hijacking, malware or somethin

It was suggested I come to whatthetech from Mozilla forum.

http://forums.mozillazine.org/viewtopic.ph…185195#p6185195

I use firefox. address search bar is for yahoo, google and others, when I put in a term like AVG, Avast or perhaps even whatthetech in search say google bar then a bunch of links are shown to me and if I click on say avast for a second I see in address bar avast.com and then like really fast I am taken to another site like one of these
http://www.stopzilla.com/products/stopzill…amp;cid=spyware
http://www.bmxok.info/in.cgi?7¶met…P_REFERER=31203
http://www.newser.com/?utm_source=ask&…m_campaign=news

then I kind of learned to hit back button to get to page I really wanted and in some cases no amount of hitting on back button takes to where I should have been directed.

I have since early today uninstalled AVG free, signed up for malwarebytes and there were some files found and I removed them. I have a problem with Avast called package error which has not been resolve with Avast.

can this be fixed?

Below is from a few minutes ago.

I also sent this to Mozilla Firefox.
I'm using firefox 3.08.
I type in say Mozillazine into Firefox search bar, click enter, see a top link to Mozillazine web site and then I click to get to Mozillazine,
then in address bar I see firefox URL and then like moments, split moments late I am taken to an advertising site like Stopzilla or something like it and have to ht back button to get to Mozillzine web site.

Question is it my fault for using Firefox or a Firefox responsibility to keep "hijacking software out of Firefox search bar?

It would be like if I bought a Pizza and someone having to do with providing Pizza was adding peanuts to it and I'm allergic to peanuts.
Whose job is it to find out where those peanuts were added to my pizza?

Like am I suppose to take my Pizza to another store for it to be analyzed before I eat it?

Something or someone is Hijacking Firefox's search bar.
I would think Firefox would like to know why someone or something is messing with Firefox's search bar.

Please find a fix.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:23:38 AM, on 4/6/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\BacsTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Volumouse\volumouse.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Clipboard Magic\ClipboardMagic.exe
C:\Program Files\TimeLeft3\TimeLeft.exe
C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - rsion - (no file)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: CitiUS Shared Browser Helper Object - {387EDF53-1CF2-4523-BC2F-13462651BE8C} - C:\WINDOWS\system32\BhoCitUS.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [bacstray] BacsTray.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [$Volumouse$] "C:\Program Files\Volumouse\volumouse.exe" /nodlg
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: Clipboard Magic.lnk = C:\Program Files\Clipboard Magic\ClipboardMagic.exe
O4 - Startup: TimeLeft.lnk = C:\Program Files\TimeLeft3\TimeLeft.exe
O4 - Startup: VZAccess Manager.lnk = C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Citi - {4C730913-3961-439b-83D5-F4E445520422} - C:\Program Files\Citi Virtual Account Numbers\CitiVAN.exe
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {106E49CF-797A-11D2-81A2-00E02C015623} (AlternaTIFF ActiveX) - http://www.alternatiff.com/install/00/alttiff.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www.costcophotocenter.com/CostcoActivia.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m…90/mcinsctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1143392124879
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m…,23/mcgdmgr.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0F6DC464-6C5E-4A8A-99C1-3C57BF05D17F}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{211A64CC-AB66-4EED-AFA5-D3D4E6B42DF9}: NameServer = 66.174.92.14 69.78.96.14
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
O24 - Desktop Component 0: (no name) - http://us.a1.yimg.com/us.yimg.com/i/ww/beta/y3.gif

–
End of file - 11499 bytes


Help!!!

I understand your WAY however I looked for all references to my name and replaced it with xxxxxxxx.

