This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] Malware/Trojans crippling PC

54 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

This computer is for personal use, not business. It is my parents pc. My brother's computer was infected so he tried to transfer some files to their computer while he reinstalled windows on his own. When he dropped the files onto their desktop, it infected their computer. I wish to TRY to get my parents pc to a working state so they don't lose anything they don't wish to lose. Operating System: Windows XP, Version 2002, Service Pack 2 System Restore is on Internet Connection was very slow up until yesterday when they lost connection all together. I am using another pc in the house to post this. The anti-virus program currently running on the pc is Mcafee (free download for Comcast customers). This was downloaded and run AFTER the problem by myself. Scan found and removed some infected files, but not all. Still have issues. Desktop wallpaper was a forced image "Your computer is infected with viruses…". Could not change under Control Panel. After a scan this was gone, but replaced with a solid blue background and still unable to change under Control Panel. Everything opens EXTREMELY slow, if at all. The task manager will not open either. I get a pop up "Task manager has been disabled by administrator" message. I tried to run ERUNT yesterday, but I get a "Invalid floating point operation" popup and it closes. I ran hjt this morning. The log is below. Thank you for any help you can provide. Here is the log: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:28:43 AM, on 3/15/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe C:\Program Files\McAfee\VirusScan\McShield.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\McAfee\MPF\MPFSrv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\sm56hlpr.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\HP\KBD\KBD.EXE C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\McAfee.com\Agent\mcagent.exe C:\WINDOWS\system32\rundll32.exe C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\winlogqn.exe C:\WINDOWS\system32\frmwrk32.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ntdll64.exe C:\PROGRA~1\Magentic\bin\MgApp.exe C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sz4ua2b30nf9b.exe C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sz4ua2b30nf9b.exe C:\Program Files\Sierra\Planner\Plnrnote.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\IncrediMail\bin\IMApp.exe C:\WINDOWS\ALCXMNTR.EXE C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe c:\windows\system\hpsysdrv.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe – End of file - 2117 bytes
Hi there a rather short log - But no matter we will get another one

Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.

THEN

  • Download OTListIt2 to your desktop.
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTListIt.Txt and Extras.Txt. These are saved in the same location as OTListIt2.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
Thank you for your help. Okay, I ran mbam-setup. The Update Failed…have no internet on that pc. Also, I DID have to restart like you mentioned in the Extra Note. I also got a popup "Regedit has been disabled and will affect the quarantining process. Malwarebytes' Anti-malware will now enable Regedit." Only option was "OK" so i clicked it. Also, When i ran OTListIt2, during the scan I got this popup "Windows - No Disk. There is no disk in the drive. Please insert a disk into the drive" and the options are 'cancel' 'try again' and 'continue'. I didn't want to go any further without your input. Here is the Malwarebytes log: Malwarebytes' Anti-Malware 1.34 Database version: 1749 Windows 5.1.2600 Service Pack 2 3/15/2009 12:05:13 PM mbam-log-2009-03-15 (12-05-13).txt Scan type: Quick Scan Objects scanned: 85078 Time elapsed: 14 minute(s), 12 second(s) Memory Processes Infected: 2 Memory Modules Infected: 0 Registry Keys Infected: 93 Registry Values Infected: 8 Registry Data Items Infected: 9 Folders Infected: 17 Files Infected: 32 Memory Processes Infected: C:\WINDOWS\system32\ntdll64.exe (Trojan.Agent) -> Unloaded process successfully. C:\WINDOWS\system32\frmwrk32.exe (Trojan.FakeAlert) -> Unloaded process successfully. Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\coresrv.lfgax (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\coresrv.lfgax.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\cpbrkpie.coupon6ctrl.1 (Adware.Coupons) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{9522b3fb-7a2b-4646-8af6-36e7f593073c} (Adware.Coupons) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522b3fb-7a2b-4646-8af6-36e7f593073c} (Adware.Coupons) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{a85a5e6a-de2c-4f4e-99dc-f469df5a0eec} (Adware.Coupons) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{87255c51-cd7d-4506-b9ad-97606daf53f3} (Adware.Coupons) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{6e780f0b-bcd6-40cb-b2db-7af47ab4d4a4} (Adware.Coupons) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{a138be8b-f051-4802-9a3f-a750a6d862d4} (Adware.Coupons) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx (Adware.Minibug) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{3c2d2a1e-031f-4397-9614-87c932a848e0} (Adware.Minibug) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{04a38f6b-006f-4247-ba4c-02a139d5531c} (Adware.Minibug) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{2b96d5cc-c5b5-49a5-a69d-cc0a30f9028c} (Adware.Minibug) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{2f066ba1-ac1b-2606-470c-6587d5959874} (Adware.Minibug) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx.1 (Adware.Minibug) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\zango.desktopflash (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\zango.desktopflash.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{067c6a37-72ea-4437-863a-5be20c246f3c} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{1230cf51-6bc4-4a23-b3f1-c7cf0afed619} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{1a2af056-1fe1-47ca-993d-5d09d18e674e} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{2b81f920-6660-4f76-93bf-b1c67bf5d1a0} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{34e29700-0d13-46aa-b9a5-ace68e21a091} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{3661af2d-c27b-499c-9bcf-66c8502a3806} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{3f0915b8-b238-4c2d-ad1e-60db1e14d27a} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{49155dae-c471-40fa-98ee-b2b3cad115ce} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{4d783385-0dda-4188-a529-c97dc3d67cbd} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{4e8b851b-05b0-4baf-b24d-d0dfe88dded3} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{50c3e2b3-4fd7-4cb9-91f9-641a6e6b3689} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{62b0b239-f9ac-4a5b-bfae-62c7a23f7627} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{6e10479b-31e8-4a3b-81b1-ddaf39097f19} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{726f0ab9-b842-4ae4-90c7-230e233e6a99} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{8ad9ad05-36be-4e40-ba62-5422eb0d02fb} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{99123ac9-7dda-4c82-b252-44c2804bf392} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{b247f5bf-bd9d-4ecd-8fc1-365f36a1fda1} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{b9cc2b92-5611-453f-8381-8b6f72d9c0b8} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{bbbfb891-98ae-4678-86f3-bd5a2eed86c9} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{c4543e64-1498-410d-8e72-4744eea99ab9} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{d8560ac2-21b5-4c1a-bdd4-bd12bc83b082} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{e420a65f-9984-4b8c-9fa9-1ed69d3b0a13} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{ea58c2ea-be26-49dd-9b9a-c8e4e5ca7791} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{fca28ac5-c1e1-4d67-a5ae-c44d6c374d9f} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{5b2e150d-4c8a-40e4-8c36-dd9c02771c67} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{627d894a-8a77-416e-b522-432eaf2c818e} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{7138f250-5b72-48dd-adfb-9a83b429dd9e} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{8971cb48-9fca-445a-be77-e8e8a4cc9df7} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{b0cb585f-3271-4e42-88d9-ae5c9330d554} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{b88e4484-3ff6-4ea9-815b-a54fe20d4387} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{bfc08cff-c737-4433-bd5a-0ee7efcfee54} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{d2221ccb-f2bb-4858-aad4-57c754153603} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{cdca70d8-c6a6-49ee-9bed-7429d6c477a2} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{d136987f-e1c4-4ccc-a220-893df03ec5df} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{08755390-f46d-4d09-968c-3430166b3189} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{0923208c-e259-4ed5-a778-cb607da350ad} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{229d2451-a617-4b30-b5e8-8138694240cb} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{9720de03-5820-4059-b4a4-639d5e52bd09} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{c23fa5a4-1fea-419f-8b14-f7465df062bc} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{ccc6e232-aa4c-4813-a019-9c14b27776b6} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{eddbb5ee-bb64-4bfc-9dbe-e7c85941335b} (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WinCtrl32 (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\zangosa (Adware.Zango) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZangoSA (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\AppID\ZangoSA_df.exe (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\zangoax.clientdetector (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\zangoax.clientdetector.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\zangoax.userprofiles (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\zangoax.userprofiles.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\toolbar.toolbarctl (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\toolbar.toolbarctl.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\toolbar.htmlmenuui (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\toolbar.htmlmenuui.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\srv.coreservices (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\srv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\instie.hbinstobj (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\instie.hbinstobj.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\hostol.webmailsend (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\hostol.webmailsend.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\hostol.mailanim (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\hostol.mailanim.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\hostie.bho (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\hostie.bho.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\coresrv.coreservices (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\coresrv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll (Adware.Minibug) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\12zfg94-f641-2sf-k31p-5n1er6h6l2 (Trojan.Agent) -> Delete on reboot. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\12cfg914-k641-26sf-n31p (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\12cfg914-k641-26sf-n32p (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Framework Windows (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extensions\[removed] (Adware.Zango) -> Quarantined and deleted successfully. Registry Data Items Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\activedesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: C:\WINDOWS\system32\wsnpoem (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\db (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\dwld (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\report (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\res1 (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\report (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Program Files\ShoppingReport (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Program Files\ShoppingReport\Bin (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Program Files\ShoppingReport\Bin\2.0.21 (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Program Files\ShoppingReport\Bin\2.5.0 (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Program Files\ShoppingReport\cs (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\ZangoSA (Adware.Zango) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 (Adware.Seekmo) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\CrucialSoft Ltd (Rogue.Multiple) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\CrucialSoft Ltd\MS AntiSpyware 2009 (Rogue.Multiple) -> Quarantined and deleted successfully. Files Infected: C:\WINDOWS\CouponPrinter.ocx (Adware.Coupons) -> Quarantined and deleted successfully. C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll (Adware.Minibug) -> Quarantined and deleted successfully. C:\WINDOWS\system32\cpnprt2.cid (Adware.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\wsnpoem\audio.dll (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\wsnpoem\video.dll (Trojan.Agent) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\Config.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\persist.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\db\Aliases.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\db\Sites.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\dwld\WhiteList.xip (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\report\aggr_storage.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\report\send_storage.xml (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Application Data\ShoppingReport\cs\res1\WhiteList.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Program Files\ShoppingReport\Bin\2.0.21\ShoppingReport.dll (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Program Files\ShoppingReport\cs\persist.dbs (Adware.Shopping.Report) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\ZangoSA\ZangoSA.dat (Adware.Zango) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\ZangoSA\ZangoSAAbout.mht (Adware.Zango) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\ZangoSA\ZangoSAau.dat (Adware.Zango) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\ZangoSA\ZangoSAEula.mht (Adware.Zango) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\ZangoSA\ZangoSA_kyf.dat (Adware.Zango) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-5143703792-2270876976-237675424-0371\service.exe (Trojan.Agent) -> Delete on reboot. C:\WINDOWS\system32\uacinit.dll (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\ntdll64.exe (Trojan.Agent) -> Delete on reboot. C:\WINDOWS\system32\msdvdr.dat (Backdoor.HacDef) -> Quarantined and deleted successfully. C:\WINDOWS\sysguard.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\system32\warning.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\system32\frmwrk32.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\mousehook.dll (Trojan.FakeAlert) -> Delete on reboot. C:\WINDOWS\system32\UACapsxmulr.log (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\UACoetthlbm.log (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\UACqpqjotbh.dat (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\UACnaltkbai.sys (Trojan.Agent) -> Quarantined and deleted successfully.
Okay. I had to click 'continue' three times but it did continue. Although, I did NOT get an extras.txt list though.

Here is the OTListIt2:

OTListIt logfile created on: 3/15/2009 1:12:59 PM - Run 3
OTListIt2 by OldTimer - Version 2.0.3.8 Folder = C:\Documents and Settings\HP_Administrator\Desktop
Windows XP Media Center Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

446.48 Mb Total Physical Memory | 130.28 Mb Available Physical Memory | 29.18% Memory free
1.03 Gb Paging File | 0.75 Gb Available in Paging File | 73.04% Paging File free
Paging file location(s): C:\pagefile.sys 672 1344;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 178.30 Gb Total Space | 77.71 Gb Free Space | 43.58% Space Free | Partition Type: NTFS
Drive D: | 8.00 Gb Total Space | 0.86 Gb Free Space | 10.78% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: YOUR-B27FB1C401
Current User Name: HP_Administrator
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\WINDOWS\system32\LEXBCES.EXE (Lexmark International, Inc.)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\WINDOWS\system32\LEXPPS.EXE (Lexmark International, Inc.)
PRC - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\McAfee\VirusScan\McShield.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
PRC - C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
PRC - C:\WINDOWS\sm56hlpr.exe (Motorola Inc.)
PRC - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
PRC - C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe (ATI Technologies, Inc.)
PRC - C:\HP\KBD\KBD.EXE (Hewlett-Packard Company)
PRC - c:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
PRC - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\winlogqn.exe ()
PRC - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\Sierra\Planner\Plnrnote.exe (Creative Home)
PRC - C:\Program Files\Magentic\bin\MgApp.exe ()
PRC - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\fjhq8fiecsg4r.exe ()
PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\a9g1ie0e0h1.exe ()
PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\al412f.exe ()
PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\mxsig6af.exe ()
PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\qhlg34iho74.exe ()
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\Program Files\IncrediMail\bin\IMApp.exe (IncrediMail, Ltd.)
PRC - C:\WINDOWS\ALCXMNTR.EXE (Realtek Semiconductor Corp.)
PRC - C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
PRC - c:\windows\system\hpsysdrv.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Documents and Settings\HP_Administrator\Desktop\OTListIt2.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (Apple Mobile Device [Auto | Running]) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe (Microsoft Corporation)
SRV - (Ati HotKey Poller [Auto | Running]) – C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (Bonjour Service [Disabled | Stopped]) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (ehRecvr [Disabled | Stopped]) – C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [Disabled | Stopped]) – C:\WINDOWS\eHome\ehSched.exe (Microsoft Corporation)
SRV - (GameConsoleService [On_Demand | Stopped]) – C:\Program Files\WildTangent\Apps\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (gusvc [On_Demand | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (IDriverT [On_Demand | Stopped]) – C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (iPod Service [On_Demand | Running]) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (LexBceS [Auto | Running]) – C:\WINDOWS\system32\LEXBCES.EXE (Lexmark International, Inc.)
SRV - (LightScribeService [Disabled | Stopped]) – C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (mcmscsvc [Auto | Running]) – C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
SRV - (mcnasvc [Auto | Running]) – c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
SRV - (mcods [On_Demand | Stopped]) – C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (mcproxy [Auto | Running]) – c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
SRV - (McrdSvc [Disabled | Stopped]) – C:\WINDOWS\ehome\mcrdsvc.exe (Microsoft Corporation)
SRV - (mcshield [Unknown | Running]) – C:\Program Files\McAfee\VirusScan\McShield.exe (McAfee, Inc.)
SRV - (mcsysmon [On_Demand | Running]) – C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
SRV - (MDM [Auto | Running]) – C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
SRV - (mpfservice [Auto | Running]) – C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
SRV - (netlogonehsched [Disabled | Stopped]) – File not found
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (Pml Driver HPZ12 [Disabled | Stopped]) – C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE (HP)
SRV - (priocukm [Auto | Stopped]) – C:\Program Files\bpxogo.dll ()
SRV - (Viewpoint Manager Service [Disabled | Stopped]) – C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (ALCXWDM [On_Demand | Running]) – C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (AmdK8 [System | Running]) – C:\WINDOWS\system32\DRIVERS\AmdK8.sys (Advanced Micro Devices)
DRV - (ati2mtag [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.)
DRV - (GEARAspiWDM [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (iaStor [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\iaStor.sys (Intel Corporation)
DRV - (ltmodem5 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\ltmdmnt.sys (LT)
DRV - (mfeavfk [On_Demand | Running]) – C:\WINDOWS\system32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfebopk [On_Demand | Running]) – C:\WINDOWS\system32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (mfehidk [System | Running]) – C:\WINDOWS\system32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mferkdk [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\mferkdk.sys (McAfee, Inc.)
DRV - (mfesmfk [On_Demand | Running]) – C:\WINDOWS\system32\drivers\mfesmfk.sys (McAfee, Inc.)
DRV - (MODEMCSA [On_Demand | Running]) – C:\WINDOWS\system32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (mpfp [System | Running]) – C:\WINDOWS\System32\Drivers\Mpfp.sys (McAfee, Inc.)
DRV - (Ps2 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\PS2.sys (Hewlett-Packard Company)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (RTL8023xp [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys (Realtek Semiconductor Corporation )
DRV - (rtl8139 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\RTL8139.SYS (Realtek Semiconductor Corporation)
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\secdrv.sys ()
DRV - (smserial [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\smserial.sys (Motorola Inc.)
DRV - (sptd [Boot | Running]) – C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (SQTECH905C [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\Capt905c.sys (Service & Quality Technology.)
DRV - (USBAAPL [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\usbaapl.sys (Apple, Inc.)
DRV - (X4HSX32 [Auto | Running]) – C:\Program Files\GameTap\bin\Release\X4HSX32.Sys (Exent Technologies Ltd.)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.magentic.com/english/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\CNNSI, = search.sportsillustrated.cnn.com/pages/search.jsp?query=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Dictionary, = dictionary.reference.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Google, = google.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleGroups, = groups-beta.google.com/groups?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleImages, = images.google.com/images?hl=en&lr;=&q;=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleNews, = news.google.com/news?tab=gn&hl;=en&ie;=UTF-8&q;=%s&btnG;=Search+News
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\KB, = support.microsoft.com/search/default.aspx?query=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\KBDLL, = support.microsoft.com/dllhelp/default.aspx?dlltype=file&l;=55α=%s&S;=1
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Movies, = fandango.com/my_box_office.asp?searchby=2&txtCityZip;=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\MSN, = search.msn.com/results.asp?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Thesaurus, = thesaurus.reference.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Weather, = weather.com/weather/local/%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Yahoo, = search.yahoo.com/search?p=%s
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}:6.0.03
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}:6.0.01
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.071101000055
FF - prefs.js..extensions.enabledItems: {E7004F9C-73D4-4D32-A000-BC63BD320763}:1.0
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.7
FF - HKLM\software\mozilla\Firefox\Extensions\\{E7004F9C-73D4-4D32-A000-BC63BD320763}: C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\{E7004F9C-73D4-4D32-A000-BC63BD320763} [2009/03/09 18:23:24 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/03/14 17:55:45 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/03/10 21:33:57 | 00,000,000 | —D | M]
[2008/08/30 18:19:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Extensions
[2008/08/30 18:19:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/03/14 17:54:14 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions
[2007/03/23 14:36:36 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\{051ce736-d132-4374-9d36-eb192ef3110c}
[2007/02/08 11:39:28 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\{f3c24b71-1b60-11db-961a-00e08161165f}
[2009/02/25 18:19:41 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\[removed]
[2007/02/19 15:44:59 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\[removed]
[2007/09/19 07:00:17 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\[removed]
[2007/02/08 11:39:35 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\{f3c24b71-1b60-11db-961a-00e08161165f}\chrome\mozapps\extensions
[2009/03/14 17:54:15 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/03/07 22:36:16 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2007/06/12 14:56:01 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
[2007/12/06 16:08:57 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
[2008/04/12 10:13:45 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
[2009/03/07 22:36:16 | 00,023,032 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/03/07 22:36:16 | 00,134,648 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll

O1 HOSTS File: (763 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 195.245.119.131 browser-security.microsoft.com
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
O4 - HKLM..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" (ATI Technologies, Inc.)
O4 - HKLM..\Run: [Exobenoguq] rundll32.exe "C:\WINDOWS\ugetaxuh.dll",e (Mozilla Foundation)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run (Hewlett-Packard Company)
O4 - HKLM..\Run: [HPHUPD08] "c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" (Hewlett-Packard)
O4 - HKLM..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" (Apple Inc.)
O4 - HKLM..\Run: [KBD] C:\HP\KBD\KBD.EXE (Hewlett-Packard Company)
O4 - HKLM..\Run: [kjahrfoi37rljanfaw3il7fhjd3f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\winlogqn.exe ()
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey (McAfee, Inc.)
O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime (Apple Inc.)
O4 - HKLM..\Run: [SMSERIAL] sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Ytatifur] rundll32.exe "C:\WINDOWS\Mcibacibiso.dll",e ()
O4 - HKCU..\Run: [a0yp5t1vjlndptk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\by2l388.exe File not found
O4 - HKCU..\Run: [a10dtgzr2ssufqzqrbt9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b9adcd93cz.exe File not found
O4 - HKCU..\Run: [a3mjae23mydx0f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\r7f9aegpuj.exe File not found
O4 - HKCU..\Run: [a4aflixi4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g9u56rpcc6c.exe File not found
O4 - HKCU..\Run: [a6yw97h2i8ozkf2oiatknu54vlvi6wylmka7yy808spo6r] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a4zzhg2.exe File not found
O4 - HKCU..\Run: [ab5z5ik97nq64ud3l1ohkky] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bg0tln0hrtd9.exe File not found
O4 - HKCU..\Run: [adcc6fkwagpy4gvey40bikd93sqla82xff3c6ixtb4p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\smxnf4js1va.exe File not found
O4 - HKCU..\Run: [al77pe36xdotenbe2tesvcl3y63rehxuvoqqpt5lh6f4drtg7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ecyyxex.exe File not found
O4 - HKCU..\Run: [alk6fv4l0t0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a3brr5t0m.exe File not found
O4 - HKCU..\Run: [aq874ie0n4yofoq3rochd2a3b7egwexlkh8oyy1hvosy0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v6rrriao.exe File not found
O4 - HKCU..\Run: [aqf1q6z43chvpj4vp29v69dm4smt39] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\aplc22x3g02v.exe File not found
O4 - HKCU..\Run: [argrqq95ocpf1cdo0lfo5dqfzincq63iqymed] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\goe0s83.exe File not found
O4 - HKCU..\Run: [arj0jv0hjrtscyujh0c43yjpm1cu2jxujr8b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z6qhctztp9a2.exe File not found
O4 - HKCU..\Run: [aukbus4d056v30n7jih0zyio1vxc5nl4ehi5duwc6oulvk1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pcwkxin4m9s.exe File not found
O4 - HKCU..\Run: [aukigub7h9i0hrndfabahldhe2rx05d75wg8hrhpx15ekssh6k] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p3fpox.exe File not found
O4 - HKCU..\Run: [ay151z1xppsd8ax4u1rhzca8v4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sa2vh3.exe File not found
O4 - HKCU..\Run: [b3t7sjnr1sagup9lsf2xntgg35oggft] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dnbgkmj4s.exe File not found
O4 - HKCU..\Run: [b4coo7g6ydoa7kavy6mcv9ytifbgia0hnw4v9ra96z5rdc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uakh5kpu.exe File not found
O4 - HKCU..\Run: [b5syv8r4qq1m2z558pgfc2eijsofyvjo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\c4znd0ral2.exe File not found
O4 - HKCU..\Run: [b6a8o1oh2ye1hmn71y586xnfpud57ide7j] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gtg7pf0q.exe File not found
O4 - HKCU..\Run: [b6pfhhth0tbxo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fyfpvj.exe File not found
O4 - HKCU..\Run: [b842ma29k0ymqun] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\td8xg4x.exe File not found
O4 - HKCU..\Run: [b8hmyy4jw14i8yweq6udwn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jfo9ob3u5t.exe File not found
O4 - HKCU..\Run: [bbf8wbnfcgywimto5afj1w] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wda18ef.exe File not found
O4 - HKCU..\Run: [bc4jjs2ivsqsmzwndyuqabl6esy5srzafg2i3xfzwak6fowoy] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mbfc7lazug2o.exe File not found
O4 - HKCU..\Run: [bc8nrsq309p93g9zpkzi90deti3ffdsl3hd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yx0aspgmc.exe File not found
O4 - HKCU..\Run: [bhcofmbouep7n8tizd6dacumj3s2ivf1tawmw55q4c90ox] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rmk55q4ofexq.exe File not found
O4 - HKCU..\Run: [bk6g9a03n9y2v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lm8o234iyc0.exe File not found
O4 - HKCU..\Run: [bp4ukhzdi4tkm8we4ujsljsos2qtsqfuv1z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bewf9xd.exe File not found
O4 - HKCU..\Run: [bpjuclipagemxe5jooul5lmji8zmbiy1kqnzp6af6mjn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\l480lntr.exe File not found
O4 - HKCU..\Run: [bpynr9d58pe0dtoisp3kdl24d9jgegm8497hoox3chts] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\amrzpb40c90.exe File not found
O4 - HKCU..\Run: [bw712hnxn7q17uo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\aqq3gzs1i1y.exe File not found
O4 - HKCU..\Run: [bwgpx24dq38lhntmpbeu27] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tdcym3np33.exe File not found
O4 - HKCU..\Run: [bzhbcon0739bfvhm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uyts77szuqgu.exe File not found
O4 - HKCU..\Run: [c0gz1b3rm6jtdexasu299fj8ghrhskd8m02engyw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\eoxz6dwsu.exe File not found
O4 - HKCU..\Run: [c1astzxxoyjk9dv15x3y7mb0sz8l0u8l7cokqhn207l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gdi55ww7kl5u5.exe File not found
O4 - HKCU..\Run: [c1ui6wu2aujzopu8k] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xd2w42i9wnm.exe File not found
O4 - HKCU..\Run: [c1v5eyykqhe6a2kk7e1p7qhno9b1hdwki2uoe9h9g2bzyok] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qu41w8hm7v6.exe File not found
O4 - HKCU..\Run: [c5n002t21pjoxzk1x5qe5u8tq9fdggkhp4gkq7gsxm7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u4vkauji.exe File not found
O4 - HKCU..\Run: [cad4btdjn50ppt6w4jib872pcbq98bozmj8qlq92ae1g] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\okmd2cs32xplj.exe File not found
O4 - HKCU..\Run: [capv0o7q71e8ia1nm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cj3z3txl.exe File not found
O4 - HKCU..\Run: [cc51izrjnkgsate8gslzq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ihca5aljt8.exe File not found
O4 - HKCU..\Run: [ccdr9ukdv5rrgyh4m37d] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fojjr2m60o9.exe File not found
O4 - HKCU..\Run: [cczdwywp9aff12segyezpet9z100765fb3av9wjz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\t8li5lmji.exe File not found
O4 - HKCU..\Run: [cildvek4r6r5hnewdcscfm2m8mbo2ddslk18rpdmgvh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z70r89.exe File not found
O4 - HKCU..\Run: [cpymh7j875cc4l3ct3f64dobv0vej9166p3m] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\n1rlnots32.exe File not found
O4 - HKCU..\Run: [crc3ryh4f3qjfffdczkle0anwykrc3kus7y3exw6miiu4mq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zuu1qz.exe File not found
O4 - HKCU..\Run: [csq7rpvzbdh9y36gj5i4pnz0mfp2mt5f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qh5ev2or2nbc7.exe File not found
O4 - HKCU..\Run: [cu22k6of97oftxujwtgkleo3u6d51sr18ehbb] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qafatnj3m9xa.exe File not found
O4 - HKCU..\Run: [cu2qsu5yh4u85qau4uimz2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b5ficqdnz.exe File not found
O4 - HKCU..\Run: [d6a2df3n1bi6yxjadtqb2rinc8dkgheuiwzr6juohbi3or08f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uj44u3zu9ndh.exe File not found
O4 - HKCU..\Run: [d8dxh446x3zqnu7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ru9fncavkfzv.exe File not found
O4 - HKCU..\Run: [db8boxr9m9fkhfu4vyjhtseju0am] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p10wqa0s1jjub.exe File not found
O4 - HKCU..\Run: [djjx49l46ay] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\d8h891hn.exe File not found
O4 - HKCU..\Run: [djxx63ajjclwzl5sl8h8yxc26pe0r719gyo3b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\c7fqett3.exe File not found
O4 - HKCU..\Run: [dkd899qgowz6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ogjjknn72g.exe File not found
O4 - HKCU..\Run: [dmchitsj7u2y5r4ujvd3f5fb3zfg3vnkb45ceqws] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b47cuhybp.exe File not found
O4 - HKCU..\Run: [dn3mp2ygpghxlq94j2xk0bxiriro6wu5zcg344d15cv7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\o037bkf76v.exe File not found
O4 - HKCU..\Run: [dn5nmholo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xs5jwdy.exe File not found
O4 - HKCU..\Run: [dplp55mye1yomllxpwfdr7kbnfvg8rjpg3gmi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\furjpmqimzn.exe File not found
O4 - HKCU..\Run: [dqwlhghnhe2tlo43b3r46] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kphi30jbm.exe File not found
O4 - HKCU..\Run: [dyjatkj3q587qhz4br8irhhfijspmszru0ce] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a5k87ayk.exe File not found
O4 - HKCU..\Run: [dzvvjfihqholxt27coakxw3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\napde7or0.exe File not found
O4 - HKCU..\Run: [e4umy7rze33qxmomosvvh82fc85f1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ppv9ma2z6.exe File not found
O4 - HKCU..\Run: [e56bzeqiuco5thjt784b7qo3qzpqvnhy563q8x8fvtn1ejns] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\e6220dptqu.exe File not found
O4 - HKCU..\Run: [e8slnsudau1ebep7ay4n015968v4k9oq2ekml6ao887was1n] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fjhq8fiecsg4r.exe ()
O4 - HKCU..\Run: [e9flczalqp0z3ab1aglw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\izpekqd.exe File not found
O4 - HKCU..\Run: [edaay1r0nq73m4l2kmr48wdyc1b6vt1icjo1jifbzy3tghoomh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sq0heaookcn5f.exe File not found
O4 - HKCU..\Run: [eel816dl4ka67c57yhnsuanaushlxrti] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pjviu3862bn.exe File not found
O4 - HKCU..\Run: [egvkoyev13lbxq72t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q7032wokxlp3y.exe File not found
O4 - HKCU..\Run: [ej16oqd9cjnu7dre1q6iv4cxt53sl25jn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zrooalpenjl.exe File not found
O4 - HKCU..\Run: [elajgrazmmshibfzywx34vxqvsyu9rx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ra8cjs.exe File not found
O4 - HKCU..\Run: [en32x5u0aliw1b383r23k0apqg75flac2zjn1vx4v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wrideu4zh8.exe File not found
O4 - HKCU..\Run: [encdha0d67j1wgmtg3zmtihw1vzdveqe9z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nfo18tvgub.exe File not found
O4 - HKCU..\Run: [enylm6kirntwcox9mjapicd3nsdax4r] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vgjxqkeug7.exe File not found
O4 - HKCU..\Run: [eqlms2a4zl8ay63ykue739emsa] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zzolpzl.exe File not found
O4 - HKCU..\Run: [era18kms3gtfom0mzr3fy6fmdz2m7kq2trr9e8o] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qtlv5g49b.exe File not found
O4 - HKCU..\Run: [ettklybgsy0tp7znhoqwvahwz59yp4d7g6q4avxneqoelos8e] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v4ku7rw4uo.exe File not found
O4 - HKCU..\Run: [euqh2tza9hk2y99] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dq71gcmly.exe File not found
O4 - HKCU..\Run: [evrkrxvpejjczuys5bm0wyvc9y34uwf139xu53yxh2ky] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xgufg0289.exe File not found
O4 - HKCU..\Run: [exl4c1zi7qc5gtnwbqjv22j8h6d3t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\to1e063yevr.exe File not found
O4 - HKCU..\Run: [ez57d5ly87icbi54uhcw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\l7cqi5dc0xyoq.exe File not found
O4 - HKCU..\Run: [f0klyy2xsbhwe22occkh52z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m3d2t7xrsfte.exe File not found
O4 - HKCU..\Run: [f286w6cfnzs81jdtyzeceg48cfvso8wfrnd6il] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i1lz0t8gz5s.exe File not found
O4 - HKCU..\Run: [f2kugcfxdxnzocuv0zb6xiv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hbo7a2308zu.exe File not found
O4 - HKCU..\Run: [f2uq10n8eni3xhg4rjskkbmknxtv9962a8av] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pbdvkt.exe File not found
O4 - HKCU..\Run: [f3i1fycjb3nr072kbpudv7ri0f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tqk4mydrfi7.exe File not found
O4 - HKCU..\Run: [f43s8iyh4l7u1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\izbwx4j94chx.exe File not found
O4 - HKCU..\Run: [f5r0qk59kght0qx781b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qg07dama7i.exe File not found
O4 - HKCU..\Run: [f5tiaopww4czsu2ujnzge5dmuxw27yif5lmgstj19ojcqojzi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\oug7svtt9w9zr.exe File not found
O4 - HKCU..\Run: [f7htqe2cjpptpnmn74ryowla8d23y] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vk0rgr.exe File not found
O4 - HKCU..\Run: [f8dfy574jnppmof333gkk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ngviyc1.exe File not found
O4 - HKCU..\Run: [f8hasqzj7scj7s1pcv1pk2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\htpn723.exe File not found
O4 - HKCU..\Run: [f8o5xzh9zfpwc9tkkf0nkjokuc20odcfdhaz7qf7gm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\w3h7to9w4o.exe File not found
O4 - HKCU..\Run: [fb17gzfkxchbmvgmel4x9umfie86vkwao5rla032h2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jzspcsnsi3.exe File not found
O4 - HKCU..\Run: [fe8s8gfaekq98462umqo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xaw5py4yexzz.exe File not found
O4 - HKCU..\Run: [fja6lspnrk2ar4ee3m7h6a] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cpgxogrvqr1y3.exe File not found
O4 - HKCU..\Run: [fp8umyfol5xd1pqks6ha91i87gswcdx046lnhm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zel9rv3h.exe File not found
O4 - HKCU..\Run: [fpfxvoq4ggmxkiquz22zju22d12hoi1i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uu1drwblb.exe File not found
O4 - HKCU..\Run: [fqvfz1xer6se7gi82e9h7kxzo8i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sp9r0wgvm.exe File not found
O4 - HKCU..\Run: [frfpbbkn4b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qbr3ve.exe File not found
O4 - HKCU..\Run: [frhe6wu9l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qjkvlovabx.exe File not found
O4 - HKCU..\Run: [frsh9hwgjfim9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xs6soi6.exe File not found
O4 - HKCU..\Run: [fsmtvwtcnem1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dg1iei0.exe File not found
O4 - HKCU..\Run: [ftoe5wpw4ejsb3nzl5w70t5bwg3tkg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ue0q6igc1u0p7.exe File not found
O4 - HKCU..\Run: [fzppabjpezbtpm8xhdi6oru89bopowfs9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ytbh758.exe File not found
O4 - HKCU..\Run: [g0ob6emvcpyt25eon7id49rv9k02qsbtatygxj1hoe9507j74] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\t3lytfhbe.exe File not found
O4 - HKCU..\Run: [g2igffup3hdwwcqjdd423gg1m2kvfmpou3p5nem] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\priuc6siaw3ub.exe File not found
O4 - HKCU..\Run: [g34rh6id1qpzcsn7g20gnq1klq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g07nlbzni.exe File not found
O4 - HKCU..\Run: [g53k8bmqe3wgd2or293jjgfs3z6uxos1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\js1e33a.exe File not found
O4 - HKCU..\Run: [g5zoktalceblvsz6thujzunpmz0qfm748xhg6b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xtxnpkj2mr.exe File not found
O4 - HKCU..\Run: [g938mnp7unu5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ldts1ixty.exe File not found
O4 - HKCU..\Run: [gbux9fxnyzytnj4n] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vqvb8i0.exe File not found
O4 - HKCU..\Run: [gcq4luzckfhymkhzfnsahywg4y] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\c5au59vqbtc.exe File not found
O4 - HKCU..\Run: [gf10z5c68ot1m296ke1x2wxg8x55ksqp9z9snvcti2cqx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tgsr8nbo8c2n9.exe File not found
O4 - HKCU..\Run: [ggknecbo3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p62twsvadi2.exe File not found
O4 - HKCU..\Run: [ghp95wl5kmljzxv7q] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kycuu21f4vc.exe File not found
O4 - HKCU..\Run: [ghrcolbpufxmcwvu461ipyz1ao1ecogevl0ru9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h4yk86ycb.exe File not found
O4 - HKCU..\Run: [gmldrmro7he7w475bgor2wouyp7u] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qew9dou.exe File not found
O4 - HKCU..\Run: [gmodxjizjpygivyeqtw587dxtmst5grb00x4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\d9ug5kq.exe File not found
O4 - HKCU..\Run: [gv7h67d9a0c] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\exme235e.exe File not found
O4 - HKCU..\Run: [gwhhv3idexbbuk0izkiq5cu5n32zqt775vj6jr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tbm5guhz2.exe File not found
O4 - HKCU..\Run: [gxonqt74bg4s4je0qu7fnvkp0wfhwnbnodhex6he24kh125vs] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\n6tp9arnah4b7.exe File not found
O4 - HKCU..\Run: [gzg88mc4re6bxxpm64ql3lps2gnful1e12ae0geinjhsf54z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vbq6r5fk.exe File not found
O4 - HKCU..\Run: [h28v607dl0h4pbdl5sze5zp2m8avqz4gpau3rrttp5f0nssy0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\x07j72gos04.exe File not found
O4 - HKCU..\Run: [h2zo40tihjesvi8m3t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\f8sb7q9o.exe File not found
O4 - HKCU..\Run: [h3vqycvdqvi9f4khpew4ekeojutg4lb0jjw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zvlrqag8d98dt.exe File not found
O4 - HKCU..\Run: [h5qcp034a59ooftk0pgangxrgqjv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gvui0e6g86g1i.exe File not found
O4 - HKCU..\Run: [hfa73u3wehxv2tx9pt4qk9jw1ffrsey3l1qyc1fts58z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nu6sa2ue.exe File not found
O4 - HKCU..\Run: [hg0ytg2kh4inve39xnuqyce29ld] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v5fi806.exe File not found
O4 - HKCU..\Run: [hiz6sel0hbwowpscc94eux94v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\x4qwie5w1w7p.exe File not found
O4 - HKCU..\Run: [hjlfxf15vvp5qm8y7e3j84ly9cy6vr8c7mqx90mg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b644hu.exe File not found
O4 - HKCU..\Run: [hmvqrkkn749tbge2d3k6dutih] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kciyyz0.exe File not found
O4 - HKCU..\Run: [hn0tepmntrg3col68q1uszqvsd6cgekmr6ns7p8bo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sbs724.exe File not found
O4 - HKCU..\Run: [hn4tc7b00tb5oninx7ez90] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a8esdaijuc.exe File not found
O4 - HKCU..\Run: [hp09b0bg3jdojtw99o17iicn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xtm2syz.exe File not found
O4 - HKCU..\Run: [hpdhrvux7ibasf928kxhmmargnb827oi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gxc00j2kg09.exe File not found
O4 - HKCU..\Run: [hrg9trc8z6232vgt3l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ryaaxz8rs79.exe File not found
O4 - HKCU..\Run: [hwblcp9cknu539uozrwu8oi33znxgu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zxorfy.exe File not found
O4 - HKCU..\Run: [hxd36q35w2i6njwcsnm740unw14] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i2ymh2cua809f.exe File not found
O4 - HKCU..\Run: [hzv75h41tlpkwk6dlqt7ndbnh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tyszx5g216.exe File not found
O4 - HKCU..\Run: [i08v78i44g5m0evo87278293sl0y73pc9ougyhfq9z1hg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\soljooh5.exe File not found
O4 - HKCU..\Run: [i34c1ltqvlsehu32qf0oyi7ileux1ttoeopi4xltlgwknf1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cksbggqwgg.exe File not found
O4 - HKCU..\Run: [i3gqiec2v929d53rs5d2wt2hn5cp5jhtdj73dt9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fy6c0q.exe File not found
O4 - HKCU..\Run: [i4tq78vry71aqbgku3qzaa9hsse] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\j2q4i8.exe File not found
O4 - HKCU..\Run: [i5hq3cecyjz7046fjzjn4h5d77wryx5kac35ztctw75zp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dlqqfcdli45.exe File not found
O4 - HKCU..\Run: [i7hytriif] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ygvceim8wzx9.exe File not found
O4 - HKCU..\Run: [i8gtjyqwxl7o5wp72jl7lmtjt7ej2ion17jygu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xe5j9paskd.exe File not found
O4 - HKCU..\Run: [i936dobs9skjnn1wqbf8vil1sygv3fl6hz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g98x0x.exe File not found
O4 - HKCU..\Run: [iexidy5vagf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sdw9qzd89oo.exe File not found
O4 - HKCU..\Run: [igmz0uo2umk7qmz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a6helgo4t.exe File not found
O4 - HKCU..\Run: [ii44q68pfd34ujsc2lhuk2f2lnpt2i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hc4x1d3.exe File not found
O4 - HKCU..\Run: [iimeqcoq86nu5mz4jt8hc4g9o59nc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zm8f0o6qc.exe File not found
O4 - HKCU..\Run: [ikm3pf5akk0u6f5dlgp5ll8j34koekclvuxaquistpu6b7cxd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fbfh3t3w.exe File not found
O4 - HKCU..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c (IncrediMail, Ltd.)
O4 - HKCU..\Run: [ip9m6cp1pda091] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u0n7t5ik4w.exe File not found
O4 - HKCU..\Run: [it8sbpqa9ol21] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lzsi9382x.exe File not found
O4 - HKCU..\Run: [izabi0mzdlfttac4we3toaygkwbaludh0a0ymikb] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qiws81n.exe File not found
O4 - HKCU..\Run: [izt7aet01hp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z6pkg0mwsuat1.exe File not found
O4 - HKCU..\Run: [j0g8lta2q4y8vtap4o7j1xztajco] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\oaps2xvdtp.exe File not found
O4 - HKCU..\Run: [j4t24kdkgbbl] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\os7bi0nq50.exe File not found
O4 - HKCU..\Run: [j7751seccyxv7du7o94mngsj8wav] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yzqtfgqn.exe File not found
O4 - HKCU..\Run: [j7tffgwyumxdvrrl9ms0gp5ba343ja8nz8xfct] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pnls7l5k.exe File not found
O4 - HKCU..\Run: [j9igcj2oiwo8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wnlnmwqf.exe File not found
O4 - HKCU..\Run: [jefn2omkq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q8esti.exe File not found
O4 - HKCU..\Run: [jf8fuf1d4o1q7lojbpomqc19zu3xh3n1i21oe7tlifq2p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ng5p2l.exe File not found
O4 - HKCU..\Run: [jkm3asxs0s0owu5mwvewfwsvfitwfkw90nlzgujcy8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cu0et7s6n65.exe File not found
O4 - HKCU..\Run: [jmjm29j9d1xqgf2pc1i81sg0vis2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\o9slx244.exe File not found
O4 - HKCU..\Run: [jnns2aghz4zzc5xcr5q2rdx8yqs] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zmmgxa3ms.exe File not found
O4 - HKCU..\Run: [js4z0mg9z6265] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\acfiig6qecz9i.exe File not found
O4 - HKCU..\Run: [jtw41n78drqe7cigqavnu183l45fajc2u3jnp0rba] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qhlg34iho74.exe ()
O4 - HKCU..\Run: [jvvq8hqpz7kwry43xhzgsakblnmi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kxnsl3pir.exe File not found
O4 - HKCU..\Run: [jx1rujwq1qtim3yg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hwt4rtr33pw.exe File not found
O4 - HKCU..\Run: [jxtt8igwxsf65ludmct821sunu2ro] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ibo22n0o.exe File not found
O4 - HKCU..\Run: [jzb257zxzin11u8lqq8g0ao9a5r6umev69e] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lkk8xew7hq.exe File not found
O4 - HKCU..\Run: [k08dn3njpqxdfqqjreb5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q3o07g2.exe File not found
O4 - HKCU..\Run: [k45h26r1a5py7vyk8stwb8n8qmeyxt2oi733szyundich] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kdfm3ua6h.exe File not found
O4 - HKCU..\Run: [k6w3656a1vpf8wv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nkkx3no8cou6x.exe File not found
O4 - HKCU..\Run: [ka00ul6g1d9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pkkoccn1tz3h.exe File not found
O4 - HKCU..\Run: [kcigblx8ynreo2m0gignizezj8u8expvyb] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b7fb93m.exe File not found
O4 - HKCU..\Run: [ki70iwt539anjyex8yqwwzl842oyrbpu4m4bzp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mamj5o.exe File not found
O4 - HKCU..\Run: [kik2zjlu8t4no95x26hp0801npdludck39a5kwl0tpytgj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cdeje2yi22zc.exe ()
O4 - HKCU..\Run: [kirswj5dkoywl143rwt4jgtd7zydx2brk2jnmitc2gx3a8miuh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kg5qp3bosxn.exe File not found
O4 - HKCU..\Run: [kjahrfoi37rljanfaw3il7fhjd3f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\winlogqn.exe ()
O4 - HKCU..\Run: [kmld1uiqk0ecch6g2whliijj8rb8sotc4d] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\j65bg5.exe File not found
O4 - HKCU..\Run: [kog0dgfib0cgli2cqu1tj3pz7b1jpjj5p59yz9g3tft23fh2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\x4dhrcsn2x9m.exe File not found
O4 - HKCU..\Run: [krhf7lpdmjfzbpaoq8c7yykgz4gijx2oswdr2zy2og9mnes432] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mjrrq3t3mv.exe File not found
O4 - HKCU..\Run: [ksdtbfgifhdson03ucwardqhqg91fatvinb6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gri9zttq79j.exe File not found
O4 - HKCU..\Run: [ktadlz93g0zwemigioih83qm8ejverlidxb5cwprifvvigkp90] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zpt1jj443kc.exe File not found
O4 - HKCU..\Run: [kzcrit1w7607kzo8hypfym7i8pwkrz9swrf8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bpm1yt8p7d.exe File not found
O4 - HKCU..\Run: [kzrltkbvzmqefqfwylxfj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ifwfjv.exe File not found
O4 - HKCU..\Run: [l06ud6wzxm9u3pkyxnmv4v5y135tsa853umpxh5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\f9y9sxt5.exe File not found
O4 - HKCU..\Run: [l1qc79h6ygz4hmknfvng3hqvlox9vjz6cyk9u0nk3947za09s] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qsm2i0ba.exe File not found
O4 - HKCU..\Run: [l1ymvrbdnwu9s8vr1pp9wfzhjqria6ahqvmvt4u9ems8pp0r] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ru1e07fyixd.exe File not found
O4 - HKCU..\Run: [l2ctbg1kl9xesqvft9wuod3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g46tebv3jol.exe File not found
O4 - HKCU..\Run: [l2naj59djds] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bj5u1zp34o.exe File not found
O4 - HKCU..\Run: [l9h5e0ibloz4wdqvvwivveemxaugqyie1itkwr5mik7xvb7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\w1ph5ulr1.exe File not found
O4 - HKCU..\Run: [l9m1sxlr68gf7quc7708dqn00mi4iiqdela88c6im3hm0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\clt5ecgl3.exe File not found
O4 - HKCU..\Run: [lauvj8t6g89qulegvwnikhmkj7h2v6h4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vjute1.exe File not found
O4 - HKCU..\Run: [limioui6ginwmghcunscq2n7qtvs8gbdn28y7btnkbd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v1clfq.exe File not found
O4 - HKCU..\Run: [llo7wnybv3ftcqeetywm16n7v6l5m6tpip] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\n8ijtsveoi9k.exe File not found
O4 - HKCU..\Run: [lonxey4c2t142u1c75na4tvagjalmoyxulqbkx37d3ovgulr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\axu1aewgh.exe File not found
O4 - HKCU..\Run: [lqyh7x9wbuqjmgwg51p6u8esmxeoeapt4amf1tf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hmfz2q.exe File not found
O4 - HKCU..\Run: [lrryujy49n23mhie0umtngvdgsppfryshiu8fzow] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mlmg058.exe File not found
O4 - HKCU..\Run: [lxshhpj5badvb87az6otqirvx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\swep7ym.exe File not found
O4 - HKCU..\Run: [lyxca9e0l0hh5ipaiuxllpjef45yeaj3y1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\eg7ul9d.exe File not found
O4 - HKCU..\Run: [lzsszhgdhdhcx5ghpo57z1v8nq9widzk7k94xvr09v42pun] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\iotmh521.exe File not found
O4 - HKCU..\Run: [m0wq3abcssce66xa6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p7luunqm633hx.exe File not found
O4 - HKCU..\Run: [m274msvvr9gctol60611u8p6otdvr06dxqsl3i6uurb7r] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ahfz9c.exe File not found
O4 - HKCU..\Run: [m3oo2t0jq8abz5nvo95z5a98d7cowmuzejdtfcibg79eyk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hvre4w490867f.exe File not found
O4 - HKCU..\Run: [m3sy2pbkmcl] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ezqhi2.exe File not found
O4 - HKCU..\Run: [m50kyr4yf8oe7tw5ncdv8aqkalj5106u] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g2chryo84ro8.exe File not found
O4 - HKCU..\Run: [m8j5cgt59z5e9w8gvuvom6uehxrpx7rqkigvxv0l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fllop1ad.exe File not found
O4 - HKCU..\Run: [m8ynsw2t8dgj170app5t06x2s76f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pjel7edbdvdf.exe File not found
O4 - HKCU..\Run: [m9t7ofluomy0vofgyp65gjsz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cb5a4yj.exe File not found
O4 - HKCU..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c ()
O4 - HKCU..\Run: [mbu42fx6jzxxjijlr5btolfl984ht] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mu3b9qmuxg1i.exe File not found
O4 - HKCU..\Run: [mc1cr3dhwzb0ejnxguhsobx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bvzqsxej1x.exe File not found
O4 - HKCU..\Run: [md27hvbmjcs4v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xzd8609tohq.exe File not found
O4 - HKCU..\Run: [mfr13171a90kdm4a2jh9l3r7pz1lp3a943786] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dwno59wp.exe File not found
O4 - HKCU..\Run: [mg6gnm3ta6hpm22wy] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pozhng8.exe File not found
O4 - HKCU..\Run: [miea48hmjvau0b90pajyb4haaawjfcde6c] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lwzwzrr8.exe File not found
O4 - HKCU..\Run: [mijn82zn1ggff015qgp3azmg25] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\imd5bz3nv.exe File not found
O4 - HKCU..\Run: [mkaisjmwcwj3bu5jz98msb6gg0yb0sehlxqstgf284g6g5r2fe] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ay4aa8di.exe ()
O4 - HKCU..\Run: [mqbk56s3zle2l80jh4injfopaki0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m0kf6q4g.exe File not found
O4 - HKCU..\Run: [mr1dxt0n2iqtc6jm5t5ugn6dtn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ozzaity7swwt.exe File not found
O4 - HKCU..\Run: [mrxg4oufgokxfbxcaaz1h17l3cik] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zns470.exe File not found
O4 - HKCU..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (Microsoft Corporation)
O4 - HKCU..\Run: [mudzcoymiwwsbxk5jx9w65fxn4p6akqg7z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bcbylpid45yi.exe File not found
O4 - HKCU..\Run: [mv9pg17jy1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lr7mp2emil.exe File not found
O4 - HKCU..\Run: [mxxvsf3er2w76] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lncd87dymt.exe File not found
O4 - HKCU..\Run: [n0dcurf5vv8hzwgzdp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nahfbc8s13ux.exe File not found
O4 - HKCU..\Run: [n43f5p0kb6j2mjt9c44kqyzp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\txmot6cwepx2b.exe File not found
O4 - HKCU..\Run: [ni40iga7wk07pifa7gnzht74mq0xla316xadi0l2ou3ssodb] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xtnz78.exe File not found
O4 - HKCU..\Run: [nilzcer0ydydlxziyryipr3g8t1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yjahndzn.exe File not found
O4 - HKCU..\Run: [niz8todvep34of25dc5x44] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cmycf41lyloc.exe File not found
O4 - HKCU..\Run: [nkhq10jzlshiv5rddgczizurv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\auigbj.exe File not found
O4 - HKCU..\Run: [nmfshocn0u1cx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ylevrbyo.exe File not found
O4 - HKCU..\Run: [nqw9s0d7dfnijpt36w9mcbwazoeq0k] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\y9arbm.exe File not found
O4 - HKCU..\Run: [ntmnn29mu6ws1pl2s7mdydx3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ddkqagsfs.exe File not found
O4 - HKCU..\Run: [ntr1qkj5ujg0vvh3nd0j3ufra2etwrer9684oe9757] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ixn2v7.exe File not found
O4 - HKCU..\Run: [nvwkz4nw8ak452ifz0icha569ld3w] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b6z7jj.exe File not found
O4 - HKCU..\Run: [nw6e668fdvlgqvzl2qjnkp9jdmv3v49epc1msx1xyglh7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qilnmuosj6.exe File not found
O4 - HKCU..\Run: [nwvhcqzash] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gv6bhhpybq8m.exe File not found
O4 - HKCU..\Run: [nxx5xdszn9txwpi5z878lcff7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dqf0wcvi4ah.exe File not found
O4 - HKCU..\Run: [o8tm6cnwmtgp9weihtfs7h47cceielmw8xjrhkv0mj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yy9uprrv.exe File not found
O4 - HKCU..\Run: [oavb5d2fcmsulu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nosxya0zd.exe File not found
O4 - HKCU..\Run: [oegdnxdslxqwbmz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m9nvjz07xc.exe File not found
O4 - HKCU..\Run: [ofymudzi9482q2vh9l5lv7uxos8pahn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qho7kux3.exe File not found
O4 - HKCU..\Run: [og2xi9qcwqmgyq4ygbefjxrn1c] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nunyyeug9m.exe File not found
O4 - HKCU..\Run: [ogbi0iqcmn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\s1051rbo.exe File not found
O4 - HKCU..\Run: [oi777tv3f53uj1bt7lhzvpgqlm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h3mjc8xy.exe File not found
O4 - HKCU..\Run: [olyx1fsw09znbfocr5p0ucugkj43d2woetkm5s8ws6xl0r4grt] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a0r30r10i.exe File not found
O4 - HKCU..\Run: [op96uozllw5eh4sh5sycgcjrbnzcri67z2agjk07jc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qn55n9ik606.exe File not found
O4 - HKCU..\Run: [oqoxw9689x4mccui3afxetd2uk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\s4neftlqfy5a.exe File not found
O4 - HKCU..\Run: [ou788wvd6xfvuvf9bjt544tn8050] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nwukw9k.exe File not found
O4 - HKCU..\Run: [ow4ycj4tad0hmahiznl3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\y6coqd3q9gs.exe File not found
O4 - HKCU..\Run: [oz2b0vooo02y54oy6b9xbc23kihmrbhqe756cqc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b1sqlm2wcioo2.exe ()
O4 - HKCU..\Run: [p4zb24vy06b9snch9jtidadsidgjc162yt] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\igo2fzclnvm.exe File not found
O4 - HKCU..\Run: [p9n84o1845rfslt7s4p1b6vevq10paoa1zkq4mvdfle0b3ix] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yow1apj7ka4o.exe File not found
O4 - HKCU..\Run: [pbuohj9gnru0yllnfyxqka5pxao31h5pj87ys61gm1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xlf0ftcv5tci.exe File not found
O4 - HKCU..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\ApcMain.exe -m File not found
O4 - HKCU..\Run: [pgotaa6x9qz2soy5mx2hx2hl0qvcsp1o2wibc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zklmw9fl9.exe File not found
O4 - HKCU..\Run: [phk6n0np9f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\s12swynvop.exe File not found
O4 - HKCU..\Run: [pmm6lkdpux5a1hsycw6sc8u7g58j18] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hd6me2pn9x6ke.exe File not found
O4 - HKCU..\Run: [pnnb6grz0bp5bflbypi5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mqrs2kq.exe File not found
O4 - HKCU..\Run: [ppgif2ez57236pjjir80e8xgsx95ez9j5nfl7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\atc415e3.exe File not found
O4 - HKCU..\Run: [pput79ew2ejf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a6qw006figbjb.exe File not found
O4 - HKCU..\Run: [ptnb3fv58nwgxe7b1ws2qudc91v8p97p6xcy] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g1os14fayx6xj.exe File not found
O4 - HKCU..\Run: [q1blf85eighi3yp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v6brlx.exe File not found
O4 - HKCU..\Run: [q1zysjmsafcnyon0moa3rwrcfrru79ucs2xedr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\y1ii75.exe File not found
O4 - HKCU..\Run: [q51xxq6t62z67ilfehk4uni06vbbtboyu3o44njkx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rofo5mi1fen7.exe File not found
O4 - HKCU..\Run: [q6313poy4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ded8i53i0jquf.exe File not found
O4 - HKCU..\Run: [q64ahz9t7gejnxw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u9trrr7f95yd.exe File not found
O4 - HKCU..\Run: [q7rk39bbw0tiiionlmjoifxmikoxqjw5xql] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z3htdf.exe File not found
O4 - HKCU..\Run: [q9yfybd7457j9zkqurrxda74devodmibpp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\iy4mbw.exe File not found
O4 - HKCU..\Run: [qa1wecheqgrgj1rff6z5bx01cvaav1mdwkf62vw5fdww8tzlg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\edeoo6xl740s.exe File not found
O4 - HKCU..\Run: [qbga2wvnp71nyfrh8gvylhl56eyjm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m17bracqs4w.exe File not found
O4 - HKCU..\Run: [qe8ms7gjeeroumwj6i5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mtqm9ybx.exe File not found
O4 - HKCU..\Run: [qfjqftnz9ccj9owa4w2nui7v47sxauysbxe4squnep92q9x] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mjicoolqnf.exe File not found
O4 - HKCU..\Run: [qga0n7qf0k7jbvqnebwxbzdm7p62v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\anmxkzkp3w0iy.exe File not found
O4 - HKCU..\Run: [qib9uvi6h3ei3oftlqhkzrkmd02xuv8qiftapzasphy9cyrzhh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ig23tl9h3zd.exe File not found
O4 - HKCU..\Run: [qjxosn4btqz489v4x85knq9un6ifv0m4o9dje] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tylygm5v245ud.exe File not found
O4 - HKCU..\Run: [qlgjxzunm8wvyv7lovmk67mvknyq1ydqt9ic] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\c5ic4946hn1b.exe File not found
O4 - HKCU..\Run: [qmt9p45qfu7ju] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rxt3eq2v7u1c.exe File not found
O4 - HKCU..\Run: [qn9notl1izt594a3ry2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ztjuyqvq1l0p2.exe File not found
O4 - HKCU..\Run: [qpbw9a1v0ncwep61av4nkuvb2qka0vgsa] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bueh23ixt.exe File not found
O4 - HKCU..\Run: [qpkbphebvgl5o] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ssba16vji91su.exe File not found
O4 - HKCU..\Run: [qpx5kels0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p729bxcmrd54.exe File not found
O4 - HKCU..\Run: [qqu3eu9a3s80j8dkxkrb61zfq6z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fbxbvo9.exe File not found
O4 - HKCU..\Run: [qr1blwdl5qeycmuwvn7p3fbh74zx0xes81i2ct90hrny0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vtxu9sfsqsm.exe File not found
O4 - HKCU..\Run: [qs0uqlzi8nhdfisxin4x3pwwtzi0s57iqu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dvb4yi9rp9.exe File not found
O4 - HKCU..\Run: [qur8juwffm1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lvr7vl34dpbz9.exe File not found
O4 - HKCU..\Run: [qwr1hr1nkn2l60qjul799nac18i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\y5rfhjo4i5.exe File not found
O4 - HKCU..\Run: [qz8wpfte457yye2kw1n14fwyulsjgmrrhky13nvkeeo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\eopvk6imx.exe File not found
O4 - HKCU..\Run: [qzztr76s30ka5yfwlrk9bg0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vas5km2c59g.exe File not found
O4 - HKCU..\Run: [r04h3shvwnld9id4e9bh6io8dhuvhon4x09pr362id9cbit0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\d15yzjpu6.exe File not found
O4 - HKCU..\Run: [r155jgss49pf3sxx0b191tbuwu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qgatiokjp9dv.exe File not found
O4 - HKCU..\Run: [r2d560bek05gacir2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\md54ukfwtv.exe File not found
O4 - HKCU..\Run: [r3lkldwidmtsk1xapjwafmotrtb4n9wgd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qio3mb1n.exe File not found
O4 - HKCU..\Run: [r5wyxq12rjgya9jkljgir24sotuswv1x] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hfmyxk2utdqx2.exe File not found
O4 - HKCU..\Run: [r67ig9il3qqycz74gjptm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dbqxnklkd.exe File not found
O4 - HKCU..\Run: [r9r4vwcac7tbzv7oam3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u1pdkxvx0hd4.exe File not found
O4 - HKCU..\Run: [rb8xb3cacvc4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ka4pssb.exe File not found
O4 - HKCU..\Run: [reirkl5y6cdrod] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h0aydd9nj8tk.exe File not found
O4 - HKCU..\Run: [rf1xm46vfto0ycry2dbp8rvi1k] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dpr8wr.exe File not found
O4 - HKCU..\Run: [rgrklzosetdij0u8sp7np4f3fhc4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\o9ag7frs9lcl.exe File not found
O4 - HKCU..\Run: [rihvp74lufba9v15ofw4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\onfzc5sxosuhh.exe File not found
O4 - HKCU..\Run: [rjd8ji7uo0m019i373ojrv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gw19c5.exe File not found
O4 - HKCU..\Run: [rpc8kbevz26t0porqs6az1aakarkhjjf6k4wo8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\syo4f1xb.exe File not found
O4 - HKCU..\Run: [rtyues7nkxgl56l9d0274qpepjauz4y79nb0h5x7tlt9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i1l6nmnfkpag9.exe File not found
O4 - HKCU..\Run: [ru4jyr283kimarj9edemnv5i21zu72y4v6zgxgba3dwf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\owbw2e8vss.exe File not found
O4 - HKCU..\Run: [rzvuhubk8m0z3tpe718pma] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hx6cuib9si.exe File not found
O4 - HKCU..\Run: [s1c85jeua8e8zywhppp7dwm9hsnc4n0pdgtk1wyjv7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\s89w329d8z1ee.exe File not found
O4 - HKCU..\Run: [s1rt82u8yc7dq06gt2r3uakxkztdbanll5bggd2555b0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ia49wjp6zvpvc.exe File not found
O4 - HKCU..\Run: [s3vqvx5xh82zi3bhwm29j11s] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a8b8ikfoa3.exe File not found
O4 - HKCU..\Run: [sag5rb4sflz153wzz5sfv56s0aepq155aqcbntkx65g] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\f9mnl40.exe File not found
O4 - HKCU..\Run: [sba7nb6nd4lwuh3b7usrgzdeoquawuocky6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\w36q62k4n44.exe File not found
O4 - HKCU..\Run: [sfjjzm3pxvl5stwiklfz7kd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qnx1124x99v.exe File not found
O4 - HKCU..\Run: [skatxclepfkhr7j3c16h] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pb3am8.exe File not found
O4 - HKCU..\Run: [sq6kz3n8ungkqoiviasts95sayb2p05um] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\aaa6m11uu1q4.exe File not found
O4 - HKCU..\Run: [svsgqerio] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fsmng2.exe File not found
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [syar3l3k0ut89tpcemfoxqrnyeynkhonr48] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\l3ne5vxgy4901.exe File not found
O4 - HKCU..\Run: [szxk1obm03bf64t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tna50v5d9fmj.exe File not found
O4 - HKCU..\Run: [szzjo936s7j] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i0xaaizicsamx.exe File not found
O4 - HKCU..\Run: [t49gc3j216ixh7hf4er5f7b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\n0ayh3x.exe File not found
O4 - HKCU..\Run: [t5lx8qlc2500spi25] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ab9g9hutigyw.exe File not found
O4 - HKCU..\Run: [t7kpbqn6nz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xjnyxsje.exe File not found
O4 - HKCU..\Run: [t99p2llpr5rfg8p1whqzq9zj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\smpmsi7vz.exe File not found
O4 - HKCU..\Run: [t9bv16588] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lq5llw6xv3uuw.exe File not found
O4 - HKCU..\Run: [tacz0fapb0enbb85vhks940wnmt] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ie6nbzqfmx.exe File not found
O4 - HKCU..\Run: [tc02e9mo39vgwn6huhuffs3irfhn6150jryvdxp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\iew9li.exe File not found
O4 - HKCU..\Run: [th5mi9182kwfp2r647yne6216jjceo7f8zq6kfpljt0x] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i36fsdthut0.exe File not found
O4 - HKCU..\Run: [th9huyegsf80v3qcg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h4h8sk.exe File not found
O4 - HKCU..\Run: [tiv9plo2s2v20sc10sc65eqtxo3o0ecqj8te07xm1o0jh7e8gh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g1yuzp7xzh3i7.exe File not found
O4 - HKCU..\Run: [tlka0259n6pg5i8q1ra1mz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ftjd7db6cbq.exe File not found
O4 - HKCU..\Run: [trxzh4zoir96xu3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mtnliymt.exe File not found
O4 - HKCU..\Run: [tvkox01fpgxxpoagxf67gwoyba0w5f0tzytpx6pktf3wkp0s0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\t0nsofbfb.exe File not found
O4 - HKCU..\Run: [twi027bevmg9x87yeaaxsr9py3v39j1tnq14nunybfp6ypt] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\trnar25akr.exe File not found
O4 - HKCU..\Run: [twkldk1i4dyusks2jbpjekig71or90gz8oxliwxrcrfeo0aex6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pe4eh08vhax.exe File not found
O4 - HKCU..\Run: [u1tk6pfonqyww6y6t64t7sicy4zo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sahnh4h.exe File not found
O4 - HKCU..\Run: [u4nlkslq8iv4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rs2iin2kmcbc.exe File not found
O4 - HKCU..\Run: [u5qvw7hgpr19tawvtpl89xacsu3ru5ua7zuzuuias1ofv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wwwvyboq0x.exe File not found
O4 - HKCU..\Run: [u6kx9372tnfxk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uaca84x2.exe File not found
O4 - HKCU..\Run: [u8zj3krwox0a3pq444x9413p2ssk77g8hd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gbvbjdfa2y8e9.exe File not found
O4 - HKCU..\Run: [udw8wao3s9bkdf6h75s0rq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ca2a9j5he2.exe File not found
O4 - HKCU..\Run: [ugkj3ldd9yxz7c71niltwup9pzpghkvxn8e8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mwlr4ys.exe File not found
O4 - HKCU..\Run: [uhr2c0tchkswdpbb3b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h7ldbwy4.exe File not found
O4 - HKCU..\Run: [umppaugoeauslcfi14sdfvznww] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xnewxdpsieev.exe File not found
O4 - HKCU..\Run: [unem0dms4l4xgyuita] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\obbiofbl9j0cg.exe File not found
O4 - HKCU..\Run: [unnyi03q0j3rskck] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ksvqg2j.exe File not found
O4 - HKCU..\Run: [urkiqbgyjgpr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vzasiur25.exe File not found
O4 - HKCU..\Run: [utzomkbbrzs7q6n81wsxz1ud302sohpcxswmo7qw7sny9xa0d] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yxmefuyoibfb8.exe File not found
O4 - HKCU..\Run: [v1fmqt33s] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dhckj3zr6.exe File not found
O4 - HKCU..\Run: [v4isykz08sbr6lm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\elnww1wf8.exe File not found
O4 - HKCU..\Run: [v7bf5dflhjt] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\al412f.exe ()
O4 - HKCU..\Run: [vbwtuj1rda6m8825i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a9g1ie0e0h1.exe ()
O4 - HKCU..\Run: [vd3u32fdmeaaarttpxgtu3rs442667yosq9nho4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dqqjrk.exe File not found
O4 - HKCU..\Run: [vdk68kwcj7u1h5tgnlpy7p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tvxb9o850o9te.exe File not found
O4 - HKCU..\Run: [vfnxjnvon6h88dsouztqo957le] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\khgpfu0yh.exe File not found
O4 - HKCU..\Run: [vgmmfgcipvzw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wrwhk00gf673.exe File not found
O4 - HKCU..\Run: [vgxw332czt2a5xx2c6311qu67gdim2ovqhyl] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dfpgn6oxox.exe File not found
O4 - HKCU..\Run: [vhtfll17dfolfnaaovf1s9ni7ay2sbiuf45su3sppp6l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uv6mwx.exe File not found
O4 - HKCU..\Run: [vk7jcmzcm3297jtbsbltl] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p2lfx33.exe File not found
O4 - HKCU..\Run: [vm891vnut6d6835vvf8xxunynw4v7xxgkjoc49zcjrj9d] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nl0nuyo9t7.exe File not found
O4 - HKCU..\Run: [vnx2os1tjv8x3umds8u] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xktae1reao.exe File not found
O4 - HKCU..\Run: [vo87gutfk3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qmt032pq.exe File not found
O4 - HKCU..\Run: [voma589agwmxrro10] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\chahbd4c5.exe File not found
O4 - HKCU..\Run: [vqz6ldu639l3t4a7u018lqkuquevox3bug3ki939xzr4sqed] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sqb0ntm.exe File not found
O4 - HKCU..\Run: [vrsie03jgb29vkf946vrhcxzt6h] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dvt0amud6m.exe File not found
O4 - HKCU..\Run: [vul7e3qynjg2tea8n69bvfvcmz30cv27g4mb85da] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cc1bbdxcw92vz.exe File not found
O4 - HKCU..\Run: [vyx4longrjfqd3vs8lhpgsw2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v3a6cl1k958tr.exe File not found
O4 - HKCU..\Run: [vzmzfbaxcsu5tbot405h] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\d45ck7choj0p.exe File not found
O4 - HKCU..\Run: [w1m3np67niteuto4gc1ijkwqj9ll9ajk6p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pkan80ti.exe File not found
O4 - HKCU..\Run: [w2rbq43jwm6aj3rcv2075s9am3vaf1dfvw2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\l08sw011l.exe File not found
O4 - HKCU..\Run: [w35dmkykyeusyfhg0a9hcyi1qca5g7hmursa1ffov] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q7ldfm5uvvx.exe File not found
O4 - HKCU..\Run: [w5gzwj7lgnzjy6bfkw74vca2s0tam9m5fo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sc1rznn2umqek.exe File not found
O4 - HKCU..\Run: [w5sis6lmuvah8lpdlvorqpzqvu1erti6lvwir72vut4j7i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wi23df21i.exe File not found
O4 - HKCU..\Run: [w66nlxmzk6qj1iendrrs9n7bn6uzefo1zat9sfgspopfywv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lfbepwld.exe File not found
O4 - HKCU..\Run: [w8e57j7muamjb2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b6babk7acibi.exe File not found
O4 - HKCU..\Run: [w92hv88w7wmzlkunw87bm5oro78m2v60k1djj6o] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z3v87r6sks.exe File not found
O4 - HKCU..\Run: [w99a6cdypvpayle8xjymzcqljdtwvg7tpn2vkspvmxt5izobr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sz4ua2b30nf9b.exe ()
O4 - HKCU..\Run: [wb9ls3ld5pb2v8pgf4j6w0bxsri7wmnalvwol] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rlg47qphi.exe File not found
O4 - HKCU..\Run: [wd3ljervz0zgkhwelya4r3oste8s15] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b5utyd.exe File not found
O4 - HKCU..\Run: [wd7ky6yqpcx1y1f8bbo7shn8grwevaaztjvaw4mnud] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fwqvfro.exe File not found
O4 - HKCU..\Run: [wds4kv5au0rmm1cxrfowedzun16no5461trnbw08aefj18] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ivg8vhrusuhq.exe File not found
O4 - HKCU..\Run: [wi2fu0l08kio70ujqiafdxnp9lb7p8nycchg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\r66cklxwm6l3.exe File not found
O4 - HKCU..\Run: [wieoj0lu7c] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\te9czcltdwx2r.exe File not found
O4 - HKCU..\Run: [wj7ymudejso72fcx46fkpe5avv1vgilhe66m2gf0cihvrt76] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yaaahebda.exe File not found
O4 - HKCU..\Run: [wjor4anhciwuakovze4rssddf0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\aad2qd.exe File not found
O4 - HKCU..\Run: [wole2xakutf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\db79k6jn7y6t.exe File not found
O4 - HKCU..\Run: [wpvz2ehoudpmtf3jece8hv5aow7tqacwcqkqfu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ndwkk747.exe File not found
O4 - HKCU..\Run: [wrmsiush8xcnkdu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u1jroe.exe File not found
O4 - HKCU..\Run: [wt3k2gpywgxj8f4s3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cutmxplw6u.exe File not found
O4 - HKCU..\Run: [wto8rt5l02tzia5jklb5x2k45ckt7ny8blx5jn4q0kvmy1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wii5lhw.exe File not found
O4 - HKCU..\Run: [wtusffoafrej3aiqaf68gh4xd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g082rcf9h.exe File not found
O4 - HKCU..\Run: [wvhyhg9i8yptgsgmbi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ref2h45zrqtqv.exe File not found
O4 - HKCU..\Run: [wvjot95yveuq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fy8ara.exe File not found
O4 - HKCU..\Run: [ww93i3cyw0tx0l1sugh36ziiy] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\opdcl1f6y6m9i.exe File not found
O4 - HKCU..\Run: [wxd4gog7c83yoy52h742udq6m6bepma6j7jg7qb] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ebdkq3pthgge.exe File not found
O4 - HKCU..\Run: [wy2vz2jin61le68hn8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bih35ucw8.exe File not found
O4 - HKCU..\Run: [wya76lboar3m] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\skvq9h.exe File not found
O4 - HKCU..\Run: [wzrz4kmj08d7bdn5xj9yy0k63xh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v7xy3pcbw.exe File not found
O4 - HKCU..\Run: [x44064c6qsrc0yx93jr8a0run7d] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yicwnm7.exe File not found
O4 - HKCU..\Run: [x4xxtz7zvibw4jwh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xd1smirk7c.exe File not found
O4 - HKCU..\Run: [x7vvf5iddnmat6pjz7irqmkw34ghvdy1jf7b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m5unejgymu5.exe File not found
O4 - HKCU..\Run: [x8qcviwmp7lx62j4i9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\obxh6m.exe File not found
O4 - HKCU..\Run: [xdqeek8vle70n7e200h8gipfb5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\arnsumilboa0.exe File not found
O4 - HKCU..\Run: [xdvrqpe4hfbor603kv8ts06ivcegv8ia6tvx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\aw6ck3nibox.exe ()
O4 - HKCU..\Run: [xh7f6jon18jr4yspol49m5gob0nvlvhoyvpm7adronkq35] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tkt1jhlh437dn.exe File not found
O4 - HKCU..\Run: [xiqep92arss2zzj09zca27l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dy7vvdhs6.exe File not found
O4 - HKCU..\Run: [xisy51aq24v1i5pk2y8nt6hf284nn3q0k8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kjwj73khm.exe File not found
O4 - HKCU..\Run: [xkahvlyy84j4cs8tlj93nbz3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\n10eqdgney3r.exe File not found
O4 - HKCU..\Run: [xmeianwuh45kmhoqakdpegggklezl5tjvs] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mpqk7c.exe File not found
O4 - HKCU..\Run: [xpupjnh442xs2x2m] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cbgauyh2t.exe File not found
O4 - HKCU..\Run: [xpx1dxgard3loywu4yb0wo7rddedu9qdk711f4iz1tj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wkaea8f9.exe File not found
O4 - HKCU..\Run: [xqgwi7hu61521s2yg6z6oy0s6lec2x6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mma5qghmb49s2.exe File not found
O4 - HKCU..\Run: [xrjhnda76coc5lvqe2gtk30] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lif08rjrw7.exe File not found
O4 - HKCU..\Run: [xtk3t4w288jygeu2qwhcid1yz8pnakhtu7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mxsig6af.exe ()
O4 - HKCU..\Run: [xvyz0jztrqt3jymst1pg2e17v6d45bt3hvskl7s9r3u] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kfujxu7826.exe File not found
O4 - HKCU..\Run: [xx82gcd4zj56mtv7tvzr79czys8p67vttaf3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qnr49nloqwy2.exe File not found
O4 - HKCU..\Run: [xx9uh978iu7e9ktjdaw0suw7vqcfyogx2j6lbic1do6psyod3t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\quh44tywoi9.exe File not found
O4 - HKCU..\Run: [xyv4g6vqldnk0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m13i945760.exe File not found
O4 - HKCU..\Run: [y4x5pbov6093sn3nlwgyzfolmfha4xnc1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ijjqaztdrb.exe File not found
O4 - HKCU..\Run: [y5erjx6hur67ame6b8kb51ltf65zmp38yrz885g2v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g5z69c5c79wj.exe File not found
O4 - HKCU..\Run: [y9mungf7bl7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\equrxx.exe File not found
O4 - HKCU..\Run: [yafoan0itci2m0yhro0hooewp6ujc0ptua46vegu9yyf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jprbtra.exe File not found
O4 - HKCU..\Run: [yapeyi9r9ot27g00hp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fflxxugkvb.exe File not found
O4 - HKCU..\Run: [yaul5jxmqsitp2mqxwildv6wwxb3aeeiqrxdh0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\oiocu5juy.exe File not found
O4 - HKCU..\Run: [ybg277guru56pam6bcdhvgr4ljcyvpq5bmqzc1pwg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h29uvxm1wce.exe File not found
O4 - HKCU..\Run: [ycethbtz6l9lo8aineoy1g7qgdofyctjuyyxtd9ovg4ujp7h] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jbyg47kzjf2rl.exe File not found
O4 - HKCU..\Run: [ycl6injq62rf67or3jfdhc4o8iboij885lf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jgdadnh5t0.exe File not found
O4 - HKCU..\Run: [yduea3vmmpbwx99xvfsd14ehf3petga5n7ojs1eb6bj1bg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hbznngr36.exe File not found
O4 - HKCU..\Run: [yhs7b40392ouym2mvjk8eulvw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\efim5sp.exe File not found
O4 - HKCU..\Run: [yijgidvjdqdk77afillt4yutsx7ro2937l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lqb2vd8wq6z.exe File not found
O4 - HKCU..\Run: [ym6714bfd8jw79gpi4uv69lv0iu0jopesx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rn2z5b74.exe File not found
O4 - HKCU..\Run: [ynmzkhq1tmfnr4ypjop5dzof2c9hsfksgb1k9j] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\du8tpkw.exe File not found
O4 - HKCU..\Run: [ypxj1rvxmuomdxkk16b9toz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\adxci1969.exe File not found
O4 - HKCU..\Run: [yqbjz5djqv6s6d9e5vt5wgkllqqj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u0co3mk0.exe File not found
O4 - HKCU..\Run: [yyeyj3zp2ofmu7ybao28ivf31ap49] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b82o87l.exe File not found
O4 - HKCU..\Run: [z1o1tt07jlfv6j35bdjdm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pqnrvqrr.exe File not found
O4 - HKCU..\Run: [z5kbp0q1rzpdons0f5w73tmgppki4i3mr6kyu3hhvraufye5p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h7nemv.exe File not found
O4 - HKCU..\Run: [z5qr5e8kmtuzq1o] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lll4gmo.exe File not found
O4 - HKCU..\Run: [zb0oh21jvuxyn1472luaiq0vgsp7lcezavxv0gmis9hfj0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\x7m2fm44slu3.exe File not found
O4 - HKCU..\Run: [zb4bb5mal1r77nrp7wzi9lqof2vv7qy11s2vmzo2vp5gp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\t8u7lmg67.exe File not found
O4 - HKCU..\Run: [zdheffbunesvtv5mkmr9gl6jryy63onv0yqbh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ad2vhk5rjyerq.exe File not found
O4 - HKCU..\Run: [zew782pfozd1v3ryh883z9rrluci0h0joeopoyas08lc7zv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fne3g4lbh.exe File not found
O4 - HKCU..\Run: [zf6kgydqhy0mgexawn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dv46kaey36.exe File not found
O4 - HKCU..\Run: [zfria1aid2ysf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hcqd1ugd41msx.exe File not found
O4 - HKCU..\Run: [zg0eeoxotj3ptys25xc9dk6frmn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\smjmii5f4rj.exe File not found
O4 - HKCU..\Run: [zi2hap6p2k0w92kx2a5nrkpdrl8m66y8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\infjlke78bv9l.exe File not found
O4 - HKCU..\Run: [zi6bg142m4u1wzo64wenwk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\chfc2s65.exe File not found
O4 - HKCU..\Run: [zkvw4bh2l8i4jois1rtafcoyejwccad1y82k5ilhv8m6uod7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ypgx6sdvuo.exe File not found
O4 - HKCU..\Run: [zotqnrxb5flzshr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\k435y6eamk.exe File not found
O4 - HKCU..\Run: [zp50e04nz81aiupg7f2leksouiyhi19yck8thzranv99] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qmuyv0v4x9.exe File not found
O4 - HKCU..\Run: [zpf8in6hilsttg8gntk0nqk6tfo1egdjs09bbi0kp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\o491olgqh.exe File not found
O4 - HKCU..\Run: [zposb6i4p57p8z42l9hfvdqp6n8wivs4bmsxf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\iba1o13s.exe File not found
O4 - HKCU..\Run: [zq1815wbt6q89nq1kw0ahq40ikq2h2vdr7kux9k] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gb06aoqch4.exe File not found
O4 - HKCU..\Run: [zq6bggbaayeersx25wn5a4dbgl47bmt3a5qyicyj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lk8fguyfsxo.exe File not found
O4 - HKCU..\Run: [zwbtbhmkipf12j2i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\we7rzpfutu8.exe File not found
O4 - HKCU..\Run: [zwnq0u5w1ubze1ekk0q1e1xamlalmjup9jnb290] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\anf7fmdyi.exe File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Event Planner Reminders Tray Icon.lnk = C:\Program Files\Sierra\Planner\Plnrnote.exe (Creative Home)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetActiveDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 00 02 00 00 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetActiveDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm File not found
O9 - Extra 'Tools' menuitem : Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm File not found
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (InterTrust Technologies Corporation, Inc.)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_01)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_05)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_09)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_10)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - CLSID or File not found.
O22 - SharedTaskScheduler: {C5BF40A2-94F3-42BD-F434-1604812C8955} - klj3r93iorkemnfaja93riemef - Reg Error: Key error. File not found
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O32 - Autorun File - D:\AUTOEXEC.BAT () - [ FAT32 ]
O32 - Autorun File - D:\Autorun.inf () - [ FAT32 ]
O33 - MountPoints2\{369505d2-4bcb-11da-b4b8-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{369505d2-4bcb-11da-b4b8-806d6172696f}\Shell\autorun - "" = Auto&Play;
O33 - MountPoints2\{faf34d90-4bd4-11da-b4bd-0013d4c27b29}\Shell - "" = AutoRun
O33 - MountPoints2\{faf34d90-4bd4-11da-b4bd-0013d4c27b29}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{faf34d90-4bd4-11da-b4bd-0013d4c27b29}\Shell\AutoRun\command - "" = J:\LaunchU3.exe – File not found
O33 - MountPoints2\D\Shell - "" = AutoRun
O33 - MountPoints2\D\Shell\autorun - "" = Auto&Play;

