OTL logfile created on: 8/11/2010 12:25:50 AM - Run 1 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Test\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 255.00 Mb Total Physical Memory | 43.00 Mb Available Physical Memory | 17.00% Memory free 1,010.00 Mb Paging File | 585.00 Mb Available in Paging File | 58.00% Paging File free Paging file location(s): C:\pagefile.sys 384 768 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 18.62 Gb Total Space | 6.64 Gb Free Space | 35.66% Space Free | Partition Type: NTFS D: Drive not present or media not loaded Drive E: | 42.62 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: COMPUTERNAME Current User Name: Test Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Documents and Settings\Test\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft) PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft) PRC - C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe (Smith Micro Software, Inc.) PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Documents and Settings\Test\Local Settings\Temp\a2free\a2service.exe (Emsi Software GmbH) PRC - C:\Program Files\Common Files\AOL\1132444223\EE\aolsoftware.exe (America Online, Inc.) PRC - C:\Program Files\Microsoft IntelliPoint\point32.exe (Microsoft Corporation) PRC - C:\Program Files\Common Files\AOL\ACS\AOLDial.exe (America Online) PRC - C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe (America Online) PRC - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe (America Online, Inc) PRC - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe (America Online Inc) PRC - C:\WINDOWS\wanmpsvc.exe (America Online, Inc.) PRC - C:\Compaq\CPQInet\CPQInet.exe (Compaq Computer Corporation) PRC - C:\Program Files\COMPAQ\Easy Access Button Support\STARTEAK.exe (Compaq Computer Corporation) PRC - C:\Program Files\COMPAQ\Easy Access Button Support\CPQEADM.exe (Compaq Computer Corporation) PRC - C:\Program Files\COMPAQ\Easy Access Button Support\BttnServ.exe (Compaq Computer Corporation) PRC - C:\Compaq\EAKDRV\EAUSBKBD.exe (Compaq) [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - C:\Documents and Settings\Test\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\SYSTEM32\msscript.ocx (Microsoft Corporation) MOD - C:\Program Files\Common Files\AOL\ACS\WLHook.dll (America Online) [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found SRV - (Lavasoft Ad-Aware Service) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft) SRV - (a2free) -- C:\Documents and Settings\Test\Local Settings\Temp\a2free\a2service.exe (Emsi Software GmbH) SRV - (AOL ACS) -- C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (America Online) SRV - (AOL TopSpeedMonitor) -- C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe (America Online, Inc) SRV - (Pml Driver HPZ12) -- C:\WINDOWS\SYSTEM32\hpzipm12.exe (HP) SRV - (WANMiniportService) WAN Miniport (ATW) -- C:\WINDOWS\wanmpsvc.exe (America Online, Inc.) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - (LUsbKbd) -- C:\WINDOWS\System32\Drivers\LUsbKbd.Sys File not found DRV - (LMouKE) -- C:\WINDOWS\System32\DRIVERS\LMouKE.Sys File not found DRV - (LHidUsbK) -- C:\WINDOWS\System32\Drivers\LHidUsbK.Sys File not found DRV - (LHidFlt2) -- C:\WINDOWS\System32\DRIVERS\LHidFlt2.sys File not found DRV - (Fdc) -- C:\WINDOWS\System32\DRIVERS\fdc.sys File not found DRV - (EACMOS) -- C:\WINDOWS\System32\drivers\EACMOS.SYS File not found DRV - (Lbd) -- C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB) DRV - (NWUSBCDFIL) -- C:\WINDOWS\SYSTEM32\DRIVERS\NwUsbCdFil.sys (Novatel Wireless Inc.) DRV - (NWADI) -- C:\WINDOWS\SYSTEM32\DRIVERS\NWADIenum.sys (Novatel Wireless Inc) DRV - (NWUSBPort2) -- C:\WINDOWS\SYSTEM32\DRIVERS\nwusbser2.sys (Novatel Wireless Inc.) DRV - (NWUSBPort) -- C:\WINDOWS\SYSTEM32\DRIVERS\nwusbser.sys (Novatel Wireless Inc.) DRV - (NWUSBModem) -- C:\WINDOWS\SYSTEM32\DRIVERS\nwusbmdm.sys (Novatel Wireless Inc.) DRV - (SMSIVZAM5) -- C:\Program Files\Verizon Wireless\VZAccess Manager\SMSIVZAM5.sys (Smith Micro Inc.) DRV - (NuidFltr) -- C:\WINDOWS\SYSTEM32\DRIVERS\nuidfltr.sys (Microsoft Corporation) DRV - (LHidUsb) -- C:\WINDOWS\SYSTEM32\DRIVERS\Lhidusb.sys (Logitech, Inc.) DRV - (LCcFltr) -- C:\WINDOWS\SYSTEM32\DRIVERS\LCCFLTR.SYS (Logitech, Inc.) DRV - (wanatw) WAN Miniport (ATW) -- C:\WINDOWS\SYSTEM32\DRIVERS\wanatw4.sys (America Online, Inc.) DRV - (ati2mtag) -- C:\WINDOWS\SYSTEM32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.) DRV - (winachsf) -- C:\WINDOWS\SYSTEM32\DRIVERS\HSF_CNXT.sys (Conexant Systems) DRV - (V124) -- C:\WINDOWS\SYSTEM32\DRIVERS\v124nt.sys (Conexant Systems) DRV - (K56) -- C:\WINDOWS\SYSTEM32\DRIVERS\k56nt.sys (Conexant) DRV - (Fallback) -- C:\WINDOWS\SYSTEM32\DRIVERS\fallback.sys (Conexant) DRV - (SoftFax) -- C:\WINDOWS\SYSTEM32\DRIVERS\faxnt.sys (Conexant) DRV - (Fsks) -- C:\WINDOWS\SYSTEM32\DRIVERS\fsksnt.sys (Conexant) DRV - (basic2) -- C:\WINDOWS\SYSTEM32\DRIVERS\basic2.sys (Conexant Systems) DRV - (Rksample) -- C:\WINDOWS\SYSTEM32\DRIVERS\rksample.sys (Conexant Systems) DRV - (Tones) -- C:\WINDOWS\SYSTEM32\DRIVERS\tonesnt.sys (Conexant) DRV - (Cnxtdiag) -- C:\WINDOWS\SYSTEM32\DRIVERS\cnxtdiag.sys (Conexant Systems) DRV - (hsf_msft) -- C:\WINDOWS\SYSTEM32\DRIVERS\hsf_msft.sys (Conexant) DRV - (atimpab) -- C:\WINDOWS\SYSTEM32\DRIVERS\ATIMPAB.SYS (ATI Technologies Inc.) DRV - (ac97intc) Intel(r) 82801 Audio Driver Install Service (WDM) -- C:\WINDOWS\SYSTEM32\DRIVERS\ac97intc.sys (Intel Corporation) DRV - (allegro) ESS Allegro Audio Driver (WDM) -- C:\WINDOWS\SYSTEM32\DRIVERS\ES198X.SYS (ESS Technology, Inc.) DRV - (wandrv) -- C:\WINDOWS\SYSTEM32\DRIVERS\wandrv.sys (America Online, Inc.) DRV - (SynTP) -- C:\WINDOWS\SYSTEM32\DRIVERS\SynTP.sys (Synaptics, Inc.) DRV - (EAWDMFD) -- C:\WINDOWS\system32\drivers\EAWDMFD.sys (Compaq Computer Corporation) [color=#E56717]========== Standard Registry (All) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\SYSTEM32\ieframe.dll (Microsoft Corporation) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2010/01/03 12:56:35 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2010/01/02 15:36:26 | 000,000,000 | ---D | M] O1 HOSTS File: ([2010/08/07 23:40:04 | 000,415,879 | R--- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 14357 more lines... O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.) O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\SYSTEM32\browseui.dll (Microsoft Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\SYSTEM32\shell32.dll (Microsoft Corporation) O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft) O4 - HKLM..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe (America Online) O4 - HKLM..\Run: [ATIModeChange] C:\WINDOWS\System32\Ati2mdxx.exe (ATI Technologies, Inc.) O4 - HKLM..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\STARTEAK.exe (Compaq Computer Corporation) O4 - HKLM..\Run: [HostManager] C:\Program Files\Common Files\AOL\1132444223\EE\aolsoftware.exe (America Online, Inc.) O4 - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\point32.exe (Microsoft Corporation) O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Computer, Inc.) O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Computer, Inc.) O4 - HKLM..\Run: [srmclean] C:\cpqs\scom\srmclean.exe () O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.) O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.) O4 - HKCU..\Run: [AOL Fast Start] C:\Program Files\America Online 9.0\AOL.EXE (America Online, Inc.) O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\SYSTEM32\ctfmon.exe (Microsoft Corporation) O4 - HKCU..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe (Microsoft® Corporation) O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0 O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\SYSTEM32\winrnr.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\SYSTEM32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\SYSTEM32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation) O15 - HKCU\..Trusted Domains: ([]msn in My Computer) O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range - 5) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool) O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1129608989016 (WUWebControl Class) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129609126444 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_08-windows-i586.cab (Java Plug-in 1.5.0_08) O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab (Java Plug-in 1.5.0_09) O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Java Plug-in 1.5.0_10) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\SYSTEM32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\SYSTEM32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\lid {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\SYSTEM32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\SYSTEM32\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\SYSTEM32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\SYSTEM32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\SYSTEM32\wiascr.dll (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\SYSTEM32\shell32.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\Userinit.exe) - C:\WINDOWS\SYSTEM32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation) O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation) O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation) O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation) O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C:\WINDOWS\SYSTEM32\dimsntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - C:\WINDOWS\System32\WgaLogon.dll (Microsoft Corporation) O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\WRNotifier: DllName - WRLogonNTF.dll - File not found O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\SYSTEM32\shell32.dll (Microsoft Corporation) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\SYSTEM32\shell32.dll (Microsoft Corporation) O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\SYSTEM32\stobject.dll (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\SYSTEM32\webcheck.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\SYSTEM32\browseui.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\SYSTEM32\browseui.dll (Microsoft Corporation) O24 - Desktop Components:0 (My Current Home Page) - About:Home O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008/08/21 00:39:48 | 000,000,074 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{3832df80-8a17-11df-9ceb-00038a000015}\Shell - "" = AutoRun O33 - MountPoints2\{3832df80-8a17-11df-9ceb-00038a000015}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{3832df80-8a17-11df-9ceb-00038a000015}\Shell\AutoRun\command - "" = E:\VZAccess_Manager.exe -- [2010/01/26 01:24:58 | 002,312,088 | R--- | M] (Macrovision Corporation) O33 - MountPoints2\{5101fdd0-3a5e-11dd-9cbd-00038a000015}\Shell\AutoRun\command - "" = E:\systematicPC.exe -- File not found O33 - MountPoints2\{5b0a2b82-8a1a-11df-9cec-00038a000015}\Shell - "" = AutoRun O33 - MountPoints2\{5b0a2b82-8a1a-11df-9cec-00038a000015}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{5b0a2b82-8a1a-11df-9cec-00038a000015}\Shell\AutoRun\command - "" = E:\VZAccess_Manager.exe -- [2010/01/26 01:24:58 | 002,312,088 | R--- | M] (Macrovision Corporation) O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe () O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2010/08/11 00:21:01 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Test\Desktop\OTL.exe [2010/08/11 00:04:26 | 000,050,688 | ---- | C] (Atribune.org) -- C:\Documents and Settings\Test\Desktop\ATF-Cleaner.exe [2010/08/09 15:45:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Test\Application Data\Malwarebytes [2010/08/09 15:40:55 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010/08/09 15:40:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2010/08/09 15:38:39 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010/08/09 15:38:34 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2010/08/08 17:03:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Test\Desktop\Financial Interests [2010/08/08 17:01:02 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidserv.dll [2010/07/23 23:57:18 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2010/07/23 23:55:07 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2010/08/11 00:24:43 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Test\Desktop\OTL.exe [2010/08/11 00:04:39 | 000,050,688 | ---- | M] (Atribune.org) -- C:\Documents and Settings\Test\Desktop\ATF-Cleaner.exe [2010/08/09 23:03:04 | 000,001,089 | ---- | M] () -- C:\WINDOWS\WIN.INI [2010/08/09 23:01:50 | 