OTListIt logfile created on: 4/7/2009 10:12:18 PM - Run 1
OTListIt2 by OldTimer - Version 2.0.12.1 Folder = C:\Documents and Settings\xxxxxxxx\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.59 Gb Available Physical Memory | 79.33% Memory free
3.85 Gb Paging File | 3.53 Gb Available in Paging File | 91.76% Paging File free
Paging file location(s): C:\pagefile.sys 0 0;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 52.34 Gb Total Space | 26.90 Gb Free Space | 51.40% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: INSPIRON
Current User Name: jaisen
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\WINDOWS\System32\wltrysvc.exe ()
PRC - C:\WINDOWS\System32\bcmwltry.exe (Dell Inc)
PRC - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
PRC - C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
PRC - C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\WINDOWS\system32\PSIService.exe ()
PRC - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
PRC - C:\WINDOWS\system32\BacsTray.exe (Broadcom Corporation)
PRC - C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
PRC - C:\Program Files\Microsoft ActiveSync\wcescomm.exe (Microsoft Corporation)
PRC - C:\Program Files\Volumouse\volumouse.exe (NirSoft)
PRC - C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe (Siber Systems)
PRC - C:\Program Files\Microsoft ActiveSync\rapimgr.exe (Microsoft Corporation)
PRC - C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
PRC - C:\Program Files\Clipboard Magic\ClipboardMagic.exe (CyberMatrix Corporation, Inc.)
PRC - C:\Program Files\TimeLeft3\TimeLeft.exe ()
PRC - C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe (Smith Micro Software, Inc.)
PRC - C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE (Logitech, Inc.)
PRC - C:\Documents and Settings\xxxxxxxx\Desktop\OTListIt2.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (AdobeActiveFileMonitor6.0 [Disabled | Stopped]) – C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
SRV - (AOLService [Disabled | Stopped]) – File not found
SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (aswUpdSv [Auto | Running]) – C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
SRV - (avast! Antivirus [Auto | Running]) – C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
SRV - (avast! Mail Scanner [On_Demand | Running]) – C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
SRV - (avast! Web Scanner [On_Demand | Running]) – C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
SRV - (CCALib8 [Disabled | Stopped]) – C:\Program Files\Canon\CAL\CALMAIN.exe (Canon Inc.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (FLEXnet Licensing Service [On_Demand | Stopped]) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (gupdate1c9875daf29a550 [Disabled | Stopped]) – C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (gusvc [Auto | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (helpsvc [Auto | Running]) – C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (IDriverT [On_Demand | Stopped]) – C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (LBTServ [On_Demand | Stopped]) – C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (Net Driver HPZ12 [Auto | Running]) – C:\WINDOWS\system32\HPZinw12.dll (Hewlett-Packard)
SRV - (NVSvc [Auto | Running]) – C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
SRV - (odserv [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (Pml Driver HPZ12 [Auto | Running]) – C:\WINDOWS\system32\HPZipm12.dll (Hewlett-Packard)
SRV - (ProtexisLicensing [Auto | Running]) – C:\WINDOWS\system32\PSIService.exe ()
SRV - (SerialKeys [On_Demand | Stopped]) – C:\WINDOWS\system32\skeys.exe (Microsoft Corporation)
SRV - (wltrysvc [Auto | Running]) – C:\WINDOWS\System32\wltrysvc.exe ()
SRV - (WMPNetworkSvc [Disabled | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (Aavmker4 [System | Running]) – C:\WINDOWS\System32\drivers\aavmker4.sys (ALWIL Software)
DRV - (AdfuUd [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\AdfuUd.sys ()
DRV - (AegisP [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\AegisP.sys (Meetinghouse Data Communications)
DRV - (Afc [On_Demand | Running]) – C:\WINDOWS\system32\drivers\Afc.sys (Arcsoft, Inc.)
DRV - (AliIde [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (amdagp [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (ApfiltrService [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (asc [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (aswFsBlk [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys (ALWIL Software)
DRV - (aswMon2 [Auto | Running]) – C:\WINDOWS\System32\drivers\aswmon2.sys (ALWIL Software)
DRV - (aswRdr [On_Demand | Running]) – C:\WINDOWS\System32\drivers\aswRdr.sys (ALWIL Software)
DRV - (aswSP [System | Running]) – C:\WINDOWS\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswTdi [System | Running]) – C:\WINDOWS\System32\drivers\aswTdi.sys (ALWIL Software)
DRV - (BCM43XX [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\bcmwl5.sys (Broadcom Corporation)
DRV - (bcm4sbxp [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys (Broadcom Corporation)
DRV - (BCMModem [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\BCMSM.sys (Broadcom Corporation)
DRV - (CmdIde [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (dac2w2k [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (E100B [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\e100b325.sys (Intel Corporation)
DRV - (HPZid412 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\HPZid412.sys (HP)
DRV - (HPZipr12 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\HPZipr12.sys (HP)
DRV - (HPZius12 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\HPZius12.sys (HP)
DRV - (KMW_USB [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\KMW_USB.sys (Kensington Technology Group)
DRV - (LHidFilt [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys (Logitech, Inc.)
DRV - (LMouFilt [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys (Logitech, Inc.)
DRV - (mraid35x [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (nm [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\NMnt.sys (Microsoft Corporation)
DRV - (nv [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\nv4_mini.sys (NVIDIA Corporation)
DRV - (NWADI [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\NWADIenum.sys (Novatel Wireless Inc)
DRV - (NWUSBModem [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\nwusbmdm.sys (Novatel Wireless Inc.)
DRV - (NWUSBPort [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\nwusbser.sys (Novatel Wireless Inc.)
DRV - (NWUSBPort2 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\nwusbser2.sys (Novatel Wireless Inc.)
DRV - (omci [System | Running]) – C:\WINDOWS\system32\DRIVERS\omci.sys (Dell Inc)
DRV - (PCX500 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\pcx500.sys (Cisco Systems)
DRV - (PTDUBus [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\PTDUBus.sys (DEVGURU Co,LTD.)
DRV - (PTDUMdm [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\PTDUMdm.sys (DEVGURU Co,LTD.)
DRV - (PTDUVsp [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\PTDUVsp.sys (DEVGURU Co,LTD.)
DRV - (PTDUWWAN [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\PTDUWWAN.sys (DEVGURU Co,LTD.)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (ql1080 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql12160 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1280 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (sisagp [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (SMNDIS5 [On_Demand | Stopped]) – C:\Program Files\Verizon Wireless\VZAccess Manager\SMNDIS5.sys (Smith Micro Software, Inc.)
DRV - (Sparrow [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (STAC97 [On_Demand | Running]) – C:\WINDOWS\system32\drivers\stac97.sys (SigmaTel, Inc.)
DRV - (symc810 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (symc8xx [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (sym_hi [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (sym_u3 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (truecrypt [System | Running]) – C:\WINDOWS\System32\drivers\truecrypt.sys (TrueCrypt Foundation)
DRV - (ultra [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (usb_rndisx [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\usb8023x.sys (Microsoft Corporation)
DRV - (wceusbsh [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\wceusbsh.sys (Microsoft Corporation)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTerms}&fr=yie7c
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo.com/search?ei=UTF-8&fr=ytff-msgr&p="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://news.google.com/nwshp?hl=en&tab=wn"
FF - prefs.js..extensions.enabledItems: filtersetg@updater:0.3.1.3
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.0.1
FF - prefs.js..extensions.enabledItems: {E9A1DEE0-C623-4439-8932-001E7D17607D}:2.1.0.2
FF - prefs.js..extensions.enabledItems: {AA052FD6-366A-4771-A591-0D8DC551585D}:1.1.12
FF - prefs.js..extensions.enabledItems: [removed]:2.7.2
FF - prefs.js..extensions.enabledItems: [removed]:2.2.5
FF - prefs.js..extensions.enabledItems: {4BBDD651-70CF-4821-84F8-2B918CF89CA3}:6.1
FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:[removed]
FF - prefs.js..extensions.enabledItems: [removed]:1.3.4
FF - prefs.js..extensions.enabledItems: [removed]:3.0
FF - prefs.js..extensions.enabledItems: {7102aba3-045c-4ec2-b921-46d87636d84b}:1.32
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}:6.0.01
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}:6.0.02
FF - prefs.js..extensions.enabledItems: {05f6a7ea-896b-11da-8bde-f66bad1e3fff}:3.0.20080730
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:[removed]
FF - prefs.js..extensions.enabledItems: {52a6a832-4251-430b-8202-46b4463ee1ea}:1.0.4e
FF - prefs.js..extensions.enabledItems: {a089fffd-e0cb-431b-8d3a-ebb8afb26dcf}:0.81
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.8
FF - prefs.js..extensions.enabledItems: {0a3a9250-be64-11dc-95ff-0800200c9a66}:3.0.1
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p="


FF - HKLM\software\mozilla\Mozilla Firefox 3.0.8\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/04/06 15:07:05 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.8\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/04/06 15:10:34 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.21\extensions\\Components: C:\PROGRAM FILES\MOZILLA THUNDERBIRD\COMPONENTS [2009/03/18 22:42:55 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.21\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA THUNDERBIRD\PLUGINS [2009/04/06 15:09:53 | 00,000,000 | —D | M]

[2008/08/09 14:52:37 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Extensions
[2008/08/09 14:52:37 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/04/06 23:56:25 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions
[2008/11/09 18:42:52 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{05f6a7ea-896b-11da-8bde-f66bad1e3fff}
[2008/08/10 08:36:12 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{0a3a9250-be64-11dc-95ff-0800200c9a66}
[2007/07/31 07:20:25 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{0cdfdd5e-eea6-45ff-b035-81243cf02efb}
[2009/03/28 19:06:48 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
[2009/02/27 07:56:28 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}
[2008/03/14 15:02:49 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{52a6a832-4251-430b-8202-46b4463ee1ea}
[2009/01/18 10:05:59 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/03/19 13:05:45 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{7102aba3-045c-4ec2-b921-46d87636d84b}
[2009/04/06 15:07:03 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2009/02/09 12:59:18 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{a089fffd-e0cb-431b-8d3a-ebb8afb26dcf}
[2009/02/24 07:50:06 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}
[2008/06/16 15:36:00 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{AA052FD6-366A-4771-A591-0D8DC551585D}
[2009/01/11 08:39:02 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2008/09/05 16:22:01 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{DAD0F81A-CF67-4eed-98D6-26F6E47274CA}
[2009/03/10 17:01:23 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2008/02/07 20:48:44 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\[removed]
[2007/12/22 17:02:35 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\filtersetg@updater
[2008/03/01 19:01:40 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\[removed]
[2009/01/09 18:53:58 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\[removed]
[2008/05/10 17:55:33 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\mozilla\Firefox\Profiles\8ye4eu1d.default\extensions\[removed]
[2008/10/10 08:03:37 | 00,001,940 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Application Data\Mozilla\FireFox\Profiles\8ye4eu1d.default\searchplugins\marketwatch.xml
[2009/04/06 23:56:25 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/04/06 11:12:52 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2008/03/27 15:40:34 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}
[2007/05/06 19:33:04 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
[2007/08/07 07:36:10 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
[2009/03/26 12:11:21 | 00,023,032 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/03/26 12:11:22 | 00,134,648 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/03/26 11:56:22 | 00,001,394 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2009/03/26 11:56:22 | 00,002,193 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2009/03/26 11:56:22 | 00,001,534 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2009/03/26 11:56:22 | 00,002,343 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009/03/26 11:56:22 | 00,001,706 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/03/26 11:56:22 | 00,001,178 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2009/03/26 11:56:22 | 00,000,792 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo.xml

