Thanks for your reply!
Just an update, when I restart NOT in safemode, I get a continuous stream of RunDLL errors.. "Error loading C:/WINDOWS/fibdmgap.dll and oruzodul.dll and iguwogil.dll". I cant open any programs because the system is running so slow.
Here are my logs:
Rooter:
Microsoft Windows XP Home Edition (5.1.2600) Service Pack 2
C:\ [Fixed] - NTFS - (Total:68800 Mo/Free:2297 Mo)
D:\ [Fixed] - FAT32 - (Total:7493 Mo/Free:1997 Mo)
E:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)
F:\ [CD-Rom] (Total:0 Mo/Free:0 Mo)
Sat 04/11/2009|13:18
———————-\\ Processes..
–Locked– [System Process]
———- System
———- \SystemRoot\System32\smss.exe
———- \??\C:\WINDOWS\system32\csrss.exe
———- \??\C:\WINDOWS\system32\winlogon.exe
———- C:\WINDOWS\system32\services.exe
———- C:\WINDOWS\system32\lsass.exe
———- C:\WINDOWS\system32\svchost.exe
———- C:\WINDOWS\system32\svchost.exe
———- C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
———- C:\WINDOWS\system32\svchost.exe
———- C:\WINDOWS\system32\svchost.exe
———- C:\WINDOWS\system32\svchost.exe
———- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
———- C:\WINDOWS\Explorer.EXE
———- C:\Program Files\Mozilla Firefox\firefox.exe
———- C:\Documents and Settings\HP_Owner\My Documents\Downloaded Files\Rooter.exe
———- C:\WINDOWS\system32\cmd.exe
———- C:\Rooter$\RK.exe
———————-\\ Search..
———————-\\ ROOTKIT !!
———————-\\ Cracks & Keygens..
C:\DOCUME~1\HP_Owner\My Documents\Installed Programs\DVDXCopy Platinum 4[1].0.3.8 Incl KeyGen 321 studios dvdx copy (clone any dvd) burn rip x key.zip
1 - "C:\Rooter$\Rooter_1.txt" - Sat 04/11/2009|13:19
———————-\\ Scan completed at 13:19
OTListIt:
OTListIt logfile created on: 4/11/2009 1:23:48 PM - Run 2
OTListIt2 by OldTimer - Version 2.0.12.2 Folder = C:\Documents and Settings\HP_Owner\My Documents\Downloaded Files
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18241)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
503.30 Mb Total Physical Memory | 213.35 Mb Available Physical Memory | 42.39% Memory free
1.20 Gb Paging File | 0.95 Gb Available in Paging File | 79.45% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 67.19 Gb Total Space | 38.25 Gb Free Space | 56.93% Space Free | Partition Type: NTFS
Drive D: | 7.32 Gb Total Space | 1.95 Gb Free Space | 26.65% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: JEN
Current User Name: HP_Owner
Logged in as Administrator.
Current Boot Mode: SafeMode with Networking
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On
========== Processes (SafeList) ==========
PRC - C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\Documents and Settings\HP_Owner\My Documents\Downloaded Files\OTListIt2.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Win32 Services (SafeList) ==========
SRV - (aawservice [Auto | Running]) – C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
SRV - (AOL ACS [Auto | Stopped]) – C:\Program Files\Common Files\AOL\ACS\acsd.exe (AOL LLC)
SRV - (Apple Mobile Device [Auto | Stopped]) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (Bonjour Service [Auto | Stopped]) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (dvpapi [Auto | Stopped]) – C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe (Authentium, Inc.)
SRV - (GEARSecurity [Auto | Stopped]) – File not found
SRV - (gusvc [On_Demand | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (helpsvc [Auto | Running]) – C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (hpqcxs08 [On_Demand | Stopped]) – C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll (Hewlett-Packard Co.)
SRV - (hpqddsvc [Auto | Stopped]) – C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll (Hewlett-Packard Co.)
SRV - (HPSLPSVC [Auto | Stopped]) – C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL (Hewlett-Packard Co.)