========== Files/Folders - Created Within 30 Days ==========

[1 C:\WINDOWS\*.tmp files]
[1 C:\Program Files\*.tmp files]
[2009/03/15 12:12:07 | 00,497,152 | —- | C] (OldTimer Tools) – C:\Documents and Settings\HP_Administrator\Desktop\OTListIt2.exe
[2009/03/15 11:40:11 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Malwarebytes
[2009/03/15 11:40:08 | 00,000,707 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/03/15 11:40:07 | 00,015,504 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/03/15 11:40:05 | 00,038,496 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/03/15 11:40:03 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/03/15 11:40:02 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/03/15 11:37:27 | 02,876,728 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\HP_Administrator\Desktop\mbam-setup.exe
[2009/03/14 19:19:47 | 00,001,745 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\HijackThis.lnk
[2009/03/14 17:56:28 | 00,000,622 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\NTREGOPT.lnk
[2009/03/14 17:56:28 | 00,000,603 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\ERUNT.lnk
[2009/03/14 17:56:24 | 00,000,000 | —D | C] – C:\Program Files\ERUNT
[2009/03/14 17:34:46 | 00,027,136 | —- | C] (Microsoft Corporation) – C:\gncefxmn.exe
[2009/03/14 17:27:31 | 00,791,393 | —- | C] (Lars Hederer ) – C:\Documents and Settings\HP_Administrator\Desktop\erunt-setup.exe
[2009/03/14 17:26:59 | 00,812,344 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\HJTInstall.exe
[2009/03/14 17:26:51 | 00,022,700 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\hijackthis post.rtf
[2009/03/14 13:59:17 | 46,824,2432 | -HS- | C] () – C:\hiberfil.sys
[2009/03/11 08:23:27 | 00,025,088 | —- | C] () – C:\WINDOWS\System32\scmqxbwk.pif
[2009/03/10 18:18:50 | 00,010,677 | —- | C] () – C:\WINDOWS\System32\Config.MPF
[2009/03/10 18:18:11 | 00,000,682 | —- | C] () – C:\Documents and Settings\All Users\Desktop\McAfee Security Center.lnk
[2009/03/10 18:17:42 | 00,143,360 | —- | C] (Inner Media, Inc.) – C:\WINDOWS\System32\dunzip32.dll
[2009/03/10 18:13:58 | 00,033,832 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mferkdk.sys
[2009/03/10 18:13:54 | 00,040,488 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfesmfk.sys
[2009/03/10 18:13:54 | 00,035,240 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfebopk.sys
[2009/03/10 18:13:53 | 00,201,320 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfehidk.sys
[2009/03/10 18:13:53 | 00,079,304 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfeavfk.sys
[2009/03/10 18:13:44 | 00,113,952 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\Mpfp.sys
[2009/03/10 18:13:11 | 00,000,362 | —- | C] () – C:\WINDOWS\tasks\McDefragTask.job
[2009/03/10 18:13:09 | 00,000,354 | —- | C] () – C:\WINDOWS\tasks\McQcTask.job
[2009/03/10 18:12:40 | 00,000,000 | —D | C] – C:\Program Files\McAfee.com
[2009/03/10 18:12:18 | 00,000,000 | —D | C] – C:\Program Files\Common Files\McAfee
[2009/03/10 18:12:13 | 00,000,000 | —D | C] – C:\WINDOWS\LastGood.Tmp
[2009/03/10 18:11:53 | 00,000,000 | —D | C] – C:\Program Files\McAfee
[2009/03/10 17:28:38 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\McAfee
[2009/03/10 17:28:00 | 01,222,128 | —- | C] (McAfee, Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\DMSetup-Serial.exe
[2009/03/10 16:44:23 | 01,284,419 | -HS- | C] () – C:\WINDOWS\System32\alrsvcf.sys
[2009/03/10 16:44:22 | 00,005,826 | —- | C] () – C:\WINDOWS\System32\activedss.sys
[2009/03/10 16:33:52 | 00,105,710 | —- | C] () – C:\WINDOWS\System32\drivers\b81e751b.sys
[2009/03/10 16:33:41 | 00,000,545 | –S- | C] () – C:\WINDOWS\System32\2051318624.dat
[2009/03/10 16:32:48 | 00,076,288 | RHS- | C] () – C:\WINDOWS\System32\acleditm.exe
[2009/03/09 22:49:25 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Ascentive
[2009/03/09 22:38:33 | 00,036,864 | —- | C] (CIPL) – C:\WINDOWS\System32\ascbalon.dll
[2009/03/09 22:38:32 | 00,045,056 | —- | C] (iipl) – C:\WINDOWS\System32\CreateLog.dll
[2009/03/09 22:38:32 | 00,020,480 | —- | C] (Ascentive LLC) – C:\WINDOWS\System32\SysRestore.dll
[2009/03/09 22:38:13 | 00,000,000 | —D | C] – C:\Program Files\Ascentive
[2009/03/09 21:53:39 | 00,033,280 | —- | C] () – C:\Program Files\bpxogo.dll
[2009/03/09 21:53:20 | 00,081,390 | —- | C] () – C:\WINDOWS\System32\drivers\eccfd102.sys
[2009/03/09 18:23:24 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\{E7004F9C-73D4-4D32-A000-BC63BD320763}
[2009/03/09 18:23:21 | 00,133,120 | —- | C] (Mozilla Foundation) – C:\WINDOWS\ugetaxuh.dll
[2009/03/09 18:18:55 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Lavasoft
[2009/03/09 18:12:23 | 00,000,446 | —- | C] () – C:\WINDOWS\System32\win32hlp.cnf
[2009/03/09 18:11:54 | 00,081,390 | —- | C] () – C:\WINDOWS\System32\drivers\65745371.sys
[2009/03/09 18:11:51 | 00,033,280 | —- | C] () – C:\Program Files\Common Files\dfduk.dll
[2009/03/09 18:11:40 | 00,123,392 | —- | C] () – C:\didupcyv.exe
[2009/03/09 18:11:27 | 00,000,003 | —- | C] () – C:\WINDOWS\System32\test.ttt
[2009/03/09 18:11:27 | 00,000,001 | —- | C] () – C:\WINDOWS\System32\uniq.tll
[2009/03/09 18:11:25 | 00,000,002 | —- | C] () – C:\549727704
[2009/03/09 18:11:17 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\xcgugvn.exe
[2009/03/09 18:11:14 | 00,041,984 | —- | C] () – C:\WINDOWS\Mcibacibiso.dll
[2009/03/09 18:11:13 | 00,041,984 | —- | C] (MainConcept AG) – C:\vydnw.exe
[2009/03/07 20:06:59 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NeptunesAdve
[2009/03/07 20:05:39 | 00,000,000 | —D | C] – C:\Program Files\IncrediGames
[2009/03/07 20:05:39 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Oberon Media
[2009/03/05 01:15:30 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Gold Casual Games
[2009/03/05 01:15:30 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Gold Casual Games
[2009/03/04 00:11:43 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\FireGlow
[2009/03/02 18:42:10 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Ancient Quest of Saqqarah__bfg
[2009/03/01 19:35:41 | 00,000,000 | —D | C] – C:\Program Files\Solitaire Cruise
[2009/03/01 17:16:46 | 00,271,207 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\2008-Walk-MS-Top-Teams.pdf
[2009/02/28 22:45:55 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\Zoom Book Saved Games
[2009/02/28 21:41:19 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Dreamsdwell Stories
[2009/02/24 20:26:44 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Artogon
[2009/02/22 16:55:56 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Big Fish Games Vancouver
[2009/02/19 11:37:38 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\ViquaSoft
[2009/02/19 10:32:56 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\PrettyGoodGames
[2009/02/19 10:32:56 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\PrettyGoodGames
[2009/02/18 19:30:54 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HoverBee Studios
[2009/02/17 21:42:56 | 00,000,000 | —D | C] – C:\Program Files\Dream Vacation Solitaire
[2009/02/17 09:21:36 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HipSoft
[2009/02/17 08:41:13 | 00,001,409 | —- | C] () – C:\WINDOWS\System32\tmpC1FDE.FOT
[2009/02/17 08:41:13 | 00,001,409 | —- | C] () – C:\WINDOWS\System32\tmp8BFDE.FOT
[2009/02/16 17:18:56 | 00,027,136 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\Extra 500.00 month.doc
[2009/02/15 20:46:15 | 00,015,750 | —- | C] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\slot1.mm1
[2009/02/14 18:59:44 | 00,000,000 | —D | C] – C:\Program Files\Fairway Solitaire
[2009/02/13 21:53:47 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\BVS Solitaire Collection

========== Files - Modified Within 30 Days ==========

[1 C:\WINDOWS\System32\*.tmp files]
[1 C:\WINDOWS\*.tmp files]
[2009/03/15 13:13:32 | 00,081,390 | —- | M] () – C:\WINDOWS\System32\drivers\eccfd102.sys
[2009/03/15 12:10:25 | 00,000,188 | —- | M] () – C:\WINDOWS\System\hpsysdrv.DAT
[2009/03/15 12:08:07 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/03/15 12:08:05 | 46,824,2432 | -HS- | M] () – C:\hiberfil.sys
[2009/03/15 12:07:10 | 00,010,677 | —- | M] () – C:\WINDOWS\System32\Config.MPF
[2009/03/15 12:06:59 | 08,100,146 | -H– | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\IconCache.db
[2009/03/15 11:47:20 | 00,497,152 | —- | M] (OldTimer Tools) – C:\Documents and Settings\HP_Administrator\Desktop\OTListIt2.exe
[2009/03/15 11:40:08 | 00,000,707 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/03/15 11:38:38 | 02,876,728 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\HP_Administrator\Desktop\mbam-setup.exe
[2009/03/14 19:20:47 | 00,014,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\svchost.exe
[2009/03/14 19:20:33 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/03/14 19:19:48 | 00,001,745 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\HijackThis.lnk
[2009/03/14 19:11:56 | 00,000,446 | —- | M] () – C:\WINDOWS\System32\win32hlp.cnf
[2009/03/14 17:56:28 | 00,000,622 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\NTREGOPT.lnk
[2009/03/14 17:56:28 | 00,000,603 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\ERUNT.lnk
[2009/03/14 17:36:59 | 00,123,392 | —- | M] () – C:\didupcyv.exe
[2009/03/14 17:36:11 | 00,000,002 | —- | M] () – C:\549727704
[2009/03/14 17:34:51 | 00,031,744 | —- | M] (Microsoft Corporation) – C:\xcgugvn.exe
[2009/03/14 17:34:47 | 00,027,136 | —- | M] (Microsoft Corporation) – C:\gncefxmn.exe
[2009/03/14 17:34:44 | 00,041,984 | —- | M] (MainConcept AG) – C:\vydnw.exe
[2009/03/13 23:43:32 | 00,000,069 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2009/03/13 23:09:28 | 00,175,616 | —- | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/13 22:45:54 | 00,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/03/13 13:53:00 | 00,022,700 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\hijackthis post.rtf
[2009/03/13 12:03:22 | 00,812,344 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\HJTInstall.exe
[2009/03/13 12:01:49 | 00,791,393 | —- | M] (Lars Hederer ) – C:\Documents and Settings\HP_Administrator\Desktop\erunt-setup.exe
[2009/03/11 08:23:32 | 00,025,088 | —- | M] () – C:\WINDOWS\System32\scmqxbwk.pif
[2009/03/11 07:28:25 | 00,000,022 | —- | M] () – C:\WINDOWS\FLASHKSK.INI
[2009/03/11 07:28:15 | 00,003,243 | —- | M] () – C:\WINDOWS\LXBRCAH.ini
[2009/03/10 18:18:11 | 00,000,682 | —- | M] () – C:\Documents and Settings\All Users\Desktop\McAfee Security Center.lnk
[2009/03/10 18:13:11 | 00,000,362 | —- | M] () – C:\WINDOWS\tasks\McDefragTask.job
[2009/03/10 18:13:09 | 00,000,354 | —- | M] () – C:\WINDOWS\tasks\McQcTask.job
[2009/03/10 17:58:13 | 00,014,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\svchost.exe
[2009/03/10 17:28:01 | 01,222,128 | —- | M] (McAfee, Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\DMSetup-Serial.exe
[2009/03/10 17:20:34 | 00,105,710 | —- | M] () – C:\WINDOWS\System32\drivers\b81e751b.sys
[2009/03/10 17:20:29 | 01,284,419 | -HS- | M] () – C:\WINDOWS\System32\alrsvcf.sys
[2009/03/10 17:20:27 | 00,005,826 | —- | M] () – C:\WINDOWS\System32\activedss.sys
[2009/03/10 16:59:02 | 00,000,545 | –S- | M] () – C:\WINDOWS\System32\2051318624.dat
[2009/03/10 16:32:44 | 00,076,288 | RHS- | M] () – C:\WINDOWS\System32\acleditm.exe
[2009/03/09 21:47:58 | 00,081,390 | —- | M] () – C:\WINDOWS\System32\drivers\65745371.sys
[2009/03/09 18:23:22 | 00,133,120 | —- | M] (Mozilla Foundation) – C:\WINDOWS\ugetaxuh.dll
[2009/03/09 18:11:51 | 00,033,280 | —- | M] () – C:\Program Files\Common Files\dfduk.dll
[2009/03/09 18:11:27 | 00,000,003 | —- | M] () – C:\WINDOWS\System32\test.ttt
[2009/03/09 18:11:27 | 00,000,001 | —- | M] () – C:\WINDOWS\System32\uniq.tll
[2009/03/09 18:11:14 | 00,041,984 | —- | M] () – C:\WINDOWS\Mcibacibiso.dll
[2009/03/09 16:52:19 | 00,000,492 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\spider.sav
[2009/03/05 00:07:17 | 00,000,567 | —- | M] () – C:\WINDOWS\lexstat.ini
[2009/03/02 23:24:13 | 00,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/03/01 17:16:48 | 00,271,207 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\2008-Walk-MS-Top-Teams.pdf
[2009/02/17 08:41:13 | 00,001,409 | —- | M] () – C:\WINDOWS\System32\tmpC1FDE.FOT
[2009/02/17 08:41:13 | 00,001,409 | —- | M] () – C:\WINDOWS\System32\tmp8BFDE.FOT
[2009/02/16 17:18:57 | 00,027,136 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\Extra 500.00 month.doc
[2009/02/15 21:25:38 | 00,015,750 | —- | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\slot1.mm1

========== LOP Check ==========

[2009/03/15 12:05:12 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data
[2008/12/25 14:48:13 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2008/03/10 16:29:00 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\3 Blokes Studios
[2008/12/20 23:32:23 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AdventureChronicles1
[2008/12/02 19:21:32 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Alawar Stargaze
[2009/03/15 10:16:31 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL
[2006/12/23 22:16:19 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL Downloads
[2006/12/15 01:55:39 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL OCP
[2008/12/25 14:43:43 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple
[2008/12/25 14:45:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple Computer
[2008/11/25 19:13:08 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Arkadium
[2009/03/09 22:49:25 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ascentive
[2008/12/08 22:52:58 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Astar Games
[2009/02/22 16:55:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Big Fish Games Vancouver
[2009/03/05 20:38:47 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BigFishGamesCache
[2009/01/02 19:02:49 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\blg
[2005/11/02 20:00:24 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BVRP Software
[2007/06/19 15:03:31 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Chasing Dogs Studios
[2007/12/15 22:44:45 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Christmasville
[2008/07/21 19:43:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DivoGames
[2009/01/26 17:40:38 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EA
[2008/01/06 21:28:29 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Escape From Paradise
[2008/05/13 22:12:14 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EscapeTheMuseum
[2008/04/02 00:45:49 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Fashion Solitaire 1.2
[2009/03/04 00:11:43 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FireGlow
[2008/10/23 18:59:55 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Flood Light Games
[2008/08/03 16:57:25 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Forge of Games
[2008/03/01 17:27:18 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Friends Games
[2007/11/22 16:35:37 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GameTap
[2009/02/07 18:58:03 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GameXzone
[2009/01/16 19:49:34 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Gogii
[2008/08/12 21:27:50 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Gogii Games
[2009/03/05 01:15:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Gold Casual Games
[2006/10/20 16:11:57 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google
[2008/03/23 14:31:52 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Grey Alien Games
[2007/09/11 20:52:05 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GrimmsHatchery
[2005/08/09 12:12:20 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Hewlett-Packard
[2009/02/17 09:21:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HipSoft
[2009/02/18 19:30:54 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HoverBee Studios
[2005/08/09 11:17:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HP
[2008/12/19 19:30:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HP Product Assistant
[2008/12/20 18:47:58 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\IM
[2008/12/20 18:47:02 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\IncrediMail
[2005/08/09 11:29:52 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\InstallShield
[2005/08/09 11:48:01 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Intuit
[2008/03/08 20:43:55 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\iWin Games
[2008/03/08 19:29:28 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\JollyBear
[2009/03/15 11:40:03 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/03/10 18:18:54 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\McAfee
[2009/03/10 17:59:49 | 00,000,000 | –SD | M] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2008/03/16 21:54:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MonteCristo
[2009/01/27 11:47:25 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MumboJumbo
[2008/05/27 21:02:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MythPeople
[2008/10/14 17:39:42 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NeoEdge Networks
[2009/03/07 20:06:59 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NeptunesAdve
[2008/01/11 19:37:53 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\OberonGames
[2008/11/20 18:01:11 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PlayFirst
[2008/12/21 18:03:28 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PlayPond
[2009/01/27 17:38:54 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Playrix Entertainment
[2009/02/19 10:32:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PrettyGoodGames
[2005/11/04 00:53:57 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\QuickTime
[2009/01/05 20:39:44 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Redrum
[2009/01/24 18:52:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Rumbic Studio
[2009/01/02 18:51:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sandlot Games
[2005/08/09 10:57:35 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SBSI
[2008/01/18 17:57:08 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ScreenSeven
[2008/11/26 22:37:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SecretsOfOlympus
[2006/12/24 21:46:45 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sierra
[2005/08/09 11:16:34 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sonic
[2009/01/04 17:19:38 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SpecialBit
[2008/06/05 18:51:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SpinTop Games
[2008/03/20 00:50:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SugarGames
[2005/11/02 13:20:40 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Symantec
[2009/03/12 23:25:49 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2007/12/18 23:49:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TERMINAL Studio
[2008/09/15 23:10:06 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TheRace_dev
[2006/06/21 22:46:27 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Trymedia
[2005/11/22 00:01:26 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2007/09/22 23:43:19 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WildTangent
[2008/03/22 19:10:32 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Win
[2005/11/02 14:16:48 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2009/03/15 12:05:12 | 00,000,000 | RH-D | M] – C:\Documents and Settings\HP_Administrator\Application Data
[2006/06/27 01:02:42 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\acccore
[2008/03/30 21:05:31 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Adobe
[2005/11/22 01:00:03 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\AdobeUM
[2006/06/13 18:39:00 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Aim
[2009/03/02 18:47:08 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Ancient Quest of Saqqarah__bfg
[2008/08/07 17:34:11 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Ancient Quest of Saqqarah__oberon
[2006/05/17 11:13:18 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Apple Computer
[2009/02/24 20:26:44 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Artogon
[2008/03/21 16:24:54 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Aveyond II
[2008/08/31 16:41:59 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Beanbag Studios
[2008/07/22 23:05:45 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Beep Industries
[2008/01/06 17:58:06 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Big Fish Games
[2008/12/12 22:35:23 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\BigFishv1005
[2007/11/25 01:52:51 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\BitTorrent
[2009/01/02 19:02:49 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\blg
[2008/08/02 18:37:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\BrandX Games
[2009/02/13 22:25:33 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\BVS Solitaire Collection
[2008/02/16 18:44:23 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\CaribbeanHideaway
[2008/12/09 00:03:20 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\cerasus.media
[2007/06/19 15:03:31 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Chasing Dogs Studios
[2009/02/28 21:41:19 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Dreamsdwell Stories
[2008/06/06 20:55:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\EA
[2008/05/25 21:26:07 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\EleFun Games
[2008/10/23 18:59:55 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Flood Light Games
[2007/12/29 20:48:14 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\ForgottenRiddles
[2009/02/21 21:59:37 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Friday's games
[2008/09/25 10:26:26 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\funkitron
[2008/12/13 22:07:30 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Games
[2008/08/12 21:27:50 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Gogii Games
[2009/03/05 01:15:30 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Gold Casual Games
[2007/02/13 23:50:19 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Google
[2005/11/03 15:54:11 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Help
[2008/01/17 21:22:06 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Home Sweet Home
[2006/02/16 07:59:18 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\HP
[2005/11/02 18:29:03 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\HPQ
[2005/06/10 12:02:24 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Identities
[2007/11/22 16:34:08 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\InstallShield
[2006/07/04 20:19:06 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\InterTrust
[2005/12/27 18:16:27 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\InterVideo
[2005/08/09 11:47:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Intuit
[2008/07/10 17:08:11 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\IOMediaSupport6SZZ001s
[2009/01/28 00:26:37 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Island
[2008/07/17 16:12:54 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\iWin
[2008/03/08 20:44:16 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\iWinArcade
[2008/04/03 17:10:05 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Jane s Hotel Family Hero
[2009/02/04 10:11:05 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Jetsetter
[2009/01/16 22:40:30 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\JewelMatch2
[2009/03/10 17:59:49 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Lavasoft
[2005/11/12 14:57:15 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Leadertech
[2006/06/26 21:35:10 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Macromedia
[2008/08/31 22:02:29 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Magic Academy
[2006/11/05 23:02:43 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Magic Match
[2009/03/15 11:40:11 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Malwarebytes
[2009/01/20 20:40:24 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Meridian93
[2007/11/13 14:51:06 | 00,000,000 | –SD | M] – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft
[2008/01/23 11:39:56 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Move Networks
[2008/08/30 18:19:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Mozilla
[2008/11/07 18:12:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Mushroom Age
[2006/08/07 19:00:27 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Musicmatch
[2008/06/18 22:13:35 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\MysteryStudio
[2008/12/07 22:12:20 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\NeroDCTemplates
[2008/09/23 20:40:31 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Oberonv1005
[2008/09/27 21:54:53 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\panoramik
[2008/07/22 22:58:28 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Pi Eye Games
[2008/11/20 18:01:11 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\PlayFirst
[2009/01/12 17:53:27 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Pogo Games
[2006/05/17 18:21:10 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Real
[2008/09/12 22:22:18 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Righteous Kill
[2009/01/29 22:46:56 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\RobinsonCrusoe
[2009/01/28 00:04:52 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Sahmon Games
[2005/08/09 11:49:53 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\SampleView
[2008/12/29 18:00:53 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\SecretIslandEng
[2008/11/24 21:49:15 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Skunk Studios
[2005/11/12 14:57:41 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Sonic
[2008/09/20 21:42:37 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Spandex Force
[2008/07/10 17:08:10 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Spinapse
[2008/03/20 18:54:41 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\SprillBermudeEng
[2008/06/03 21:11:07 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\StoneLoopsOberon
[2005/11/02 20:36:24 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Sun
[2008/07/10 17:08:38 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Suspects and Clues Players
[2008/07/10 17:08:14 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Suspects and Clues Prefs
[2005/08/09 12:04:52 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Symantec
[2006/10/12 22:02:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Talkback
[2006/02/08 20:36:07 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Template
[2005/11/02 14:40:45 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\U3
[2009/01/29 20:00:10 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\URSE Games
[2008/05/16 21:53:17 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\VeniceMysteryData
[2007/02/15 00:57:33 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Viewpoint
[2009/02/19 11:37:38 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\ViquaSoft
[2008/03/06 22:02:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\WeatherDPA
[2006/03/09 02:03:26 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Webshots
[2007/09/22 23:40:47 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\WildTangent
[2008/03/24 00:05:55 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\WinBatch
[2007/08/01 19:03:48 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Zango
[2009/03/02 23:24:13 | 00,000,284 | —- | M] () – C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2004/08/10 21:00:00 | 00,000,065 | RH– | M] () – C:\WINDOWS\Tasks\desktop.ini
[2009/03/10 18:13:11 | 00,000,362 | —- | M] () – C:\WINDOWS\Tasks\McDefragTask.job
[2009/03/10 18:13:09 | 00,000,354 | —- | M] () – C:\WINDOWS\Tasks\McQcTask.job
[2009/03/14 19:20:33 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT

========== Purity Check ==========


========== Alternate Data Streams ==========

@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4A4BAD
@Alternate Data Stream - 98 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E945C214
@Alternate Data Stream - 96 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:95970EA3
@Alternate Data Stream - 95 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:16B49C20
@Alternate Data Stream - 94 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BD13A410
@Alternate Data Stream - 226 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:93F3E4C9
@Alternate Data Stream - 225 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5A437AC3
@Alternate Data Stream - 221 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:73781C4C
@Alternate Data Stream - 219 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C6EBC69
@Alternate Data Stream - 218 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CC6A54A8
@Alternate Data Stream - 218 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CB16385F
@Alternate Data Stream - 206 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FEF0DEE7
@Alternate Data Stream - 206 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2BC498A4
@Alternate Data Stream - 199 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:67C320D1
@Alternate Data Stream - 168 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:666D6386
@Alternate Data Stream - 166 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:32ED1AE4
@Alternate Data Stream - 162 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5EC637CB
@Alternate Data Stream - 162 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4D066AD2
@Alternate Data Stream - 144 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2D0C22DC
@Alternate Data Stream - 135 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9B7E8561
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C46995DA
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6A7B7A50
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E951D483
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6A5004EB
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:588B60C7
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4DBBB4EA
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:33A7CC67
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:20FFCF0B
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D7DEAA30
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:75DEB833
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:72E546C1
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FA42DF8E
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C61EF274
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9B0F9E15
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:26C3D553
@Alternate Data Stream - 130 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:ABE30DDB
@Alternate Data Stream - 130 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5D351BC6
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F6C4647E
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DEF2E739
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:54997B77
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:43C9D140
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D85F35D4
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5A908367
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:41289DF0
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:370EF5E8
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2AB14A6F
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C8EAE2CC
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7C8950EF
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:78DBBDCD
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5F280981
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3C75E5BE
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1CB20114
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:131C0EE9
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:061FEEDF
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B894C266
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:92D18A5E
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8D02044C
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8999FD56
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6713E91B
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5EE41602
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5A27D490
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:57BF34C6
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:478FEFC3
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2F6462DF
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F8B49EF2
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B874BDDD
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:57B4E612
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0A73A758
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:07FFC655
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D197DC80
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A73EAFFB
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05113FB9
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FC4EA67C
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FA78B902
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C3C72D5F
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BB6ECE53
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9E4F05ED
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9D0CEAB7
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9BFB769D
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:848CC150
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C66F780
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:403D77D3
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2B454E16
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F5E90ED3
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F0B59DF7
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E55CE2D1
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:639F0420
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:61FEC5E3
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:48F154AF
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E00A1D59
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1361E51
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:965253AF
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8944C195
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:880F0FEF
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7C7AA745
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5635DE41
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:557AD709
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4B121B40
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:EB603FE4
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CAE958FC
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C22674B6
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7A7C726F
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6E8472D2
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:54362937
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4AFB54A0
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4573A78F
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3678540D
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FC8FFA4E
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DE75DACB
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4F8B1CCE
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:29468260
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F65733F1
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F33C37D5
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E37541B7
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E22FF3D0
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CE0A077E
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A7DA2BCD
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A724744F
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:824F4167
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7A0FEE87
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7307D080
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:618BF152
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5E24C78B
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:316EAAE9
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FB384C06
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F7862839
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:975EFF04
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:68AEEB4D
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:03B3646C
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F3600258
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E90251A2
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:981349EA
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8135A716
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7B653AA4
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6F2E414A
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:53C0A7FF
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:43A4A32B
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3AC42987
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:33DB8278
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FE4E15B1
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FD931C5F
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E635BB20
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E36991C0
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DF0BC727
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D2648A4D
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:864A52B8
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7B52659E
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6DC888C5
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6C031E3E
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C07C19F
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3BBB1871
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:306E3C70
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24E6E42F
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E1031541
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DD874E14
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AC84E6FC
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:54D5DB8A
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:53DF59D1
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4EFDF5FB
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2FE747C7
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2411B07C
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:08F16DBB
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E2F80D1D
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E07EA07E
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BAC9506D
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7F66BF58
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:07BEA161
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CEF2A14E
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A31B5E9B
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:95B8F7F6
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:86F3B593
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:857F3067
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8160BC44
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:68E05C43
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:353B2FF9
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:30399038
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E1B9ACBE
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DBABC836
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C8E82994
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B4980368
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:861A898F
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CE113E16
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BFBB0142
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B2FF6BFE
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:994AEA06
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:940ECC98
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4E158DDD
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:043E24E7
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E98C5DD9
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E7700065
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C870DCBB
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C1CCF2C1
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B156F3F2
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A3E39C6A
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7D9D2CAF
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:708BB0FA
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6D549BCC
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:485DCA33
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3EDCF994
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0FB9F88B
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0E4DF3FE
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F8A67568
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D16E7091
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CE5AAA59
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:981884E7
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:699C6EB5
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4E1E5A60
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3D66C2C2
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:32C16177
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:13B137AF
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:04560D68
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F3EFA8A8
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F0DB1AD1
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D6BE1CEA
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9A8247A9
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:81ED9272
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1E5EC928
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D09AEE3D
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CDF8423E
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BA713888
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B8384DB6
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2B9724CF
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:213AFE42
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:049ACE7A
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0105A66F
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F0AB86C0
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E6683E95
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AF54CFFD
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:ABFEED8E
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8BC949AF
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:85F55C68
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:82FF14B1
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:687D1056
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6107567A
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C53D1D2
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4CD2D817
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:455CF8C6
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3660B1DF
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:26946BE8
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:02C1CB6D
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FC2E567F
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E4786545
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B652B720
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B34A7CD6
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6128D492
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C12E68D
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4559A919
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:940EEA60
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2E49D185
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0C988F7D
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:767A78E5
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24AB14E7
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:20DB61D6
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:10B7A752
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DDE7FCF4
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7881FECE
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A4CDE823
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:725A0758
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:35632DDA
< End of report >
OK lets see if we can get the MS files in the majority now ;) No wonder your system is crippled