O1 HOSTS File: (734 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (CitiUSBrowserHelper Class) - {387EDF53-1CF2-4523-BC2F-13462651BE8C} - C:\WINDOWS\system32\BhoCitUS.dll (Orbiscom Ltd. All rights reserved.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Yahoo! IE Services Button) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (no name) - rsion - Reg Error: Key error. File not found
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (&RoboForm) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {57F02779-3D88-4958-8AD3-83C12D86ADC7} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {8B79EE88-E62D-4AA8-B530-CC357BA112B7} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BCB2344B-3D5B-46D7-861B-A8F27E4FE602} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D554D8FC-B36D-4BB4-93DB-4A3394D505E3} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {F5735C15-1FB2-41FE-BA12-242757E69DDE} - Reg Error: Key error. File not found
O4 - HKLM..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [bacstray] BacsTray.exe (Broadcom Corporation)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE (Logitech, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /installquiet (NVIDIA Corporation)
O4 - HKCU..\Run: [$Volumouse$] "C:\Program Files\Volumouse\volumouse.exe" /nodlg (NirSoft)
O4 - HKCU..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" (Microsoft Corporation)
O4 - HKCU..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" (Siber Systems)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
O4 - Startup: C:\Documents and Settings\xxxxxxxx\Start Menu\Programs\Startup\Clipboard Magic.lnk = C:\Program Files\Clipboard Magic\ClipboardMagic.exe (CyberMatrix Corporation, Inc.)
O4 - Startup: C:\Documents and Settings\xxxxxxxx\Start Menu\Programs\Startup\TimeLeft.lnk = C:\Program Files\TimeLeft3\TimeLeft.exe ()
O4 - Startup: C:\Documents and Settings\xxxxxxxx\Start Menu\Programs\Startup\VZAccess Manager.lnk = C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe (Smith Micro Software, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideShutdownScripts = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = E0 FF FF 03 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = E0 FF FF 03 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: MaxRecentDocs = 99
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html File not found
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html File not found
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html File not found
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html File not found
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll (Sun Microsystems, Inc.)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - File not found
O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - File not found
O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - File not found
O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - File not found
O9 - Extra Button: Citi - {4C730913-3961-439b-83D5-F4E445520422} - C:\Program Files\Citi Virtual Account Numbers\CitiVAN.exe (Orbiscom Ltd. All rights reserved.)
O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O9 - Extra Button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - File not found
O9 - Extra 'Tools' menuitem : RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - File not found
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Expression\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - File not found
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 48 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} http://support.dell.com/systemprofiler/SysPro.CAB (SysProWmi Class)
O16 - DPF: {106E49CF-797A-11D2-81A2-00E02C015623} http://www.alternatiff.com/install/00/alttiff.cab (AlternaTIFF ActiveX)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/get/shock…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/5/b…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} http://office.microsoft.com/officeupdate/content/opuc3.cab (Office Update Installation Engine)
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} http://www.costcophotocenter.com/CostcoActivia.cab (Snapfish Activia)
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} http://download.mcafee.com/molbin/shared/m…90/mcinsctl.cab (Reg Error: Key error.)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdat…b?1143392124879 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} http://download.mcafee.com/molbin/shared/m…,23/mcgdmgr.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_09)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_10)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_11)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_02)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Interfaces\{0F6DC464-6C5E-4A8A-99C1-3C57BF05D17F}\\NameServer = 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mctp {d7b95390-b1c5-11d0-b111-0080c712fe82} - C:\Program Files\Microsoft ActiveSync\aatp.dll File not found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
O24 - Desktop Components:0 () - http://us.a1.yimg.com/us.yimg.com/i/ww/beta/y3.gif
O24 - Desktop Components:1 (My Current Home Page) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O33 - MountPoints2\{0419e980-bc50-11db-8553-000f1f27f20c}\Shell - "" = AutoRun
O33 - MountPoints2\{0419e980-bc50-11db-8553-000f1f27f20c}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{0419e980-bc50-11db-8553-000f1f27f20c}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\url.DLL – [2008/12/20 16:15:39 | 00,105,984 | —- | M] (Microsoft Corporation)
O33 - MountPoints2\{81522c10-bc53-11db-8554-000f1f27f20c}\Shell - "" = AutoRun
O33 - MountPoints2\{81522c10-bc53-11db-8554-000f1f27f20c}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{81522c10-bc53-11db-8554-000f1f27f20c}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\url.DLL – [2008/12/20 16:15:39 | 00,105,984 | —- | M] (Microsoft Corporation)
O33 - MountPoints2\{bb8ee5b0-bd2a-11db-855b-000f1f27f20c}\Shell - "" = AutoRun
O33 - MountPoints2\{bb8ee5b0-bd2a-11db-855b-000f1f27f20c}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{bb8ee5b0-bd2a-11db-855b-000f1f27f20c}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\url.DLL – [2008/12/20 16:15:39 | 00,105,984 | —- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found

========== Files/Folders - Created Within 30 Days ==========

[1 C:\WINDOWS\*.tmp files]
[2009/04/07 22:11:03 | 00,501,760 | —- | C] (OldTimer Tools) – C:\Documents and Settings\xxxxxxxx\Desktop\OTListIt2.exe
[2009/04/07 22:07:48 | 00,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2009/04/07 22:06:53 | 00,000,000 | —D | C] – C:\Documents and Settings\xxxxxxxx\Desktop\erunt
[2009/04/07 22:05:44 | 00,513,320 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Desktop\erunt.zip
[2009/04/07 14:35:06 | 00,368,128 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Desktop\padlockmagnet.tif
[2009/04/06 17:00:48 | 00,588,120 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Desktop\liverpooldone.tif
[2009/04/06 15:56:56 | 00,000,000 | —D | C] – C:\Documents and Settings\xxxxxxxx\Application Data\Safer Networking
[2009/04/06 15:56:06 | 00,000,000 | —D | C] – C:\Program Files\Safer Networking
[2009/04/06 14:24:58 | 00,000,000 | —D | C] – C:\Program Files\Spybot - Search & Destroy
[2009/04/06 07:43:03 | 00,076,958 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Desktop\liverpool.tif
[2009/04/05 21:04:44 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/04/05 16:47:18 | 00,023,152 | —- | C] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswRdr.sys
[2009/04/05 16:47:17 | 00,051,376 | —- | C] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswTdi.sys
[2009/04/05 16:47:16 | 00,026,944 | —- | C] (ALWIL Software) – C:\WINDOWS\System32\drivers\aavmker4.sys
[2009/04/05 16:47:14 | 00,114,768 | —- | C] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswSP.sys
[2009/04/05 16:47:14 | 00,097,480 | —- | C] (ALWIL Software) – C:\WINDOWS\System32\AvastSS.scr
[2009/04/05 16:47:14 | 00,094,032 | —- | C] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswmon2.sys
[2009/04/05 16:47:14 | 00,093,296 | —- | C] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswmon.sys
[2009/04/05 16:47:14 | 00,020,560 | —- | C] (ALWIL Software) – C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2009/04/05 16:46:55 | 01,256,296 | —- | C] (ALWIL Software) – C:\WINDOWS\System32\aswBoot.exe
[2009/04/05 16:46:55 | 00,380,928 | —- | C] () – C:\WINDOWS\System32\actskin4.ocx
[2009/04/05 10:53:04 | 00,000,000 | —D | C] – C:\Program Files\Alwil Software
[2009/04/05 07:49:48 | 00,000,000 | —D | C] – C:\Documents and Settings\xxxxxxxx\Application Data\Malwarebytes
[2009/04/05 07:49:45 | 00,015,504 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/04/05 07:49:43 | 00,038,496 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/04/05 07:49:42 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/04/05 07:49:42 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/04/04 23:57:25 | 17,063,244 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Desktop\21589_group_sex_fucking_hot_blonde_slut.flv
[2009/04/04 13:38:09 | 00,000,645 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Desktop\Label Manager.lnk
[2009/04/04 13:38:05 | 00,000,000 | —D | C] – C:\Program Files\Papilio Digital Media
[2009/04/03 08:39:40 | 00,000,775 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Start Menu\Programs\Startup\Clipboard Magic.lnk
[2009/04/01 16:32:23 | 00,000,701 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Start Menu\Programs\Startup\TimeLeft.lnk
[2009/03/28 16:52:40 | 00,010,651 | —- | C] () – C:\Documents and Settings\xxxxxxxx\My Documents\cpuz.htm
[2009/03/24 22:32:53 | 19,965,945 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Desktop\21889_three_cocks_for_a_horny_blonde_slut.flv
[2009/03/14 12:52:57 | 00,000,715 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Desktop\Any Video Converter.lnk
[2009/03/11 10:59:39 | 00,001,893 | —- | C] () – C:\Documents and Settings\xxxxxxxx\Start Menu\Programs\Startup\VZAccess Manager.lnk
[2009/02/22 15:59:57 | 00,000,000 | —- | C] () – C:\WINDOWS\graphedt.INI
[2009/02/22 11:55:48 | 00,000,547 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009/02/22 11:55:47 | 00,067,584 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2008/11/06 09:37:32 | 03,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2008/11/06 09:34:00 | 00,000,416 | —- | C] () – C:\WINDOWS\System32\dtu100.dll.manifest
[2008/11/06 09:34:00 | 00,000,416 | —- | C] () – C:\WINDOWS\System32\dpl100.dll.manifest
[2008/11/06 09:33:02 | 00,012,288 | —- | C] () – C:\WINDOWS\System32\DivXWMPExtType.dll
[2008/10/16 22:09:14 | 00,000,072 | —- | C] () – C:\WINDOWS\MediaManager.INI
[2008/05/21 12:48:52 | 00,077,824 | R— | C] () – C:\WINDOWS\System32\hpzids01.dll
[2008/05/10 11:33:28 | 00,000,097 | —- | C] () – C:\WINDOWS\System32\PICSDK.ini
[2008/05/10 11:32:03 | 00,000,044 | —- | C] () – C:\WINDOWS\EPSPR280.ini
[2007/12/11 16:45:36 | 00,000,196 | —- | C] () – C:\WINDOWS\multiclip.ini
[2007/12/09 21:33:45 | 00,000,398 | —- | C] () – C:\WINDOWS\AudioConverter.INI
[2007/09/04 05:59:28 | 00,237,568 | —- | C] () – C:\WINDOWS\System32\glut32.dll
[2007/08/09 07:59:14 | 00,000,168 | RHS- | C] () – C:\WINDOWS\System32\8A3B6E2314.sys
[2007/06/01 12:50:30 | 00,000,296 | —- | C] () – C:\WINDOWS\BRDIAG.INI
[2007/06/01 12:50:30 | 00,000,209 | —- | C] () – C:\WINDOWS\Brownie.ini
[2007/06/01 12:50:30 | 00,000,012 | —- | C] () – C:\WINDOWS\BRVIDEO.INI
[2007/06/01 12:50:19 | 00,026,624 | —- | C] () – C:\WINDOWS\System32\BRGSRC32.DLL
[2007/06/01 12:50:19 | 00,004,608 | —- | C] () – C:\WINDOWS\System32\BRGSRC16.DLL
[2007/06/01 12:49:35 | 00,000,426 | —- | C] () – C:\WINDOWS\BRWMARK.INI
[2006/12/12 19:01:50 | 00,000,038 | —- | C] () – C:\WINDOWS\iltwain.ini
[2006/09/17 11:59:55 | 00,921,600 | —- | C] () – C:\WINDOWS\System32\vorbisenc.dll
[2006/09/17 11:59:55 | 00,237,568 | —- | C] () – C:\WINDOWS\System32\OggDS.dll
[2006/09/17 11:59:55 | 00,188,416 | —- | C] () – C:\WINDOWS\System32\vorbis.dll
[2006/09/17 11:59:55 | 00,045,056 | —- | C] () – C:\WINDOWS\System32\ogg.dll
[2006/08/27 07:41:46 | 00,005,826 | —- | C] () – C:\WINDOWS\GenAmvTool.INI
[2006/05/13 07:36:01 | 00,026,000 | —- | C] () – C:\WINDOWS\System32\E3TL.DLL
[2006/03/06 10:41:02 | 00,073,728 | —- | C] () – C:\WINDOWS\System32\AMV_DecDLL.dll
[2006/02/05 17:55:59 | 00,000,222 | —- | C] () – C:\WINDOWS\Quicken.ini
[2006/02/03 08:28:27 | 00,000,023 | —- | C] () – C:\WINDOWS\ANS2000.INI
[2006/02/03 08:28:27 | 00,000,020 | -H– | C] () – C:\WINDOWS\akebook.ini
[2006/02/03 08:28:27 | 00,000,004 | -H– | C] () – C:\WINDOWS\a3kebook.ini
[2006/01/20 19:01:41 | 00,000,000 | —- | C] () – C:\WINDOWS\SFTSTUFF.INI
[2005/12/12 13:58:21 | 00,000,044 | —- | C] () – C:\WINDOWS\liveup.ini
[2005/11/22 13:45:54 | 00,000,072 | —- | C] () – C:\WINDOWS\pdf2rtf.INI
[2005/03/20 11:33:09 | 00,000,486 | —- | C] () – C:\WINDOWS\TALKTOME.INI
[2005/03/15 19:21:22 | 00,000,056 | —- | C] () – C:\WINDOWS\System32\14236E3B8A.sys
[2005/03/15 19:21:21 | 00,007,518 | -HS- | C] () – C:\WINDOWS\System32\KGyGaAvL.sys
[2005/02/28 17:36:52 | 00,000,026 | —- | C] () – C:\WINDOWS\FPKPMSV.INI
[2005/01/01 15:00:07 | 00,000,027 | —- | C] () – C:\WINDOWS\INTUIT.INI
[2004/12/25 09:05:32 | 00,002,008 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2004/11/29 19:37:57 | 00,000,028 | —- | C] () – C:\WINDOWS\ICOA.INI
[2004/11/29 19:37:44 | 00,000,000 | —- | C] () – C:\WINDOWS\QFN.ini
[2004/11/29 19:37:44 | 00,000,000 | —- | C] () – C:\WINDOWS\QDQICK.ini
[2004/11/24 14:14:52 | 00,000,045 | —- | C] () – C:\WINDOWS\EPSC82.ini
[2004/11/24 11:26:01 | 00,000,000 | —- | C] () – C:\WINDOWS\OPPRIN~1.INI
[2004/11/24 10:59:22 | 00,000,488 | —- | C] () – C:\WINDOWS\ODBC.INI
[2004/11/22 14:30:38 | 00,000,004 | —- | C] () – C:\WINDOWS\msoffice.ini
[2004/10/19 19:41:16 | 00,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2004/10/19 19:24:54 | 00,000,817 | —- | C] () – C:\WINDOWS\wininit.ini
[2004/10/19 18:58:18 | 00,000,516 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2004/09/28 07:38:30 | 00,114,688 | —- | C] () – C:\WINDOWS\System32\wmatimer.dll
[2004/09/16 13:26:40 | 00,012,634 | —- | C] () – C:\WINDOWS\System32\drivers\ADFUUD.SYS
[2004/09/16 13:26:40 | 00,012,634 | —- | C] () – C:\WINDOWS\ADFUUD.SYS
[2004/08/10 11:13:12 | 00,000,780 | —- | C] () – C:\WINDOWS\ORUN32.INI
[2004/08/10 11:04:08 | 00,000,949 | —- | C] () – C:\WINDOWS\WIN.INI
[2004/08/10 10:57:52 | 00,000,361 | —- | C] () – C:\WINDOWS\SYSTEM.INI
[2003/08/07 12:01:50 | 00,237,568 | —- | C] () – C:\WINDOWS\System32\lame_enc.dll
[2002/03/19 17:30:00 | 00,141,824 | —- | C] () – C:\WINDOWS\System32\msvdm.dll
[2001/07/07 03:00:00 | 00,003,399 | —- | C] () – C:\WINDOWS\System32\hptcpmon.ini