000,002,515 | ---- | M] () -- C:\Documents and Settings\Test\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Word 2003.lnk [2010/08/09 16:15:54 | 000,001,170 | ---- | M] () -- C:\WINDOWS\System32\WPA.DBL [2010/08/09 16:09:20 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010/08/09 16:09:13 | 000,002,048 | --S- | M] () -- C:\WINDOWS\BOOTSTAT.DAT [2010/08/09 16:09:10 | 267,374,592 | -HS- | M] () -- C:\hiberfil.sys [2010/08/09 16:07:25 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\Test\ntuser.ini [2010/08/09 16:07:24 | 008,126,464 | -H-- | M] () -- C:\Documents and Settings\Test\NTUSER.DAT [2010/08/09 15:41:19 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010/08/09 15:25:28 | 000,000,482 | ---- | M] () -- C:\Documents and Settings\Test\Desktop\Shortcut to TFC.lnk [2010/08/09 14:53:31 | 000,218,402 | ---- | M] () -- C:\Documents and Settings\Test\My Documents\TFC.exe [2010/08/08 23:30:54 | 000,151,552 | ---- | M] () -- C:\Documents and Settings\Test\My Documents\HenryVit.doc [2010/08/08 17:02:32 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf [2010/08/08 17:02:26 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf [2010/08/08 13:53:48 | 000,000,054 | ---- | M] () -- C:\WINDOWS\System32\rp_stats.dat [2010/08/08 13:53:48 | 000,000,039 | ---- | M] () -- C:\WINDOWS\System32\rp_rules.dat [2010/08/08 00:18:58 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010/08/07 19:23:13 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Test\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk [2010/08/07 19:23:13 | 000,000,933 | ---- | M] () -- C:\Documents and Settings\Test\Desktop\Spybot.lnk [2010/07/26 23:30:35 | 008,462,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shell32.dll [2010/07/24 03:27:14 | 000,200,936 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010/07/24 01:50:29 | 000,506,068 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010/07/24 01:50:29 | 000,444,596 | ---- | M] () -- C:\WINDOWS\System32\PERFH009.DAT [2010/07/24 01:50:29 | 000,072,306 | ---- | M] () -- C:\WINDOWS\System32\PERFC009.DAT [2010/07/23 18:14:36 | 000,817,536 | ---- | M] () -- C:\Documents and Settings\Test\My Documents\C--Documents and Settings-Test-My Documents-C--MyFiles-Computer Issues.tif [2010/07/23 18:14:14 | 000,083,314 | ---- | M] () -- C:\Documents and Settings\Test\My Documents\C--MyFiles-Computer Issues.tif [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2010/08/09 15:41:19 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010/08/09 15:25:28 | 000,000,482 | ---- | C] () -- C:\Documents and Settings\Test\Desktop\Shortcut to TFC.lnk [2010/08/09 14:47:41 | 000,218,402 | ---- | C] () -- C:\Documents and Settings\Test\My Documents\TFC.exe [2010/08/08 22:11:19 | 000,151,552 | ---- | C] () -- C:\Documents and Settings\Test\My Documents\HenryVit.doc [2010/08/08 17:02:32 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf [2010/08/08 17:02:26 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf [2010/08/08 13:53:48 | 000,000,054 | ---- | C] () -- C:\WINDOWS\System32\rp_stats.dat [2010/08/08 13:53:48 | 000,000,039 | ---- | C] () -- C:\WINDOWS\System32\rp_rules.dat [2010/08/07 19:23:13 | 000,000,951 | ---- | C] () -- C:\Documents and Settings\Test\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk [2010/08/07 19:23:13 | 000,000,933 | ---- | C] () -- C:\Documents and Settings\Test\Desktop\Spybot.lnk [2010/07/23 18:14:34 | 000,817,536 | ---- | C] () -- C:\Documents and Settings\Test\My Documents\C--Documents and Settings-Test-My Documents-C--MyFiles-Computer Issues.tif [2010/07/23 18:14:11 | 000,083,314 | ---- | C] () -- C:\Documents and Settings\Test\My Documents\C--MyFiles-Computer Issues.tif [2006/08/24 21:13:39 | 000,071,749 | ---- | C] () -- C:\WINDOWS\hcextoutput.dll [2006/08/24 21:13:39 | 000,000,823 | ---- | C] () -- C:\WINDOWS\tsc.ini [2006/08/24 21:11:36 | 000,000,170 | ---- | C] () -- C:\WINDOWS\GetServer.ini [2006/05/06 21:38:22 | 000,000,024 | ---- | C] () -- C:\WINDOWS\wininit.ini [2006/03/09 22:54:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpqEmlSz.INI [2006/01/29 15:36:08 | 000,000,790 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2006/01/03 19:57:39 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2005/11/19 