Run OTList2.exe
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    :OTLI
    PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\winlogqn.exe ()
    PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\fjhq8fiecsg4r.exe ()
    PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\a9g1ie0e0h1.exe ()
    PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\al412f.exe ()
    PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\mxsig6af.exe ()
    PRC - C:\Documents and Settings\HP_Administrator\Local Settings\Temp\qhlg34iho74.exe ()
    SRV - (priocukm [Auto | Stopped]) – C:\Program Files\bpxogo.dll ()
    O1 - Hosts: 195.245.119.131 browser-security.microsoft.com
    O4 - HKLM..\Run: [Exobenoguq] rundll32.exe "C:\WINDOWS\ugetaxuh.dll",e (Mozilla Foundation)
    O4 - HKLM..\Run: [Ytatifur] rundll32.exe "C:\WINDOWS\Mcibacibiso.dll",e ()
    O4 - HKCU..\Run: [a0yp5t1vjlndptk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\by2l388.exe File not found
    O4 - HKCU..\Run: [a10dtgzr2ssufqzqrbt9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b9adcd93cz.exe File not found
    O4 - HKCU..\Run: [a3mjae23mydx0f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\r7f9aegpuj.exe File not found
    O4 - HKCU..\Run: [a4aflixi4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g9u56rpcc6c.exe File not found
    O4 - HKCU..\Run: [a6yw97h2i8ozkf2oiatknu54vlvi6wylmka7yy808spo6r] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a4zzhg2.exe File not found
    O4 - HKCU..\Run: [ab5z5ik97nq64ud3l1ohkky] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bg0tln0hrtd9.exe File not found
    O4 - HKCU..\Run: [adcc6fkwagpy4gvey40bikd93sqla82xff3c6ixtb4p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\smxnf4js1va.exe File not found
    O4 - HKCU..\Run: [al77pe36xdotenbe2tesvcl3y63rehxuvoqqpt5lh6f4drtg7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ecyyxex.exe File not found
    O4 - HKCU..\Run: [alk6fv4l0t0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a3brr5t0m.exe File not found
    O4 - HKCU..\Run: [aq874ie0n4yofoq3rochd2a3b7egwexlkh8oyy1hvosy0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v6rrriao.exe File not found
    O4 - HKCU..\Run: [aqf1q6z43chvpj4vp29v69dm4smt39] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\aplc22x3g02v.exe File not found
    O4 - HKCU..\Run: [argrqq95ocpf1cdo0lfo5dqfzincq63iqymed] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\goe0s83.exe File not found
    O4 - HKCU..\Run: [arj0jv0hjrtscyujh0c43yjpm1cu2jxujr8b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z6qhctztp9a2.exe File not found
    O4 - HKCU..\Run: [aukbus4d056v30n7jih0zyio1vxc5nl4ehi5duwc6oulvk1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pcwkxin4m9s.exe File not found
    O4 - HKCU..\Run: [aukigub7h9i0hrndfabahldhe2rx05d75wg8hrhpx15ekssh6k] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p3fpox.exe File not found
    O4 - HKCU..\Run: [ay151z1xppsd8ax4u1rhzca8v4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sa2vh3.exe File not found
    O4 - HKCU..\Run: [b3t7sjnr1sagup9lsf2xntgg35oggft] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dnbgkmj4s.exe File not found
    O4 - HKCU..\Run: [b4coo7g6ydoa7kavy6mcv9ytifbgia0hnw4v9ra96z5rdc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uakh5kpu.exe File not found
    O4 - HKCU..\Run: [b5syv8r4qq1m2z558pgfc2eijsofyvjo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\c4znd0ral2.exe File not found
    O4 - HKCU..\Run: [b6a8o1oh2ye1hmn71y586xnfpud57ide7j] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gtg7pf0q.exe File not found
    O4 - HKCU..\Run: [b6pfhhth0tbxo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fyfpvj.exe File not found
    O4 - HKCU..\Run: [b842ma29k0ymqun] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\td8xg4x.exe File not found
    O4 - HKCU..\Run: [b8hmyy4jw14i8yweq6udwn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jfo9ob3u5t.exe File not found
    O4 - HKCU..\Run: [bbf8wbnfcgywimto5afj1w] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wda18ef.exe File not found
    O4 - HKCU..\Run: [bc4jjs2ivsqsmzwndyuqabl6esy5srzafg2i3xfzwak6fowoy] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mbfc7lazug2o.exe File not found
    O4 - HKCU..\Run: [bc8nrsq309p93g9zpkzi90deti3ffdsl3hd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yx0aspgmc.exe File not found
    O4 - HKCU..\Run: [bhcofmbouep7n8tizd6dacumj3s2ivf1tawmw55q4c90ox] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rmk55q4ofexq.exe File not found
    O4 - HKCU..\Run: [bk6g9a03n9y2v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lm8o234iyc0.exe File not found
    O4 - HKCU..\Run: [bp4ukhzdi4tkm8we4ujsljsos2qtsqfuv1z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bewf9xd.exe File not found
    O4 - HKCU..\Run: [bpjuclipagemxe5jooul5lmji8zmbiy1kqnzp6af6mjn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\l480lntr.exe File not found
    O4 - HKCU..\Run: [bpynr9d58pe0dtoisp3kdl24d9jgegm8497hoox3chts] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\amrzpb40c90.exe File not found
    O4 - HKCU..\Run: [bw712hnxn7q17uo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\aqq3gzs1i1y.exe File not found
    O4 - HKCU..\Run: [bwgpx24dq38lhntmpbeu27] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tdcym3np33.exe File not found
    O4 - HKCU..\Run: [bzhbcon0739bfvhm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uyts77szuqgu.exe File not found
    O4 - HKCU..\Run: [c0gz1b3rm6jtdexasu299fj8ghrhskd8m02engyw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\eoxz6dwsu.exe File not found
    O4 - HKCU..\Run: [c1astzxxoyjk9dv15x3y7mb0sz8l0u8l7cokqhn207l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gdi55ww7kl5u5.exe File not found
    O4 - HKCU..\Run: [c1ui6wu2aujzopu8k] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xd2w42i9wnm.exe File not found
    O4 - HKCU..\Run: [c1v5eyykqhe6a2kk7e1p7qhno9b1hdwki2uoe9h9g2bzyok] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qu41w8hm7v6.exe File not found
    O4 - HKCU..\Run: [c5n002t21pjoxzk1x5qe5u8tq9fdggkhp4gkq7gsxm7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u4vkauji.exe File not found
    O4 - HKCU..\Run: [cad4btdjn50ppt6w4jib872pcbq98bozmj8qlq92ae1g] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\okmd2cs32xplj.exe File not found
    O4 - HKCU..\Run: [capv0o7q71e8ia1nm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cj3z3txl.exe File not found
    O4 - HKCU..\Run: [cc51izrjnkgsate8gslzq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ihca5aljt8.exe File not found
    O4 - HKCU..\Run: [ccdr9ukdv5rrgyh4m37d] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fojjr2m60o9.exe File not found
    O4 - HKCU..\Run: [cczdwywp9aff12segyezpet9z100765fb3av9wjz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\t8li5lmji.exe File not found
    O4 - HKCU..\Run: [cildvek4r6r5hnewdcscfm2m8mbo2ddslk18rpdmgvh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z70r89.exe File not found
    O4 - HKCU..\Run: [cpymh7j875cc4l3ct3f64dobv0vej9166p3m] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\n1rlnots32.exe File not found
    O4 - HKCU..\Run: [crc3ryh4f3qjfffdczkle0anwykrc3kus7y3exw6miiu4mq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zuu1qz.exe File not found
    O4 - HKCU..\Run: [csq7rpvzbdh9y36gj5i4pnz0mfp2mt5f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qh5ev2or2nbc7.exe File not found
    O4 - HKCU..\Run: [cu22k6of97oftxujwtgkleo3u6d51sr18ehbb] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qafatnj3m9xa.exe File not found
    O4 - HKCU..\Run: [cu2qsu5yh4u85qau4uimz2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b5ficqdnz.exe File not found
    O4 - HKCU..\Run: [d6a2df3n1bi6yxjadtqb2rinc8dkgheuiwzr6juohbi3or08f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uj44u3zu9ndh.exe File not found
    O4 - HKCU..\Run: [d8dxh446x3zqnu7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ru9fncavkfzv.exe File not found
    O4 - HKCU..\Run: [db8boxr9m9fkhfu4vyjhtseju0am] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p10wqa0s1jjub.exe File not found
    O4 - HKCU..\Run: [djjx49l46ay] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\d8h891hn.exe File not found
    O4 - HKCU..\Run: [djxx63ajjclwzl5sl8h8yxc26pe0r719gyo3b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\c7fqett3.exe File not found
    O4 - HKCU..\Run: [dkd899qgowz6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ogjjknn72g.exe File not found
    O4 - HKCU..\Run: [dmchitsj7u2y5r4ujvd3f5fb3zfg3vnkb45ceqws] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b47cuhybp.exe File not found
    O4 - HKCU..\Run: [dn3mp2ygpghxlq94j2xk0bxiriro6wu5zcg344d15cv7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\o037bkf76v.exe File not found
    O4 - HKCU..\Run: [dn5nmholo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xs5jwdy.exe File not found
    O4 - HKCU..\Run: [dplp55mye1yomllxpwfdr7kbnfvg8rjpg3gmi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\furjpmqimzn.exe File not found
    O4 - HKCU..\Run: [dqwlhghnhe2tlo43b3r46] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kphi30jbm.exe File not found
    O4 - HKCU..\Run: [dyjatkj3q587qhz4br8irhhfijspmszru0ce] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a5k87ayk.exe File not found
    O4 - HKCU..\Run: [dzvvjfihqholxt27coakxw3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\napde7or0.exe File not found
    O4 - HKCU..\Run: [e4umy7rze33qxmomosvvh82fc85f1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ppv9ma2z6.exe File not found
    O4 - HKCU..\Run: [e56bzeqiuco5thjt784b7qo3qzpqvnhy563q8x8fvtn1ejns] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\e6220dptqu.exe File not found
    O4 - HKCU..\Run: [e8slnsudau1ebep7ay4n015968v4k9oq2ekml6ao887was1n] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fjhq8fiecsg4r.exe ()
    O4 - HKCU..\Run: [e9flczalqp0z3ab1aglw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\izpekqd.exe File not found
    O4 - HKCU..\Run: [edaay1r0nq73m4l2kmr48wdyc1b6vt1icjo1jifbzy3tghoomh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sq0heaookcn5f.exe File not found
    O4 - HKCU..\Run: [eel816dl4ka67c57yhnsuanaushlxrti] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pjviu3862bn.exe File not found
    O4 - HKCU..\Run: [egvkoyev13lbxq72t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q7032wokxlp3y.exe File not found
    O4 - HKCU..\Run: [ej16oqd9cjnu7dre1q6iv4cxt53sl25jn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zrooalpenjl.exe File not found
    O4 - HKCU..\Run: [elajgrazmmshibfzywx34vxqvsyu9rx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ra8cjs.exe File not found
    O4 - HKCU..\Run: [en32x5u0aliw1b383r23k0apqg75flac2zjn1vx4v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wrideu4zh8.exe File not found
    O4 - HKCU..\Run: [encdha0d67j1wgmtg3zmtihw1vzdveqe9z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nfo18tvgub.exe File not found
    O4 - HKCU..\Run: [enylm6kirntwcox9mjapicd3nsdax4r] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vgjxqkeug7.exe File not found
    O4 - HKCU..\Run: [eqlms2a4zl8ay63ykue739emsa] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zzolpzl.exe File not found
    O4 - HKCU..\Run: [era18kms3gtfom0mzr3fy6fmdz2m7kq2trr9e8o] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qtlv5g49b.exe File not found
    O4 - HKCU..\Run: [ettklybgsy0tp7znhoqwvahwz59yp4d7g6q4avxneqoelos8e] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v4ku7rw4uo.exe File not found
    O4 - HKCU..\Run: [euqh2tza9hk2y99] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dq71gcmly.exe File not found
    O4 - HKCU..\Run: [evrkrxvpejjczuys5bm0wyvc9y34uwf139xu53yxh2ky] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xgufg0289.exe File not found
    O4 - HKCU..\Run: [exl4c1zi7qc5gtnwbqjv22j8h6d3t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\to1e063yevr.exe File not found
    O4 - HKCU..\Run: [ez57d5ly87icbi54uhcw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\l7cqi5dc0xyoq.exe File not found
    O4 - HKCU..\Run: [f0klyy2xsbhwe22occkh52z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m3d2t7xrsfte.exe File not found
    O4 - HKCU..\Run: [f286w6cfnzs81jdtyzeceg48cfvso8wfrnd6il] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i1lz0t8gz5s.exe File not found
    O4 - HKCU..\Run: [f2kugcfxdxnzocuv0zb6xiv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hbo7a2308zu.exe File not found
    O4 - HKCU..\Run: [f2uq10n8eni3xhg4rjskkbmknxtv9962a8av] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pbdvkt.exe File not found
    O4 - HKCU..\Run: [f3i1fycjb3nr072kbpudv7ri0f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tqk4mydrfi7.exe File not found
    O4 - HKCU..\Run: [f43s8iyh4l7u1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\izbwx4j94chx.exe File not found
    O4 - HKCU..\Run: [f5r0qk59kght0qx781b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qg07dama7i.exe File not found
    O4 - HKCU..\Run: [f5tiaopww4czsu2ujnzge5dmuxw27yif5lmgstj19ojcqojzi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\oug7svtt9w9zr.exe File not found
    O4 - HKCU..\Run: [f7htqe2cjpptpnmn74ryowla8d23y] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vk0rgr.exe File not found
    O4 - HKCU..\Run: [f8dfy574jnppmof333gkk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ngviyc1.exe File not found
    O4 - HKCU..\Run: [f8hasqzj7scj7s1pcv1pk2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\htpn723.exe File not found
    O4 - HKCU..\Run: [f8o5xzh9zfpwc9tkkf0nkjokuc20odcfdhaz7qf7gm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\w3h7to9w4o.exe File not found
    O4 - HKCU..\Run: [fb17gzfkxchbmvgmel4x9umfie86vkwao5rla032h2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jzspcsnsi3.exe File not found
    O4 - HKCU..\Run: [fe8s8gfaekq98462umqo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xaw5py4yexzz.exe File not found
    O4 - HKCU..\Run: [fja6lspnrk2ar4ee3m7h6a] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cpgxogrvqr1y3.exe File not found
    O4 - HKCU..\Run: [fp8umyfol5xd1pqks6ha91i87gswcdx046lnhm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zel9rv3h.exe File not found
    O4 - HKCU..\Run: [fpfxvoq4ggmxkiquz22zju22d12hoi1i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uu1drwblb.exe File not found
    O4 - HKCU..\Run: [fqvfz1xer6se7gi82e9h7kxzo8i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sp9r0wgvm.exe File not found
    O4 - HKCU..\Run: [frfpbbkn4b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qbr3ve.exe File not found
    O4 - HKCU..\Run: [frhe6wu9l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qjkvlovabx.exe File not found
    O4 - HKCU..\Run: [frsh9hwgjfim9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xs6soi6.exe File not found
    O4 - HKCU..\Run: [fsmtvwtcnem1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dg1iei0.exe File not found
    O4 - HKCU..\Run: [ftoe5wpw4ejsb3nzl5w70t5bwg3tkg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ue0q6igc1u0p7.exe File not found
    O4 - HKCU..\Run: [fzppabjpezbtpm8xhdi6oru89bopowfs9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ytbh758.exe File not found
    O4 - HKCU..\Run: [g0ob6emvcpyt25eon7id49rv9k02qsbtatygxj1hoe9507j74] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\t3lytfhbe.exe File not found
    O4 - HKCU..\Run: [g2igffup3hdwwcqjdd423gg1m2kvfmpou3p5nem] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\priuc6siaw3ub.exe File not found
    O4 - HKCU..\Run: [g34rh6id1qpzcsn7g20gnq1klq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g07nlbzni.exe File not found
    O4 - HKCU..\Run: [g53k8bmqe3wgd2or293jjgfs3z6uxos1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\js1e33a.exe File not found
    O4 - HKCU..\Run: [g5zoktalceblvsz6thujzunpmz0qfm748xhg6b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xtxnpkj2mr.exe File not found
    O4 - HKCU..\Run: [g938mnp7unu5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ldts1ixty.exe File not found
    O4 - HKCU..\Run: [gbux9fxnyzytnj4n] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vqvb8i0.exe File not found
    O4 - HKCU..\Run: [gcq4luzckfhymkhzfnsahywg4y] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\c5au59vqbtc.exe File not found
    O4 - HKCU..\Run: [gf10z5c68ot1m296ke1x2wxg8x55ksqp9z9snvcti2cqx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tgsr8nbo8c2n9.exe File not found
    O4 - HKCU..\Run: [ggknecbo3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p62twsvadi2.exe File not found
    O4 - HKCU..\Run: [ghp95wl5kmljzxv7q] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kycuu21f4vc.exe File not found
    O4 - HKCU..\Run: [ghrcolbpufxmcwvu461ipyz1ao1ecogevl0ru9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h4yk86ycb.exe File not found
    O4 - HKCU..\Run: [gmldrmro7he7w475bgor2wouyp7u] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qew9dou.exe File not found
    O4 - HKCU..\Run: [gmodxjizjpygivyeqtw587dxtmst5grb00x4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\d9ug5kq.exe File not found
    O4 - HKCU..\Run: [gv7h67d9a0c] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\exme235e.exe File not found
    O4 - HKCU..\Run: [gwhhv3idexbbuk0izkiq5cu5n32zqt775vj6jr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tbm5guhz2.exe File not found
    O4 - HKCU..\Run: [gxonqt74bg4s4je0qu7fnvkp0wfhwnbnodhex6he24kh125vs] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\n6tp9arnah4b7.exe File not found
    O4 - HKCU..\Run: [gzg88mc4re6bxxpm64ql3lps2gnful1e12ae0geinjhsf54z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vbq6r5fk.exe File not found
    O4 - HKCU..\Run: [h28v607dl0h4pbdl5sze5zp2m8avqz4gpau3rrttp5f0nssy0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\x07j72gos04.exe File not found
    O4 - HKCU..\Run: [h2zo40tihjesvi8m3t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\f8sb7q9o.exe File not found
    O4 - HKCU..\Run: [h3vqycvdqvi9f4khpew4ekeojutg4lb0jjw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zvlrqag8d98dt.exe File not found
    O4 - HKCU..\Run: [h5qcp034a59ooftk0pgangxrgqjv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gvui0e6g86g1i.exe File not found
    O4 - HKCU..\Run: [hfa73u3wehxv2tx9pt4qk9jw1ffrsey3l1qyc1fts58z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nu6sa2ue.exe File not found
    O4 - HKCU..\Run: [hg0ytg2kh4inve39xnuqyce29ld] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v5fi806.exe File not found
    O4 - HKCU..\Run: [hiz6sel0hbwowpscc94eux94v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\x4qwie5w1w7p.exe File not found
    O4 - HKCU..\Run: [hjlfxf15vvp5qm8y7e3j84ly9cy6vr8c7mqx90mg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b644hu.exe File not found
    O4 - HKCU..\Run: [hmvqrkkn749tbge2d3k6dutih] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kciyyz0.exe File not found
    O4 - HKCU..\Run: [hn0tepmntrg3col68q1uszqvsd6cgekmr6ns7p8bo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sbs724.exe File not found
    O4 - HKCU..\Run: [hn4tc7b00tb5oninx7ez90] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a8esdaijuc.exe File not found
    O4 - HKCU..\Run: [hp09b0bg3jdojtw99o17iicn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xtm2syz.exe File not found
    O4 - HKCU..\Run: [hpdhrvux7ibasf928kxhmmargnb827oi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gxc00j2kg09.exe File not found
    O4 - HKCU..\Run: [hrg9trc8z6232vgt3l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ryaaxz8rs79.exe File not found
    O4 - HKCU..\Run: [hwblcp9cknu539uozrwu8oi33znxgu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zxorfy.exe File not found
    O4 - HKCU..\Run: [hxd36q35w2i6njwcsnm740unw14] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i2ymh2cua809f.exe File not found
    O4 - HKCU..\Run: [hzv75h41tlpkwk6dlqt7ndbnh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tyszx5g216.exe File not found
    O4 - HKCU..\Run: [i08v78i44g5m0evo87278293sl0y73pc9ougyhfq9z1hg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\soljooh5.exe File not found
    O4 - HKCU..\Run: [i34c1ltqvlsehu32qf0oyi7ileux1ttoeopi4xltlgwknf1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cksbggqwgg.exe File not found
    O4 - HKCU..\Run: [i3gqiec2v929d53rs5d2wt2hn5cp5jhtdj73dt9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fy6c0q.exe File not found
    O4 - HKCU..\Run: [i4tq78vry71aqbgku3qzaa9hsse] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\j2q4i8.exe File not found
    O4 - HKCU..\Run: [i5hq3cecyjz7046fjzjn4h5d77wryx5kac35ztctw75zp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dlqqfcdli45.exe File not found
    O4 - HKCU..\Run: [i7hytriif] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ygvceim8wzx9.exe File not found
    O4 - HKCU..\Run: [i8gtjyqwxl7o5wp72jl7lmtjt7ej2ion17jygu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xe5j9paskd.exe File not found
    O4 - HKCU..\Run: [i936dobs9skjnn1wqbf8vil1sygv3fl6hz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g98x0x.exe File not found
    O4 - HKCU..\Run: [iexidy5vagf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sdw9qzd89oo.exe File not found
    O4 - HKCU..\Run: [igmz0uo2umk7qmz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a6helgo4t.exe File not found
    O4 - HKCU..\Run: [ii44q68pfd34ujsc2lhuk2f2lnpt2i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hc4x1d3.exe File not found
    O4 - HKCU..\Run: [iimeqcoq86nu5mz4jt8hc4g9o59nc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zm8f0o6qc.exe File not found
    O4 - HKCU..\Run: [ikm3pf5akk0u6f5dlgp5ll8j34koekclvuxaquistpu6b7cxd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fbfh3t3w.exe File not found
    O4 - HKCU..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c (IncrediMail, Ltd.)
    O4 - HKCU..\Run: [ip9m6cp1pda091] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u0n7t5ik4w.exe File not found
    O4 - HKCU..\Run: [it8sbpqa9ol21] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lzsi9382x.exe File not found
    O4 - HKCU..\Run: [izabi0mzdlfttac4we3toaygkwbaludh0a0ymikb] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qiws81n.exe File not found
    O4 - HKCU..\Run: [izt7aet01hp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z6pkg0mwsuat1.exe File not found
    O4 - HKCU..\Run: [j0g8lta2q4y8vtap4o7j1xztajco] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\oaps2xvdtp.exe File not found
    O4 - HKCU..\Run: [j4t24kdkgbbl] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\os7bi0nq50.exe File not found
    O4 - HKCU..\Run: [j7751seccyxv7du7o94mngsj8wav] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yzqtfgqn.exe File not found
    O4 - HKCU..\Run: [j7tffgwyumxdvrrl9ms0gp5ba343ja8nz8xfct] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pnls7l5k.exe File not found
    O4 - HKCU..\Run: [j9igcj2oiwo8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wnlnmwqf.exe File not found
    O4 - HKCU..\Run: [jefn2omkq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q8esti.exe File not found
    O4 - HKCU..\Run: [jf8fuf1d4o1q7lojbpomqc19zu3xh3n1i21oe7tlifq2p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ng5p2l.exe File not found
    O4 - HKCU..\Run: [jkm3asxs0s0owu5mwvewfwsvfitwfkw90nlzgujcy8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cu0et7s6n65.exe File not found
    O4 - HKCU..\Run: [jmjm29j9d1xqgf2pc1i81sg0vis2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\o9slx244.exe File not found
    O4 - HKCU..\Run: [jnns2aghz4zzc5xcr5q2rdx8yqs] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zmmgxa3ms.exe File not found
    O4 - HKCU..\Run: [js4z0mg9z6265] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\acfiig6qecz9i.exe File not found
    O4 - HKCU..\Run: [jtw41n78drqe7cigqavnu183l45fajc2u3jnp0rba] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qhlg34iho74.exe ()
    O4 - HKCU..\Run: [jvvq8hqpz7kwry43xhzgsakblnmi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kxnsl3pir.exe File not found
    O4 - HKCU..\Run: [jx1rujwq1qtim3yg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hwt4rtr33pw.exe File not found
    O4 - HKCU..\Run: [jxtt8igwxsf65ludmct821sunu2ro] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ibo22n0o.exe File not found
    O4 - HKCU..\Run: [jzb257zxzin11u8lqq8g0ao9a5r6umev69e] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lkk8xew7hq.exe File not found
    O4 - HKCU..\Run: [k08dn3njpqxdfqqjreb5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q3o07g2.exe File not found
    O4 - HKCU..\Run: [k45h26r1a5py7vyk8stwb8n8qmeyxt2oi733szyundich] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kdfm3ua6h.exe File not found
    O4 - HKCU..\Run: [k6w3656a1vpf8wv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nkkx3no8cou6x.exe File not found
    O4 - HKCU..\Run: [ka00ul6g1d9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pkkoccn1tz3h.exe File not found
    O4 - HKCU..\Run: [kcigblx8ynreo2m0gignizezj8u8expvyb] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b7fb93m.exe File not found
    O4 - HKCU..\Run: [ki70iwt539anjyex8yqwwzl842oyrbpu4m4bzp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mamj5o.exe File not found
    O4 - HKCU..\Run: [kik2zjlu8t4no95x26hp0801npdludck39a5kwl0tpytgj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cdeje2yi22zc.exe ()
    O4 - HKCU..\Run: [kirswj5dkoywl143rwt4jgtd7zydx2brk2jnmitc2gx3a8miuh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kg5qp3bosxn.exe File not found
    O4 - HKCU..\Run: [kjahrfoi37rljanfaw3il7fhjd3f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\winlogqn.exe ()
    O4 - HKCU..\Run: [kmld1uiqk0ecch6g2whliijj8rb8sotc4d] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\j65bg5.exe File not found
    O4 - HKCU..\Run: [kog0dgfib0cgli2cqu1tj3pz7b1jpjj5p59yz9g3tft23fh2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\x4dhrcsn2x9m.exe File not found
    O4 - HKCU..\Run: [krhf7lpdmjfzbpaoq8c7yykgz4gijx2oswdr2zy2og9mnes432] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mjrrq3t3mv.exe File not found
    O4 - HKCU..\Run: [ksdtbfgifhdson03ucwardqhqg91fatvinb6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gri9zttq79j.exe File not found
    O4 - HKCU..\Run: [ktadlz93g0zwemigioih83qm8ejverlidxb5cwprifvvigkp90] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zpt1jj443kc.exe File not found
    O4 - HKCU..\Run: [kzcrit1w7607kzo8hypfym7i8pwkrz9swrf8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bpm1yt8p7d.exe File not found
    O4 - HKCU..\Run: [kzrltkbvzmqefqfwylxfj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ifwfjv.exe File not found
    O4 - HKCU..\Run: [l06ud6wzxm9u3pkyxnmv4v5y135tsa853umpxh5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\f9y9sxt5.exe File not found
    O4 - HKCU..\Run: [l1qc79h6ygz4hmknfvng3hqvlox9vjz6cyk9u0nk3947za09s] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qsm2i0ba.exe File not found
    O4 - HKCU..\Run: [l1ymvrbdnwu9s8vr1pp9wfzhjqria6ahqvmvt4u9ems8pp0r] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ru1e07fyixd.exe File not found
    O4 - HKCU..\Run: [l2ctbg1kl9xesqvft9wuod3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g46tebv3jol.exe File not found
    O4 - HKCU..\Run: [l2naj59djds] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bj5u1zp34o.exe File not found
    O4 - HKCU..\Run: [l9h5e0ibloz4wdqvvwivveemxaugqyie1itkwr5mik7xvb7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\w1ph5ulr1.exe File not found
    O4 - HKCU..\Run: [l9m1sxlr68gf7quc7708dqn00mi4iiqdela88c6im3hm0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\clt5ecgl3.exe File not found
    O4 - HKCU..\Run: [lauvj8t6g89qulegvwnikhmkj7h2v6h4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vjute1.exe File not found
    O4 - HKCU..\Run: [limioui6ginwmghcunscq2n7qtvs8gbdn28y7btnkbd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v1clfq.exe File not found
    O4 - HKCU..\Run: [llo7wnybv3ftcqeetywm16n7v6l5m6tpip] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\n8ijtsveoi9k.exe File not found
    O4 - HKCU..\Run: [lonxey4c2t142u1c75na4tvagjalmoyxulqbkx37d3ovgulr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\axu1aewgh.exe File not found
    O4 - HKCU..\Run: [lqyh7x9wbuqjmgwg51p6u8esmxeoeapt4amf1tf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hmfz2q.exe File not found
    O4 - HKCU..\Run: [lrryujy49n23mhie0umtngvdgsppfryshiu8fzow] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mlmg058.exe File not found
    O4 - HKCU..\Run: [lxshhpj5badvb87az6otqirvx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\swep7ym.exe File not found
    O4 - HKCU..\Run: [lyxca9e0l0hh5ipaiuxllpjef45yeaj3y1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\eg7ul9d.exe File not found
    O4 - HKCU..\Run: [lzsszhgdhdhcx5ghpo57z1v8nq9widzk7k94xvr09v42pun] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\iotmh521.exe File not found
    O4 - HKCU..\Run: [m0wq3abcssce66xa6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p7luunqm633hx.exe File not found
    O4 - HKCU..\Run: [m274msvvr9gctol60611u8p6otdvr06dxqsl3i6uurb7r] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ahfz9c.exe File not found
    O4 - HKCU..\Run: [m3oo2t0jq8abz5nvo95z5a98d7cowmuzejdtfcibg79eyk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hvre4w490867f.exe File not found
    O4 - HKCU..\Run: [m3sy2pbkmcl] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ezqhi2.exe File not found
    O4 - HKCU..\Run: [m50kyr4yf8oe7tw5ncdv8aqkalj5106u] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g2chryo84ro8.exe File not found
    O4 - HKCU..\Run: [m8j5cgt59z5e9w8gvuvom6uehxrpx7rqkigvxv0l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fllop1ad.exe File not found
    O4 - HKCU..\Run: [m8ynsw2t8dgj170app5t06x2s76f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pjel7edbdvdf.exe File not found
    O4 - HKCU..\Run: [m9t7ofluomy0vofgyp65gjsz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cb5a4yj.exe File not found
    O4 - HKCU..\Run: [Magentic] C:\PROGRA~1\Magentic\bin\Magentic.exe /c ()
    O4 - HKCU..\Run: [mbu42fx6jzxxjijlr5btolfl984ht] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mu3b9qmuxg1i.exe File not found
    O4 - HKCU..\Run: [mc1cr3dhwzb0ejnxguhsobx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bvzqsxej1x.exe File not found
    O4 - HKCU..\Run: [md27hvbmjcs4v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xzd8609tohq.exe File not found
    O4 - HKCU..\Run: [mfr13171a90kdm4a2jh9l3r7pz1lp3a943786] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dwno59wp.exe File not found
    O4 - HKCU..\Run: [mg6gnm3ta6hpm22wy] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pozhng8.exe File not found
    O4 - HKCU..\Run: [miea48hmjvau0b90pajyb4haaawjfcde6c] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lwzwzrr8.exe File not found
    O4 - HKCU..\Run: [mijn82zn1ggff015qgp3azmg25] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\imd5bz3nv.exe File not found
    O4 - HKCU..\Run: [mkaisjmwcwj3bu5jz98msb6gg0yb0sehlxqstgf284g6g5r2fe] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ay4aa8di.exe ()
    O4 - HKCU..\Run: [mqbk56s3zle2l80jh4injfopaki0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m0kf6q4g.exe File not found
    O4 - HKCU..\Run: [mr1dxt0n2iqtc6jm5t5ugn6dtn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ozzaity7swwt.exe File not found
    O4 - HKCU..\Run: [mrxg4oufgokxfbxcaaz1h17l3cik] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zns470.exe File not found
    O4 - HKCU..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (Microsoft Corporation)
    O4 - HKCU..\Run: [mudzcoymiwwsbxk5jx9w65fxn4p6akqg7z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bcbylpid45yi.exe File not found
    O4 - HKCU..\Run: [mv9pg17jy1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lr7mp2emil.exe File not found
    O4 - HKCU..\Run: [mxxvsf3er2w76] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lncd87dymt.exe File not found
    O4 - HKCU..\Run: [n0dcurf5vv8hzwgzdp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nahfbc8s13ux.exe File not found
    O4 - HKCU..\Run: [n43f5p0kb6j2mjt9c44kqyzp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\txmot6cwepx2b.exe File not found
    O4 - HKCU..\Run: [ni40iga7wk07pifa7gnzht74mq0xla316xadi0l2ou3ssodb] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xtnz78.exe File not found
    O4 - HKCU..\Run: [nilzcer0ydydlxziyryipr3g8t1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yjahndzn.exe File not found
    O4 - HKCU..\Run: [niz8todvep34of25dc5x44] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cmycf41lyloc.exe File not found
    O4 - HKCU..\Run: [nkhq10jzlshiv5rddgczizurv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\auigbj.exe File not found
    O4 - HKCU..\Run: [nmfshocn0u1cx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ylevrbyo.exe File not found
    O4 - HKCU..\Run: [nqw9s0d7dfnijpt36w9mcbwazoeq0k] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\y9arbm.exe File not found
    O4 - HKCU..\Run: [ntmnn29mu6ws1pl2s7mdydx3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ddkqagsfs.exe File not found
    O4 - HKCU..\Run: [ntr1qkj5ujg0vvh3nd0j3ufra2etwrer9684oe9757] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ixn2v7.exe File not found
    O4 - HKCU..\Run: [nvwkz4nw8ak452ifz0icha569ld3w] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b6z7jj.exe File not found
    O4 - HKCU..\Run: [nw6e668fdvlgqvzl2qjnkp9jdmv3v49epc1msx1xyglh7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qilnmuosj6.exe File not found
    O4 - HKCU..\Run: [nwvhcqzash] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gv6bhhpybq8m.exe File not found
    O4 - HKCU..\Run: [nxx5xdszn9txwpi5z878lcff7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dqf0wcvi4ah.exe File not found
    O4 - HKCU..\Run: [o8tm6cnwmtgp9weihtfs7h47cceielmw8xjrhkv0mj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yy9uprrv.exe File not found
    O4 - HKCU..\Run: [oavb5d2fcmsulu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nosxya0zd.exe File not found
    O4 - HKCU..\Run: [oegdnxdslxqwbmz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m9nvjz07xc.exe File not found
    O4 - HKCU..\Run: [ofymudzi9482q2vh9l5lv7uxos8pahn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qho7kux3.exe File not found
    O4 - HKCU..\Run: [og2xi9qcwqmgyq4ygbefjxrn1c] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nunyyeug9m.exe File not found
    O4 - HKCU..\Run: [ogbi0iqcmn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\s1051rbo.exe File not found
    O4 - HKCU..\Run: [oi777tv3f53uj1bt7lhzvpgqlm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h3mjc8xy.exe File not found
    O4 - HKCU..\Run: [olyx1fsw09znbfocr5p0ucugkj43d2woetkm5s8ws6xl0r4grt] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a0r30r10i.exe File not found
    O4 - HKCU..\Run: [op96uozllw5eh4sh5sycgcjrbnzcri67z2agjk07jc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qn55n9ik606.exe File not found
    O4 - HKCU..\Run: [oqoxw9689x4mccui3afxetd2uk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\s4neftlqfy5a.exe File not found
    O4 - HKCU..\Run: [ou788wvd6xfvuvf9bjt544tn8050] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nwukw9k.exe File not found
    O4 - HKCU..\Run: [ow4ycj4tad0hmahiznl3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\y6coqd3q9gs.exe File not found
    O4 - HKCU..\Run: [oz2b0vooo02y54oy6b9xbc23kihmrbhqe756cqc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b1sqlm2wcioo2.exe ()
    O4 - HKCU..\Run: [p4zb24vy06b9snch9jtidadsidgjc162yt] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\igo2fzclnvm.exe File not found
    O4 - HKCU..\Run: [p9n84o1845rfslt7s4p1b6vevq10paoa1zkq4mvdfle0b3ix] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yow1apj7ka4o.exe File not found
    O4 - HKCU..\Run: [pbuohj9gnru0yllnfyxqka5pxao31h5pj87ys61gm1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xlf0ftcv5tci.exe File not found
    O4 - HKCU..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\ApcMain.exe -m File not found
    O4 - HKCU..\Run: [pgotaa6x9qz2soy5mx2hx2hl0qvcsp1o2wibc] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\zklmw9fl9.exe File not found
    O4 - HKCU..\Run: [phk6n0np9f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\s12swynvop.exe File not found
    O4 - HKCU..\Run: [pmm6lkdpux5a1hsycw6sc8u7g58j18] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hd6me2pn9x6ke.exe File not found
    O4 - HKCU..\Run: [pnnb6grz0bp5bflbypi5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mqrs2kq.exe File not found
    O4 - HKCU..\Run: [ppgif2ez57236pjjir80e8xgsx95ez9j5nfl7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\atc415e3.exe File not found
    O4 - HKCU..\Run: [pput79ew2ejf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a6qw006figbjb.exe File not found
    O4 - HKCU..\Run: [ptnb3fv58nwgxe7b1ws2qudc91v8p97p6xcy] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g1os14fayx6xj.exe File not found
    O4 - HKCU..\Run: [q1blf85eighi3yp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v6brlx.exe File not found
    O4 - HKCU..\Run: [q1zysjmsafcnyon0moa3rwrcfrru79ucs2xedr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\y1ii75.exe File not found
    O4 - HKCU..\Run: [q51xxq6t62z67ilfehk4uni06vbbtboyu3o44njkx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rofo5mi1fen7.exe File not found
    O4 - HKCU..\Run: [q6313poy4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ded8i53i0jquf.exe File not found
    O4 - HKCU..\Run: [q64ahz9t7gejnxw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u9trrr7f95yd.exe File not found
    O4 - HKCU..\Run: [q7rk39bbw0tiiionlmjoifxmikoxqjw5xql] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z3htdf.exe File not found
    O4 - HKCU..\Run: [q9yfybd7457j9zkqurrxda74devodmibpp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\iy4mbw.exe File not found
    O4 - HKCU..\Run: [qa1wecheqgrgj1rff6z5bx01cvaav1mdwkf62vw5fdww8tzlg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\edeoo6xl740s.exe File not found
    O4 - HKCU..\Run: [qbga2wvnp71nyfrh8gvylhl56eyjm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m17bracqs4w.exe File not found
    O4 - HKCU..\Run: [qe8ms7gjeeroumwj6i5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mtqm9ybx.exe File not found
    O4 - HKCU..\Run: [qfjqftnz9ccj9owa4w2nui7v47sxauysbxe4squnep92q9x] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mjicoolqnf.exe File not found
    O4 - HKCU..\Run: [qga0n7qf0k7jbvqnebwxbzdm7p62v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\anmxkzkp3w0iy.exe File not found
    O4 - HKCU..\Run: [qib9uvi6h3ei3oftlqhkzrkmd02xuv8qiftapzasphy9cyrzhh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ig23tl9h3zd.exe File not found
    O4 - HKCU..\Run: [qjxosn4btqz489v4x85knq9un6ifv0m4o9dje] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tylygm5v245ud.exe File not found
    O4 - HKCU..\Run: [qlgjxzunm8wvyv7lovmk67mvknyq1ydqt9ic] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\c5ic4946hn1b.exe File not found
    O4 - HKCU..\Run: [qmt9p45qfu7ju] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rxt3eq2v7u1c.exe File not found
    O4 - HKCU..\Run: [qn9notl1izt594a3ry2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ztjuyqvq1l0p2.exe File not found
    O4 - HKCU..\Run: [qpbw9a1v0ncwep61av4nkuvb2qka0vgsa] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bueh23ixt.exe File not found
    O4 - HKCU..\Run: [qpkbphebvgl5o] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ssba16vji91su.exe File not found
    O4 - HKCU..\Run: [qpx5kels0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p729bxcmrd54.exe File not found
    O4 - HKCU..\Run: [qqu3eu9a3s80j8dkxkrb61zfq6z] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fbxbvo9.exe File not found
    O4 - HKCU..\Run: [qr1blwdl5qeycmuwvn7p3fbh74zx0xes81i2ct90hrny0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vtxu9sfsqsm.exe File not found
    O4 - HKCU..\Run: [qs0uqlzi8nhdfisxin4x3pwwtzi0s57iqu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dvb4yi9rp9.exe File not found
    O4 - HKCU..\Run: [qur8juwffm1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lvr7vl34dpbz9.exe File not found
    O4 - HKCU..\Run: [qwr1hr1nkn2l60qjul799nac18i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\y5rfhjo4i5.exe File not found
    O4 - HKCU..\Run: [qz8wpfte457yye2kw1n14fwyulsjgmrrhky13nvkeeo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\eopvk6imx.exe File not found
    O4 - HKCU..\Run: [qzztr76s30ka5yfwlrk9bg0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vas5km2c59g.exe File not found
    O4 - HKCU..\Run: [r04h3shvwnld9id4e9bh6io8dhuvhon4x09pr362id9cbit0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\d15yzjpu6.exe File not found
    O4 - HKCU..\Run: [r155jgss49pf3sxx0b191tbuwu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qgatiokjp9dv.exe File not found
    O4 - HKCU..\Run: [r2d560bek05gacir2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\md54ukfwtv.exe File not found
    O4 - HKCU..\Run: [r3lkldwidmtsk1xapjwafmotrtb4n9wgd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qio3mb1n.exe File not found
    O4 - HKCU..\Run: [r5wyxq12rjgya9jkljgir24sotuswv1x] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hfmyxk2utdqx2.exe File not found
    O4 - HKCU..\Run: [r67ig9il3qqycz74gjptm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dbqxnklkd.exe File not found
    O4 - HKCU..\Run: [r9r4vwcac7tbzv7oam3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u1pdkxvx0hd4.exe File not found
    O4 - HKCU..\Run: [rb8xb3cacvc4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ka4pssb.exe File not found
    O4 - HKCU..\Run: [reirkl5y6cdrod] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h0aydd9nj8tk.exe File not found
    O4 - HKCU..\Run: [rf1xm46vfto0ycry2dbp8rvi1k] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dpr8wr.exe File not found
    O4 - HKCU..\Run: [rgrklzosetdij0u8sp7np4f3fhc4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\o9ag7frs9lcl.exe File not found
    O4 - HKCU..\Run: [rihvp74lufba9v15ofw4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\onfzc5sxosuhh.exe File not found
    O4 - HKCU..\Run: [rjd8ji7uo0m019i373ojrv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gw19c5.exe File not found
    O4 - HKCU..\Run: [rpc8kbevz26t0porqs6az1aakarkhjjf6k4wo8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\syo4f1xb.exe File not found
    O4 - HKCU..\Run: [rtyues7nkxgl56l9d0274qpepjauz4y79nb0h5x7tlt9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i1l6nmnfkpag9.exe File not found
    O4 - HKCU..\Run: [ru4jyr283kimarj9edemnv5i21zu72y4v6zgxgba3dwf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\owbw2e8vss.exe File not found
    O4 - HKCU..\Run: [rzvuhubk8m0z3tpe718pma] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hx6cuib9si.exe File not found
    O4 - HKCU..\Run: [s1c85jeua8e8zywhppp7dwm9hsnc4n0pdgtk1wyjv7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\s89w329d8z1ee.exe File not found
    O4 - HKCU..\Run: [s1rt82u8yc7dq06gt2r3uakxkztdbanll5bggd2555b0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ia49wjp6zvpvc.exe File not found
    O4 - HKCU..\Run: [s3vqvx5xh82zi3bhwm29j11s] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a8b8ikfoa3.exe File not found
    O4 - HKCU..\Run: [sag5rb4sflz153wzz5sfv56s0aepq155aqcbntkx65g] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\f9mnl40.exe File not found
    O4 - HKCU..\Run: [sba7nb6nd4lwuh3b7usrgzdeoquawuocky6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\w36q62k4n44.exe File not found
    O4 - HKCU..\Run: [sfjjzm3pxvl5stwiklfz7kd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qnx1124x99v.exe File not found
    O4 - HKCU..\Run: [skatxclepfkhr7j3c16h] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pb3am8.exe File not found
    O4 - HKCU..\Run: [sq6kz3n8ungkqoiviasts95sayb2p05um] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\aaa6m11uu1q4.exe File not found
    O4 - HKCU..\Run: [svsgqerio] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fsmng2.exe File not found
    O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
    O4 - HKCU..\Run: [syar3l3k0ut89tpcemfoxqrnyeynkhonr48] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\l3ne5vxgy4901.exe File not found
    O4 - HKCU..\Run: [szxk1obm03bf64t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tna50v5d9fmj.exe File not found
    O4 - HKCU..\Run: [szzjo936s7j] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i0xaaizicsamx.exe File not found
    O4 - HKCU..\Run: [t49gc3j216ixh7hf4er5f7b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\n0ayh3x.exe File not found
    O4 - HKCU..\Run: [t5lx8qlc2500spi25] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ab9g9hutigyw.exe File not found
    O4 - HKCU..\Run: [t7kpbqn6nz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xjnyxsje.exe File not found
    O4 - HKCU..\Run: [t99p2llpr5rfg8p1whqzq9zj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\smpmsi7vz.exe File not found
    O4 - HKCU..\Run: [t9bv16588] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lq5llw6xv3uuw.exe File not found
    O4 - HKCU..\Run: [tacz0fapb0enbb85vhks940wnmt] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ie6nbzqfmx.exe File not found
    O4 - HKCU..\Run: [tc02e9mo39vgwn6huhuffs3irfhn6150jryvdxp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\iew9li.exe File not found
    O4 - HKCU..\Run: [th5mi9182kwfp2r647yne6216jjceo7f8zq6kfpljt0x] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\i36fsdthut0.exe File not found
    O4 - HKCU..\Run: [th9huyegsf80v3qcg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h4h8sk.exe File not found
    O4 - HKCU..\Run: [tiv9plo2s2v20sc10sc65eqtxo3o0ecqj8te07xm1o0jh7e8gh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g1yuzp7xzh3i7.exe File not found
    O4 - HKCU..\Run: [tlka0259n6pg5i8q1ra1mz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ftjd7db6cbq.exe File not found
    O4 - HKCU..\Run: [trxzh4zoir96xu3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mtnliymt.exe File not found
    O4 - HKCU..\Run: [tvkox01fpgxxpoagxf67gwoyba0w5f0tzytpx6pktf3wkp0s0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\t0nsofbfb.exe File not found
    O4 - HKCU..\Run: [twi027bevmg9x87yeaaxsr9py3v39j1tnq14nunybfp6ypt] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\trnar25akr.exe File not found
    O4 - HKCU..\Run: [twkldk1i4dyusks2jbpjekig71or90gz8oxliwxrcrfeo0aex6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pe4eh08vhax.exe File not found
    O4 - HKCU..\Run: [u1tk6pfonqyww6y6t64t7sicy4zo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sahnh4h.exe File not found
    O4 - HKCU..\Run: [u4nlkslq8iv4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rs2iin2kmcbc.exe File not found
    O4 - HKCU..\Run: [u5qvw7hgpr19tawvtpl89xacsu3ru5ua7zuzuuias1ofv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wwwvyboq0x.exe File not found
    O4 - HKCU..\Run: [u6kx9372tnfxk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uaca84x2.exe File not found
    O4 - HKCU..\Run: [u8zj3krwox0a3pq444x9413p2ssk77g8hd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gbvbjdfa2y8e9.exe File not found
    O4 - HKCU..\Run: [udw8wao3s9bkdf6h75s0rq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ca2a9j5he2.exe File not found
    O4 - HKCU..\Run: [ugkj3ldd9yxz7c71niltwup9pzpghkvxn8e8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mwlr4ys.exe File not found
    O4 - HKCU..\Run: [uhr2c0tchkswdpbb3b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h7ldbwy4.exe File not found
    O4 - HKCU..\Run: [umppaugoeauslcfi14sdfvznww] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xnewxdpsieev.exe File not found
    O4 - HKCU..\Run: [unem0dms4l4xgyuita] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\obbiofbl9j0cg.exe File not found
    O4 - HKCU..\Run: [unnyi03q0j3rskck] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ksvqg2j.exe File not found
    O4 - HKCU..\Run: [urkiqbgyjgpr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\vzasiur25.exe File not found
    O4 - HKCU..\Run: [utzomkbbrzs7q6n81wsxz1ud302sohpcxswmo7qw7sny9xa0d] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yxmefuyoibfb8.exe File not found
    O4 - HKCU..\Run: [v1fmqt33s] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dhckj3zr6.exe File not found
    O4 - HKCU..\Run: [v4isykz08sbr6lm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\elnww1wf8.exe File not found
    O4 - HKCU..\Run: [v7bf5dflhjt] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\al412f.exe ()
    O4 - HKCU..\Run: [vbwtuj1rda6m8825i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\a9g1ie0e0h1.exe ()
    O4 - HKCU..\Run: [vd3u32fdmeaaarttpxgtu3rs442667yosq9nho4] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dqqjrk.exe File not found
    O4 - HKCU..\Run: [vdk68kwcj7u1h5tgnlpy7p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tvxb9o850o9te.exe File not found
    O4 - HKCU..\Run: [vfnxjnvon6h88dsouztqo957le] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\khgpfu0yh.exe File not found
    O4 - HKCU..\Run: [vgmmfgcipvzw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wrwhk00gf673.exe File not found
    O4 - HKCU..\Run: [vgxw332czt2a5xx2c6311qu67gdim2ovqhyl] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dfpgn6oxox.exe File not found
    O4 - HKCU..\Run: [vhtfll17dfolfnaaovf1s9ni7ay2sbiuf45su3sppp6l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\uv6mwx.exe File not found
    O4 - HKCU..\Run: [vk7jcmzcm3297jtbsbltl] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\p2lfx33.exe File not found
    O4 - HKCU..\Run: [vm891vnut6d6835vvf8xxunynw4v7xxgkjoc49zcjrj9d] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\nl0nuyo9t7.exe File not found
    O4 - HKCU..\Run: [vnx2os1tjv8x3umds8u] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xktae1reao.exe File not found
    O4 - HKCU..\Run: [vo87gutfk3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qmt032pq.exe File not found
    O4 - HKCU..\Run: [voma589agwmxrro10] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\chahbd4c5.exe File not found
    O4 - HKCU..\Run: [vqz6ldu639l3t4a7u018lqkuquevox3bug3ki939xzr4sqed] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sqb0ntm.exe File not found
    O4 - HKCU..\Run: [vrsie03jgb29vkf946vrhcxzt6h] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dvt0amud6m.exe File not found
    O4 - HKCU..\Run: [vul7e3qynjg2tea8n69bvfvcmz30cv27g4mb85da] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cc1bbdxcw92vz.exe File not found
    O4 - HKCU..\Run: [vyx4longrjfqd3vs8lhpgsw2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v3a6cl1k958tr.exe File not found
    O4 - HKCU..\Run: [vzmzfbaxcsu5tbot405h] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\d45ck7choj0p.exe File not found
    O4 - HKCU..\Run: [w1m3np67niteuto4gc1ijkwqj9ll9ajk6p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pkan80ti.exe File not found
    O4 - HKCU..\Run: [w2rbq43jwm6aj3rcv2075s9am3vaf1dfvw2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\l08sw011l.exe File not found
    O4 - HKCU..\Run: [w35dmkykyeusyfhg0a9hcyi1qca5g7hmursa1ffov] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\q7ldfm5uvvx.exe File not found
    O4 - HKCU..\Run: [w5gzwj7lgnzjy6bfkw74vca2s0tam9m5fo] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sc1rznn2umqek.exe File not found
    O4 - HKCU..\Run: [w5sis6lmuvah8lpdlvorqpzqvu1erti6lvwir72vut4j7i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wi23df21i.exe File not found
    O4 - HKCU..\Run: [w66nlxmzk6qj1iendrrs9n7bn6uzefo1zat9sfgspopfywv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lfbepwld.exe File not found
    O4 - HKCU..\Run: [w8e57j7muamjb2] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b6babk7acibi.exe File not found
    O4 - HKCU..\Run: [w92hv88w7wmzlkunw87bm5oro78m2v60k1djj6o] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\z3v87r6sks.exe File not found
    O4 - HKCU..\Run: [w99a6cdypvpayle8xjymzcqljdtwvg7tpn2vkspvmxt5izobr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\sz4ua2b30nf9b.exe ()
    O4 - HKCU..\Run: [wb9ls3ld5pb2v8pgf4j6w0bxsri7wmnalvwol] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rlg47qphi.exe File not found
    O4 - HKCU..\Run: [wd3ljervz0zgkhwelya4r3oste8s15] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b5utyd.exe File not found
    O4 - HKCU..\Run: [wd7ky6yqpcx1y1f8bbo7shn8grwevaaztjvaw4mnud] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fwqvfro.exe File not found
    O4 - HKCU..\Run: [wds4kv5au0rmm1cxrfowedzun16no5461trnbw08aefj18] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ivg8vhrusuhq.exe File not found
    O4 - HKCU..\Run: [wi2fu0l08kio70ujqiafdxnp9lb7p8nycchg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\r66cklxwm6l3.exe File not found
    O4 - HKCU..\Run: [wieoj0lu7c] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\te9czcltdwx2r.exe File not found
    O4 - HKCU..\Run: [wj7ymudejso72fcx46fkpe5avv1vgilhe66m2gf0cihvrt76] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yaaahebda.exe File not found
    O4 - HKCU..\Run: [wjor4anhciwuakovze4rssddf0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\aad2qd.exe File not found
    O4 - HKCU..\Run: [wole2xakutf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\db79k6jn7y6t.exe File not found
    O4 - HKCU..\Run: [wpvz2ehoudpmtf3jece8hv5aow7tqacwcqkqfu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ndwkk747.exe File not found
    O4 - HKCU..\Run: [wrmsiush8xcnkdu] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u1jroe.exe File not found
    O4 - HKCU..\Run: [wt3k2gpywgxj8f4s3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cutmxplw6u.exe File not found
    O4 - HKCU..\Run: [wto8rt5l02tzia5jklb5x2k45ckt7ny8blx5jn4q0kvmy1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wii5lhw.exe File not found
    O4 - HKCU..\Run: [wtusffoafrej3aiqaf68gh4xd] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g082rcf9h.exe File not found
    O4 - HKCU..\Run: [wvhyhg9i8yptgsgmbi] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ref2h45zrqtqv.exe File not found
    O4 - HKCU..\Run: [wvjot95yveuq] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fy8ara.exe File not found
    O4 - HKCU..\Run: [ww93i3cyw0tx0l1sugh36ziiy] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\opdcl1f6y6m9i.exe File not found
    O4 - HKCU..\Run: [wxd4gog7c83yoy52h742udq6m6bepma6j7jg7qb] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ebdkq3pthgge.exe File not found
    O4 - HKCU..\Run: [wy2vz2jin61le68hn8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\bih35ucw8.exe File not found
    O4 - HKCU..\Run: [wya76lboar3m] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\skvq9h.exe File not found
    O4 - HKCU..\Run: [wzrz4kmj08d7bdn5xj9yy0k63xh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\v7xy3pcbw.exe File not found
    O4 - HKCU..\Run: [x44064c6qsrc0yx93jr8a0run7d] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\yicwnm7.exe File not found
    O4 - HKCU..\Run: [x4xxtz7zvibw4jwh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\xd1smirk7c.exe File not found
    O4 - HKCU..\Run: [x7vvf5iddnmat6pjz7irqmkw34ghvdy1jf7b] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m5unejgymu5.exe File not found
    O4 - HKCU..\Run: [x8qcviwmp7lx62j4i9] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\obxh6m.exe File not found
    O4 - HKCU..\Run: [xdqeek8vle70n7e200h8gipfb5] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\arnsumilboa0.exe File not found
    O4 - HKCU..\Run: [xdvrqpe4hfbor603kv8ts06ivcegv8ia6tvx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\aw6ck3nibox.exe ()
    O4 - HKCU..\Run: [xh7f6jon18jr4yspol49m5gob0nvlvhoyvpm7adronkq35] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\tkt1jhlh437dn.exe File not found
    O4 - HKCU..\Run: [xiqep92arss2zzj09zca27l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dy7vvdhs6.exe File not found
    O4 - HKCU..\Run: [xisy51aq24v1i5pk2y8nt6hf284nn3q0k8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kjwj73khm.exe File not found
    O4 - HKCU..\Run: [xkahvlyy84j4cs8tlj93nbz3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\n10eqdgney3r.exe File not found
    O4 - HKCU..\Run: [xmeianwuh45kmhoqakdpegggklezl5tjvs] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mpqk7c.exe File not found
    O4 - HKCU..\Run: [xpupjnh442xs2x2m] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\cbgauyh2t.exe File not found
    O4 - HKCU..\Run: [xpx1dxgard3loywu4yb0wo7rddedu9qdk711f4iz1tj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\wkaea8f9.exe File not found
    O4 - HKCU..\Run: [xqgwi7hu61521s2yg6z6oy0s6lec2x6] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mma5qghmb49s2.exe File not found
    O4 - HKCU..\Run: [xrjhnda76coc5lvqe2gtk30] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lif08rjrw7.exe File not found
    O4 - HKCU..\Run: [xtk3t4w288jygeu2qwhcid1yz8pnakhtu7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\mxsig6af.exe ()
    O4 - HKCU..\Run: [xvyz0jztrqt3jymst1pg2e17v6d45bt3hvskl7s9r3u] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\kfujxu7826.exe File not found
    O4 - HKCU..\Run: [xx82gcd4zj56mtv7tvzr79czys8p67vttaf3] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qnr49nloqwy2.exe File not found
    O4 - HKCU..\Run: [xx9uh978iu7e9ktjdaw0suw7vqcfyogx2j6lbic1do6psyod3t] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\quh44tywoi9.exe File not found
    O4 - HKCU..\Run: [xyv4g6vqldnk0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\m13i945760.exe File not found
    O4 - HKCU..\Run: [y4x5pbov6093sn3nlwgyzfolmfha4xnc1] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ijjqaztdrb.exe File not found
    O4 - HKCU..\Run: [y5erjx6hur67ame6b8kb51ltf65zmp38yrz885g2v] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\g5z69c5c79wj.exe File not found
    O4 - HKCU..\Run: [y9mungf7bl7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\equrxx.exe File not found
    O4 - HKCU..\Run: [yafoan0itci2m0yhro0hooewp6ujc0ptua46vegu9yyf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jprbtra.exe File not found
    O4 - HKCU..\Run: [yapeyi9r9ot27g00hp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fflxxugkvb.exe File not found
    O4 - HKCU..\Run: [yaul5jxmqsitp2mqxwildv6wwxb3aeeiqrxdh0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\oiocu5juy.exe File not found
    O4 - HKCU..\Run: [ybg277guru56pam6bcdhvgr4ljcyvpq5bmqzc1pwg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h29uvxm1wce.exe File not found
    O4 - HKCU..\Run: [ycethbtz6l9lo8aineoy1g7qgdofyctjuyyxtd9ovg4ujp7h] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jbyg47kzjf2rl.exe File not found
    O4 - HKCU..\Run: [ycl6injq62rf67or3jfdhc4o8iboij885lf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\jgdadnh5t0.exe File not found
    O4 - HKCU..\Run: [yduea3vmmpbwx99xvfsd14ehf3petga5n7ojs1eb6bj1bg] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hbznngr36.exe File not found
    O4 - HKCU..\Run: [yhs7b40392ouym2mvjk8eulvw] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\efim5sp.exe File not found
    O4 - HKCU..\Run: [yijgidvjdqdk77afillt4yutsx7ro2937l] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lqb2vd8wq6z.exe File not found
    O4 - HKCU..\Run: [ym6714bfd8jw79gpi4uv69lv0iu0jopesx] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rn2z5b74.exe File not found
    O4 - HKCU..\Run: [ynmzkhq1tmfnr4ypjop5dzof2c9hsfksgb1k9j] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\du8tpkw.exe File not found
    O4 - HKCU..\Run: [ypxj1rvxmuomdxkk16b9toz] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\adxci1969.exe File not found
    O4 - HKCU..\Run: [yqbjz5djqv6s6d9e5vt5wgkllqqj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\u0co3mk0.exe File not found
    O4 - HKCU..\Run: [yyeyj3zp2ofmu7ybao28ivf31ap49] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\b82o87l.exe File not found
    O4 - HKCU..\Run: [z1o1tt07jlfv6j35bdjdm] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\pqnrvqrr.exe File not found
    O4 - HKCU..\Run: [z5kbp0q1rzpdons0f5w73tmgppki4i3mr6kyu3hhvraufye5p] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\h7nemv.exe File not found
    O4 - HKCU..\Run: [z5qr5e8kmtuzq1o] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lll4gmo.exe File not found
    O4 - HKCU..\Run: [zb0oh21jvuxyn1472luaiq0vgsp7lcezavxv0gmis9hfj0] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\x7m2fm44slu3.exe File not found
    O4 - HKCU..\Run: [zb4bb5mal1r77nrp7wzi9lqof2vv7qy11s2vmzo2vp5gp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\t8u7lmg67.exe File not found
    O4 - HKCU..\Run: [zdheffbunesvtv5mkmr9gl6jryy63onv0yqbh] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ad2vhk5rjyerq.exe File not found
    O4 - HKCU..\Run: [zew782pfozd1v3ryh883z9rrluci0h0joeopoyas08lc7zv] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\fne3g4lbh.exe File not found
    O4 - HKCU..\Run: [zf6kgydqhy0mgexawn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\dv46kaey36.exe File not found
    O4 - HKCU..\Run: [zfria1aid2ysf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\hcqd1ugd41msx.exe File not found
    O4 - HKCU..\Run: [zg0eeoxotj3ptys25xc9dk6frmn] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\smjmii5f4rj.exe File not found
    O4 - HKCU..\Run: [zi2hap6p2k0w92kx2a5nrkpdrl8m66y8] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\infjlke78bv9l.exe File not found
    O4 - HKCU..\Run: [zi6bg142m4u1wzo64wenwk] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\chfc2s65.exe File not found
    O4 - HKCU..\Run: [zkvw4bh2l8i4jois1rtafcoyejwccad1y82k5ilhv8m6uod7] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\ypgx6sdvuo.exe File not found
    O4 - HKCU..\Run: [zotqnrxb5flzshr] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\k435y6eamk.exe File not found
    O4 - HKCU..\Run: [zp50e04nz81aiupg7f2leksouiyhi19yck8thzranv99] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\qmuyv0v4x9.exe File not found
    O4 - HKCU..\Run: [zpf8in6hilsttg8gntk0nqk6tfo1egdjs09bbi0kp] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\o491olgqh.exe File not found
    O4 - HKCU..\Run: [zposb6i4p57p8z42l9hfvdqp6n8wivs4bmsxf] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\iba1o13s.exe File not found
    O4 - HKCU..\Run: [zq1815wbt6q89nq1kw0ahq40ikq2h2vdr7kux9k] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\gb06aoqch4.exe File not found
    O4 - HKCU..\Run: [zq6bggbaayeersx25wn5a4dbgl47bmt3a5qyicyj] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\lk8fguyfsxo.exe File not found
    O4 - HKCU..\Run: [zwbtbhmkipf12j2i] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\we7rzpfutu8.exe File not found
    O4 - HKCU..\Run: [zwnq0u5w1ubze1ekk0q1e1xamlalmjup9jnb290] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\anf7fmdyi.exe File not found
    O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
    