SRV - (ioloFileInfoList [Auto | Stopped]) – C:\Program Files\iolo\common\lib\ioloServiceManager.exe ()
SRV - (ioloSystemService [Auto | Stopped]) – C:\Program Files\iolo\common\lib\ioloServiceManager.exe ()
SRV - (IOLO_SRV [Auto | Stopped]) – C:\Program Files\iolo\System Mechanic Professional\IoloSGCtrl.exe ()
SRV - (iPod Service [On_Demand | Stopped]) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (MDM [Auto | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
SRV - (msfwsvc [Auto | Stopped]) – C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe (Microsoft Corporation)
SRV - (Net Driver HPZ12 [Auto | Stopped]) – C:\WINDOWS\system32\HPZinw12.dll (Hewlett-Packard)
SRV - (OcHealthMon [Auto | Stopped]) – C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe (Microsoft Corporation)
SRV - (OneCareMP [Auto | Running]) – C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe (Microsoft Corporation)
SRV - (Pml Driver HPZ12 [Auto | Stopped]) – C:\WINDOWS\system32\HPZipm12.dll (Hewlett-Packard)
SRV - (SymWSC [Auto | Stopped]) – c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe (Symantec Corporation)
SRV - (Viewpoint Manager Service [Auto | Stopped]) – C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
SRV - (WANMiniportService [Auto | Stopped]) – C:\WINDOWS\wanmpsvc.exe (America Online, Inc.)
SRV - (winss [Auto | Stopped]) – C:\Program Files\Microsoft Windows OneCare Live\winss.exe (Microsoft Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (AgereSoftModem [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\AGRSM.sys (Agere Systems)
DRV - (ALCXWDM [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (ASPI32 [System | Stopped]) – C:\WINDOWS\System32\drivers\Aspi32.sys (Adaptec)
DRV - (CSS DVP [Auto | Stopped]) – C:\WINDOWS\system32\DRIVERS\css-dvp.sys (Authentium, Inc.)
DRV - (dvd43llh [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\dvd43llh.sys (RIF)
DRV - (elagopro [Auto | Stopped]) – C:\WINDOWS\system32\DRIVERS\elagopro.sys (Gteko Ltd.)
DRV - (elaunidr [Auto | Stopped]) – C:\WINDOWS\system32\DRIVERS\elaunidr.sys (Gteko Ltd.)
DRV - (fasttx2k [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\fasttx2k.sys (Promise Technology, Inc.)
DRV - (FileDisk [System | Stopped]) – C:\WINDOWS\System32\drivers\filedisk.sys (iolo technologies, LLC (based on original work by Bo Brantén))
DRV - (GEARAspiWDM [On_Demand | Running]) – C:\WINDOWS\system32\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (HDAudBus [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HDAudBus.sys (Windows ® Server 2003 DDK provider)
DRV - (HPZid412 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\HPZid412.sys (HP)
DRV - (HPZipr12 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\HPZipr12.sys (HP)
DRV - (HPZius12 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\HPZius12.sys (HP)
DRV - (ialm [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\ialmnt5.sys (Intel Corporation)
DRV - (IntcAzAudAddService [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (Iviaspi [On_Demand | Running]) – C:\WINDOWS\system32\drivers\iviaspi.sys (InterVideo, Inc.)
DRV - (MpFilter [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\MpFilter.sys (Microsoft Corporation)
DRV - (MSFWDrv [Auto | Stopped]) – C:\WINDOWS\system32\DRIVERS\msfwdrv.sys (Microsoft Corporation)
DRV - (MSFWHLPR [System | Running]) – C:\WINDOWS\system32\DRIVERS\msfwhlpr.sys (Microsoft Corporation)
DRV - (NuidFltr [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\NuidFltr.sys (Microsoft Corporation)
DRV - (Pfc [On_Demand | Running]) – C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (Point32 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\point32.sys (Microsoft Corporation)
DRV - (PRISM_A02 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\WUSB20XP.sys (GlobespanVirata, Inc.)
DRV - (Ps2 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\PS2.sys (Hewlett-Packard Company)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (rtl8139 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\R8139n51.SYS (Realtek Semiconductor Corporation )
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (SiS315 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\sisgrp.sys (Silicon Integrated Systems Corporation)
DRV - (SISAGP [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\SISAGPX.sys (Silicon Integrated Systems Corporation)
DRV - (SiSkp [System | Stopped]) – C:\WINDOWS\system32\DRIVERS\srvkp.sys (Silicon Integrated Systems Corporation)
DRV - (StillCam [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\serscan.sys (Microsoft Corporation)
DRV - (SVKP [Auto | Stopped]) – C:\WINDOWS\system32\SVKP.sys (AntiCracking)
DRV - (usb_rndisx [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\usb8023x.sys (Microsoft Corporation)
DRV - (viaagp1 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.)