13:45:44 | 000,000,099 | ---- | C] () -- C:\WINDOWS\upst.ini [2005/11/17 13:40:31 | 000,000,051 | ---- | C] () -- C:\WINDOWS\iTouch.ini [2005/10/19 16:50:45 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2005/10/17 19:39:43 | 000,000,029 | ---- | C] () -- C:\WINDOWS\atid.ini [2005/10/17 19:19:58 | 000,000,006 | ---- | C] () -- C:\WINDOWS\msoffice.ini [2003/01/07 15:05:08 | 000,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI [2002/01/11 09:24:30 | 000,000,047 | ---- | C] () -- C:\WINDOWS\winhlp32.ini [2002/01/11 09:24:30 | 000,000,047 | ---- | C] () -- C:\WINDOWS\winhelp.ini [2002/01/11 09:23:44 | 000,000,321 | ---- | C] () -- C:\WINDOWS\System32\cosmo.ini [2002/01/11 09:23:37 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\sx83p32.dll [2002/01/11 09:23:03 | 000,017,552 | ---- | C] () -- C:\WINDOWS\System32\TTYTWIN.DRV [2002/01/11 09:22:37 | 000,022,480 | ---- | C] () -- C:\WINDOWS\System32\PFMAPI16.DLL [2002/01/11 09:22:37 | 000,020,992 | ---- | C] () -- C:\WINDOWS\System32\PFMAPI32.DLL [2001/10/01 10:43:09 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini [2001/10/01 09:42:25 | 000,011,936 | ---- | C] () -- C:\WINDOWS\System32\Props16.dll [2001/10/01 09:42:23 | 000,029,184 | ---- | C] () -- C:\WINDOWS\System32\wdmioctl.dll [2001/10/01 09:42:20 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\SynthCore11System.dll [2001/09/19 14:36:48 | 000,000,336 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2001/09/05 00:11:16 | 000,032,336 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinxsxx.sys [2001/09/05 00:11:04 | 000,020,960 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinttxx.sys [2001/09/05 00:10:58 | 000,011,760 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinpdxx.sys [2001/09/05 00:10:52 | 000,011,280 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinmdxx.sys [2001/09/05 00:10:46 | 000,032,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinraxx.sys [2001/09/05 00:10:22 | 000,060,464 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinbtxx.sys [2001/09/05 00:09:04 | 000,065,008 | ---- | C] () -- C:\WINDOWS\System32\drivers\atinrvxx.sys [2001/09/05 00:08:12 | 000,032,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\atintuxx.sys [2001/08/25 12:20:30 | 000,000,859 | ---- | C] () -- C:\WINDOWS\ORUN32.INI [2001/08/18 12:00:00 | 000,755,200 | ---- | C] () -- C:\WINDOWS\System32\ir50_32.dll [2001/08/18 12:00:00 | 000,338,432 | ---- | C] () -- C:\WINDOWS\System32\ir41_qcx.dll [2001/08/18 12:00:00 | 000,200,192 | ---- | C] () -- C:\WINDOWS\System32\ir50_qc.dll [2001/08/18 12:00:00 | 000,183,808 | ---- | C] () -- C:\WINDOWS\System32\ir50_qcx.dll [2001/08/18 12:00:00 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\ir41_qc.dll [2001/07/27 12:25:02 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll [1999/07/23 13:46:48 | 000,000,116 | ---- | C] () -- C:\WINDOWS\AuHCcup1.ini [1999/07/23 10:53:20 | 000,129,536 | ---- | C] () -- C:\WINDOWS\AuHCcup1.dll [color=#E56717]========== LOP Check ==========[/color] [2009/04/03 09:24:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Avg7 [2005/10/18 23:20:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint [2010/07/07 15:55:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WEngineLite [2009/04/02 23:36:43 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F} [2008/06/15 19:08:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Test\Application Data\GlarySoft [2005/11/19 09:46:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Test\Application Data\Leadertech [2006/03/11 23:14:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Test\Application Data\Musicmatch [2005/10/17 22:52:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Test\Application Data\Prevx [2006/05/06 21:03:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Test\Application Data\WholeSecurity [2010/03/29 01:16:46 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job [2001/12/27 03:35:35 | 000,000,258 | ---- | M] () -- C:\WINDOWS\Tasks\Registration reminder 1.job [2001/12/27 03:35:36 | 000,000,258 | ---- | M] () -- C:\WINDOWS\Tasks\Registration reminder 2.job [color=#E56717]========== Purity Check ==========[/color] < End of report >