    :Services
    priocukm
    
    :Files
    C:\gncefxmn.exe
    C:\WINDOWS\System32\scmqxbwk.pif
    C:\WINDOWS\System32\alrsvcf.sys
    C:\WINDOWS\System32\activedss.sys
    C:\WINDOWS\System32\drivers\b81e751b.sys
    C:\WINDOWS\System32\2051318624.dat
    C:\WINDOWS\System32\acleditm.exe
    C:\WINDOWS\System32\ascbalon.dll
    C:\Program Files\bpxogo.dll
    C:\WINDOWS\ugetaxuh.dll
    C:\WINDOWS\System32\win32hlp.cnf
    C:\WINDOWS\System32\drivers\65745371.sys
    C:\Program Files\Common Files\dfduk.dll
    C:\didupcyv.exe
    C:\WINDOWS\System32\test.ttt
    C:\WINDOWS\System32\uniq.tll
    C:\549727704
    C:\xcgugvn.exe
    C:\WINDOWS\Mcibacibiso.dll
    C:\vydnw.exe
    C:\WINDOWS\System32\drivers\eccfd102.sys
    C:\didupcyv.exe
    C:\gncefxmn.exe
    
    :Commands
    [purity]
    [emptytemp]
    [start explorer]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • Then post a new OTL2 log ( don't check the boxes beside LOP Check or Purity this time )
Okay. Log is below. NOTE: When the pc restarted I got this msg: RUNDLL Error Loading c:\WINDOWS\ugetaxuh.dll The specified module could not be found Log: ========== OTLISTIT ========== Process winlogqn.exe killed successfully! Process fjhq8fiecsg4r.exe killed successfully! Process a9g1ie0e0h1.exe killed successfully! Process al412f.exe killed successfully! Process mxsig6af.exe killed successfully! Process qhlg34iho74.exe killed successfully! Service\Driver priocukm deleted successfully. DllUnregisterServer procedure not found in C:\Program Files\bpxogo.dll C:\Program Files\bpxogo.dll NOT unregistered. C:\Program Files\bpxogo.dll moved successfully. HOSTS file updated successfully Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Exobenoguq deleted successfully. C:\WINDOWS\ugetaxuh.DLL NOT unregistered. C:\WINDOWS\ugetaxuh.DLL moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Ytatifur deleted successfully. DllUnregisterServer procedure not found in C:\WINDOWS\Mcibacibiso.DLL C:\WINDOWS\Mcibacibiso.DLL NOT unregistered. C:\WINDOWS\Mcibacibiso.DLL moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\a0yp5t1vjlndptk deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\a10dtgzr2ssufqzqrbt9 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\a3mjae23mydx0f deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\a4aflixi4 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\a6yw97h2i8ozkf2oiatknu54vlvi6wylmka7yy808spo6r deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ab5z5ik97nq64ud3l1ohkky deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\adcc6fkwagpy4gvey40bikd93sqla82xff3c6ixtb4p deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\al77pe36xdotenbe2tesvcl3y63rehxuvoqqpt5lh6f4drtg7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\alk6fv4l0t0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\aq874ie0n4yofoq3rochd2a3b7egwexlkh8oyy1hvosy0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\aqf1q6z43chvpj4vp29v69dm4smt39 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\argrqq95ocpf1cdo0lfo5dqfzincq63iqymed deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\arj0jv0hjrtscyujh0c43yjpm1cu2jxujr8b deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\aukbus4d056v30n7jih0zyio1vxc5nl4ehi5duwc6oulvk1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\aukigub7h9i0hrndfabahldhe2rx05d75wg8hrhpx15ekssh6k deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ay151z1xppsd8ax4u1rhzca8v4 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\b3t7sjnr1sagup9lsf2xntgg35oggft deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\b4coo7g6ydoa7kavy6mcv9ytifbgia0hnw4v9ra96z5rdc deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\b5syv8r4qq1m2z558pgfc2eijsofyvjo deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\b6a8o1oh2ye1hmn71y586xnfpud57ide7j deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\b6pfhhth0tbxo deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\b842ma29k0ymqun deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\b8hmyy4jw14i8yweq6udwn deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bbf8wbnfcgywimto5afj1w deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bc4jjs2ivsqsmzwndyuqabl6esy5srzafg2i3xfzwak6fowoy deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bc8nrsq309p93g9zpkzi90deti3ffdsl3hd deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bhcofmbouep7n8tizd6dacumj3s2ivf1tawmw55q4c90ox deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bk6g9a03n9y2v deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bp4ukhzdi4tkm8we4ujsljsos2qtsqfuv1z deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bpjuclipagemxe5jooul5lmji8zmbiy1kqnzp6af6mjn deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bpynr9d58pe0dtoisp3kdl24d9jgegm8497hoox3chts deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bw712hnxn7q17uo deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bwgpx24dq38lhntmpbeu27 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\bzhbcon0739bfvhm deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\c0gz1b3rm6jtdexasu299fj8ghrhskd8m02engyw deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\c1astzxxoyjk9dv15x3y7mb0sz8l0u8l7cokqhn207l deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\c1ui6wu2aujzopu8k deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\c1v5eyykqhe6a2kk7e1p7qhno9b1hdwki2uoe9h9g2bzyok deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\c5n002t21pjoxzk1x5qe5u8tq9fdggkhp4gkq7gsxm7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cad4btdjn50ppt6w4jib872pcbq98bozmj8qlq92ae1g deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\capv0o7q71e8ia1nm deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cc51izrjnkgsate8gslzq deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ccdr9ukdv5rrgyh4m37d deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cczdwywp9aff12segyezpet9z100765fb3av9wjz deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cildvek4r6r5hnewdcscfm2m8mbo2ddslk18rpdmgvh deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cpymh7j875cc4l3ct3f64dobv0vej9166p3m deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\crc3ryh4f3qjfffdczkle0anwykrc3kus7y3exw6miiu4mq deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\csq7rpvzbdh9y36gj5i4pnz0mfp2mt5f deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cu22k6of97oftxujwtgkleo3u6d51sr18ehbb deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cu2qsu5yh4u85qau4uimz2 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\d6a2df3n1bi6yxjadtqb2rinc8dkgheuiwzr6juohbi3or08f deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\d8dxh446x3zqnu7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\db8boxr9m9fkhfu4vyjhtseju0am deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\djjx49l46ay deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\djxx63ajjclwzl5sl8h8yxc26pe0r719gyo3b deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\dkd899qgowz6 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\dmchitsj7u2y5r4ujvd3f5fb3zfg3vnkb45ceqws deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\dn3mp2ygpghxlq94j2xk0bxiriro6wu5zcg344d15cv7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\dn5nmholo deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\dplp55mye1yomllxpwfdr7kbnfvg8rjpg3gmi deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\dqwlhghnhe2tlo43b3r46 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\dyjatkj3q587qhz4br8irhhfijspmszru0ce deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\dzvvjfihqholxt27coakxw3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\e4umy7rze33qxmomosvvh82fc85f1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\e56bzeqiuco5thjt784b7qo3qzpqvnhy563q8x8fvtn1ejns deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\e8slnsudau1ebep7ay4n015968v4k9oq2ekml6ao887was1n deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\fjhq8fiecsg4r.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\e9flczalqp0z3ab1aglw deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\edaay1r0nq73m4l2kmr48wdyc1b6vt1icjo1jifbzy3tghoomh deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\eel816dl4ka67c57yhnsuanaushlxrti deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\egvkoyev13lbxq72t deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ej16oqd9cjnu7dre1q6iv4cxt53sl25jn deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\elajgrazmmshibfzywx34vxqvsyu9rx deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\en32x5u0aliw1b383r23k0apqg75flac2zjn1vx4v deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\encdha0d67j1wgmtg3zmtihw1vzdveqe9z deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\enylm6kirntwcox9mjapicd3nsdax4r deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\eqlms2a4zl8ay63ykue739emsa deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\era18kms3gtfom0mzr3fy6fmdz2m7kq2trr9e8o deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ettklybgsy0tp7znhoqwvahwz59yp4d7g6q4avxneqoelos8e deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\euqh2tza9hk2y99 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\evrkrxvpejjczuys5bm0wyvc9y34uwf139xu53yxh2ky deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\exl4c1zi7qc5gtnwbqjv22j8h6d3t deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ez57d5ly87icbi54uhcw deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f0klyy2xsbhwe22occkh52z deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f286w6cfnzs81jdtyzeceg48cfvso8wfrnd6il deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f2kugcfxdxnzocuv0zb6xiv deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f2uq10n8eni3xhg4rjskkbmknxtv9962a8av deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f3i1fycjb3nr072kbpudv7ri0f deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f43s8iyh4l7u1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f5r0qk59kght0qx781b deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f5tiaopww4czsu2ujnzge5dmuxw27yif5lmgstj19ojcqojzi deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f7htqe2cjpptpnmn74ryowla8d23y deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f8dfy574jnppmof333gkk deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f8hasqzj7scj7s1pcv1pk2 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\f8o5xzh9zfpwc9tkkf0nkjokuc20odcfdhaz7qf7gm deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\fb17gzfkxchbmvgmel4x9umfie86vkwao5rla032h2 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\fe8s8gfaekq98462umqo deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\fja6lspnrk2ar4ee3m7h6a deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\fp8umyfol5xd1pqks6ha91i87gswcdx046lnhm deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\fpfxvoq4ggmxkiquz22zju22d12hoi1i deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\fqvfz1xer6se7gi82e9h7kxzo8i deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\frfpbbkn4b deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\frhe6wu9l deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\frsh9hwgjfim9 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\fsmtvwtcnem1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ftoe5wpw4ejsb3nzl5w70t5bwg3tkg deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\fzppabjpezbtpm8xhdi6oru89bopowfs9 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\g0ob6emvcpyt25eon7id49rv9k02qsbtatygxj1hoe9507j74 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\g2igffup3hdwwcqjdd423gg1m2kvfmpou3p5nem deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\g34rh6id1qpzcsn7g20gnq1klq deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\g53k8bmqe3wgd2or293jjgfs3z6uxos1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\g5zoktalceblvsz6thujzunpmz0qfm748xhg6b deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\g938mnp7unu5 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gbux9fxnyzytnj4n deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gcq4luzckfhymkhzfnsahywg4y deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gf10z5c68ot1m296ke1x2wxg8x55ksqp9z9snvcti2cqx deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ggknecbo3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ghp95wl5kmljzxv7q deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ghrcolbpufxmcwvu461ipyz1ao1ecogevl0ru9 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gmldrmro7he7w475bgor2wouyp7u deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gmodxjizjpygivyeqtw587dxtmst5grb00x4 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gv7h67d9a0c deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gwhhv3idexbbuk0izkiq5cu5n32zqt775vj6jr deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gxonqt74bg4s4je0qu7fnvkp0wfhwnbnodhex6he24kh125vs deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\gzg88mc4re6bxxpm64ql3lps2gnful1e12ae0geinjhsf54z deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\h28v607dl0h4pbdl5sze5zp2m8avqz4gpau3rrttp5f0nssy0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\h2zo40tihjesvi8m3t deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\h3vqycvdqvi9f4khpew4ekeojutg4lb0jjw deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\h5qcp034a59ooftk0pgangxrgqjv deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hfa73u3wehxv2tx9pt4qk9jw1ffrsey3l1qyc1fts58z deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hg0ytg2kh4inve39xnuqyce29ld deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hiz6sel0hbwowpscc94eux94v deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hjlfxf15vvp5qm8y7e3j84ly9cy6vr8c7mqx90mg deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hmvqrkkn749tbge2d3k6dutih deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hn0tepmntrg3col68q1uszqvsd6cgekmr6ns7p8bo deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hn4tc7b00tb5oninx7ez90 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hp09b0bg3jdojtw99o17iicn deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hpdhrvux7ibasf928kxhmmargnb827oi deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hrg9trc8z6232vgt3l deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hwblcp9cknu539uozrwu8oi33znxgu deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hxd36q35w2i6njwcsnm740unw14 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\hzv75h41tlpkwk6dlqt7ndbnh deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\i08v78i44g5m0evo87278293sl0y73pc9ougyhfq9z1hg deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\i34c1ltqvlsehu32qf0oyi7ileux1ttoeopi4xltlgwknf1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\i3gqiec2v929d53rs5d2wt2hn5cp5jhtdj73dt9 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\i4tq78vry71aqbgku3qzaa9hsse deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\i5hq3cecyjz7046fjzjn4h5d77wryx5kac35ztctw75zp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\i7hytriif deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\i8gtjyqwxl7o5wp72jl7lmtjt7ej2ion17jygu deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\i936dobs9skjnn1wqbf8vil1sygv3fl6hz deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\iexidy5vagf deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\igmz0uo2umk7qmz deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ii44q68pfd34ujsc2lhuk2f2lnpt2i deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\iimeqcoq86nu5mz4jt8hc4g9o59nc deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ikm3pf5akk0u6f5dlgp5ll8j34koekclvuxaquistpu6b7cxd deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\IncrediMail deleted successfully. C:\Program Files\IncrediMail\bin\IncMail.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ip9m6cp1pda091 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\it8sbpqa9ol21 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\izabi0mzdlfttac4we3toaygkwbaludh0a0ymikb deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\izt7aet01hp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\j0g8lta2q4y8vtap4o7j1xztajco deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\j4t24kdkgbbl deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\j7751seccyxv7du7o94mngsj8wav deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\j7tffgwyumxdvrrl9ms0gp5ba343ja8nz8xfct deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\j9igcj2oiwo8 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\jefn2omkq deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\jf8fuf1d4o1q7lojbpomqc19zu3xh3n1i21oe7tlifq2p deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\jkm3asxs0s0owu5mwvewfwsvfitwfkw90nlzgujcy8 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\jmjm29j9d1xqgf2pc1i81sg0vis2 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\jnns2aghz4zzc5xcr5q2rdx8yqs deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\js4z0mg9z6265 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\jtw41n78drqe7cigqavnu183l45fajc2u3jnp0rba deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\qhlg34iho74.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\jvvq8hqpz7kwry43xhzgsakblnmi deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\jx1rujwq1qtim3yg deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\jxtt8igwxsf65ludmct821sunu2ro deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\jzb257zxzin11u8lqq8g0ao9a5r6umev69e deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\k08dn3njpqxdfqqjreb5 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\k45h26r1a5py7vyk8stwb8n8qmeyxt2oi733szyundich deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\k6w3656a1vpf8wv deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ka00ul6g1d9 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\kcigblx8ynreo2m0gignizezj8u8expvyb deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ki70iwt539anjyex8yqwwzl842oyrbpu4m4bzp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\kik2zjlu8t4no95x26hp0801npdludck39a5kwl0tpytgj deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\cdeje2yi22zc.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\kirswj5dkoywl143rwt4jgtd7zydx2brk2jnmitc2gx3a8miuh deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\kjahrfoi37rljanfaw3il7fhjd3f deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\winlogqn.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\kmld1uiqk0ecch6g2whliijj8rb8sotc4d deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\kog0dgfib0cgli2cqu1tj3pz7b1jpjj5p59yz9g3tft23fh2 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\krhf7lpdmjfzbpaoq8c7yykgz4gijx2oswdr2zy2og9mnes432 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ksdtbfgifhdson03ucwardqhqg91fatvinb6 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ktadlz93g0zwemigioih83qm8ejverlidxb5cwprifvvigkp90 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\kzcrit1w7607kzo8hypfym7i8pwkrz9swrf8 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\kzrltkbvzmqefqfwylxfj deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\l06ud6wzxm9u3pkyxnmv4v5y135tsa853umpxh5 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\l1qc79h6ygz4hmknfvng3hqvlox9vjz6cyk9u0nk3947za09s deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\l1ymvrbdnwu9s8vr1pp9wfzhjqria6ahqvmvt4u9ems8pp0r deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\l2ctbg1kl9xesqvft9wuod3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\l2naj59djds deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\l9h5e0ibloz4wdqvvwivveemxaugqyie1itkwr5mik7xvb7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\l9m1sxlr68gf7quc7708dqn00mi4iiqdela88c6im3hm0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\lauvj8t6g89qulegvwnikhmkj7h2v6h4 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\limioui6ginwmghcunscq2n7qtvs8gbdn28y7btnkbd deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\llo7wnybv3ftcqeetywm16n7v6l5m6tpip deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\lonxey4c2t142u1c75na4tvagjalmoyxulqbkx37d3ovgulr deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\lqyh7x9wbuqjmgwg51p6u8esmxeoeapt4amf1tf deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\lrryujy49n23mhie0umtngvdgsppfryshiu8fzow deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\lxshhpj5badvb87az6otqirvx deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\lyxca9e0l0hh5ipaiuxllpjef45yeaj3y1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\lzsszhgdhdhcx5ghpo57z1v8nq9widzk7k94xvr09v42pun deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\m0wq3abcssce66xa6 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\m274msvvr9gctol60611u8p6otdvr06dxqsl3i6uurb7r deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\m3oo2t0jq8abz5nvo95z5a98d7cowmuzejdtfcibg79eyk deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\m3sy2pbkmcl deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\m50kyr4yf8oe7tw5ncdv8aqkalj5106u deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\m8j5cgt59z5e9w8gvuvom6uehxrpx7rqkigvxv0l deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\m8ynsw2t8dgj170app5t06x2s76f deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\m9t7ofluomy0vofgyp65gjsz deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Magentic deleted successfully. C:\Program Files\Magentic\bin\Magentic.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mbu42fx6jzxxjijlr5btolfl984ht deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mc1cr3dhwzb0ejnxguhsobx deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\md27hvbmjcs4v deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mfr13171a90kdm4a2jh9l3r7pz1lp3a943786 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mg6gnm3ta6hpm22wy deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\miea48hmjvau0b90pajyb4haaawjfcde6c deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mijn82zn1ggff015qgp3azmg25 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mkaisjmwcwj3bu5jz98msb6gg0yb0sehlxqstgf284g6g5r2fe deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\ay4aa8di.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mqbk56s3zle2l80jh4injfopaki0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mr1dxt0n2iqtc6jm5t5ugn6dtn deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mrxg4oufgokxfbxcaaz1h17l3cik deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS deleted successfully. File move failed. C:\Program Files\Messenger\msmsgs.exe scheduled to be moved on reboot. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mudzcoymiwwsbxk5jx9w65fxn4p6akqg7z deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mv9pg17jy1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mxxvsf3er2w76 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\n0dcurf5vv8hzwgzdp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\n43f5p0kb6j2mjt9c44kqyzp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ni40iga7wk07pifa7gnzht74mq0xla316xadi0l2ou3ssodb deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\nilzcer0ydydlxziyryipr3g8t1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\niz8todvep34of25dc5x44 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\nkhq10jzlshiv5rddgczizurv deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\nmfshocn0u1cx deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\nqw9s0d7dfnijpt36w9mcbwazoeq0k deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ntmnn29mu6ws1pl2s7mdydx3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ntr1qkj5ujg0vvh3nd0j3ufra2etwrer9684oe9757 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\nvwkz4nw8ak452ifz0icha569ld3w deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\nw6e668fdvlgqvzl2qjnkp9jdmv3v49epc1msx1xyglh7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\nwvhcqzash deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\nxx5xdszn9txwpi5z878lcff7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\o8tm6cnwmtgp9weihtfs7h47cceielmw8xjrhkv0mj deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\oavb5d2fcmsulu deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\oegdnxdslxqwbmz deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ofymudzi9482q2vh9l5lv7uxos8pahn deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\og2xi9qcwqmgyq4ygbefjxrn1c deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ogbi0iqcmn deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\oi777tv3f53uj1bt7lhzvpgqlm deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\olyx1fsw09znbfocr5p0ucugkj43d2woetkm5s8ws6xl0r4grt deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\op96uozllw5eh4sh5sycgcjrbnzcri67z2agjk07jc deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\oqoxw9689x4mccui3afxetd2uk deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ou788wvd6xfvuvf9bjt544tn8050 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ow4ycj4tad0hmahiznl3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\oz2b0vooo02y54oy6b9xbc23kihmrbhqe756cqc deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\b1sqlm2wcioo2.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\p4zb24vy06b9snch9jtidadsidgjc162yt deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\p9n84o1845rfslt7s4p1b6vevq10paoa1zkq4mvdfle0b3ix deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\pbuohj9gnru0yllnfyxqka5pxao31h5pj87ys61gm1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Performance Center deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\pgotaa6x9qz2soy5mx2hx2hl0qvcsp1o2wibc deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\phk6n0np9f deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\pmm6lkdpux5a1hsycw6sc8u7g58j18 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\pnnb6grz0bp5bflbypi5 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ppgif2ez57236pjjir80e8xgsx95ez9j5nfl7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\pput79ew2ejf deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ptnb3fv58nwgxe7b1ws2qudc91v8p97p6xcy deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\q1blf85eighi3yp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\q1zysjmsafcnyon0moa3rwrcfrru79ucs2xedr deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\q51xxq6t62z67ilfehk4uni06vbbtboyu3o44njkx deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\q6313poy4 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\q64ahz9t7gejnxw deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\q7rk39bbw0tiiionlmjoifxmikoxqjw5xql deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\q9yfybd7457j9zkqurrxda74devodmibpp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qa1wecheqgrgj1rff6z5bx01cvaav1mdwkf62vw5fdww8tzlg deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qbga2wvnp71nyfrh8gvylhl56eyjm deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qe8ms7gjeeroumwj6i5 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qfjqftnz9ccj9owa4w2nui7v47sxauysbxe4squnep92q9x deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qga0n7qf0k7jbvqnebwxbzdm7p62v deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qib9uvi6h3ei3oftlqhkzrkmd02xuv8qiftapzasphy9cyrzhh deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qjxosn4btqz489v4x85knq9un6ifv0m4o9dje deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qlgjxzunm8wvyv7lovmk67mvknyq1ydqt9ic deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qmt9p45qfu7ju deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qn9notl1izt594a3ry2 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qpbw9a1v0ncwep61av4nkuvb2qka0vgsa deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qpkbphebvgl5o deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qpx5kels0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qqu3eu9a3s80j8dkxkrb61zfq6z deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qr1blwdl5qeycmuwvn7p3fbh74zx0xes81i2ct90hrny0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qs0uqlzi8nhdfisxin4x3pwwtzi0s57iqu deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qur8juwffm1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qwr1hr1nkn2l60qjul799nac18i deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qz8wpfte457yye2kw1n14fwyulsjgmrrhky13nvkeeo deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\qzztr76s30ka5yfwlrk9bg0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\r04h3shvwnld9id4e9bh6io8dhuvhon4x09pr362id9cbit0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\r155jgss49pf3sxx0b191tbuwu deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\r2d560bek05gacir2 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\r3lkldwidmtsk1xapjwafmotrtb4n9wgd deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\r5wyxq12rjgya9jkljgir24sotuswv1x deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\r67ig9il3qqycz74gjptm deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\r9r4vwcac7tbzv7oam3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\rb8xb3cacvc4 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\reirkl5y6cdrod deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\rf1xm46vfto0ycry2dbp8rvi1k deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\rgrklzosetdij0u8sp7np4f3fhc4 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\rihvp74lufba9v15ofw4 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\rjd8ji7uo0m019i373ojrv deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\rpc8kbevz26t0porqs6az1aakarkhjjf6k4wo8 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\rtyues7nkxgl56l9d0274qpepjauz4y79nb0h5x7tlt9 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ru4jyr283kimarj9edemnv5i21zu72y4v6zgxgba3dwf deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\rzvuhubk8m0z3tpe718pma deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\s1c85jeua8e8zywhppp7dwm9hsnc4n0pdgtk1wyjv7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\s1rt82u8yc7dq06gt2r3uakxkztdbanll5bggd2555b0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\s3vqvx5xh82zi3bhwm29j11s deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\sag5rb4sflz153wzz5sfv56s0aepq155aqcbntkx65g deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\sba7nb6nd4lwuh3b7usrgzdeoquawuocky6 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\sfjjzm3pxvl5stwiklfz7kd deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\skatxclepfkhr7j3c16h deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\sq6kz3n8ungkqoiviasts95sayb2p05um deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\svsgqerio deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully. C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\syar3l3k0ut89tpcemfoxqrnyeynkhonr48 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\szxk1obm03bf64t deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\szzjo936s7j deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\t49gc3j216ixh7hf4er5f7b deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\t5lx8qlc2500spi25 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\t7kpbqn6nz deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\t99p2llpr5rfg8p1whqzq9zj deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\t9bv16588 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\tacz0fapb0enbb85vhks940wnmt deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\tc02e9mo39vgwn6huhuffs3irfhn6150jryvdxp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\th5mi9182kwfp2r647yne6216jjceo7f8zq6kfpljt0x deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\th9huyegsf80v3qcg deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\tiv9plo2s2v20sc10sc65eqtxo3o0ecqj8te07xm1o0jh7e8gh deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\tlka0259n6pg5i8q1ra1mz deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\trxzh4zoir96xu3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\tvkox01fpgxxpoagxf67gwoyba0w5f0tzytpx6pktf3wkp0s0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\twi027bevmg9x87yeaaxsr9py3v39j1tnq14nunybfp6ypt deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\twkldk1i4dyusks2jbpjekig71or90gz8oxliwxrcrfeo0aex6 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\u1tk6pfonqyww6y6t64t7sicy4zo deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\u4nlkslq8iv4 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\u5qvw7hgpr19tawvtpl89xacsu3ru5ua7zuzuuias1ofv deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\u6kx9372tnfxk deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\u8zj3krwox0a3pq444x9413p2ssk77g8hd deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\udw8wao3s9bkdf6h75s0rq deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ugkj3ldd9yxz7c71niltwup9pzpghkvxn8e8 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\uhr2c0tchkswdpbb3b deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\umppaugoeauslcfi14sdfvznww deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\unem0dms4l4xgyuita deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\unnyi03q0j3rskck deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\urkiqbgyjgpr deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\utzomkbbrzs7q6n81wsxz1ud302sohpcxswmo7qw7sny9xa0d deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\v1fmqt33s deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\v4isykz08sbr6lm deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\v7bf5dflhjt deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\al412f.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vbwtuj1rda6m8825i deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\a9g1ie0e0h1.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vd3u32fdmeaaarttpxgtu3rs442667yosq9nho4 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vdk68kwcj7u1h5tgnlpy7p deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vfnxjnvon6h88dsouztqo957le deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vgmmfgcipvzw deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vgxw332czt2a5xx2c6311qu67gdim2ovqhyl deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vhtfll17dfolfnaaovf1s9ni7ay2sbiuf45su3sppp6l deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vk7jcmzcm3297jtbsbltl deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vm891vnut6d6835vvf8xxunynw4v7xxgkjoc49zcjrj9d deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vnx2os1tjv8x3umds8u deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vo87gutfk3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\voma589agwmxrro10 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vqz6ldu639l3t4a7u018lqkuquevox3bug3ki939xzr4sqed deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vrsie03jgb29vkf946vrhcxzt6h deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vul7e3qynjg2tea8n69bvfvcmz30cv27g4mb85da deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vyx4longrjfqd3vs8lhpgsw2 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\vzmzfbaxcsu5tbot405h deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\w1m3np67niteuto4gc1ijkwqj9ll9ajk6p deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\w2rbq43jwm6aj3rcv2075s9am3vaf1dfvw2 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\w35dmkykyeusyfhg0a9hcyi1qca5g7hmursa1ffov deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\w5gzwj7lgnzjy6bfkw74vca2s0tam9m5fo deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\w5sis6lmuvah8lpdlvorqpzqvu1erti6lvwir72vut4j7i deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\w66nlxmzk6qj1iendrrs9n7bn6uzefo1zat9sfgspopfywv deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\w8e57j7muamjb2 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\w92hv88w7wmzlkunw87bm5oro78m2v60k1djj6o deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\w99a6cdypvpayle8xjymzcqljdtwvg7tpn2vkspvmxt5izobr deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\sz4ua2b30nf9b.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wb9ls3ld5pb2v8pgf4j6w0bxsri7wmnalvwol deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wd3ljervz0zgkhwelya4r3oste8s15 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wd7ky6yqpcx1y1f8bbo7shn8grwevaaztjvaw4mnud deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wds4kv5au0rmm1cxrfowedzun16no5461trnbw08aefj18 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wi2fu0l08kio70ujqiafdxnp9lb7p8nycchg deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wieoj0lu7c deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wj7ymudejso72fcx46fkpe5avv1vgilhe66m2gf0cihvrt76 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wjor4anhciwuakovze4rssddf0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wole2xakutf deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wpvz2ehoudpmtf3jece8hv5aow7tqacwcqkqfu deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wrmsiush8xcnkdu deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wt3k2gpywgxj8f4s3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wto8rt5l02tzia5jklb5x2k45ckt7ny8blx5jn4q0kvmy1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wtusffoafrej3aiqaf68gh4xd deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wvhyhg9i8yptgsgmbi deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wvjot95yveuq deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ww93i3cyw0tx0l1sugh36ziiy deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wxd4gog7c83yoy52h742udq6m6bepma6j7jg7qb deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wy2vz2jin61le68hn8 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wya76lboar3m deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\wzrz4kmj08d7bdn5xj9yy0k63xh deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\x44064c6qsrc0yx93jr8a0run7d deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\x4xxtz7zvibw4jwh deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\x7vvf5iddnmat6pjz7irqmkw34ghvdy1jf7b deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\x8qcviwmp7lx62j4i9 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xdqeek8vle70n7e200h8gipfb5 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xdvrqpe4hfbor603kv8ts06ivcegv8ia6tvx deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\aw6ck3nibox.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xh7f6jon18jr4yspol49m5gob0nvlvhoyvpm7adronkq35 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xiqep92arss2zzj09zca27l deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xisy51aq24v1i5pk2y8nt6hf284nn3q0k8 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xkahvlyy84j4cs8tlj93nbz3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xmeianwuh45kmhoqakdpegggklezl5tjvs deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xpupjnh442xs2x2m deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xpx1dxgard3loywu4yb0wo7rddedu9qdk711f4iz1tj deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xqgwi7hu61521s2yg6z6oy0s6lec2x6 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xrjhnda76coc5lvqe2gtk30 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xtk3t4w288jygeu2qwhcid1yz8pnakhtu7 deleted successfully. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\mxsig6af.exe moved successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xvyz0jztrqt3jymst1pg2e17v6d45bt3hvskl7s9r3u deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xx82gcd4zj56mtv7tvzr79czys8p67vttaf3 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xx9uh978iu7e9ktjdaw0suw7vqcfyogx2j6lbic1do6psyod3t deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\xyv4g6vqldnk0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\y4x5pbov6093sn3nlwgyzfolmfha4xnc1 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\y5erjx6hur67ame6b8kb51ltf65zmp38yrz885g2v deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\y9mungf7bl7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\yafoan0itci2m0yhro0hooewp6ujc0ptua46vegu9yyf deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\yapeyi9r9ot27g00hp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\yaul5jxmqsitp2mqxwildv6wwxb3aeeiqrxdh0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ybg277guru56pam6bcdhvgr4ljcyvpq5bmqzc1pwg deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ycethbtz6l9lo8aineoy1g7qgdofyctjuyyxtd9ovg4ujp7h deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ycl6injq62rf67or3jfdhc4o8iboij885lf deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\yduea3vmmpbwx99xvfsd14ehf3petga5n7ojs1eb6bj1bg deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\yhs7b40392ouym2mvjk8eulvw deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\yijgidvjdqdk77afillt4yutsx7ro2937l deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ym6714bfd8jw79gpi4uv69lv0iu0jopesx deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ynmzkhq1tmfnr4ypjop5dzof2c9hsfksgb1k9j deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ypxj1rvxmuomdxkk16b9toz deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\yqbjz5djqv6s6d9e5vt5wgkllqqj deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\yyeyj3zp2ofmu7ybao28ivf31ap49 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\z1o1tt07jlfv6j35bdjdm deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\z5kbp0q1rzpdons0f5w73tmgppki4i3mr6kyu3hhvraufye5p deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\z5qr5e8kmtuzq1o deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zb0oh21jvuxyn1472luaiq0vgsp7lcezavxv0gmis9hfj0 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zb4bb5mal1r77nrp7wzi9lqof2vv7qy11s2vmzo2vp5gp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zdheffbunesvtv5mkmr9gl6jryy63onv0yqbh deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zew782pfozd1v3ryh883z9rrluci0h0joeopoyas08lc7zv deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zf6kgydqhy0mgexawn deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zfria1aid2ysf deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zg0eeoxotj3ptys25xc9dk6frmn deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zi2hap6p2k0w92kx2a5nrkpdrl8m66y8 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zi6bg142m4u1wzo64wenwk deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zkvw4bh2l8i4jois1rtafcoyejwccad1y82k5ilhv8m6uod7 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zotqnrxb5flzshr deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zp50e04nz81aiupg7f2leksouiyhi19yck8thzranv99 deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zpf8in6hilsttg8gntk0nqk6tfo1egdjs09bbi0kp deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zposb6i4p57p8z42l9hfvdqp6n8wivs4bmsxf deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zq1815wbt6q89nq1kw0ahq40ikq2h2vdr7kux9k deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zq6bggbaayeersx25wn5a4dbgl47bmt3a5qyicyj deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zwbtbhmkipf12j2i deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\zwnq0u5w1ubze1ekk0q1e1xamlalmjup9jnb290 deleted successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableRegistryTools deleted successfully. ========== SERVICES/DRIVERS ========== Service\Driver priocukm not found. Service\Driver priocukm not found. ========== FILES ========== C:\gncefxmn.exe moved successfully. C:\WINDOWS\System32\scmqxbwk.pif moved successfully. C:\WINDOWS\System32\alrsvcf.sys moved successfully. C:\WINDOWS\System32\activedss.sys moved successfully. C:\WINDOWS\System32\drivers\b81e751b.sys moved successfully. C:\WINDOWS\System32\2051318624.dat moved successfully. C:\WINDOWS\System32\acleditm.exe moved successfully. DllUnregisterServer procedure not found in C:\WINDOWS\System32\ascbalon.dll C:\WINDOWS\System32\ascbalon.dll NOT unregistered. C:\WINDOWS\System32\ascbalon.dll moved successfully. File/Folder C:\Program Files\bpxogo.dll not found. File/Folder C:\WINDOWS\ugetaxuh.dll not found. C:\WINDOWS\System32\win32hlp.cnf moved successfully. C:\WINDOWS\System32\drivers\65745371.sys moved successfully. DllUnregisterServer procedure not found in C:\Program Files\Common Files\dfduk.dll C:\Program Files\Common Files\dfduk.dll NOT unregistered. C:\Program Files\Common Files\dfduk.dll moved successfully. C:\didupcyv.exe moved successfully. C:\WINDOWS\System32\test.ttt moved successfully. C:\WINDOWS\System32\uniq.tll moved successfully. C:\549727704 moved successfully. C:\xcgugvn.exe moved successfully. File/Folder C:\WINDOWS\Mcibacibiso.dll not found. C:\vydnw.exe moved successfully. File move failed. C:\WINDOWS\System32\drivers\eccfd102.sys scheduled to be moved on reboot. File/Folder C:\didupcyv.exe not found. File/Folder C:\gncefxmn.exe not found. ========== COMMANDS ========== File delete failed. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\_hphtra07.log scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\mcmsc_87u26n5NwphuXTN scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\mcmsc_bkkWhLmoRH8iUUb scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\mcmsc_ib1DfMYZxv7ISbV scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\WFV1.tmp scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. FireFox cache emptied. Temp folders emptied. Explorer started successfully OTListIt2 by OldTimer - Version 2.0.3.8 log created on 03152009_135216 Files moved on Reboot… C:\Program Files\Messenger\msmsgs.exe moved successfully. File move failed. C:\WINDOWS\System32\drivers\eccfd102.sys scheduled to be moved on reboot. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\_hphtra07.log moved successfully. File C:\WINDOWS\temp\mcmsc_87u26n5NwphuXTN not found! C:\WINDOWS\temp\mcmsc_bkkWhLmoRH8iUUb moved successfully. File C:\WINDOWS\temp\mcmsc_ib1DfMYZxv7ISbV not found! File C:\WINDOWS\temp\WFV1.tmp not found! Registry entries deleted on Reboot…
Sure thing.