DRV - (viagfx [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\vtmini.sys (Copyright © VIA/S3 Graphics Co, Ltd.)
DRV - (wanatw [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\wanatw4.sys (America Online, Inc.)
DRV - (WIBUKEY [Auto | Stopped]) – C:\WINDOWS\SYSTEM32\DRIVERS\Wibukey.sys (WIBU-SYSTEMS AG)
DRV - (XPacket [Boot | Running]) – C:\WINDOWS\System32\xpacket.sys (iolo technologies, LLC)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf;=desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf;=desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL =
http://www.google.com/search?q={searchTerm…tf8&oe;=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.optonline.net/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "
http://www.optonline.net/Home"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.0.1
FF - prefs.js..extensions.enabledItems: {0545b830-f0aa-4d7e-8820-50a4629a56fe}:3.9
FF - prefs.js..extensions.enabledItems: {71C54606-83ED-4ea6-9315-1AAB29466D33}:3.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}:6.0.04
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07
FF - prefs.js..extensions.enabledItems: [removed]:1.1.5
FF - prefs.js..extensions.enabledItems: {5359A5B3-9AFD-49ee-8C39-0A8F97A2A2D6}:1.2
FF - prefs.js..extensions.enabledItems: {1065C22E-87BE-41B2-AE57-E04ACC590C20}:1.0
FF - prefs.js..extensions.enabledItems: {2fbc1200-ad13-11db-abbd-0800200c9a66}:3.0.1
FF - prefs.js..extensions.enabledItems: {ded0fc70-7215-4802-afeb-b2982d3e7225}:3.2
FF - prefs.js..extensions.enabledItems: {47e5a66c-0e35-11dc-8314-0800200c9a66}:3.0.1
FF - prefs.js..extensions.enabledItems: {04CA07AB-7FC3-4110-A83F-EF1E6B75D5B0}:4.0.1
FF - prefs.js..extensions.enabledItems: {cc6ef5ab-35be-4300-bd07-d12850fc97ff}:4.0.1
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.5
FF - prefs.js..extensions.enabledItems: {eb46c787-131a-4eb7-9b93-7f62ca550917}:0.3.5
FF - prefs.js..extensions.enabledItems: [removed]:3.0.7
FF - prefs.js..extensions.enabledItems: [removed]:0.3.1
FF - prefs.js..extensions.enabledItems: {8181B740-5255-11D9-9FF6-0090995D2DCA}:0.7.08.07.28
FF - prefs.js..extensions.enabledItems: {069FB356-C69F-7349-D092-AB28AF836D0E}:0.8.100
FF - prefs.js..extensions.enabledItems: {a02c0c70-605c-11da-8cd6-0800200c9a66}:4.08
FF - prefs.js..extensions.enabledItems: {36C13C8F-54F1-412e-8177-2E411719162D}:3.3.7
FF - prefs.js..extensions.enabledItems: [removed]:3.0.1
FF - prefs.js..extensions.enabledItems: {558D3F58-1E89-4fe2-A1F1-5EADC7BC77CB}:3.2
FF - HKLM\software\mozilla\Firefox\Extensions\\{1065C22E-87BE-41B2-AE57-E04ACC590C20}: C:\DOCUMENTS AND SETTINGS\HP_OWNER\LOCAL SETTINGS\APPLICATION DATA\{1065C22E-87BE-41B2-AE57-E04ACC590C20} [2009/04/10 13:19:32 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.5\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/04/09 16:48:24 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.5\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/03/22 12:39:22 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.14\extensions\\Components: C:\PROGRAM FILES\MOZILLA THUNDERBIRD\COMPONENTS [2009/01/19 15:08:04 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 2.0.0.14\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA THUNDERBIRD\PLUGINS [2009/03/22 12:39:23 | 00,000,000 | —D | M]
[2008/08/28 16:56:50 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Extensions
[2008/08/28 16:56:50 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/04/11 12:08:54 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions
[2008/09/01 15:25:38 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{04CA07AB-7FC3-4110-A83F-EF1E6B75D5B0}
[2009/03/22 13:36:33 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe}
[2008/09/01 15:25:44 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{069FB356-C69F-7349-D092-AB28AF836D0E}
[2008/08/28 16:58:20 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{2fbc1200-ad13-11db-abbd-0800200c9a66}
[2008/08/28 17:01:28 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{36C13C8F-54F1-412e-8177-2E411719162D}
[2008/08/28 17:03:46 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{47e5a66c-0e35-11dc-8314-0800200c9a66}
[2008/08/31 10:53:16 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{5359A5B3-9AFD-49ee-8C39-0A8F97A2A2D6}
[2009/03/22 13:36:26 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{558D3F58-1E89-4fe2-A1F1-5EADC7BC77CB}
[2009/03/22 13:39:51 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{71C54606-83ED-4ea6-9315-1AAB29466D33}
[2008/08/28 17:02:06 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{8181B740-5255-11D9-9FF6-0090995D2DCA}
[2008/12/15 14:38:14 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{a02c0c70-605c-11da-8cd6-0800200c9a66}