========== Files - Modified Within 30 Days ==========

[1 C:\WINDOWS\*.tmp files]
[2009/04/07 22:11:10 | 00,501,760 | —- | M] (OldTimer Tools) – C:\Documents and Settings\xxxxxxxx\Desktop\OTListIt2.exe
[2009/04/07 22:10:00 | 00,000,432 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{ED074D08-F7A5-4929-9659-007F5C4F7395}.job
[2009/04/07 22:05:54 | 00,513,320 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Desktop\erunt.zip
[2009/04/07 21:55:41 | 00,001,893 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Start Menu\Programs\Startup\VZAccess Manager.lnk
[2009/04/07 21:55:33 | 00,002,206 | —- | M] () – C:\WINDOWS\System32\WPA.DBL
[2009/04/07 21:54:55 | 00,017,112 | —- | M] () – C:\WINDOWS\System32\nvapps.xml
[2009/04/07 21:54:54 | 00,029,284 | —- | M] () – C:\WINDOWS\System32\nvModes.001
[2009/04/07 21:54:19 | 00,000,868 | —- | M] () – C:\WINDOWS\tasks\Google Software Updater.job
[2009/04/07 21:54:12 | 00,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009/04/07 21:54:03 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/04/07 21:53:40 | 00,002,048 | –S- | M] () – C:\WINDOWS\BOOTSTAT.DAT
[2009/04/07 14:35:09 | 00,368,128 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Desktop\padlockmagnet.tif
[2009/04/06 17:13:27 | 00,588,120 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Desktop\liverpooldone.tif
[2009/04/06 16:59:42 | 00,076,958 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Desktop\liverpool.tif
[2009/04/06 16:45:13 | 00,045,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshta.exe
[2009/04/06 16:45:13 | 00,045,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshta.exe
[2009/04/06 15:29:18 | 00,146,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regedit.exe
[2009/04/06 15:29:18 | 00,146,432 | —- | M] (Microsoft Corporation) – C:\WINDOWS\regedit.exe
[2009/04/06 15:27:03 | 00,000,949 | —- | M] () – C:\WINDOWS\WIN.INI
[2009/04/06 15:27:03 | 00,000,361 | —- | M] () – C:\WINDOWS\SYSTEM.INI
[2009/04/06 15:27:03 | 00,000,211 | -H– | M] () – C:\BOOT.INI
[2009/04/06 11:59:29 | 00,029,284 | —- | M] () – C:\WINDOWS\System32\nvModes.dat
[2009/04/06 11:12:57 | 00,001,602 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2009/04/05 23:01:12 | 00,002,626 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2009/04/04 23:59:25 | 17,063,244 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Desktop\21589_group_sex_fucking_hot_blonde_slut.flv
[2009/04/04 13:38:09 | 00,000,645 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Desktop\Label Manager.lnk
[2009/04/03 08:42:12 | 00,479,748 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/04/03 08:42:12 | 00,408,238 | —- | M] () – C:\WINDOWS\System32\PERFH009.DAT
[2009/04/03 08:42:12 | 00,064,602 | —- | M] () – C:\WINDOWS\System32\PERFC009.DAT
[2009/04/03 08:39:40 | 00,000,775 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Start Menu\Programs\Startup\Clipboard Magic.lnk
[2009/03/29 20:03:25 | 00,115,712 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/03/28 16:52:40 | 00,010,651 | —- | M] () – C:\Documents and Settings\xxxxxxxx\My Documents\cpuz.htm
[2009/03/26 16:49:56 | 00,038,496 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/03/26 16:49:50 | 00,015,504 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/03/24 22:36:14 | 19,965,945 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Desktop\21889_three_cocks_for_a_horny_blonde_slut.flv
[2009/03/18 22:30:59 | 00,102,016 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/03/18 13:29:56 | 00,351,384 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/14 12:52:57 | 00,000,715 | —- | M] () – C:\Documents and Settings\xxxxxxxx\Desktop\Any Video Converter.lnk

========== LOP Check ==========

[2009/04/05 10:45:21 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data
[2005/04/30 12:44:21 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\101 Software
[2009/04/05 09:22:41 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Adobe
[2008/04/27 12:56:48 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple Computer
[2009/03/18 11:30:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Avery
[2007/04/12 21:44:02 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BeInSync Settings
[2004/10/19 19:25:34 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\CyberLink
[2005/05/28 11:52:04 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Dell
[2008/12/04 19:25:14 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EPSON
[2008/06/17 11:35:19 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\espionServerData
[2006/09/16 17:15:58 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ESTsoft
[2008/06/17 11:28:01 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FLEXnet
[2009/01/25 10:54:31 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG
[2006/10/19 16:25:16 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google
[2009/04/07 07:16:15 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google Updater
[2005/05/28 07:12:47 | 00,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\GTek
[2008/05/21 12:51:55 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HP
[2008/11/24 12:58:46 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HP Product Assistant
[2005/02/28 17:25:42 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\InstallShield
[2005/01/27 10:15:48 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Intuit
[2008/03/14 16:19:27 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LogiShrd
[2008/03/14 16:16:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Logitech
[2009/04/05 07:49:42 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2007/03/11 18:28:29 | 00,000,000 | –SD | M] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2009/03/11 13:25:39 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2008/07/13 16:49:01 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NCH Software
[2008/07/13 16:49:13 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2005/03/21 12:39:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\nView_Profiles
[2004/11/22 14:36:46 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Pure Networks
[2005/08/25 18:12:34 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\RoboForm
[2004/10/19 18:57:28 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SBSI
[2008/03/27 15:40:27 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Skype
[2009/04/06 17:14:59 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2008/06/13 13:29:32 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2008/12/06 14:28:27 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Verizon Wireless
[2007/01/12 17:51:33 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2005/07/29 20:41:49 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2008/07/13 16:41:05 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\YAHOO
[2008/09/28 12:05:45 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data\yahoo!
[2008/09/30 12:22:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2006/05/13 07:35:53 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Zenturi
[2009/01/23 15:27:55 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ZoomBrowser
[2009/04/06 15:56:56 | 00,000,000 | RH-D | M] – C:\Documents and Settings\xxxxxxxx\Application Data
[2009/02/25 19:21:08 | 00,000,000 | -HSD | M] – C:\Documents and Settings\xxxxxxxx\Application Data\.#
[2008/08/05 22:28:15 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Adobe
[2006/07/07 07:21:44 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\AdobeAUM
[2008/05/10 21:14:00 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\AdobeUM
[2008/01/11 15:00:31 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\aicon
[2009/03/14 12:53:18 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Any Video Converter
[2008/04/27 12:56:37 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Apple Computer
[2008/05/10 16:26:21 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\ArcSoft
[2008/10/19 12:46:00 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\avidemux
[2007/10/30 18:10:11 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\ClipMagic
[2004/11/22 13:10:29 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\CyberLink
[2007/10/30 18:20:06 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\CyberMatrix
[2009/02/22 16:58:13 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\DivX
[2007/11/02 08:06:13 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\DonationCoder
[2005/02/28 16:31:46 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Downloaded Installations
[2008/03/18 19:11:59 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\FastStone
[2009/04/06 22:38:17 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Free Download Manager
[2009/03/10 17:01:23 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\GoodSync
[2006/05/13 16:51:04 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Google
[2005/05/28 07:12:47 | 00,000,000 | -H-D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\GTek
[2008/08/31 07:33:31 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\gtk-2.0
[2004/11/22 13:19:17 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Help
[2008/05/21 12:52:18 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\HP
[2007/08/09 11:34:23 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Identities
[2006/12/12 08:58:26 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\ieSpell
[2008/03/14 16:16:00 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\InstallShield
[2007/04/02 18:42:16 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\InstallShield Installation Information
[2005/01/27 10:15:48 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Intuit
[2005/02/28 17:36:50 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Kinko's
[2004/12/10 14:31:31 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Leadertech
[2008/03/14 16:19:04 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Logitech
[2007/02/09 09:26:26 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Macromedia
[2009/04/05 07:49:48 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Malwarebytes
[2008/07/09 12:07:18 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Media Player Classic
[2008/10/16 17:23:51 | 00,000,000 | –SD | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Microsoft
[2009/03/01 13:39:20 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Moyea
[2008/08/09 14:52:37 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Mozilla
[2006/01/21 15:45:39 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\MSNInstaller
[2009/04/06 15:56:56 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Safer Networking
[2008/10/14 23:43:20 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Seven Zip
[2008/08/30 07:52:07 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Skype
[2008/08/30 07:14:10 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\skypePM
[2008/09/04 16:12:46 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Smith Micro
[2004/12/10 14:32:00 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Sonic
[2004/10/19 19:23:50 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Sun
[2004/10/19 19:33:47 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Symantec
[2006/11/16 08:22:41 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Talkback
[2006/11/16 08:22:18 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Thunderbird
[2009/02/25 14:37:05 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\TrueCrypt
[2008/06/13 13:29:33 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Ulead Systems
[2006/09/18 12:00:56 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\URUSoft
[2007/01/12 17:51:41 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Viewpoint
[2006/09/17 18:57:27 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\VividLyrics
[2008/07/04 13:01:17 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\vlc
[2008/10/19 21:50:02 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Winamp
[2005/07/28 18:03:22 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\WinPatrol
[2006/11/01 21:08:54 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\Yahoo!
[2009/01/23 16:15:27 | 00,000,000 | —D | M] – C:\Documents and Settings\xxxxxxxx\Application Data\ZoomBrowser EX
[2004/08/04 03:00:00 | 00,000,065 | —- | M] () – C:\WINDOWS\Tasks\DESKTOP.INI
[2009/04/07 21:54:19 | 00,000,868 | —- | M] () – C:\WINDOWS\Tasks\Google Software Updater.job
[2009/04/07 21:54:12 | 00,000,882 | —- | M] () – C:\WINDOWS\Tasks\GoogleUpdateTaskMachine.job
[2009/04/07 21:54:03 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT
[2009/04/07 22:10:00 | 00,000,432 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{ED074D08-F7A5-4929-9659-007F5C4F7395}.job

========== Purity Check ==========


========== Alternate Data Streams ==========

@Alternate Data Stream - 88 bytes -> C:\WINDOWS\regedit.exe:SummaryInformation
< End of report >

extras.txt

I have a feeling you are going to ask about jaisen and inspiron 8600 and xxxxxxxx.
When this started about a week ago and I ran either malwarebytes, agast 4.8 or AVG free one of them turned up cookies with my name@and some address I guess was a link to someplace.
I got to thinking How can I remove my name from after my documents and settings. I used jaisen and then changed my mind and deleted jaisen and kept inspiron 8600 as I am administrator and no one but me uses this laptop.

OTListIt Extras logfile created on: 4/7/2009 10:12:18 PM - Run 1
OTListIt2 by OldTimer - Version 2.0.12.1 Folder = C:\Documents and Settings\xxxxxxxx\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.59 Gb Available Physical Memory | 79.33% Memory free
3.85 Gb Paging File | 3.53 Gb Available in Paging File | 91.76% Paging File free
Paging file location(s): C:\pagefile.sys 0 0;

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 52.34 Gb Total Space | 26.90 Gb Free Space | 51.40% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: INSPIRON
Current User Name: jaisen
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.hta [@ = htafile] – Reg Error: Value error. File not found
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
"DisableNotifications" = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Disabled:ActiveSync Service

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL File not found
C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL File not found
C:\Program Files\America Online 9.0\waol.exe:*:Enabled:America Online 9.0 File not found
C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5 File not found
C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager (Microsoft Corporation)
C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager (Microsoft Corporation)
C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application (Microsoft Corporation)
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
C:\Program Files\America Online 9.0\waol.exe:*:Disabled:America Online 9.0 File not found
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Disabled:AOL File not found
C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Disabled:AOL File not found
C:\Program Files\Common Files\Adobe\ESD\AdobeDownloadManager.exe:*:Disabled:Adobe Download Manager File not found
C:\Program Files\MSN Messenger\msnmsgr.exe:*:Disabled:MSN Messenger 7.5 File not found
C:\Program Files\Real\RealPlayer\realplay.exe:*:Disabled:RealPlayer File not found
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE:*:Disabled:ActiveSync Connection Manager (Microsoft Corporation)
C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Disabled:ActiveSync RAPI Manager (Microsoft Corporation)
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Disabled:hpqste08.exe (Hewlett-Packard Development Company, L.P.)
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe:*:Disabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Disabled:hposid01.exe (Hewlett-Packard Development Company, L.P.)
C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Disabled:hpqnrs08.exe (Hewlett-Packard Development Company, L.P.)
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Disabled:hpqtra08.exe (Hewlett-Packard Development Company, L.P.)
C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Disabled:Yahoo! FT Server File not found
C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype (Skype Technologies S.A.)
C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger (Microsoft Corporation)
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
C:\Program Files\Mozilla Firefox\firefox.exe:LocalSubNet:Enabled:Mozilla Firefox (Mozilla Corporation)
C:\Program Files\Mozilla Thunderbird\thunderbird.exe:LocalSubNet:Enabled:Mozilla Thunderbird (Mozilla Corporation)
C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger File not found
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger (Yahoo! Inc.)
C:\Program Files\Alwil Software\Avast4\ashAvast.exe:*:Enabled:avast! Antivirus (ALWIL Software)
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe:*:Enabled:ashWebSv.exe (ALWIL Software)
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe:*:Enabled:ashMaiSv.exe (ALWIL Software)
C:\Program Files\aicon\aicon.exe:*:Enabled:@icon sushi ()
C:\Program Files\Alwil Software\Avast4\Setup\avast.setup:*:Enabled:avast.setup File not found

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"@icon sushi_is1" = @icon sushi 1.21
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{0DC5284C-D95F-46B5-8A1A-DA8C56CA73BC}" = Sort Add-in for Microsoft FrontPage
"{110F0889-42CD-4BA5-8626-A1B2F0A7FE8E}" = 1-Click YouTubeAssistant
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{190D0C6E-C8A7-4019-8FB5-FD041EC1F2D2}" = Mobile Broadband Drivers
"{20227921-DB38-4810-9162-DDC6FCA936E7}" = Dell Home Systems Services Agreement
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = Dell Media Experience
"{296B2D8E-CE82-92AF-B2E8-A646E7CB78A2}_is1" = RegAlyzer (OpenSBI Edition)
"{2DBE41DD-2129-4C65-A3D3-5647236A60F3}" = Quicken 2005
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{3248F0A8-6813-11D6-A77B-00B0D0150020}" = J2SE Runtime Environment 5.0 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0150090}" = J2SE Runtime Environment 5.0 Update 9
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35BDEFF1-A610-4956-A00D-15453C116395}" = Internet Explorer Default Page
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{39051135-10B7-4FA5-AD35-724EBC59343A}" = BPDSoftware_Ini
"{395131D0-71C3-4411-8DDD-84E7A4EC8754}" = Intellisync® for Yahoo!
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm
"{49FC50FC-F965-40D9-89B4-CBFF80941033}" = Windows Movie Maker 2.0
"{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant
"{548EAC70-EE00-11DD-908C-005056806466}" = Google Earth
"{5905F42D-3F5F-4916-ADA6-94A3646AEE76}" = Dell Driver Reset Tool
"{5912068C-847F-43B4-9D83-65A96EA855CF}" = 5300_5400_Help
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.6
"{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}" = Windows Genuine Advantage v1.3.0254.0
"{66910000-8B30-4973-A159-6371345AFFA5}" = WebReg
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD 5.1
"{6882B3A9-AB98-4ABA-A623-2979FBEA5F9F}_is1" = Moyea FLV Player version 1.6.2.2
"{68D60342-7686-45C9-B8EB-40EF843D0460}" = Dell Networking Guide
"{6909F917-5499-482e-9AA1-FAD06A99F231}" = Toolbox
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{70AF2F0B-9319-48A2-A1E1-CB99623E8AE9}" = 5300_5400_Readme
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{71F6DF7D-B639-4FAD-BA93-E6DF267AA44D}" = DesignPro 5.4 Limited Edition
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74F7662C-B1DB-489E-A8AC-07A06B24978B}" = Dell System Restore
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{76EFFC7C-17A6-479D-9E47-8E658C1695AE}" = Windows Backup Utility
"{7A3F0566-5E05-4919-9C98-456F6B5CF831}" = Get High Speed Internet!
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7F142D56-3326-11D5-B229-002078017FBF}" = Modem Helper
"{7F231232-C309-4401-964A-2A002B6E1ED9}" = Microsoft Baseline Security Analyzer 2.0.1
"{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status
"{866D2442-3482-447f-AF97-36C09E5DE384}" = K5400
"{89EE857B-8970-4F9F-AB58-A1C873AC72B3}" = Broadcom Advanced Control Suite
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8B9852AF-B0B0-47B7-9BC5-89A95D77B6C9}" = MP3 Player Utilities 4.15
"{8F9D71EC-A86E-4001-A108-D2055591451A}" = MPM
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_WebDesigner_{3EC77D26-799B-4CD8-914F-C1565E796173}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_WebDesigner_{430971B1-C31E-45DA-81E0-72C095BAB72C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_WebDesigner_{F7A31780-33C4-4E39-951A-5EC9B91D7BF1}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0026-0000-0000-0000000FF1CE}" = Microsoft Expression Web
"{90120000-0026-0000-0000-0000000FF1CE}_WebDesigner_{9037FDA8-8383-4B6F-859D-D49C3C625225}" = Microsoft Expression Web Service Pack 1 (SP1)
"{90120000-0026-0409-0000-0000000FF1CE}" = Microsoft Expression Web MUI (English)
"{90120000-0026-0409-0000-0000000FF1CE}_WebDesigner_{DA3B8FC6-8B1D-447A-A5EE-B226DCC10662}" = Microsoft Expression Web Service Pack 1 (SP1)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_WebDesigner_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_WebDesigner_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90300409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Media Content
"{91130409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Small Business
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{A6C6C1DE-0D11-413c-862C-3EF8634602E7}" = BPDSoftware
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AA39370F-323C-47a6-9D3E-F6B4363B7C17}" = ProductContext
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AAF42A99-B684-49B1-AEBC-AE5B287CB98D}" = HP Officejet Pro K5300/5400 Series
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B208806F-A231-4FA0-AB3F-5C1B8979223E}" = Microsoft ActiveSync 4.0
"{B26B00DA-2E5D-4CF2-83C5-911198C0F009}" = GoodSync
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{B61E3331-4337-40AE-9E9F-AEADACEFA3B5}" = Jimco Flasher
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B8971880-0060-11D8-87CB-C2A1A3E71907}_is1" = Index.dat Suite
"{C13AF9C7-8E06-4354-B629-DF6192CE4A66}" = PANTECH UM175 Driver
"{C5074CC4-0E26-4716-A307-960272A90040}" = QuickSet
"{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}" = SolutionCenter
"{C8FD5BC1-92EF-4C15-92A9-F9AC7F61985F}" = HP Update
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D49EE5B7-1AEB-49C9-B77D-4AEE7249F505}" = BPD_HPSU
"{D627784F-B3EE-44E8-96B1-9509B991EA34}_is1" = AusLogics Registry Defrag
"{DBC20735-34E6-4E97-A9E5-2066B66B243D}" = TrayApp
"{E1B80DEE-A795-4258-8445-074C06AE3AB8}" = MarketResearch
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{F251B999-08A9-4704-999C-9962F0DFD88E}" = Virtual Desktop Manager Powertoy for Windows XP
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F5346614-B7C4-4E94-826A-E2363155233D}" = EasyCleaner
"{F54AC413-D2C6-4A24-B324-370C223C6250}" = Adobe Photoshop Elements 6.0
"7-Zip" = 7-Zip 4.42
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop Elements 6" = Adobe Photoshop Elements 6.0
"Adobe Shockwave Player" = Adobe Shockwave Player
"AI RoboForm" = AI RoboForm (All Users)
"AnalogX FastCache" = AnalogX FastCache
"Any Audio Converter_is1" = Any Audio Converter 1.1.0
"Any Video Converter_is1" = Any Video Converter 2.7.1
"Ask Toolbar_is1" = Ask Toolbar
"Atomic Clock Sync" = Atomic Clock Sync
"Auction Client" = Auction Client
"avast!" = avast! Antivirus
"AviSynth" = AviSynth 2.5
"BCM V.92 56K Modem" = BCM V.92 56K Modem
"Beneton Movie GIF_is1" = Beneton Movie GIF 1.1.2
"Broadcom 802.11b Network Adapter" = Dell Wireless WLAN Card
"CAL" = Canon Camera Access Library
"Calendar 2000" = Calendar 2000
"CameraWindowDC" = Canon Utilities CameraWindow DC
"CameraWindowDVC5" = Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX
"CameraWindowDVC6" = Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
"CameraWindowLauncher" = Canon Utilities CameraWindow
"Canon G.726 WMP-Decoder" = Canon G.726 WMP-Decoder
"CDex" = CDex extraction audio
"Citi Virtual Account Numbers" = Citi Virtual Account Numbers
"Clipboard Magic_is1" = Clipboard Magic 4.01
"ColorPic" = ColorPic
"CSCLIB" = Canon Camera Support Core Library
"DECCHECK" = Microsoft Windows XP Video Decoder Checkup Utility
"Dell Digital Jukebox Driver" = Dell Digital Jukebox Driver
"DellSupport" = Dell Support 5.0.0 (766)
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"Easy Duplicate Finder_is1" = Easy Duplicate Finder v. [removed]
"Easy Hi-Q Recorder_is1" = Easy Hi-Q Recorder 2.2
"EOS Utility" = Canon Utilities EOS Utility
"EvilLyrics" = EvilLyrics
"ExpressBurn" = Express Burn
"EZBack-it-up_is1" = EZBack-it-up 2.0.1
"FastStone Capture" = FastStone Capture 6.3
"FastStone Image Viewer" = FastStone Image Viewer 3.7
"FastStone Photo Resizer" = FastStone Photo Resizer 2.5
"ffdshow_is1" = ffdshow [rev 2693] [2009-02-16]
"FLV Player" = FLV Player 2.0 (build 25)
"FLVSplitter" = FLVSplitter 1.0.0.1
"Foxit Reader" = Foxit Reader
"Free Download Manager_is1" = Free Download Manager 3.0
"FREE Hi-Q Recorder_is1" = FREE Hi-Q Recorder 1.9
"Free Mp3 Wma Converter_is1" = Free Mp3 Wma Converter V 1.7.0
"Free Video to Flash Converter_is1" = Free Video to Flash Converter version 4.1
"Free WMA to MP3 Converter_is1" = Free WMA to MP3 Converter 1.16
"Google Updater" = Google Updater
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 7.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 7.0
"HPExtendedCapabilities" = HP Customer Participation Program 7.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ieSpell" = ieSpell
"InstallShield_{2DBE41DD-2129-4C65-A3D3-5647236A60F3}" = Quicken 2005
"InstallShield_{71F6DF7D-B639-4FAD-BA93-E6DF267AA44D}" = DesignPro 5.4 Limited Edition
"InstallShield_{89EE857B-8970-4F9F-AB58-A1C873AC72B3}" = Broadcom Advanced Control Suite
"IrfanView" = IrfanView (remove only)
"JRE 1.1" = Java Runtime Environment 1.1
"Label Manager" = Label Manager
"LinguaSaver_11" = LinguaSaver_11
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"MovieEditTask" = Canon MovieEdit Task for ZoomBrowser EX
"Mozilla Firefox (3.0.8)" = Mozilla Firefox (3.0.8)
"Mozilla Thunderbird ([removed])" = Mozilla Thunderbird ([removed])
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSNINST" = MSN
"MyCamera" = Canon Utilities MyCamera
"MyCameraDC" = Canon Utilities MyCamera DC
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"PhotoStitch" = Canon Utilities PhotoStitch
"Polar MultiClipboard" = Polar MultiClipboard
"Prism" = Prism Video Converter
"QuicktimeAlt_is1" = QuickTime Alternative 2.6.0
"RAW Image Task" = Canon RAW Image Task for ZoomBrowser EX
"RemoteCaptureDC" = Canon Utilities RemoteCapture DC
"RemoteCaptureTask" = Canon Utilities RemoteCapture Task for ZoomBrowser EX
"Shockwave" = Shockwave
"Skype™ for Pocket PC_is1" = Skype™ for Pocket PC 1.2
"SolveigMM AVI Trimmer" = SolveigMM AVI Trimmer
"SubtitleWorkshop" = Subtitle Workshop 2.51
"Switch" = Switch
"TimeLeft_is1" = TimeLeft 3 Freeware edition
"TrueCrypt" = TrueCrypt
"Tweak UI 2.10" = Tweak UI
"TweakMP9" = Windows Media Player 9 Series TweakMP PowerToy
"Uninstall_is1" = Uninstall 1.0.0.1
"ViewpointMediaPlayer" = Viewpoint Media Player
"Volumouse" = Volumouse
"VZAccess Manager" = VZAccess Manager
"WavePad" = WavePad Uninstall
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"WebDesigner" = Microsoft Expression Web Trial
"WIC" = Windows Imaging Component
"Winamp" = Winamp
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Customizations" = Yahoo! Browser Services
"Yahoo! Extras" = Yahoo! Browser Services
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Photos Drag-Drop Uploader 1v6" = Yahoo! Photos Easy Upload Tool 1v6
"ZoomBrowser EX" = Canon Utilities ZoomBrowser EX
"ZoomBrowser EX Memory Card Utility" = Canon ZoomBrowser EX Memory Card Utility

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 4/5/2009 10:26:06 AM | Computer Name = INSPIRON | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.0.3372, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 4/5/2009 10:27:20 AM | Computer Name = INSPIRON | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.0.3372, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 4/5/2009 10:32:33 AM | Computer Name = INSPIRON | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.0.3372, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 4/5/2009 10:36:59 AM | Computer Name = INSPIRON | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.0.3372, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 4/5/2009 10:49:59 AM | Computer Name = INSPIRON | Source = Application Error | ID = 1000
Description = Faulting application mbam.exe, version 1.35.0.0, faulting module unknown,
version 0.0.0.0, fault address 0x10021e39.

Error - 4/5/2009 11:28:32 AM | Computer Name = INSPIRON | Source = Application Error | ID = 1000
Description = Faulting application avgnsx.exe, version 8.0.0.232, faulting module
unknown, version 0.0.0.0, fault address 0x10001e39.

Error - 4/5/2009 12:00:28 PM | Computer Name = INSPIRON | Source = Application Error | ID = 1000
Description = Faulting application avgnsx.exe, version 8.0.0.232, faulting module
unknown, version 0.0.0.0, fault address 0x10001e39.

Error - 4/5/2009 1:17:06 PM | Computer Name = INSPIRON | Source = Application Error | ID = 1000
Description = Faulting application avgnsx.exe, version 8.0.0.232, faulting module
unknown, version 0.0.0.0, fault address 0x10001e39.

Error - 4/7/2009 11:01:23 AM | Computer Name = INSPIRON | Source = Application Error | ID = 1000
Description = Faulting application thunderbird.exe, version 1.8.20090.30215, faulting
module unknown, version 0.0.0.0, fault address 0x10001e39.

Error - 4/7/2009 5:44:26 PM | Computer Name = INSPIRON | Source = Application Error | ID = 1000
Description = Faulting application thunderbird.exe, version 1.8.20090.30215, faulting
module unknown, version 0.0.0.0, fault address 0x10001e39.

[ OSession Events ]
Error - 9/24/2006 10:20:24 PM | Computer Name = INSPIRON8600 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 20, Application Name: Microsoft Expression Web Designer, Application
Version: 12.0.4407.1003, Microsoft Office Version: 12.0.4407.1005. This session
lasted 86 seconds with 60 seconds of active time. This session ended with a crash.

Error - 12/14/2006 9:13:04 PM | Computer Name = INSPIRON8600 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 20, Application Name: Microsoft Expression Web Designer, Application
Version: 12.0.4407.1003, Microsoft Office Version: 12.0.4407.1005. This session
lasted 420 seconds with 360 seconds of active time. This session ended with a
crash.

Error - 12/28/2006 5:15:11 PM | Computer Name = INSPIRON8600 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 20, Application Name: Microsoft Expression Web Designer, Application
Version: 12.0.4407.1003, Microsoft Office Version: 12.0.4407.1005. This session
lasted 412 seconds with 360 seconds of active time. This session ended with a
crash.

Error - 12/28/2006 5:16:13 PM | Computer Name = INSPIRON8600 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 20, Application Name: Microsoft Expression Web Designer, Application
Version: 12.0.4407.1003, Microsoft Office Version: 12.0.4407.1005. This session
lasted 41 seconds with 0 seconds of active time. This session ended with a crash.

Error - 12/28/2006 5:17:25 PM | Computer Name = INSPIRON8600 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 20, Application Name: Microsoft Expression Web Designer, Application
Version: 12.0.4407.1003, Microsoft Office Version: 12.0.4407.1005. This session
lasted 67 seconds with 60 seconds of active time. This session ended with a crash.

Error - 4/3/2007 6:36:14 PM | Computer Name = INSPIRON8600 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 20, Application Name: Microsoft Expression Web, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 4490
seconds with 3480 seconds of active time. This session ended with a crash.

Error - 4/7/2007 10:26:15 PM | Computer Name = INSPIRON8600 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 20, Application Name: Microsoft Expression Web, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 23
seconds with 0 seconds of active time. This session ended with a crash.

Error - 3/7/2008 3:36:50 AM | Computer Name = INSPIRON | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 20, Application Name: Microsoft Expression Web, Application Version:
12.0.6211.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 1236
seconds with 780 seconds of active time. This session ended with a crash.

Error - 2/18/2009 3:56:01 PM | Computer Name = INSPIRON | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 20, Application Name: Microsoft Expression Web, Application Version:
12.0.6211.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 418
seconds with 240 seconds of active time. This session ended with a crash.

Error - 4/2/2009 8:42:58 PM | Computer Name = INSPIRON | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 20, Application Name: Microsoft Expression Web, Application Version:
12.0.6211.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 11
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 4/7/2009 1:29:31 AM | Computer Name = INSPIRON | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
Aavmker4 AFD aswSP aswTdi Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip truecrypt
WS2IFSL

Error - 4/7/2009 1:31:57 AM | Computer Name = INSPIRON | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 4/7/2009 1:33:59 AM | Computer Name = INSPIRON | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 4/7/2009 10:02:53 AM | Computer Name = INSPIRON | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 4/7/2009 10:25:49 AM | Computer Name = INSPIRON | Source = Windows Update Agent | ID = 16
Description = Unable to Connect: Windows is unable to connect to the automatic updates
service and therefore cannot download and install updates according to the set
schedule. Windows will continue to try to establish a connection.

Error - 4/7/2009 2:12:59 PM | Computer Name = INSPIRON | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 4/7/2009 3:40:07 PM | Computer Name = INSPIRON | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 4/7/2009 5:21:24 PM | Computer Name = INSPIRON | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 4/7/2009 7:51:21 PM | Computer Name = INSPIRON | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2

Error - 4/8/2009 12:55:00 AM | Computer Name = INSPIRON | Source = Service Control Manager | ID = 7000
Description = The MCSTRM service failed to start due to the following error: %%2


< End of report >