Log:

OTListIt logfile created on: 3/15/2009 2:14:34 PM - Run 6
OTListIt2 by OldTimer - Version 2.0.3.8 Folder = C:\Documents and Settings\HP_Administrator\Desktop
Windows XP Media Center Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

446.48 Mb Total Physical Memory | 141.11 Mb Available Physical Memory | 31.61% Memory free
1.03 Gb Paging File | 0.80 Gb Available in Paging File | 77.76% Paging File free
Paging file location(s): C:\pagefile.sys 672 1344;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 178.30 Gb Total Space | 80.18 Gb Free Space | 44.97% Space Free | Partition Type: NTFS
Drive D: | 8.00 Gb Total Space | 0.86 Gb Free Space | 10.78% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: YOUR-B27FB1C401
Current User Name: HP_Administrator
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\WINDOWS\system32\LEXBCES.EXE (Lexmark International, Inc.)
PRC - C:\WINDOWS\system32\LEXPPS.EXE (Lexmark International, Inc.)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan\McShield.exe (McAfee, Inc.)
PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
PRC - C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\WINDOWS\sm56hlpr.exe (Motorola Inc.)
PRC - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
PRC - C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe (ATI Technologies, Inc.)
PRC - C:\HP\KBD\KBD.EXE (Hewlett-Packard Company)
PRC - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
PRC - C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
PRC - C:\Program Files\Sierra\Planner\Plnrnote.exe (Creative Home)
PRC - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\WINDOWS\ALCXMNTR.EXE (Realtek Semiconductor Corp.)
PRC - c:\windows\system\hpsysdrv.exe (Hewlett-Packard Company)
PRC - C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
PRC - C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Documents and Settings\HP_Administrator\Desktop\OTListIt2.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (Apple Mobile Device [Auto | Running]) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe (Microsoft Corporation)
SRV - (Ati HotKey Poller [Auto | Running]) – C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (Bonjour Service [Disabled | Stopped]) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (ehRecvr [Disabled | Stopped]) – C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [Disabled | Stopped]) – C:\WINDOWS\eHome\ehSched.exe (Microsoft Corporation)
SRV - (GameConsoleService [On_Demand | Stopped]) – C:\Program Files\WildTangent\Apps\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (gusvc [On_Demand | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (IDriverT [On_Demand | Stopped]) – C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (iPod Service [On_Demand | Running]) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (LexBceS [Auto | Running]) – C:\WINDOWS\system32\LEXBCES.EXE (Lexmark International, Inc.)
SRV - (LightScribeService [Disabled | Stopped]) – C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (mcmscsvc [Auto | Running]) – C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
SRV - (mcnasvc [Auto | Running]) – c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
SRV - (mcods [On_Demand | Stopped]) – C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (mcproxy [Auto | Running]) – c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
SRV - (McrdSvc [Disabled | Stopped]) – C:\WINDOWS\ehome\mcrdsvc.exe (Microsoft Corporation)
SRV - (mcshield [Unknown | Running]) – C:\Program Files\McAfee\VirusScan\McShield.exe (McAfee, Inc.)
SRV - (mcsysmon [On_Demand | Running]) – C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
SRV - (MDM [Auto | Running]) – C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
SRV - (mpfservice [Auto | Running]) – C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
SRV - (netlogonehsched [Disabled | Stopped]) – File not found
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (Pml Driver HPZ12 [Disabled | Stopped]) – C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE (HP)
SRV - (Viewpoint Manager Service [Disabled | Stopped]) – C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (ALCXWDM [On_Demand | Running]) – C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (AmdK8 [System | Running]) – C:\WINDOWS\system32\DRIVERS\AmdK8.sys (Advanced Micro Devices)
DRV - (ati2mtag [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.)
DRV - (GEARAspiWDM [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (iaStor [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\iaStor.sys (Intel Corporation)
DRV - (ltmodem5 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\ltmdmnt.sys (LT)
DRV - (mfeavfk [On_Demand | Running]) – C:\WINDOWS\system32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfebopk [On_Demand | Running]) – C:\WINDOWS\system32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (mfehidk [System | Running]) – C:\WINDOWS\system32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mferkdk [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\mferkdk.sys (McAfee, Inc.)
DRV - (mfesmfk [On_Demand | Running]) – C:\WINDOWS\system32\drivers\mfesmfk.sys (McAfee, Inc.)
DRV - (MODEMCSA [On_Demand | Running]) – C:\WINDOWS\system32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (mpfp [System | Running]) – C:\WINDOWS\System32\Drivers\Mpfp.sys (McAfee, Inc.)
DRV - (Ps2 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\PS2.sys (Hewlett-Packard Company)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (RTL8023xp [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys (Realtek Semiconductor Corporation )
DRV - (rtl8139 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\RTL8139.SYS (Realtek Semiconductor Corporation)
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\secdrv.sys ()
DRV - (smserial [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\smserial.sys (Motorola Inc.)
DRV - (sptd [Boot | Running]) – C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (SQTECH905C [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\Capt905c.sys (Service & Quality Technology.)
DRV - (USBAAPL [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\usbaapl.sys (Apple, Inc.)
DRV - (X4HSX32 [Auto | Running]) – C:\Program Files\GameTap\bin\Release\X4HSX32.Sys (Exent Technologies Ltd.)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.magentic.com/english/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\CNNSI, = search.sportsillustrated.cnn.com/pages/search.jsp?query=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Dictionary, = dictionary.reference.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Google, = google.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleGroups, = groups-beta.google.com/groups?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleImages, = images.google.com/images?hl=en&lr;=&q;=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleNews, = news.google.com/news?tab=gn&hl;=en&ie;=UTF-8&q;=%s&btnG;=Search+News
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\KB, = support.microsoft.com/search/default.aspx?query=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\KBDLL, = support.microsoft.com/dllhelp/default.aspx?dlltype=file&l;=55α=%s&S;=1
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Movies, = fandango.com/my_box_office.asp?searchby=2&txtCityZip;=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\MSN, = search.msn.com/results.asp?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Thesaurus, = thesaurus.reference.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Weather, = weather.com/weather/local/%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Yahoo, = search.yahoo.com/search?p=%s
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}:6.0.03
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}:6.0.01
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.071101000055
FF - prefs.js..extensions.enabledItems: {E7004F9C-73D4-4D32-A000-BC63BD320763}:1.0
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.7
FF - HKLM\software\mozilla\Firefox\Extensions\\{E7004F9C-73D4-4D32-A000-BC63BD320763}: C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\{E7004F9C-73D4-4D32-A000-BC63BD320763} [2009/03/09 18:23:24 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/03/14 17:55:45 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/03/10 21:33:57 | 00,000,000 | —D | M]
[2008/08/30 18:19:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Extensions
[2008/08/30 18:19:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/03/14 17:54:14 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions
[2007/03/23 14:36:36 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\{051ce736-d132-4374-9d36-eb192ef3110c}
[2007/02/08 11:39:28 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\{f3c24b71-1b60-11db-961a-00e08161165f}
[2009/02/25 18:19:41 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\[removed]
[2007/02/19 15:44:59 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\[removed]
[2007/09/19 07:00:17 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\[removed]
[2007/02/08 11:39:35 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\{f3c24b71-1b60-11db-961a-00e08161165f}\chrome\mozapps\extensions
[2009/03/14 17:54:15 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/03/07 22:36:16 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2007/06/12 14:56:01 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
[2007/12/06 16:08:57 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
[2008/04/12 10:13:45 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
[2009/03/07 22:36:16 | 00,023,032 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/03/07 22:36:16 | 00,134,648 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll

O1 HOSTS File: (1432 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
O4 - HKLM..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" (ATI Technologies, Inc.)
O4 - HKLM..\Run: [Exobenoguq] rundll32.exe "C:\WINDOWS\ugetaxuh.dll",e File not found
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run (Hewlett-Packard Company)
O4 - HKLM..\Run: [HPHUPD08] "c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" (Hewlett-Packard)
O4 - HKLM..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" (Apple Inc.)
O4 - HKLM..\Run: [KBD] C:\HP\KBD\KBD.EXE (Hewlett-Packard Company)
O4 - HKLM..\Run: [kjahrfoi37rljanfaw3il7fhjd3f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\winlogqn.exe File not found
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey (McAfee, Inc.)
O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime (Apple Inc.)
O4 - HKLM..\Run: [SMSERIAL] sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Event Planner Reminders Tray Icon.lnk = C:\Program Files\Sierra\Planner\Plnrnote.exe (Creative Home)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetActiveDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 00 02 00 00 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetActiveDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm File not found
O9 - Extra 'Tools' menuitem : Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm File not found
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (InterTrust Technologies Corporation, Inc.)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_01)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_05)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_09)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_10)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - CLSID or File not found.
O22 - SharedTaskScheduler: {C5BF40A2-94F3-42BD-F434-1604812C8955} - klj3r93iorkemnfaja93riemef - Reg Error: Key error. File not found
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O32 - Autorun File - D:\AUTOEXEC.BAT () - [ FAT32 ]
O32 - Autorun File - D:\Autorun.inf () - [ FAT32 ]
O33 - MountPoints2\{369505d2-4bcb-11da-b4b8-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{369505d2-4bcb-11da-b4b8-806d6172696f}\Shell\autorun - "" = Auto&Play;
O33 - MountPoints2\{faf34d90-4bd4-11da-b4bd-0013d4c27b29}\Shell - "" = AutoRun
O33 - MountPoints2\{faf34d90-4bd4-11da-b4bd-0013d4c27b29}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{faf34d90-4bd4-11da-b4bd-0013d4c27b29}\Shell\AutoRun\command - "" = J:\LaunchU3.exe – File not found
O33 - MountPoints2\D\Shell - "" = AutoRun
O33 - MountPoints2\D\Shell\autorun - "" = Auto&Play;

========== Files/Folders - Created Within 30 Days ==========

[1 C:\Program Files\*.tmp files]
[2009/03/15 13:52:16 | 00,000,000 | —D | C] – C:\_OTListIt
[2009/03/15 12:12:07 | 00,497,152 | —- | C] (OldTimer Tools) – C:\Documents and Settings\HP_Administrator\Desktop\OTListIt2.exe
[2009/03/15 11:40:11 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Malwarebytes
[2009/03/15 11:40:08 | 00,000,707 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/03/15 11:40:07 | 00,015,504 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/03/15 11:40:05 | 00,038,496 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/03/15 11:40:03 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/03/15 11:40:02 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/03/15 11:37:27 | 02,876,728 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\HP_Administrator\Desktop\mbam-setup.exe
[2009/03/14 19:19:47 | 00,001,745 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\HijackThis.lnk
[2009/03/14 17:56:28 | 00,000,622 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\NTREGOPT.lnk
[2009/03/14 17:56:28 | 00,000,603 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\ERUNT.lnk
[2009/03/14 17:56:24 | 00,000,000 | —D | C] – C:\Program Files\ERUNT
[2009/03/14 17:27:31 | 00,791,393 | —- | C] (Lars Hederer ) – C:\Documents and Settings\HP_Administrator\Desktop\erunt-setup.exe
[2009/03/14 17:26:59 | 00,812,344 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\HJTInstall.exe
[2009/03/14 13:59:17 | 46,824,2432 | -HS- | C] () – C:\hiberfil.sys
[2009/03/10 18:18:50 | 00,010,677 | —- | C] () – C:\WINDOWS\System32\Config.MPF
[2009/03/10 18:18:11 | 00,000,682 | —- | C] () – C:\Documents and Settings\All Users\Desktop\McAfee Security Center.lnk
[2009/03/10 18:17:42 | 00,143,360 | —- | C] (Inner Media, Inc.) – C:\WINDOWS\System32\dunzip32.dll
[2009/03/10 18:13:58 | 00,033,832 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mferkdk.sys
[2009/03/10 18:13:54 | 00,040,488 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfesmfk.sys
[2009/03/10 18:13:54 | 00,035,240 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfebopk.sys
[2009/03/10 18:13:53 | 00,201,320 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfehidk.sys
[2009/03/10 18:13:53 | 00,079,304 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfeavfk.sys
[2009/03/10 18:13:44 | 00,113,952 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\Mpfp.sys
[2009/03/10 18:13:11 | 00,000,362 | —- | C] () – C:\WINDOWS\tasks\McDefragTask.job
[2009/03/10 18:13:09 | 00,000,354 | —- | C] () – C:\WINDOWS\tasks\McQcTask.job
[2009/03/10 18:12:40 | 00,000,000 | —D | C] – C:\Program Files\McAfee.com
[2009/03/10 18:12:18 | 00,000,000 | —D | C] – C:\Program Files\Common Files\McAfee
[2009/03/10 18:11:53 | 00,000,000 | —D | C] – C:\Program Files\McAfee
[2009/03/10 17:28:38 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\McAfee
[2009/03/10 17:28:00 | 01,222,128 | —- | C] (McAfee, Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\DMSetup-Serial.exe
[2009/03/09 22:49:25 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Ascentive
[2009/03/09 22:38:32 | 00,045,056 | —- | C] (iipl) – C:\WINDOWS\System32\CreateLog.dll
[2009/03/09 22:38:32 | 00,020,480 | —- | C] (Ascentive LLC) – C:\WINDOWS\System32\SysRestore.dll
[2009/03/09 22:38:13 | 00,000,000 | —D | C] – C:\Program Files\Ascentive
[2009/03/09 21:53:20 | 00,081,390 | —- | C] () – C:\WINDOWS\System32\drivers\eccfd102.sys
[2009/03/09 18:23:24 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\{E7004F9C-73D4-4D32-A000-BC63BD320763}
[2009/03/09 18:18:55 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Lavasoft
[2009/03/07 20:06:59 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NeptunesAdve
[2009/03/07 20:05:39 | 00,000,000 | —D | C] – C:\Program Files\IncrediGames
[2009/03/07 20:05:39 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Oberon Media
[2009/03/05 01:15:30 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Gold Casual Games
[2009/03/05 01:15:30 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Gold Casual Games
[2009/03/04 00:11:43 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\FireGlow
[2009/03/02 18:42:10 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Ancient Quest of Saqqarah__bfg
[2009/03/01 19:35:41 | 00,000,000 | —D | C] – C:\Program Files\Solitaire Cruise
[2009/03/01 17:16:46 | 00,271,207 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\2008-Walk-MS-Top-Teams.pdf
[2009/02/28 22:45:55 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\Zoom Book Saved Games
[2009/02/28 21:41:19 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Dreamsdwell Stories
[2009/02/24 20:26:44 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Artogon
[2009/02/22 16:55:56 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Big Fish Games Vancouver
[2009/02/19 11:37:38 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\ViquaSoft
[2009/02/19 10:32:56 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\PrettyGoodGames
[2009/02/19 10:32:56 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\PrettyGoodGames
[2009/02/18 19:30:54 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HoverBee Studios
[2009/02/17 21:42:56 | 00,000,000 | —D | C] – C:\Program Files\Dream Vacation Solitaire
[2009/02/17 09:21:36 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HipSoft
[2009/02/17 08:41:13 | 00,001,409 | —- | C] () – C:\WINDOWS\System32\tmpC1FDE.FOT
[2009/02/17 08:41:13 | 00,001,409 | —- | C] () – C:\WINDOWS\System32\tmp8BFDE.FOT
[2009/02/16 17:18:56 | 00,027,136 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\Extra 500.00 month.doc
[2009/02/15 20:46:15 | 00,015,750 | —- | C] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\slot1.mm1
[2009/02/14 18:59:44 | 00,000,000 | —D | C] – C:\Program Files\Fairway Solitaire
[2009/02/13 21:53:47 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\BVS Solitaire Collection

========== Files - Modified Within 30 Days ==========

[1 C:\WINDOWS\System32\*.tmp files]
[2009/03/15 14:01:07 | 00,000,188 | —- | M] () – C:\WINDOWS\System\hpsysdrv.DAT
[2009/03/15 13:59:44 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/03/15 13:59:43 | 46,824,2432 | -HS- | M] () – C:\hiberfil.sys
[2009/03/15 13:58:59 | 00,081,390 | —- | M] () – C:\WINDOWS\System32\drivers\eccfd102.sys
[2009/03/15 13:58:49 | 00,010,677 | —- | M] () – C:\WINDOWS\System32\Config.MPF
[2009/03/15 13:58:33 | 08,101,498 | -H– | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\IconCache.db
[2009/03/15 11:47:20 | 00,497,152 | —- | M] (OldTimer Tools) – C:\Documents and Settings\HP_Administrator\Desktop\OTListIt2.exe
[2009/03/15 11:40:08 | 00,000,707 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/03/15 11:38:38 | 02,876,728 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\HP_Administrator\Desktop\mbam-setup.exe
[2009/03/14 19:20:47 | 00,014,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\svchost.exe
[2009/03/14 19:20:33 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/03/14 19:19:48 | 00,001,745 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\HijackThis.lnk
[2009/03/14 17:56:28 | 00,000,622 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\NTREGOPT.lnk
[2009/03/14 17:56:28 | 00,000,603 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\ERUNT.lnk
[2009/03/13 23:43:32 | 00,000,069 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2009/03/13 23:09:28 | 00,175,616 | —- | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/13 22:45:54 | 00,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/03/13 12:03:22 | 00,812,344 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\HJTInstall.exe
[2009/03/13 12:01:49 | 00,791,393 | —- | M] (Lars Hederer ) – C:\Documents and Settings\HP_Administrator\Desktop\erunt-setup.exe
[2009/03/11 07:28:25 | 00,000,022 | —- | M] () – C:\WINDOWS\FLASHKSK.INI
[2009/03/11 07:28:15 | 00,003,243 | —- | M] () – C:\WINDOWS\LXBRCAH.ini
[2009/03/10 18:18:11 | 00,000,682 | —- | M] () – C:\Documents and Settings\All Users\Desktop\McAfee Security Center.lnk
[2009/03/10 18:13:11 | 00,000,362 | —- | M] () – C:\WINDOWS\tasks\McDefragTask.job
[2009/03/10 18:13:09 | 00,000,354 | —- | M] () – C:\WINDOWS\tasks\McQcTask.job
[2009/03/10 17:58:13 | 00,014,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\svchost.exe
[2009/03/10 17:28:01 | 01,222,128 | —- | M] (McAfee, Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\DMSetup-Serial.exe
[2009/03/09 16:52:19 | 00,000,492 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\spider.sav
[2009/03/05 00:07:17 | 00,000,567 | —- | M] () – C:\WINDOWS\lexstat.ini
[2009/03/02 23:24:13 | 00,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/03/01 17:16:48 | 00,271,207 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\2008-Walk-MS-Top-Teams.pdf
[2009/02/17 08:41:13 | 00,001,409 | —- | M] () – C:\WINDOWS\System32\tmpC1FDE.FOT
[2009/02/17 08:41:13 | 00,001,409 | —- | M] () – C:\WINDOWS\System32\tmp8BFDE.FOT
[2009/02/16 17:18:57 | 00,027,136 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\Extra 500.00 month.doc
[2009/02/15 21:25:38 | 00,015,750 | —- | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\slot1.mm1

========== LOP Check ==========

[2009/03/15 12:05:12 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data
[2008/12/25 14:48:13 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2008/03/10 16:29:00 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\3 Blokes Studios
[2008/12/20 23:32:23 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AdventureChronicles1
[2008/12/02 19:21:32 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Alawar Stargaze
[2009/03/15 10:16:31 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL
[2006/12/23 22:16:19 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL Downloads
[2006/12/15 01:55:39 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL OCP
[2008/12/25 14:43:43 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple
[2008/12/25 14:45:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple Computer
[2008/11/25 19:13:08 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Arkadium
[2009/03/09 22:49:25 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ascentive
[2008/12/08 22:52:58 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Astar Games
[2009/02/22 16:55:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Big Fish Games Vancouver
[2009/03/05 20:38:47 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BigFishGamesCache
[2009/01/02 19:02:49 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\blg
[2005/11/02 20:00:24 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BVRP Software
[2007/06/19 15:03:31 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Chasing Dogs Studios
[2007/12/15 22:44:45 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Christmasville
[2008/07/21 19:43:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DivoGames
[2009/01/26 17:40:38 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EA
[2008/01/06 21:28:29 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Escape From Paradise
[2008/05/13 22:12:14 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EscapeTheMuseum
[2008/04/02 00:45:49 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Fashion Solitaire 1.2
[2009/03/04 00:11:43 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FireGlow
[2008/10/23 18:59:55 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Flood Light Games
[2008/08/03 16:57:25 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Forge of Games
[2008/03/01 17:27:18 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Friends Games
[2007/11/22 16:35:37 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GameTap
[2009/02/07 18:58:03 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GameXzone
[2009/01/16 19:49:34 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Gogii
[2008/08/12 21:27:50 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Gogii Games
[2009/03/05 01:15:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Gold Casual Games
[2006/10/20 16:11:57 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google
[2008/03/23 14:31:52 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Grey Alien Games
[2007/09/11 20:52:05 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GrimmsHatchery
[2005/08/09 12:12:20 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Hewlett-Packard
[2009/02/17 09:21:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HipSoft
[2009/02/18 19:30:54 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HoverBee Studios
[2005/08/09 11:17:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HP
[2008/12/19 19:30:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HP Product Assistant
[2008/12/20 18:47:58 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\IM
[2008/12/20 18:47:02 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\IncrediMail
[2005/08/09 11:29:52 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\InstallShield
[2005/08/09 11:48:01 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Intuit
[2008/03/08 20:43:55 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\iWin Games
[2008/03/08 19:29:28 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\JollyBear
[2009/03/15 11:40:03 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/03/10 18:18:54 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\McAfee
[2009/03/10 17:59:49 | 00,000,000 | –SD | M] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2008/03/16 21:54:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MonteCristo
[2009/01/27 11:47:25 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MumboJumbo
[2008/05/27 21:02:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MythPeople
[2008/10/14 17:39:42 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NeoEdge Networks
[2009/03/07 20:06:59 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NeptunesAdve
[2008/01/11 19:37:53 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\OberonGames
[2008/11/20 18:01:11 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PlayFirst
[2008/12/21 18:03:28 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PlayPond
[2009/01/27 17:38:54 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Playrix Entertainment
[2009/02/19 10:32:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PrettyGoodGames
[2005/11/04 00:53:57 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\QuickTime
[2009/01/05 20:39:44 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Redrum
[2009/01/24 18:52:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Rumbic Studio
[2009/01/02 18:51:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sandlot Games
[2005/08/09 10:57:35 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SBSI
[2008/01/18 17:57:08 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ScreenSeven
[2008/11/26 22:37:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SecretsOfOlympus
[2006/12/24 21:46:45 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sierra
[2005/08/09 11:16:34 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sonic
[2009/01/04 17:19:38 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SpecialBit
[2008/06/05 18:51:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SpinTop Games
[2008/03/20 00:50:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SugarGames
[2005/11/02 13:20:40 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Symantec
[2009/03/12 23:25:49 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2007/12/18 23:49:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TERMINAL Studio
[2008/09/15 23:10:06 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TheRace_dev
[2006/06/21 22:46:27 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Trymedia
[2005/11/22 00:01:26 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2007/09/22 23:43:19 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WildTangent
[2008/03/22 19:10:32 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Win
[2005/11/02 14:16:48 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2009/03/15 12:05:12 | 00,000,000 | RH-D | M] – C:\Documents and Settings\HP_Administrator\Application Data
[2006/06/27 01:02:42 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\acccore
[2008/03/30 21:05:31 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Adobe
[2005/11/22 01:00:03 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\AdobeUM
[2006/06/13 18:39:00 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Aim
[2009/03/02 18:47:08 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Ancient Quest of Saqqarah__bfg
[2008/08/07 17:34:11 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Ancient Quest of Saqqarah__oberon
[2006/05/17 11:13:18 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Apple Computer
[2009/02/24 20:26:44 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Artogon
[2008/03/21 16:24:54 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Aveyond II
[2008/08/31 16:41:59 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Beanbag Studios
[2008/07/22 23:05:45 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Beep Industries
[2008/01/06 17:58:06 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Big Fish Games
[2008/12/12 22:35:23 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\BigFishv1005
[2007/11/25 01:52:51 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\BitTorrent
[2009/01/02 19:02:49 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\blg
[2008/08/02 18:37:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\BrandX Games
[2009/02/13 22:25:33 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\BVS Solitaire Collection
[2008/02/16 18:44:23 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\CaribbeanHideaway
[2008/12/09 00:03:20 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\cerasus.media
[2007/06/19 15:03:31 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Chasing Dogs Studios
[2009/02/28 21:41:19 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Dreamsdwell Stories
[2008/06/06 20:55:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\EA
[2008/05/25 21:26:07 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\EleFun Games
[2008/10/23 18:59:55 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Flood Light Games
[2007/12/29 20:48:14 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\ForgottenRiddles
[2009/02/21 21:59:37 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Friday's games
[2008/09/25 10:26:26 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\funkitron
[2008/12/13 22:07:30 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Games
[2008/08/12 21:27:50 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Gogii Games
[2009/03/05 01:15:30 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Gold Casual Games
[2007/02/13 23:50:19 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Google
[2005/11/03 15:54:11 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Help
[2008/01/17 21:22:06 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Home Sweet Home
[2006/02/16 07:59:18 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\HP
[2005/11/02 18:29:03 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\HPQ
[2005/06/10 12:02:24 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Identities
[2007/11/22 16:34:08 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\InstallShield
[2006/07/04 20:19:06 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\InterTrust
[2005/12/27 18:16:27 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\InterVideo
[2005/08/09 11:47:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Intuit
[2008/07/10 17:08:11 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\IOMediaSupport6SZZ001s
[2009/01/28 00:26:37 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Island
[2008/07/17 16:12:54 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\iWin
[2008/03/08 20:44:16 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\iWinArcade
[2008/04/03 17:10:05 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Jane s Hotel Family Hero
[2009/02/04 10:11:05 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Jetsetter
[2009/01/16 22:40:30 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\JewelMatch2
[2009/03/10 17:59:49 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Lavasoft
[2005/11/12 14:57:15 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Leadertech
[2006/06/26 21:35:10 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Macromedia
[2008/08/31 22:02:29 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Magic Academy
[2006/11/05 23:02:43 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Magic Match
[2009/03/15 11:40:11 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Malwarebytes
[2009/01/20 20:40:24 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Meridian93
[2007/11/13 14:51:06 | 00,000,000 | –SD | M] – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft
[2008/01/23 11:39:56 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Move Networks
[2008/08/30 18:19:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Mozilla
[2008/11/07 18:12:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Mushroom Age
[2006/08/07 19:00:27 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Musicmatch
[2008/06/18 22:13:35 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\MysteryStudio
[2008/12/07 22:12:20 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\NeroDCTemplates
[2008/09/23 20:40:31 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Oberonv1005
[2008/09/27 21:54:53 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\panoramik
[2008/07/22 22:58:28 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Pi Eye Games
[2008/11/20 18:01:11 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\PlayFirst
[2009/01/12 17:53:27 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Pogo Games
[2006/05/17 18:21:10 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Real
[2008/09/12 22:22:18 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Righteous Kill
[2009/01/29 22:46:56 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\RobinsonCrusoe
[2009/01/28 00:04:52 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Sahmon Games
[2005/08/09 11:49:53 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\SampleView
[2008/12/29 18:00:53 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\SecretIslandEng
[2008/11/24 21:49:15 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Skunk Studios
[2005/11/12 14:57:41 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Sonic
[2008/09/20 21:42:37 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Spandex Force
[2008/07/10 17:08:10 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Spinapse
[2008/03/20 18:54:41 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\SprillBermudeEng
[2008/06/03 21:11:07 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\StoneLoopsOberon
[2005/11/02 20:36:24 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Sun
[2008/07/10 17:08:38 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Suspects and Clues Players
[2008/07/10 17:08:14 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Suspects and Clues Prefs
[2005/08/09 12:04:52 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Symantec
[2006/10/12 22:02:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Talkback
[2006/02/08 20:36:07 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Template
[2005/11/02 14:40:45 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\U3
[2009/01/29 20:00:10 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\URSE Games
[2008/05/16 21:53:17 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\VeniceMysteryData
[2007/02/15 00:57:33 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Viewpoint
[2009/02/19 11:37:38 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\ViquaSoft
[2008/03/06 22:02:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\WeatherDPA
[2006/03/09 02:03:26 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Webshots
[2007/09/22 23:40:47 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\WildTangent
[2008/03/24 00:05:55 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\WinBatch
[2007/08/01 19:03:48 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\Zango
[2009/03/02 23:24:13 | 00,000,284 | —- | M] () – C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2004/08/10 21:00:00 | 00,000,065 | RH– | M] () – C:\WINDOWS\Tasks\desktop.ini
[2009/03/10 18:13:11 | 00,000,362 | —- | M] () – C:\WINDOWS\Tasks\McDefragTask.job
[2009/03/10 18:13:09 | 00,000,354 | —- | M] () – C:\WINDOWS\Tasks\McQcTask.job
[2009/03/14 19:20:33 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT

========== Purity Check ==========


========== Alternate Data Streams ==========

@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4A4BAD
@Alternate Data Stream - 98 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E945C214
@Alternate Data Stream - 96 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:95970EA3
@Alternate Data Stream - 95 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:16B49C20
@Alternate Data Stream - 94 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BD13A410
@Alternate Data Stream - 226 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:93F3E4C9
@Alternate Data Stream - 225 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5A437AC3
@Alternate Data Stream - 221 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:73781C4C
@Alternate Data Stream - 219 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C6EBC69
@Alternate Data Stream - 218 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CC6A54A8
@Alternate Data Stream - 218 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CB16385F
@Alternate Data Stream - 206 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FEF0DEE7
@Alternate Data Stream - 206 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2BC498A4
@Alternate Data Stream - 199 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:67C320D1
@Alternate Data Stream - 168 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:666D6386
@Alternate Data Stream - 166 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:32ED1AE4
@Alternate Data Stream - 162 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5EC637CB
@Alternate Data Stream - 162 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4D066AD2
@Alternate Data Stream - 144 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2D0C22DC
@Alternate Data Stream - 135 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9B7E8561
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C46995DA
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6A7B7A50
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E951D483
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6A5004EB
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:588B60C7
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4DBBB4EA
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:33A7CC67
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:20FFCF0B
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D7DEAA30
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:75DEB833
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:72E546C1
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FA42DF8E
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C61EF274
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9B0F9E15
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:26C3D553
@Alternate Data Stream - 130 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:ABE30DDB
@Alternate Data Stream - 130 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5D351BC6
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F6C4647E
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DEF2E739
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:54997B77
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:43C9D140
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D85F35D4
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5A908367
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:41289DF0
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:370EF5E8
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2AB14A6F
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C8EAE2CC
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7C8950EF
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:78DBBDCD
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5F280981
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3C75E5BE
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1CB20114
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:131C0EE9
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:061FEEDF
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B894C266
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:92D18A5E
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8D02044C
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8999FD56
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6713E91B
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5EE41602
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5A27D490
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:57BF34C6
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:478FEFC3
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2F6462DF
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F8B49EF2
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B874BDDD
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:57B4E612
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0A73A758
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:07FFC655
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D197DC80
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A73EAFFB
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05113FB9
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FC4EA67C
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FA78B902
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C3C72D5F
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BB6ECE53
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9E4F05ED
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9D0CEAB7
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9BFB769D
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:848CC150
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C66F780
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:403D77D3
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2B454E16
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F5E90ED3
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F0B59DF7
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E55CE2D1
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:639F0420
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:61FEC5E3
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:48F154AF
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E00A1D59
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1361E51
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:965253AF
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8944C195
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:880F0FEF
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7C7AA745
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5635DE41
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:557AD709
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4B121B40
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:EB603FE4
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CAE958FC
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C22674B6
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7A7C726F
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6E8472D2
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:54362937
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4AFB54A0
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4573A78F
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3678540D
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FC8FFA4E
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DE75DACB
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4F8B1CCE
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:29468260
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F65733F1
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F33C37D5
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E37541B7
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E22FF3D0
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CE0A077E
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A7DA2BCD
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A724744F
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:824F4167
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7A0FEE87
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7307D080
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:618BF152
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5E24C78B
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:316EAAE9
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FB384C06
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F7862839
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:975EFF04
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:68AEEB4D
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:03B3646C
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F3600258
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E90251A2
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:981349EA
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8135A716
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7B653AA4
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6F2E414A
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:53C0A7FF
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:43A4A32B
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3AC42987
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:33DB8278
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FE4E15B1
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FD931C5F
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E635BB20
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E36991C0
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DF0BC727
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D2648A4D
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:864A52B8
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7B52659E
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6DC888C5
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6C031E3E
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C07C19F
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3BBB1871
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:306E3C70
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24E6E42F
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E1031541
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DD874E14
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AC84E6FC
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:54D5DB8A
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:53DF59D1
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4EFDF5FB
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2FE747C7
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2411B07C
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:08F16DBB
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E2F80D1D
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E07EA07E
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BAC9506D
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7F66BF58
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:07BEA161
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CEF2A14E
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A31B5E9B
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:95B8F7F6
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:86F3B593
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:857F3067
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8160BC44
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:68E05C43
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:353B2FF9
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:30399038
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E1B9ACBE
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DBABC836
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C8E82994
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B4980368
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:861A898F
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CE113E16
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BFBB0142
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B2FF6BFE
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:994AEA06
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:940ECC98
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4E158DDD
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:043E24E7
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E98C5DD9
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E7700065
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C870DCBB
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C1CCF2C1
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B156F3F2
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A3E39C6A
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7D9D2CAF
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:708BB0FA
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6D549BCC
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:485DCA33
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3EDCF994
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0FB9F88B
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0E4DF3FE
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F8A67568
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D16E7091
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CE5AAA59
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:981884E7
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:699C6EB5
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4E1E5A60
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3D66C2C2
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:32C16177
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:13B137AF
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:04560D68
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F3EFA8A8
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F0DB1AD1
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D6BE1CEA
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9A8247A9
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:81ED9272
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1E5EC928
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D09AEE3D
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CDF8423E
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BA713888
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B8384DB6
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2B9724CF
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:213AFE42
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:049ACE7A
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0105A66F
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F0AB86C0
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E6683E95
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AF54CFFD
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:ABFEED8E
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8BC949AF
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:85F55C68
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:82FF14B1
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:687D1056
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6107567A
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C53D1D2
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4CD2D817
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:455CF8C6
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3660B1DF
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:26946BE8
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:02C1CB6D
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FC2E567F
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E4786545
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B652B720
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B34A7CD6
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6128D492
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C12E68D
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4559A919
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:940EEA60
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2E49D185
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0C988F7D
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:767A78E5
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24AB14E7
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:20DB61D6
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:10B7A752
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DDE7FCF4
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7881FECE
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A4CDE823
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:725A0758
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:35632DDA
< End of report >
OK I need new glasses methinks I actually missed 3

Run OTList2.exe
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    :OTLI
    O4 - HKLM..\Run: [kjahrfoi37rljanfaw3il7fhjd3f] C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\winlogqn.exe File not found
    O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - CLSID or File not found.
    O22 - SharedTaskScheduler: {C5BF40A2-94F3-42BD-F434-1604812C8955} - klj3r93iorkemnfaja93riemef - Reg Error: Key error. File not found
    
    :Files
    C:\WINDOWS\System32\drivers\eccfd102.sys
    C:\Documents and Settings\HP_Administrator\Application Data\Zango
    
    :Commands
    [purity]
    [emptytemp]
    [start explorer]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • Then post a new OTL2 log ( don't check the boxes beside LOP Check or Purity this time )

ON COMPLETION

Connect to the net and Update MBAM then run it :thumbup:
Still unable to get online to update MBAM …should I scan anyway or no? o.O

I have 2 logs. FIRST (short one) came up when I restarted and the SECOND is from a completely NEW scan after restart.



FIRST:

========== OTLISTIT ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\kjahrfoi37rljanfaw3il7fhjd3f deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\SysTray deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35CEC8A3-2BE6-11D2-8773-92E220524153}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\\{C5BF40A2-94F3-42BD-F434-1604812C8955} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C5BF40A2-94F3-42BD-F434-1604812C8955}\ not found.
========== FILES ==========
File move failed. C:\WINDOWS\System32\drivers\eccfd102.sys scheduled to be moved on reboot.
C:\Documents and Settings\HP_Administrator\Application Data\Zango moved successfully.
========== COMMANDS ==========
File delete failed. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\hpodvd09.log scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\HP_Administrator\Local Settings\Temp\_hphtra07.log scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\mcmsc_8SEcH8tBX58derB scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\WFV2.tmp scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTListIt2 by OldTimer - Version 2.0.3.8 log created on 03152009_143152

Files moved on Reboot…
File move failed. C:\WINDOWS\System32\drivers\eccfd102.sys scheduled to be moved on reboot.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\hpodvd09.log moved successfully.
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\_hphtra07.log moved successfully.
C:\WINDOWS\temp\mcmsc_8SEcH8tBX58derB moved successfully.
File C:\WINDOWS\temp\WFV2.tmp not found!

Registry entries deleted on Reboot…










SECOND:

OTListIt logfile created on: 3/15/2009 2:39:32 PM - Run 8
OTListIt2 by OldTimer - Version 2.0.3.8 Folder = C:\Documents and Settings\HP_Administrator\Desktop
Windows XP Media Center Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

446.48 Mb Total Physical Memory | 158.60 Mb Available Physical Memory | 35.52% Memory free
1.03 Gb Paging File | 0.80 Gb Available in Paging File | 77.78% Paging File free
Paging file location(s): C:\pagefile.sys 672 1344;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 178.30 Gb Total Space | 80.18 Gb Free Space | 44.97% Space Free | Partition Type: NTFS
Drive D: | 8.00 Gb Total Space | 0.86 Gb Free Space | 10.78% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: YOUR-B27FB1C401
Current User Name: HP_Administrator
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\WINDOWS\system32\LEXBCES.EXE (Lexmark International, Inc.)
PRC - C:\WINDOWS\system32\LEXPPS.EXE (Lexmark International, Inc.)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan\McShield.exe (McAfee, Inc.)
PRC - C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
PRC - C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\WINDOWS\sm56hlpr.exe (Motorola Inc.)
PRC - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
PRC - C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe (ATI Technologies, Inc.)
PRC - C:\HP\KBD\KBD.EXE (Hewlett-Packard Company)
PRC - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
PRC - C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
PRC - C:\Program Files\Sierra\Planner\Plnrnote.exe (Creative Home)
PRC - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\WINDOWS\ALCXMNTR.EXE (Realtek Semiconductor Corp.)
PRC - c:\windows\system\hpsysdrv.exe (Hewlett-Packard Company)
PRC - C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
PRC - C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Documents and Settings\HP_Administrator\Desktop\OTListIt2.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (Apple Mobile Device [Auto | Running]) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe (Microsoft Corporation)
SRV - (Ati HotKey Poller [Auto | Running]) – C:\WINDOWS\system32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (Bonjour Service [Disabled | Stopped]) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (ehRecvr [Disabled | Stopped]) – C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [Disabled | Stopped]) – C:\WINDOWS\eHome\ehSched.exe (Microsoft Corporation)
SRV - (GameConsoleService [On_Demand | Stopped]) – C:\Program Files\WildTangent\Apps\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (gusvc [On_Demand | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (IDriverT [On_Demand | Stopped]) – C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (iPod Service [On_Demand | Running]) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (LexBceS [Auto | Running]) – C:\WINDOWS\system32\LEXBCES.EXE (Lexmark International, Inc.)
SRV - (LightScribeService [Disabled | Stopped]) – C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (mcmscsvc [Auto | Running]) – C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
SRV - (mcnasvc [Auto | Running]) – c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
SRV - (mcods [On_Demand | Stopped]) – C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (mcproxy [Auto | Running]) – c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
SRV - (McrdSvc [Disabled | Stopped]) – C:\WINDOWS\ehome\mcrdsvc.exe (Microsoft Corporation)
SRV - (mcshield [Unknown | Running]) – C:\Program Files\McAfee\VirusScan\McShield.exe (McAfee, Inc.)
SRV - (mcsysmon [On_Demand | Running]) – C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
SRV - (MDM [Auto | Running]) – C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
SRV - (mpfservice [Auto | Running]) – C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
SRV - (netlogonehsched [Disabled | Stopped]) – File not found
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (Pml Driver HPZ12 [Disabled | Stopped]) – C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZIPM12.EXE (HP)
SRV - (Viewpoint Manager Service [Disabled | Stopped]) – C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (ALCXWDM [On_Demand | Running]) – C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (AmdK8 [System | Running]) – C:\WINDOWS\system32\DRIVERS\AmdK8.sys (Advanced Micro Devices)
DRV - (ati2mtag [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.)
DRV - (GEARAspiWDM [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (iaStor [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\iaStor.sys (Intel Corporation)
DRV - (ltmodem5 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\ltmdmnt.sys (LT)
DRV - (mfeavfk [On_Demand | Running]) – C:\WINDOWS\system32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfebopk [On_Demand | Running]) – C:\WINDOWS\system32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (mfehidk [System | Running]) – C:\WINDOWS\system32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mferkdk [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\mferkdk.sys (McAfee, Inc.)
DRV - (mfesmfk [On_Demand | Running]) – C:\WINDOWS\system32\drivers\mfesmfk.sys (McAfee, Inc.)
DRV - (MODEMCSA [On_Demand | Running]) – C:\WINDOWS\system32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (mpfp [System | Running]) – C:\WINDOWS\System32\Drivers\Mpfp.sys (McAfee, Inc.)
DRV - (Ps2 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\PS2.sys (Hewlett-Packard Company)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (RTL8023xp [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys (Realtek Semiconductor Corporation )
DRV - (rtl8139 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\RTL8139.SYS (Realtek Semiconductor Corporation)
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\secdrv.sys ()
DRV - (smserial [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\smserial.sys (Motorola Inc.)
DRV - (sptd [Boot | Running]) – C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (SQTECH905C [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\Capt905c.sys (Service & Quality Technology.)
DRV - (USBAAPL [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\usbaapl.sys (Apple, Inc.)
DRV - (X4HSX32 [Auto | Running]) – C:\Program Files\GameTap\bin\Release\X4HSX32.Sys (Exent Technologies Ltd.)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mystart.magentic.com/english/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\CNNSI, = search.sportsillustrated.cnn.com/pages/search.jsp?query=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Dictionary, = dictionary.reference.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Google, = google.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleGroups, = groups-beta.google.com/groups?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleImages, = images.google.com/images?hl=en&lr;=&q;=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleNews, = news.google.com/news?tab=gn&hl;=en&ie;=UTF-8&q;=%s&btnG;=Search+News
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\KB, = support.microsoft.com/search/default.aspx?query=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\KBDLL, = support.microsoft.com/dllhelp/default.aspx?dlltype=file&l;=55α=%s&S;=1
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Movies, = fandango.com/my_box_office.asp?searchby=2&txtCityZip;=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\MSN, = search.msn.com/results.asp?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Thesaurus, = thesaurus.reference.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Weather, = weather.com/weather/local/%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Yahoo, = search.yahoo.com/search?p=%s
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}:6.0.03
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}:6.0.01
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.071101000055
FF - prefs.js..extensions.enabledItems: {E7004F9C-73D4-4D32-A000-BC63BD320763}:1.0
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.7
FF - HKLM\software\mozilla\Firefox\Extensions\\{E7004F9C-73D4-4D32-A000-BC63BD320763}: C:\DOCUMENTS AND SETTINGS\HP_ADMINISTRATOR\LOCAL SETTINGS\APPLICATION DATA\{E7004F9C-73D4-4D32-A000-BC63BD320763} [2009/03/09 18:23:24 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/03/14 17:55:45 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.7\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/03/10 21:33:57 | 00,000,000 | —D | M]
[2008/08/30 18:19:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Extensions
[2008/08/30 18:19:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/03/14 17:54:14 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions
[2007/03/23 14:36:36 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\{051ce736-d132-4374-9d36-eb192ef3110c}
[2007/02/08 11:39:28 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\{f3c24b71-1b60-11db-961a-00e08161165f}
[2009/02/25 18:19:41 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\[removed]
[2007/02/19 15:44:59 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\[removed]
[2007/09/19 07:00:17 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\[removed]
[2007/02/08 11:39:35 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Administrator\Application Data\mozilla\Firefox\Profiles\t2f2tpvr.Default User\extensions\{f3c24b71-1b60-11db-961a-00e08161165f}\chrome\mozapps\extensions
[2009/03/14 17:54:15 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/03/07 22:36:16 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2007/06/12 14:56:01 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
[2007/12/06 16:08:57 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
[2008/04/12 10:13:45 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
[2009/03/07 22:36:16 | 00,023,032 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/03/07 22:36:16 | 00,134,648 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll

O1 HOSTS File: (1432 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
O4 - HKLM..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" (ATI Technologies, Inc.)
O4 - HKLM..\Run: [Exobenoguq] rundll32.exe "C:\WINDOWS\ugetaxuh.dll",e File not found
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run (Hewlett-Packard Company)
O4 - HKLM..\Run: [HPHUPD08] "c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" (Hewlett-Packard)
O4 - HKLM..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" (Apple Inc.)
O4 - HKLM..\Run: [KBD] C:\HP\KBD\KBD.EXE (Hewlett-Packard Company)
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey (McAfee, Inc.)
O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime (Apple Inc.)
O4 - HKLM..\Run: [SMSERIAL] sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Event Planner Reminders Tray Icon.lnk = C:\Program Files\Sierra\Planner\Plnrnote.exe (Creative Home)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetActiveDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 00 02 00 00 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFolderOptions = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetActiveDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm File not found
O9 - Extra 'Tools' menuitem : Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm File not found
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (InterTrust Technologies Corporation, Inc.)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_01)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_05)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_09)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_10)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O32 - Autorun File - D:\AUTOEXEC.BAT () - [ FAT32 ]
O32 - Autorun File - D:\Autorun.inf () - [ FAT32 ]
O33 - MountPoints2\{369505d2-4bcb-11da-b4b8-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{369505d2-4bcb-11da-b4b8-806d6172696f}\Shell\autorun - "" = Auto&Play;
O33 - MountPoints2\{faf34d90-4bd4-11da-b4bd-0013d4c27b29}\Shell - "" = AutoRun
O33 - MountPoints2\{faf34d90-4bd4-11da-b4bd-0013d4c27b29}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{faf34d90-4bd4-11da-b4bd-0013d4c27b29}\Shell\AutoRun\command - "" = J:\LaunchU3.exe – File not found
O33 - MountPoints2\D\Shell - "" = AutoRun
O33 - MountPoints2\D\Shell\autorun - "" = Auto&Play;

========== Files/Folders - Created Within 30 Days ==========

[1 C:\Program Files\*.tmp files]
[2009/03/15 13:52:16 | 00,000,000 | —D | C] – C:\_OTListIt
[2009/03/15 12:12:07 | 00,497,152 | —- | C] (OldTimer Tools) – C:\Documents and Settings\HP_Administrator\Desktop\OTListIt2.exe
[2009/03/15 11:40:11 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Malwarebytes
[2009/03/15 11:40:08 | 00,000,707 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/03/15 11:40:07 | 00,015,504 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/03/15 11:40:05 | 00,038,496 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/03/15 11:40:03 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/03/15 11:40:02 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/03/15 11:37:27 | 02,876,728 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\HP_Administrator\Desktop\mbam-setup.exe
[2009/03/14 19:19:47 | 00,001,745 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\HijackThis.lnk
[2009/03/14 17:56:28 | 00,000,622 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\NTREGOPT.lnk
[2009/03/14 17:56:28 | 00,000,603 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\ERUNT.lnk
[2009/03/14 17:56:24 | 00,000,000 | —D | C] – C:\Program Files\ERUNT
[2009/03/14 17:27:31 | 00,791,393 | —- | C] (Lars Hederer ) – C:\Documents and Settings\HP_Administrator\Desktop\erunt-setup.exe
[2009/03/14 17:26:59 | 00,812,344 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\HJTInstall.exe
[2009/03/14 13:59:17 | 46,824,2432 | -HS- | C] () – C:\hiberfil.sys
[2009/03/10 18:18:50 | 00,010,677 | —- | C] () – C:\WINDOWS\System32\Config.MPF
[2009/03/10 18:18:11 | 00,000,682 | —- | C] () – C:\Documents and Settings\All Users\Desktop\McAfee Security Center.lnk
[2009/03/10 18:17:42 | 00,143,360 | —- | C] (Inner Media, Inc.) – C:\WINDOWS\System32\dunzip32.dll
[2009/03/10 18:13:58 | 00,033,832 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mferkdk.sys
[2009/03/10 18:13:54 | 00,040,488 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfesmfk.sys
[2009/03/10 18:13:54 | 00,035,240 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfebopk.sys
[2009/03/10 18:13:53 | 00,201,320 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfehidk.sys
[2009/03/10 18:13:53 | 00,079,304 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\mfeavfk.sys
[2009/03/10 18:13:44 | 00,113,952 | —- | C] (McAfee, Inc.) – C:\WINDOWS\System32\drivers\Mpfp.sys
[2009/03/10 18:13:11 | 00,000,362 | —- | C] () – C:\WINDOWS\tasks\McDefragTask.job
[2009/03/10 18:13:09 | 00,000,354 | —- | C] () – C:\WINDOWS\tasks\McQcTask.job
[2009/03/10 18:12:40 | 00,000,000 | —D | C] – C:\Program Files\McAfee.com
[2009/03/10 18:12:18 | 00,000,000 | —D | C] – C:\Program Files\Common Files\McAfee
[2009/03/10 18:11:53 | 00,000,000 | —D | C] – C:\Program Files\McAfee
[2009/03/10 17:28:38 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\McAfee
[2009/03/10 17:28:00 | 01,222,128 | —- | C] (McAfee, Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\DMSetup-Serial.exe
[2009/03/09 22:49:25 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Ascentive
[2009/03/09 22:38:32 | 00,045,056 | —- | C] (iipl) – C:\WINDOWS\System32\CreateLog.dll
[2009/03/09 22:38:32 | 00,020,480 | —- | C] (Ascentive LLC) – C:\WINDOWS\System32\SysRestore.dll
[2009/03/09 22:38:13 | 00,000,000 | —D | C] – C:\Program Files\Ascentive
[2009/03/09 21:53:20 | 00,081,390 | —- | C] () – C:\WINDOWS\System32\drivers\eccfd102.sys
[2009/03/09 18:23:24 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\{E7004F9C-73D4-4D32-A000-BC63BD320763}
[2009/03/09 18:18:55 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Lavasoft
[2009/03/07 20:06:59 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NeptunesAdve
[2009/03/07 20:05:39 | 00,000,000 | —D | C] – C:\Program Files\IncrediGames
[2009/03/07 20:05:39 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Oberon Media
[2009/03/05 01:15:30 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Gold Casual Games
[2009/03/05 01:15:30 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Gold Casual Games
[2009/03/04 00:11:43 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\FireGlow
[2009/03/02 18:42:10 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Ancient Quest of Saqqarah__bfg
[2009/03/01 19:35:41 | 00,000,000 | —D | C] – C:\Program Files\Solitaire Cruise
[2009/03/01 17:16:46 | 00,271,207 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\2008-Walk-MS-Top-Teams.pdf
[2009/02/28 22:45:55 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\Zoom Book Saved Games
[2009/02/28 21:41:19 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Dreamsdwell Stories
[2009/02/24 20:26:44 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Artogon
[2009/02/22 16:55:56 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Big Fish Games Vancouver
[2009/02/19 11:37:38 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\ViquaSoft
[2009/02/19 10:32:56 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\PrettyGoodGames
[2009/02/19 10:32:56 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\PrettyGoodGames
[2009/02/18 19:30:54 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HoverBee Studios
[2009/02/17 21:42:56 | 00,000,000 | —D | C] – C:\Program Files\Dream Vacation Solitaire
[2009/02/17 09:21:36 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HipSoft
[2009/02/17 08:41:13 | 00,001,409 | —- | C] () – C:\WINDOWS\System32\tmpC1FDE.FOT
[2009/02/17 08:41:13 | 00,001,409 | —- | C] () – C:\WINDOWS\System32\tmp8BFDE.FOT
[2009/02/16 17:18:56 | 00,027,136 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\Extra 500.00 month.doc
[2009/02/15 20:46:15 | 00,015,750 | —- | C] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\slot1.mm1
[2009/02/14 18:59:44 | 00,000,000 | —D | C] – C:\Program Files\Fairway Solitaire
[2009/02/13 21:53:47 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\BVS Solitaire Collection

========== Files - Modified Within 30 Days ==========

[1 C:\WINDOWS\System32\*.tmp files]
[2009/03/15 14:34:47 | 00,000,188 | —- | M] () – C:\WINDOWS\System\hpsysdrv.DAT
[2009/03/15 14:33:03 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/03/15 14:33:02 | 46,824,2432 | -HS- | M] () – C:\hiberfil.sys
[2009/03/15 14:32:13 | 00,010,677 | —- | M] () – C:\WINDOWS\System32\Config.MPF
[2009/03/15 13:58:59 | 00,081,390 | —- | M] () – C:\WINDOWS\System32\drivers\eccfd102.sys
[2009/03/15 13:58:33 | 08,101,498 | -H– | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\IconCache.db
[2009/03/15 11:47:20 | 00,497,152 | —- | M] (OldTimer Tools) – C:\Documents and Settings\HP_Administrator\Desktop\OTListIt2.exe
[2009/03/15 11:40:08 | 00,000,707 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/03/15 11:38:38 | 02,876,728 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\HP_Administrator\Desktop\mbam-setup.exe
[2009/03/14 19:20:47 | 00,014,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\svchost.exe
[2009/03/14 19:20:33 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/03/14 19:19:48 | 00,001,745 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\HijackThis.lnk
[2009/03/14 17:56:28 | 00,000,622 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\NTREGOPT.lnk
[2009/03/14 17:56:28 | 00,000,603 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\ERUNT.lnk
[2009/03/13 23:43:32 | 00,000,069 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2009/03/13 23:09:28 | 00,175,616 | —- | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/13 22:45:54 | 00,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/03/13 12:03:22 | 00,812,344 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\HJTInstall.exe
[2009/03/13 12:01:49 | 00,791,393 | —- | M] (Lars Hederer ) – C:\Documents and Settings\HP_Administrator\Desktop\erunt-setup.exe
[2009/03/11 07:28:25 | 00,000,022 | —- | M] () – C:\WINDOWS\FLASHKSK.INI
[2009/03/11 07:28:15 | 00,003,243 | —- | M] () – C:\WINDOWS\LXBRCAH.ini
[2009/03/10 18:18:11 | 00,000,682 | —- | M] () – C:\Documents and Settings\All Users\Desktop\McAfee Security Center.lnk
[2009/03/10 18:13:11 | 00,000,362 | —- | M] () – C:\WINDOWS\tasks\McDefragTask.job
[2009/03/10 18:13:09 | 00,000,354 | —- | M] () – C:\WINDOWS\tasks\McQcTask.job
[2009/03/10 17:58:13 | 00,014,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\svchost.exe
[2009/03/10 17:28:01 | 01,222,128 | —- | M] (McAfee, Inc.) – C:\Documents and Settings\HP_Administrator\Desktop\DMSetup-Serial.exe
[2009/03/09 16:52:19 | 00,000,492 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\spider.sav
[2009/03/05 00:07:17 | 00,000,567 | —- | M] () – C:\WINDOWS\lexstat.ini
[2009/03/02 23:24:13 | 00,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/03/01 17:16:48 | 00,271,207 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\2008-Walk-MS-Top-Teams.pdf
[2009/02/17 08:41:13 | 00,001,409 | —- | M] () – C:\WINDOWS\System32\tmpC1FDE.FOT
[2009/02/17 08:41:13 | 00,001,409 | —- | M] () – C:\WINDOWS\System32\tmp8BFDE.FOT
[2009/02/16 17:18:57 | 00,027,136 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\Extra 500.00 month.doc
[2009/02/15 21:25:38 | 00,015,750 | —- | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\slot1.mm1

========== Alternate Data Streams ==========

@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4A4BAD
@Alternate Data Stream - 98 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E945C214
@Alternate Data Stream - 96 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:95970EA3
@Alternate Data Stream - 95 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:16B49C20
@Alternate Data Stream - 94 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BD13A410
@Alternate Data Stream - 226 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:93F3E4C9
@Alternate Data Stream - 225 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5A437AC3
@Alternate Data Stream - 221 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:73781C4C
@Alternate Data Stream - 219 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C6EBC69
@Alternate Data Stream - 218 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CC6A54A8
@Alternate Data Stream - 218 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CB16385F
@Alternate Data Stream - 206 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FEF0DEE7
@Alternate Data Stream - 206 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2BC498A4
@Alternate Data Stream - 199 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:67C320D1
@Alternate Data Stream - 168 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:666D6386
@Alternate Data Stream - 166 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:32ED1AE4
@Alternate Data Stream - 162 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5EC637CB
@Alternate Data Stream - 162 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4D066AD2
@Alternate Data Stream - 144 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2D0C22DC
@Alternate Data Stream - 135 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9B7E8561
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C46995DA
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6A7B7A50
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E951D483
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6A5004EB
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:588B60C7
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4DBBB4EA
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:33A7CC67
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:20FFCF0B
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D7DEAA30
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:75DEB833
@Alternate Data Stream - 132 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:72E546C1
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FA42DF8E
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C61EF274
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9B0F9E15
@Alternate Data Stream - 131 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:26C3D553
@Alternate Data Stream - 130 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:ABE30DDB
@Alternate Data Stream - 130 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5D351BC6
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F6C4647E
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DEF2E739
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:54997B77
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:43C9D140
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D85F35D4
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5A908367
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:41289DF0
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:370EF5E8
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2AB14A6F
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C8EAE2CC
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7C8950EF
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:78DBBDCD
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5F280981
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3C75E5BE
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1CB20114
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:131C0EE9
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:061FEEDF
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B894C266
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:92D18A5E
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8D02044C
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8999FD56
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6713E91B
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5EE41602
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5A27D490
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:57BF34C6
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:478FEFC3
@Alternate Data Stream - 126 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2F6462DF
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F8B49EF2
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B874BDDD
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:57B4E612
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0A73A758
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:07FFC655
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D197DC80
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A73EAFFB
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05113FB9
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FC4EA67C
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FA78B902
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C3C72D5F
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BB6ECE53
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9E4F05ED
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9D0CEAB7
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9BFB769D
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:848CC150
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C66F780
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:403D77D3
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2B454E16
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F5E90ED3
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F0B59DF7
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E55CE2D1
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:639F0420
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:61FEC5E3
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:48F154AF
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E00A1D59
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1361E51
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:965253AF
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8944C195
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:880F0FEF
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7C7AA745
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5635DE41
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:557AD709
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4B121B40
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:EB603FE4
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CAE958FC
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C22674B6
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7A7C726F
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6E8472D2
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:54362937
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4AFB54A0
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4573A78F
@Alternate Data Stream - 120 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3678540D
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FC8FFA4E
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DE75DACB
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4F8B1CCE
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:29468260
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F65733F1
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F33C37D5
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E37541B7
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E22FF3D0
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CE0A077E
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A7DA2BCD
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A724744F
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:824F4167
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7A0FEE87
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7307D080
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:618BF152
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5E24C78B
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:316EAAE9
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FB384C06
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F7862839
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:975EFF04
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:68AEEB4D
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:03B3646C
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F3600258
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E90251A2
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:981349EA
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8135A716
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7B653AA4
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6F2E414A
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:53C0A7FF
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:43A4A32B
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3AC42987
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:33DB8278
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FE4E15B1
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FD931C5F
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E635BB20
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E36991C0
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DF0BC727
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D2648A4D
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:864A52B8
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7B52659E
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6DC888C5
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6C031E3E
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C07C19F
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3BBB1871
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:306E3C70
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24E6E42F
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E1031541
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DD874E14
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AC84E6FC
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:54D5DB8A
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:53DF59D1
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4EFDF5FB
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2FE747C7
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2411B07C
@Alternate Data Stream - 114 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:08F16DBB
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E2F80D1D
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E07EA07E
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BAC9506D
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7F66BF58
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:07BEA161
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CEF2A14E
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A31B5E9B
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:95B8F7F6
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:86F3B593
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:857F3067
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8160BC44
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:68E05C43
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:353B2FF9
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:30399038
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E1B9ACBE
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DBABC836
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C8E82994
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B4980368
@Alternate Data Stream - 111 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:861A898F
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CE113E16
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BFBB0142
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B2FF6BFE
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:994AEA06
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:940ECC98
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4E158DDD
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:043E24E7
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E98C5DD9
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E7700065
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C870DCBB
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C1CCF2C1
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B156F3F2
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A3E39C6A
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7D9D2CAF
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:708BB0FA
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6D549BCC
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:485DCA33
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3EDCF994
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0FB9F88B
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0E4DF3FE
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F8A67568
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D16E7091
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CE5AAA59
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:981884E7
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:699C6EB5
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4E1E5A60
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3D66C2C2
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:32C16177
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:13B137AF
@Alternate Data Stream - 108 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:04560D68
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F3EFA8A8
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F0DB1AD1
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D6BE1CEA
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9A8247A9
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:81ED9272
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:1E5EC928
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D09AEE3D
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CDF8423E
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:BA713888
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B8384DB6
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2B9724CF
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:213AFE42
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:049ACE7A
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0105A66F
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F0AB86C0
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E6683E95
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AF54CFFD
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:ABFEED8E
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8BC949AF
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:85F55C68
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:82FF14B1
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:687D1056
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6107567A
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C53D1D2
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4CD2D817
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:455CF8C6
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3660B1DF
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:26946BE8
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:02C1CB6D
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FC2E567F
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:E4786545
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B652B720
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B34A7CD6
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6128D492
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C12E68D
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4559A919
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:940EEA60
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2E49D185
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0C988F7D
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:767A78E5
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24AB14E7
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:20DB61D6
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:10B7A752
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DDE7FCF4
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7881FECE
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A4CDE823
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:725A0758
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:35632DDA
< End of report >
What is the error you get when you try to connect to the internet ?

OK I have cleared as much as I can find manually now lets run an automated tool to see if I have missed any

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3


* IMPORTANT !!! Save ComboFix.exe to your Desktop


  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

  • Double click on ComboFix.exe & follow the prompts.

  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


[external image: Posted Image]



Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Hmmm…right clicking on the system tray Mcafee icon doesn't give me a disable option. I did find the firewall on/off, is that all I need to disable or is there more needed? Also, I can always just uninstall mcafee and download again once all is well? Or that too risky?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI