---- | C] ()
mytanysuz.db -> %SystemRoot%\mytanysuz.db -> [2008/10/19 13:21:40 | 00,017,282 | ---- | C] ()
vykuqojyzu._dl -> %SystemRoot%\vykuqojyzu._dl -> [2008/10/19 13:21:40 | 00,016,928 | ---- | C] ()
jyve.vbs -> %AppData%\jyve.vbs -> [2008/10/19 13:21:40 | 00,015,321 | ---- | C] ()
agowyj.scr -> %SystemRoot%\agowyj.scr -> [2008/10/19 13:21:40 | 00,014,899 | ---- | C] ()
oluxucixi.bin -> %AllUsersProfile%\Documents\oluxucixi.bin -> [2008/10/19 13:21:40 | 00,014,424 | ---- | C] ()
juvyfuco.db -> %AllUsersProfile%\Application Data\juvyfuco.db -> [2008/10/19 13:21:40 | 00,013,568 | ---- | C] ()
cobafikin._sy -> %CommonProgramFiles%\cobafikin._sy -> [2008/10/19 13:21:40 | 00,012,991 | ---- | C] ()
umehywe.inf -> %SystemRoot%\System32\umehywe.inf -> [2008/10/19 13:21:40 | 00,012,892 | ---- | C] ()
lulikyqivo.dl -> %SystemRoot%\lulikyqivo.dl -> [2008/10/19 13:21:40 | 00,012,661 | ---- | C] ()
apahily.ban -> %UserProfile%\Local Settings\Application Data\apahily.ban -> [2008/10/19 13:21:40 | 00,012,432 | ---- | C] ()
tyjyzyri.com -> %CommonProgramFiles%\tyjyzyri.com -> [2008/10/19 13:21:40 | 00,012,112 | ---- | C] ()
umid.bin -> %AllUsersProfile%\Documents\umid.bin -> [2008/10/19 13:21:40 | 00,012,086 | ---- | C] ()
ylagah.scr -> %UserProfile%\Local Settings\Application Data\ylagah.scr -> [2008/10/19 13:21:40 | 00,010,911 | ---- | C] ()
TDSSmtve.dat -> %SystemRoot%\System32\TDSSmtve.dat -> [2008/10/19 12:29:24 | 00,000,164 | ---- | C] ()
LogFiles -> %SystemRoot%\System32\LogFiles -> [2008/10/19 12:28:15 | 00,000,000 | ---D | C]
Shockwave_Installer_Slim.exe -> %UserProfile%\Desktop\Shockwave_Installer_Slim.exe -> [2008/10/01 22:54:50 | 04,584,376 | ---- | C] ()
home.swf -> %UserProfile%\Desktop\home.swf -> [2008/10/01 22:53:37 | 00,444,959 | ---- | C] ()
JennyB.jpg -> %UserProfile%\Desktop\JennyB.jpg -> [2008/09/30 19:18:11 | 00,314,934 | ---- | C] ()
ZbThumbnail.info -> %UserProfile%\Desktop\ZbThumbnail.info -> [2008/09/29 19:33:21 | 00,002,176 | -H-- | C] ()
CatRoot_bak -> %SystemRoot%\System32\CatRoot_bak -> [2008/08/27 22:38:49 | 00,000,000 | ---D | C]
Beauty.jpg -> %UserProfile%\Desktop\Beauty.jpg -> [2008/08/17 14:34:37 | 03,968,670 | ---- | C] ()
msadce.dll -> %SystemRoot%\System32\dllcache\msadce.dll -> [2008/08/14 19:05:55 | 00,331,776 | ---- | C] (Microsoft Corporation)
Office Genuine Advantage -> %AllUsersProfile%\Application Data\Office Genuine Advantage -> [2008/07/30 20:43:39 | 00,000,000 | ---D | C]
Microsoft Visual Studio -> %ProgramFiles%\Microsoft Visual Studio -> [2008/07/30 20:05:40 | 00,000,000 | ---D | C]
X12-30263.exe -> %UserProfile%\Desktop\X12-30263.exe -> [2008/07/30 19:26:00 | 30,518,6800 | ---- | C] (Microsoft Corporation)
iTunes.lnk -> %AllUsersProfile%\Desktop\iTunes.lnk -> [2008/07/29 20:56:00 | 00,002,137 | ---- | C] ()
iPod -> %ProgramFiles%\iPod -> [2008/07/29 20:55:17 | 00,000,000 | ---D | C]
JennyB (8).lnk -> %AllUsersProfile%\Desktop\JennyB (8).lnk -> [2008/07/29 20:52:15 | 00,001,612 | ---- | C] ()
AppleSoftwareUpdate.job -> %SystemRoot%\tasks\AppleSoftwareUpdate.job -> [2008/07/29 19:51:48 | 00,000,284 | ---- | C] ()
 
[Files/Folders - Modified Within 90 Days]
1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> 
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\ -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader -> [2005/05/13 12:23:21 | 00,000,000 | ---D | M]
qmgr0.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat -> [2008/10/23 18:25:21 | 00,004,617 | ---- | M] ()
qmgr1.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat -> [2008/10/23 18:25:21 | 00,004,232 | ---- | M] ()
C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\ -> C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA -> [2008/07/30 20:17:25 | 00,000,000 | ---D | M]
opa11.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\opa11.dat -> [2008/09/30 19:22:09 | 00,011,142 | ---- | M] ()
opa12.dat -> C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\DATA\opa12.dat -> [2008/10/22 21:41:11 | 00,008,602 | ---- | M] ()
Notebook Maximizer.LNK -> %UserProfile%\Desktop\Notebook Maximizer.LNK -> [2008/10/23 19:24:30 | 00,000,815 | ---- | M] ()
msln.exe -> %SystemRoot%\System32\msln.exe -> [2008/10/23 19:20:02 | 00,046,640 | ---- | M] (Symantec Corporation)
SA.DAT -> %SystemRoot%\tasks\SA.DAT -> [2008/10/23 19:04:20 | 00,000,006 | -H-- | M] ()
bootstat.dat -> %SystemRoot%\bootstat.dat -> [2008/10/23 19:03:59 | 00,002,048 | --S- | M] ()
hiberfil.sys -> %SystemDrive%\hiberfil.sys -> [2008/10/23 19:03:55 | 51,890,1760 | -HS- | M] ()
HOSTS -> %SystemRoot%\System32\drivers\etc\HOSTS -> [2008/10/23 18:47:16 | 00,000,686 | ---- | M] ()
FNTCACHE.DAT -> %SystemRoot%\System32\FNTCACHE.DAT -> [2008/10/23 18:38:56 | 00,284,520 | ---- | M] ()
OTScanIt2.exe -> %UserProfile%\Desktop\OTScanIt2.exe -> [2008/10/23 11:25:46 | 00,588,346 | ---- | M] ()
SDFix.exe -> %UserProfile%\Desktop\SDFix.exe -> [2008/10/23 11:25:00 | 01,554,567 | ---- | M] ()
bedroom.jpg -> %UserProfile%\Desktop\bedroom.jpg -> [2008/10/20 19:36:10 | 00,005,325 | ---- | M] ()
wpa.dbl -> %SystemRoot%\System32\wpa.dbl -> [2008/10/20 19:21:17 | 00,001,158 | ---- | M] ()
cufi.db -> %CommonProgramFiles%\cufi.db -> [2008/10/19 13:21:40 | 00,019,387 | ---- | M] ()
xudizu.reg -> %AllUsersProfile%\Application Data\xudizu.reg -> [2008/10/19 13:21:40 | 00,019,063 | ---- | M] ()
acefir.inf -> %CommonProgramFiles%\acefir.inf -> [2008/10/19 13:21:40 | 00,017,907 | ---- | M] ()
mytanysuz.db -> %SystemRoot%\mytanysuz.db -> [2008/10/19 13:21:40 | 00,017,282 | ---- | M] ()
vykuqojyzu._dl -> %SystemRoot%\vykuqojyzu._dl -> [2008/10/19 13:21:40 | 00,016,928 | ---- | M] ()
jyve.vbs -> %AppData%\jyve.vbs -> [2008/10/19 13:21:40 | 00,015,321 | ---- | M] ()
agowyj.scr -> %SystemRoot%\agowyj.scr -> [2008/10/19 13:21:40 | 00,014,899 | ---- | M] ()
oluxucixi.bin -> %AllUsersProfile%\Documents\oluxucixi.bin -> [2008/10/19 13:21:40 | 00,014,424 | ---- | M] ()
juvyfuco.db -> %AllUsersProfile%\Application Data\juvyfuco.db -> [2008/10/19 13:21:40 | 00,013,568 | ---- | M] ()
cobafikin._sy -> %CommonProgramFiles%\cobafikin._sy -> [2008/10/19 13:21:40 | 00,012,991 | ---- | M] ()
umehywe.inf -> %SystemRoot%\System32\umehywe.inf -> [2008/10/19 13:21:40 | 00,012,892 | ---- | M] ()
lulikyqivo.dl -> %SystemRoot%\lulikyqivo.dl -> [2008/10/19 13:21:40 | 00,012,661 | ---- | M] ()
apahily.ban -> %UserProfile%\Local Settings\Application Data\apahily.ban -> [2008/10/19 13:21:40 | 00,012,432 | ---- | M] ()
tyjyzyri.com -> %CommonProgramFiles%\tyjyzyri.com -> [2008/10/19 13:21:40 | 00,012,112 | ---- | M] ()
umid.bin -> %AllUsersProfile%\Documents\umid.bin -> [2008/10/19 13:21:40 | 00,012,086 | ---- | M] ()
ylagah.scr -> %UserProfile%\Local Settings\Application Data\ylagah.scr -> [2008/10/19 13:21:40 | 00,010,911 | ---- | M] ()
TDSSmtve.dat -> %SystemRoot%\System32\TDSSmtve.dat -> [2008/10/19 12:29:24 | 00,000,164 | ---- | M] ()
imsins.BAK -> %SystemRoot%\imsins.BAK -> [2008/10/16 08:16:21 | 00,001,393 | ---- | M] ()
win.ini -> %SystemRoot%\win.ini -> [2008/10/16 08:15:36 | 00,000,700 | ---- | M] ()
Shockwave_Installer_Slim.exe -> %UserProfile%\Desktop\Shockwave_Installer_Slim.exe -> [2008/10/01 22:55:20 | 04,584,376 | ---- | M] ()
home.swf -> %UserProfile%\Desktop\home.swf -> [2008/10/01 22:47:27 | 00,444,959 | ---- | M] ()
JennyB.jpg -> %UserProfile%\Desktop\JennyB.jpg -> [2008/09/30 19:18:12 | 00,314,934 | ---- | M] ()
ZbThumbnail.info -> %UserProfile%\Desktop\ZbThumbnail.info -> [2008/09/29 19:33:22 | 00,002,176 | -H-- | M] ()
win32k.sys -> %SystemRoot%\System32\win32k.sys -> [2008/09/15 07:57:41 | 01,846,016 | ---- | M] (Microsoft Corporation)
win32k.sys -> %SystemRoot%\System32\dllcache\win32k.sys -> [2008/09/15 07:57:41 | 01,846,016 | ---- | M] (Microsoft Corporation)
iTunes.lnk -> %AllUsersProfile%\Desktop\iTunes.lnk -> [2008/09/09 23:02:33 | 00,002,137 | ---- | M] ()
srv.sys -> %SystemRoot%\System32\drivers\srv.sys -> [2008/08/28 06:04:17 | 00,333,056 | ---- | M] (Microsoft Corporation)
srv.sys -> %SystemRoot%\System32\dllcache\srv.sys -> [2008/08/28 06:04:17 | 00,333,056 | ---- | M] (Microsoft Corporation)
mshtml.dll -> %SystemRoot%\System32\mshtml.dll -> [2008/08/20 01:38:47 | 03,060,224 | ---- | M] (Microsoft Corporation)
mshtml.dll -> %SystemRoot%\System32\dllcache\mshtml.dll -> [2008/08/20 01:38:47 | 03,060,224 | ---- | M] (Microsoft Corporation)
browseui.dll -> %SystemRoot%\System32\dllcache\browseui.dll -> [2008/08/20 01:38:45 | 01,023,488 | ---- | M] (Microsoft Corporation)
browseui.dll -> %SystemRoot%\System32\browseui.dll -> [2008/08/20 01:38:45 | 01,023,488 | ---- | M] (Microsoft Corporation)
urlmon.dll -> %SystemRoot%\System32\urlmon.dll -> [2008/08/20 01:38:45 | 00,615,936 | ---- | M] (Microsoft Corporation)
urlmon.dll -> %SystemRoot%\System32\dllcache\urlmon.dll -> [2008/08/20 01:38:45 | 00,615,936 | ---- | M] (Microsoft Corporation)
shlwapi.dll -> %SystemRoot%\System32\shlwapi.dll -> [2008/08/20 01:38:44 | 00,474,112 | ---- | M] (Microsoft Corporation)
shlwapi.dll -> %SystemRoot%\System32\dllcache\shlwapi.dll -> [2008/08/20 01:38:44 | 00,474,112 | ---- | M] (Microsoft Corporation)
jsproxy.dll -> %SystemRoot%\System32\jsproxy.dll -> [2008/08/20 01:38:44 | 00,016,384 | ---- | M] (Microsoft Corporation)
jsproxy.dll -> %SystemRoot%\System32\dllcache\jsproxy.dll -> [2008/08/20 01:38:44 | 00,016,384 | ---- | M] (Microsoft Corporation)
wininet.dll -> %SystemRoot%\System32\wininet.dll -> [2008/08/20 01:38:43 | 00,659,456 | ---- | M] (Microsoft Corporation)
wininet.dll -> %SystemRoot%\System32\dllcache\wininet.dll -> [2008/08/20 01:38:43 | 00,659,456 | ---- | M] (Microsoft Corporation)
mshtmled.dll -> %SystemRoot%\System32\mshtmled.dll -> [2008/08/20 01:38:43 | 00,449,024 | ---- | M] (Microsoft Corporation)
mshtmled.dll -> %SystemRoot%\System32\dllcache\mshtmled.dll -> [2008/08/20 01:38:43 | 00,449,024 | ---- | M] (Microsoft Corporation)
shdocvw.dll -> %SystemRoot%\System32\shdocvw.dll -> [2008/08/20 01:38:42 | 01,494,528 | ---- | M] (Microsoft Corporation)
shdocvw.dll -> %SystemRoot%\System32\dllcache\shdocvw.dll -> [2008/08/20 01:38:42 | 01,494,528 | ---- | M] (Microsoft Corporation)
mstime.dll -> %SystemRoot%\System32\mstime.dll -> [2008/08/20 01:38:41 | 00,532,480 | ---- | M] (Microsoft Corporation)
mstime.dll -> %SystemRoot%\System32\dllcache\mstime.dll -> [2008/08/20 01:38:41 | 00,532,480 | ---- | M] (Microsoft Corporation)
iepeers.dll -> %SystemRoot%\System32\iepeers.dll -> [2008/08/20 01:38:41 | 00,251,392 | ---- | M] (Microsoft Corporation)
iepeers.dll -> %SystemRoot%\System32\dllcache\iepeers.dll -> [2008/08/20 01:38:41 | 00,251,392 | ---- | M] (Microsoft Corporation)
msrating.dll -> %SystemRoot%\System32\msrating.dll -> [2008/08/20 01:38:41 | 00,146,432 | ---- | M] (Microsoft Corporation)
msrating.dll -> %SystemRoot%\System32\dllcache\msrating.dll -> [2008/08/20 01:38:41 | 00,146,432 | ---- | M] (Microsoft Corporation)
inseng.dll -> %SystemRoot%\System32\inseng.dll -> [2008/08/20 01:38:41 | 00,096,256 | ---- | M] (Microsoft Corporation)
inseng.dll -> %SystemRoot%\System32\dllcache\inseng.dll -> [2008/08/20 01:38:41 | 00,096,256 | ---- | M] (Microsoft Corporation)
pngfilt.dll -> %SystemRoot%\System32\pngfilt.dll -> [2008/08/20 01:38:41 | 00,039,424 | ---- | M] (Microsoft Corporation)
pngfilt.dll -> %SystemRoot%\System32\dllcache\pngfilt.dll -> [2008/08/20 01:38:41 | 00,039,424 | ---- | M] (Microsoft Corporation)
danim.dll -> %SystemRoot%\System32\dllcache\danim.dll -> [2008/08/20 01:38:40 | 01,054,208 | ---- | M] (Microsoft Corporation)
danim.dll -> %SystemRoot%\System32\danim.dll -> [2008/08/20 01:38:40 | 01,054,208 | ---- | M] (Microsoft Corporation)
dxtmsft.dll -> %SystemRoot%\System32\dxtmsft.dll -> [2008/08/20 01:38:40 | 00,357,888 | ---- | M] (Microsoft Corporation)
dxtmsft.dll -> %SystemRoot%\System32\dllcache\dxtmsft.dll -> [2008/08/20 01:38:40 | 00,357,888 | ---- | M] (Microsoft Corporation)
dxtrans.dll -> %SystemRoot%\System32\dxtrans.dll -> [2008/08/20 01:38:40 | 00,205,312 | ---- | M] (Microsoft Corporation)
dxtrans.dll -> %SystemRoot%\System32\dllcache\dxtrans.dll -> [2008/08/20 01:38:40 | 00,205,312 | ---- | M] (Microsoft Corporation)
extmgr.dll -> %SystemRoot%\System32\extmgr.dll -> [2008/08/20 01:38:40 | 00,055,808 | ---- | M] (Microsoft Corporation)
extmgr.dll -> %SystemRoot%\System32\dllcache\extmgr.dll -> [2008/08/20 01:38:40 | 00,055,808 | ---- | M] (Microsoft Corporation)
cdfview.dll -> %SystemRoot%\System32\dllcache\cdfview.dll -> [2008/08/20 01:38:39 | 00,151,040 | ---- | M] (Microsoft Corporation)
cdfview.dll -> %SystemRoot%\System32\cdfview.dll -> [2008/08/20 01:38:39 | 00,151,040 | ---- | M] (Microsoft Corporation)
iedw.exe -> %SystemRoot%\System32\dllcache\iedw.exe -> [2008/08/19 05:30:39 | 00,018,432 | ---- | M] (Microsoft Corporation)
xpsp3res.dll -> %SystemRoot%\System32\xpsp3res.dll -> [2008/08/19 05:20:32 | 00,351,744 | ---- | M] (Microsoft Corporation)
Beauty.jpg -> %UserProfile%\Desktop\Beauty.jpg -> [2008/08/17 14:35:00 | 03,968,670 | ---- | M] ()
AppleSoftwareUpdate.job -> %SystemRoot%\tasks\AppleSoftwareUpdate.job -> [2008/08/15 11:04:02 | 00,000,284 | ---- | M] ()
ntoskrnl.exe -> %SystemRoot%\System32\ntoskrnl.exe -> [2008/08/14 06:00:45 | 02,180,352 | ---- | M] (Microsoft Corporation)
ntoskrnl.exe -> %SystemRoot%\System32\dllcache\ntoskrnl.exe -> [2008/08/14 06:00:45 | 02,180,352 | ---- | M] (Microsoft Corporation)
ntkrnlmp.exe -> %SystemRoot%\System32\dllcache\ntkrnlmp.exe -> [2008/08/14 05:58:27 | 02,136,064 | ---- | M] (Microsoft Corporation)
afd.sys -> %SystemRoot%\System32\drivers\afd.sys -> [2008/08/14 05:51:43 | 00,138,368 | ---- | M] (Microsoft Corporation)
afd.sys -> %SystemRoot%\System32\dllcache\afd.sys -> [2008/08/14 05:51:43 | 00,138,368 | ---- | M] (Microsoft Corporation)
ntkrpamp.exe -> %SystemRoot%\System32\dllcache\ntkrpamp.exe -> [2008/08/14 05:22:14 | 02,015,744 | ---- | M] (Microsoft Corporation)
ntkrnlpa.exe -> %SystemRoot%\System32\ntkrnlpa.exe -> [2008/08/14 05:22:13 | 02,057,728 | ---- | M] (Microsoft Corporation)
ntkrnlpa.exe -> %SystemRoot%\System32\dllcache\ntkrnlpa.exe -> [2008/08/14 05:22:13 | 02,057,728 | ---- | M] (Microsoft Corporation)
X12-30263.exe -> %UserProfile%\Desktop\X12-30263.exe -> [2008/07/30 19:53:45 | 30,518,6800 | ---- | M] (Microsoft Corporation)
JennyB (8).lnk -> %AllUsersProfile%\Desktop\JennyB (8).lnk -> [2008/07/29 20:52:15 | 00,001,612 | ---- | M] ()
QTFont.qfn -> %SystemRoot%\QTFont.qfn -> [2008/07/29 20:32:12 | 00,054,156 | -H-- | M] ()
[File - Lop Check]
Application Data -> C:\Documents and Settings\All Users\Application Data -> [2008/10/19 13:21:40 | 00,000,000 | RH-D | M]
Adobe -> C:\Documents and Settings\All Users\Application Data\Adobe -> [2007/05/06 11:18:46 | 00,000,000 | ---D | M]
AOL -> C:\Documents and Settings\All Users\Application Data\AOL -> [2008/02/03 09:47:22 | 00,000,000 | ---D | M]
AOL Downloads -> C:\Documents and Settings\All Users\Application Data\AOL Downloads -> [2008/02/03 09:39:46 | 00,000,000 | ---D | M]
AOL OCP -> C:\Documents and Settings\All Users\Application Data\AOL OCP -> [2007/03/18 18:58:42 | 00,000,000 | ---D | M]
Apple -> C:\Documents and Settings\All Users\Application Data\Apple -> [2008/02/10 21:46:26 | 00,000,000 | ---D | M]
Apple Computer -> C:\Documents and Settings\All Users\Application Data\Apple Computer -> [2007/03/20 15:44:10 | 00,000,000 | ---D | M]
Google -> C:\Documents and Settings\All Users\Application Data\Google -> [2008/06/29 21:25:04 | 00,000,000 | ---D | M]
GTek -> C:\Documents and Settings\All Users\Application Data\GTek -> [2008/06/15 20:13:25 | 00,000,000 | -H-D | M]
Hewlett-Packard -> C:\Documents and Settings\All Users\Application Data\Hewlett-Packard -> [2007/05/23 16:24:13 | 00,000,000 | ---D | M]
Intel -> C:\Documents and Settings\All Users\Application Data\Intel -> [2008/02/27 19:24:11 | 00,000,000 | ---D | M]
Intuit -> C:\Documents and Settings\All Users\Application Data\Intuit -> [2005/05/13 13:12:30 | 00,000,000 | ---D | M]
Lavasoft -> C:\Documents and Settings\All Users\Application Data\Lavasoft -> [2008/03/29 10:27:44 | 00,000,000 | ---D | M]
Malwarebytes -> C:\Documents and Settings\All Users\Application Data\Malwarebytes -> [2008/07/08 02:39:27 | 00,000,000 | ---D | M]
McAfee.com -> C:\Documents and Settings\All Users\Application Data\McAfee.com -> [2005/05/13 13:09:23 | 00,000,000 | ---D | M]
Microsoft -> C:\Documents and Settings\All Users\Application Data\Microsoft -> [2007/04/03 17:14:20 | 00,000,000 | --SD | M]
Microsoft Help -> C:\Documents and Settings\All Users\Application Data\Microsoft Help -> [2008/10/22 21:40:45 | 00,000,000 | ---D | M]
Napster -> C:\Documents and Settings\All Users\Application Data\Napster -> [2007/03/06 23:07:10 | 00,000,000 | ---D | M]
Office Genuine Advantage -> C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage -> [2008/07/30 20:43:39 | 00,000,000 | ---D | M]
Pure Networks -> C:\Documents and Settings\All Users\Application Data\Pure Networks -> [2005/05/13 13:25:26 | 00,000,000 | ---D | M]
QuickTime -> C:\Documents and Settings\All Users\Application Data\QuickTime -> [2005/05/13 13:24:53 | 00,000,000 | ---D | M]
Symantec -> C:\Documents and Settings\All Users\Application Data\Symantec -> [2007/03/06 14:28:30 | 00,000,000 | ---D | M]
Viewpoint -> C:\Documents and Settings\All Users\Application Data\Viewpoint -> [2008/02/03 12:01:40 | 00,000,000 | ---D | M]
Windows Genuine Advantage -> C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage -> [2008/01/10 22:31:15 | 00,000,000 | ---D | M]
Yahoo! -> C:\Documents and Settings\All Users\Application Data\Yahoo! -> [2008/06/29 18:27:59 | 00,000,000 | ---D | M]
Yahoo! Companion -> C:\Documents and Settings\All Users\Application Data\Yahoo! Companion -> [2008/06/29 18:27:56 | 00,000,000 | ---D | M]
Application Data -> C:\Documents and Settings\Jenny\Application Data -> [2008/10/19 13:21:40 | 00,000,000 | RH-D | M]
acccore -> C:\Documents and Settings\Jenny\Application Data\acccore -> [2007/03/18 18:58:59 | 00,000,000 | ---D | M]
Adobe -> C:\Documents and Settings\Jenny\Application Data\Adobe -> [2008/01/23 01:41:38 | 00,000,000 | ---D | M]
AdobeAUM -> C:\Documents and Settings\Jenny\Application Data\AdobeAUM -> [2007/05/06 11:20:15 | 00,000,000 | ---D | M]
AdobeUM -> C:\Documents and Settings\Jenny\Application Data\AdobeUM -> [2007/05/06 11:20:14 | 00,000,000 | ---D | M]
AOL -> C:\Documents and Settings\Jenny\Application Data\AOL -> [2007/03/06 23:14:07 | 00,000,000 | ---D | M]
Apple Computer -> C:\Documents and Settings\Jenny\Application Data\Apple Computer -> [2008/08/04 12:48:04 | 00,000,000 | ---D | M]
Canon -> C:\Documents and Settings\Jenny\Application Data\Canon -> [2007/05/28 21:53:11 | 00,000,000 | ---D | M]
dvdcss -> C:\Documents and Settings\Jenny\Application Data\dvdcss -> [2007/05/29 14:05:37 | 00,000,000 | ---D | M]
Google -> C:\Documents and Settings\Jenny\Application Data\Google -> [2007/03/06 14:27:13 | 00,000,000 | ---D | M]
GTek -> C:\Documents and Settings\Jenny\Application Data\GTek -> [2008/06/15 20:12:49 | 00,000,000 | -H-D | M]
Identities -> C:\Documents and Settings\Jenny\Application Data\Identities -> [2005/05/12 19:48:35 | 00,000,000 | ---D | M]
Intel -> C:\Documents and Settings\Jenny\Application Data\Intel -> [2008/02/27 19:25:16 | 00,000,000 | ---D | M]
InterTrust -> C:\Documents and Settings\Jenny\Application Data\InterTrust -> [2005/05/13 12:59:00 | 00,000,000 | ---D | M]
InterVideo -> C:\Documents and Settings\Jenny\Application Data\InterVideo -> [2005/05/17 12:52:17 | 00,000,000 | ---D | M]
Intuit -> C:\Documents and Settings\Jenny\Application Data\Intuit -> [2005/05/13 13:12:04 | 00,000,000 | ---D | M]
Leadertech -> C:\Documents and Settings\Jenny\Application Data\Leadertech -> [2007/06/25 13:29:38 | 00,000,000 | ---D | M]
LimeWire -> C:\Documents and Settings\Jenny\Application Data\LimeWire -> [2008/08/01 14:04:13 | 00,000,000 | ---D | M]
Macromedia -> C:\Documents and Settings\Jenny\Application Data\Macromedia -> [2007/03/06 14:27:15 | 00,000,000 | ---D | M]
Malwarebytes -> C:\Documents and Settings\Jenny\Application Data\Malwarebytes -> [2008/07/08 02:39:35 | 00,000,000 | ---D | M]
Microsoft -> C:\Documents and Settings\Jenny\Application Data\Microsoft -> [2007/10/16 21:58:56 | 00,000,000 | --SD | M]
Move Networks -> C:\Documents and Settings\Jenny\Application Data\Move Networks -> [2007/05/18 22:37:17 | 00,000,000 | -H-D | M]
Mozilla -> C:\Documents and Settings\Jenny\Application Data\Mozilla -> [2008/06/29 21:29:06 | 00,000,000 | ---D | M]
OpenOffice.org2 -> C:\Documents and Settings\Jenny\Application Data\OpenOffice.org2 -> [2008/10/16 23:20:44 | 00,000,000 | ---D | M]
Ruckus Network -> C:\Documents and Settings\Jenny\Application Data\Ruckus Network -> [2007/05/14 19:10:16 | 00,000,000 | ---D | M]
Snapfish -> C:\Documents and Settings\Jenny\Application Data\Snapfish -> [2007/05/29 15:02:56 | 00,000,000 | ---D | M]
Sonic -> C:\Documents and Settings\Jenny\Application Data\Sonic -> [2007/04/10 00:42:14 | 00,000,000 | ---D | M]
Sun -> C:\Documents and Settings\Jenny\Application Data\Sun -> [2005/05/13 12:21:34 | 00,000,000 | ---D | M]
toshiba -> C:\Documents and Settings\Jenny\Application Data\toshiba -> [2005/05/13 12:48:12 | 00,000,000 | ---D | M]
Uniblue -> C:\Documents and Settings\Jenny\Application Data\Uniblue -> [2008/06/30 19:04:52 | 00,000,000 | ---D | M]
Viewpoint -> C:\Documents and Settings\Jenny\Application Data\Viewpoint -> [2007/03/25 03:24:37 | 00,000,000 | ---D | M]
Yahoo! -> C:\Documents and Settings\Jenny\Application Data\Yahoo! -> [2008/06/29 18:27:59 | 00,000,000 | ---D | M]
You've Got Pictures Screensaver -> C:\Documents and Settings\Jenny\Application Data\You've Got Pictures Screensaver -> [2005/05/13 13:25:11 | 00,000,000 | ---D | M]
C:\WINDOWS\Tasks\ -> C:\WINDOWS\Tasks -> [2008/07/29 19:51:48 | 00,000,000 | --SD | M]
AppleSoftwareUpdate.job -> C:\WINDOWS\Tasks\AppleSoftwareUpdate.job -> [2008/08/15 11:04:02 | 00,000,284 | ---- | M] ()
desktop.ini -> C:\WINDOWS\Tasks\desktop.ini -> [2004/08/04 08:00:00 | 00,000,065 | RH-- | M] ()
SA.DAT -> C:\WINDOWS\Tasks\SA.DAT -> [2008/10/23 19:04:20 | 00,000,006 | -H-- | M] ()
[File - Purity Scan]
 
[CatchMe Rootkit Scan by GMER]
< Windows folder & sub-folders >
scanning hidden processes ...
IPC error: 2 The system cannot find the file specified.
scanning hidden services & system hive ...
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0
< Document and Settings folder & sub folders >
scanning hidden files ...
IPC error: 2 The system cannot find the file specified.
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\Desktop\New Folder\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\Desktop\PICS\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\Desktop\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\Desktop\unused desk\downloads\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_04\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_05\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_06\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_07\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_10\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_11\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_21\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_22\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_23\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_24\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_26\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_27\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_28\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_02_29\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_03_01\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_03_02\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_03_14\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_03_25\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_04_01\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_05_17\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_05_18\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_06_03\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_06_21\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_08_31\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_09_02\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_09_07\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_11_28\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_11_29\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_12_01\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_12_08\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_12_14\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_12_22\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_12_23\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_12_24\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_04_13\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_04_14\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_04_15\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_04_21\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_04_22\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_04_29\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_05_02\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_05_03\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_05_11\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_06_15\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_06_21\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_06_22\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_06_29\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_07_13\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_07_20\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_09_28\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_10_18\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_11_08\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_02_14\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_02_25\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_03_17\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_04_06\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\Untitled Export\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2004_04_02\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_04_07\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_12_25\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_04_12\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2007_12_31\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_01_01\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_01_12\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_01_19\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_01_21\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_01_26\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_02_16\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_02_29\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_03_01\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_03_08\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_03_13\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_03_21\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_04_04\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_04_05\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_04_11\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_04_13\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_05_25\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_06_07\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_06_18\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_06_20\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_07_15\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_07_25\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_07_26\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_08_01\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_08_02\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_08_03\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_08_22\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_09_12\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\2008_09_20\Thumbs.db:encryptable 0 bytes
C:\Documents and Settings\Jenny\My Documents\My Pictures\New Folder\Thumbs.db:encryptable 0 bytes
scan completed successfully
hidden files: 109
 
< End of report >
[/code]