[2009/03/22 13:36:25 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{cc6ef5ab-35be-4300-bd07-d12850fc97ff}
[2009/03/22 13:36:33 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2007/06/23 09:23:04 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{DD99D76F-5129-4fd3-A2DC-AB41D6FBCF98}
[2009/03/22 13:36:23 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{ded0fc70-7215-4802-afeb-b2982d3e7225}
[2008/08/28 17:02:51 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{eb46c787-131a-4eb7-9b93-7f62ca550917}
[2008/08/28 17:05:00 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\[removed]
[2009/03/22 13:36:25 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\[removed]
[2009/01/05 14:18:30 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\[removed]
[2008/09/01 15:18:09 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\[removed]
[2009/03/22 13:36:28 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{558D3F58-1E89-4fe2-A1F1-5EADC7BC77CB}\chrome\mozapps\extensions
[2008/12/15 14:38:15 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{a02c0c70-605c-11da-8cd6-0800200c9a66}\chrome\mozapps\extensions
[2009/03/22 13:36:25 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\mozilla\Firefox\Profiles\ft8omhh9.default\extensions\{ded0fc70-7215-4802-afeb-b2982d3e7225}\chrome\mozapps\extensions
[2009/04/11 10:53:16 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2008/12/31 19:01:51 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2008/07/13 16:07:41 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
[2008/09/01 14:54:59 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
[2008/12/31 19:01:44 | 00,023,032 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2008/12/31 19:01:44 | 00,134,648 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2008/09/28 11:08:54 | 00,001,394 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2008/09/28 11:08:54 | 00,002,193 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2008/09/28 11:08:54 | 00,001,534 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2008/11/22 15:00:57 | 00,002,343 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2008/09/28 11:08:54 | 00,001,706 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\google.xml
[2008/09/28 11:08:54 | 00,001,178 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2008/09/28 11:08:54 | 00,000,792 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo.xml
O1 HOSTS File: (262084 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.1001-search.info
O1 - Hosts: 127.0.0.1 1001-search.info
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.123topsearch.com
O1 - Hosts: 127.0.0.1 123topsearch.com
O1 - Hosts: 127.0.0.1 www.132.com
O1 - Hosts: 127.0.0.1 132.com
O1 - Hosts: 127.0.0.1 www.136136.net
O1 - Hosts: 127.0.0.1 136136.net
O1 - Hosts: 9096 more lines…
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll (Google Inc.)
O2 - BHO: (no name) - {c545addf-18ac-1db4-4c0d-3fac88da3fb9} - C:\WINDOWS\oyuzoyiziyemam.dll (Mozilla Foundation)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: () - - Reg Error: Key error. File not found
O3 - HKLM\..\Toolbar: (&Google;) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKLM\..\Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (Google Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O4 - HKLM..\Run: [AGRSMMSG] AGRSMMSG.exe (Agere Systems)
O4 - HKLM..\Run: [Alcmtr] ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AlcWzrd] ALCWZRD.EXE (RealTek Semicoductor Corp.)
O4 - HKLM..\Run: [AlcxMonitor] ALCXMNTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe (Hewlett-Packard)
O4 - HKLM..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe (Hewlett-Packard)
O4 - HKLM..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" (Microsoft Corporation)
O4 - HKLM..\Run: [iolo AntiVirus] "C:\Program Files\iolo\System Mechanic Professional\AntiVirus\ioloAV.exe" ()
O4 - HKLM..\Run: [iolo Personal Firewall] "C:\Program Files\iolo\System Mechanic Professional\Personal Firewall\ioloFW.exe" rstrq ()
O4 - HKLM..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe" (Microsoft Corporation)
O4 - HKLM..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [PS2] C:\WINDOWS\system32\ps2.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [Qgimopibano] rundll32.exe "C:\WINDOWS\ogezubiz.dll",e (Macrovision Corporation)
O4 - HKLM..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE ()
O4 - HKLM..\Run: [SMSystemAnalyzer] "C:\Program Files\iolo\System Mechanic Professional 7\SMSystemAnalyzer.exe" File not found
O4 - HKLM..\Run: [SoundMan] SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SystemGuardAlerter] "C:\Program Files\iolo\System Mechanic Professional\SystemGuardAlerter.exe" ()
O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot (RealNetworks, Inc.)
O4 - HKLM..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r (Sonic Solutions)
O4 - HKLM..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u File not found
O4 - HKLM..\Run: [VTTimer] VTTimer.exe File not found
O4 - HKCU..\Run: [] C:\Documents and Settings\HP_Owner\.exe /i File not found
O4 - HKCU..\Run: [Aim6] File not found
O4 - HKCU..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup (Linksys, a Division of Cisco Systems, Inc.)
O4 - HKCU..\Run: [HP_Owner] C:\Documents and Settings\HP_Owner\HP_Owner.exe /i ()
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKLM..\RunOnceEx: [] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Updates from HP.lnk = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe (Hewlett-Packard)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O8 - Extra context menu item: Add To HP Organize… - C:\PROGRA~1\HEWLET~1\HPORGA~1\bin/module.main/favorites\ie_add_to.html [2005/03/03 18:36:27 | 00,000,000 | —D | M]
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000 File not found
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe File not found
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe File not found
O9 - Extra Button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\WINDOWS\system32\iavlsp.dll (iolo technologies, LLC)
O15 - HKLM\..Trusted Domains: 45 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O15 - HKCU\..Trusted Domains: 48 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700}
http://download.microsoft.com/download/C/0…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21}
https://objects.aol.com/mcafee/molbin/share…83/mcinsctl.cab (Reg Error: Key error.)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166}
http://cdn.scan.onecare.live.com/resource/…lscbase5483.cab (Windows Live Safety Center Base Module)
O16 - DPF: {64D01C7F-810D-446E-A07E-365764235644}
http://kraisoft.com/files/realone/atomaders.cab (AtlAtomadersCtlAttrib Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://update.microsoft.com/microsoftupdat…b?1239456196203 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} http://web1.shutterfly.com/downloads/Uploader.cab (Reg Error: Key error.)
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1}
http://acs.pandasoftware.com/activescan/as5free/asinst.cab (ActiveScan Installer Class)
O16 - DPF: {A8683C98-5341-421B-B23C-8514C05354F1} http://photo.walmart.com/photo/uploads/Fuj…ploadClient.cab (FujifilmUploader Class)
O16 - DPF: {A93B47FD-9BF6-4DA8-97FC-9270B9D64A6C}
http://www.gwcoc.com/webcams/h263ctrl.cab (VaPgCtrl Class)
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09}
https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx (Get_ActiveX Control)
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389}
https://objects.aol.com/mcafee/molbin/share…,20/McGDMgr.cab (Reg Error: Key error.)
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3}
http://a532.g.akamai.net/f/532/6712/4h/pla…0/Installer.exe (Virtools WebPlayer Class)
O16 - DPF: {C75BE5CC-7F80-458C-8B66-FAB86E3B13C3}
http://images.fotki.com/activex/FotkiUploader.cab (FotkiUploader Control)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Java Plug-in 1.4.2_03)
O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}
http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_04)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.popcap.com/games/popcaploader_v6.cab (PopCapLoader Object)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (wbsys.dll) - C:\WINDOWS\system32\wbsys.dll (Stardock.Net, Inc)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\system32\igfxsrvc.dll (Intel Corporation)
O20 - Winlogon\Notify\WB: DllName - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll - C:\Program Files\Stardock\Object Desktop\WindowBlinds\fastload.dll (Stardock)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O29 - HKLM SecurityProviders - (digiwet.dll) - C:\WINDOWS\system32\digiwet.dll ()
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O32 - Autorun File - D:\AUTOEXEC.BAT () - [ FAT32 ]
O32 - Autorun File - D:\Autorun.inf () - [ FAT32 ]
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\LaunchU3.exe – File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
========== Files/Folders - Created Within 30 Days ==========
[2009/04/11 13:18:43 | 00,000,000 | —D | C] – C:\Rooter$
[2009/04/11 10:42:22 | 00,001,745 | —- | C] () – C:\DOCUME~1\HP_Owner\Desktop\HijackThis.lnk
[2009/04/11 10:42:22 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/04/10 20:47:59 | 00,000,000 | —D | C] – C:\WINDOWS\All Users
[2009/04/10 20:47:59 | 00,000,000 | —D | C] – C:\iolo
[2009/04/10 20:10:09 | 00,000,000 | —D | C] – C:\DOCUME~1\ALLUSE~1\Documents\microsoft
[2009/04/10 19:14:21 | 00,000,000 | -HSD | C] – C:\INCINERATE
[2009/04/10 18:35:35 | 00,000,269 | —- | C] () – C:\WINDOWS\SysMech.INI
[2009/04/10 14:12:21 | 00,091,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\msfwdrv.sys
[2009/04/10 14:12:03 | 00,116,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\msfwhlpr.sys
[2009/04/10 14:00:25 | 00,053,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\MpFilter.sys
[2009/04/10 13:59:48 | 00,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2009/04/10 13:57:40 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bitsprx4.dll
[2009/04/10 13:57:40 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2009/04/10 13:33:07 | 00,000,000 | —D | C] – C:\Program Files\Microsoft Windows OneCare Live
[2009/04/10 13:30:53 | 00,000,000 | —D | C] – C:\Program Files\Windows Live Safety Center
[2009/04/10 13:19:32 | 00,000,408 | —- | C] () – C:\WINDOWS\Xmapidelujo.dat
[2009/04/10 13:19:32 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Owner\Local Settings\Application Data\{1065C22E-87BE-41B2-AE57-E04ACC590C20}
[2009/04/10 13:19:32 | 00,000,000 | —- | C] () – C:\WINDOWS\Jtureceweweci.bin
[2009/04/09 17:15:50 | 00,000,000 | —D | C] – C:\7eb3ed6b39db86261038e43ee35c72
[2009/04/08 13:11:41 | 00,018,432 | —- | C] () – C:\WINDOWS\System32\digiwet.dll
[2009/04/03 18:42:12 | 00,000,000 | —D | C] – C:\Documents and Settings\HP_Owner\Application Data\OpenOffice.org
[2009/04/03 18:40:26 | 00,000,905 | —- | C] () – C:\DOCUME~1\ALLUSE~1\Desktop\OpenOffice.org 3.0.lnk
[2009/04/03 18:38:38 | 00,000,000 | —D | C] – C:\Program Files\JRE
[2009/04/03 18:38:29 | 00,000,000 | —D | C] – C:\Program Files\OpenOffice.org 3
[2009/03/22 13:46:38 | 00,000,000 | —D | C] – C:\Program Files\Windows Installer Clean Up
[2009/03/22 13:45:51 | 00,000,000 | —D | C] – C:\Program Files\MSECACHE
[2009/03/22 12:45:33 | 00,002,137 | —- | C] () – C:\DOCUME~1\ALLUSE~1\Desktop\iTunes.lnk
[2009/03/22 12:44:33 | 00,000,000 | —D | C] – C:\Program Files\iPod
[2009/03/22 12:44:16 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2009/03/22 12:41:19 | 00,000,000 | —D | C] – C:\Program Files\Bonjour
[2009/03/18 19:44:45 | 00,000,944 | —- | C] () – C:\DOCUME~1\HP_Owner\Desktop\Spybot - Search & Destroy.lnk
[2008/11/08 22:30:26 | 00,000,432 | —- | C] () – C:\WINDOWS\System32\iolo.ini
[2008/11/08 22:25:21 | 00,126,976 | —- | C] () – C:\WINDOWS\System32\iavlsp.dll.old.kdhk
[2008/11/08 22:24:48 | 00,936,288 | —- | C] () – C:\WINDOWS\System32\Incinerator.dll
[2008/11/08 22:10:35 | 00,074,703 | —- | C] () – C:\WINDOWS\System32\mfc45.dll
[2008/01/04 17:58:50 | 03,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2008/01/04 17:57:22 | 00,000,416 | —- | C] () – C:\WINDOWS\System32\dtu100.dll.manifest
[2008/01/04 17:57:22 | 00,000,416 | —- | C] () – C:\WINDOWS\System32\dpl100.dll.manifest
[2008/01/04 17:56:24 | 00,012,288 | —- | C] () – C:\WINDOWS\System32\DivXWMPExtType.dll
[2006/06/12 14:05:39 | 00,003,654 | —- | C] () – C:\WINDOWS\System32\drivers\Sonyhcp.dll
[2006/02/02 17:53:25 | 00,011,776 | —- | C] () – C:\WINDOWS\System32\ZPORT4AS.dll
[2005/11/24 21:08:18 | 00,000,029 | —- | C] () – C:\WINDOWS\atid.ini
[2005/11/20 16:20:02 | 00,000,141 | —- | C] () – C:\WINDOWS\DVDFabGold.INI
[2005/11/20 15:45:46 | 00,000,000 | —- | C] () – C:\WINDOWS\iPlayer.INI
[2005/10/12 15:55:30 | 00,000,116 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2005/10/12 15:27:07 | 00,000,000 | —- | C] () – C:\WINDOWS\AoADVDRipper.INI
[2005/10/02 17:07:43 | 00,000,002 | —- | C] () – C:\WINDOWS\msoffice.ini
[2005/08/29 22:21:20 | 00,000,144 | —- | C] () – C:\WINDOWS\wb.ini
[2005/08/09 18:13:31 | 00,831,488 | —- | C] () – C:\WINDOWS\System32\libeay32.dll
[2005/08/09 18:13:31 | 00,159,744 | —- | C] () – C:\WINDOWS\System32\ssleay32.dll
[2005/06/26 21:10:32 | 00,000,094 | -H– | C] () – C:\WINDOWS\System32\zbq_Q1ssg.ini
[2005/03/07 01:48:09 | 00,000,054 | —- | C] () – C:\WINDOWS\JascCmdFile.INI
[2005/03/06 02:21:03 | 00,000,000 | —- | C] () – C:\WINDOWS\muveeapp.INI
[2005/03/03 19:39:53 | 00,000,093 | —- | C] () – C:\WINDOWS\wininit.ini
[2005/02/22 22:38:26 | 00,204,800 | —- | C] () – C:\WINDOWS\System32\IVIresizeW7.dll
[2005/02/22 22:38:26 | 00,188,416 | —- | C] () – C:\WINDOWS\System32\IVIresizePX.dll
[2005/02/22 22:38:25 | 00,200,704 | —- | C] () – C:\WINDOWS\System32\IVIresizeA6.dll
[2005/02/22 22:38:25 | 00,192,512 | —- | C] () – C:\WINDOWS\System32\IVIresizeP6.dll
[2005/02/22 22:38:25 | 00,192,512 | —- | C] () – C:\WINDOWS\System32\IVIresizeM6.dll
[2005/02/22 22:38:24 | 00,020,480 | —- | C] () – C:\WINDOWS\System32\IVIresize.dll
[2004/12/20 11:08:28 | 00,155,648 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2004/12/20 11:03:26 | 00,679,936 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2004/11/29 08:54:45 | 00,155,136 | —- | C] () – C:\WINDOWS\iguwogil.dll
[2004/11/29 08:54:45 | 00,028,160 | —- | C] () – C:\WINDOWS\fibdmgap.dll
[2004/10/22 17:35:32 | 00,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2004/10/21 22:21:50 | 00,014,529 | —- | C] () – C:\WINDOWS\System32\CHODDI.SYS
[2004/10/21 22:21:42 | 00,045,056 | —- | C] () – C:\WINDOWS\System32\hpreg.dll
[2004/10/21 21:55:29 | 00,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2004/10/21 21:00:46 | 00,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/10/21 20:51:33 | 00,156,672 | —- | C] () – C:\WINDOWS\System32\RTLCPAPI.dll
[2004/10/21 20:17:08 | 00,299,073 | —- | C] () – C:\WINDOWS\System32\PythonCOM22.dll
[2004/10/21 20:17:08 | 00,065,536 | —- | C] () – C:\WINDOWS\System32\PyWinTypes22.dll
[2004/10/21 20:15:49 | 00,016,896 | —- | C] () – C:\WINDOWS\System32\bcbmm.dll
[2004/10/21 19:55:39 | 00,000,802 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/10/21 19:36:39 | 00,000,549 | —- | C] () – C:\WINDOWS\System32\oeminfo.ini
[2004/10/21 19:36:10 | 00,000,810 | —- | C] () – C:\WINDOWS\win.ini
[2004/10/21 19:36:06 | 00,000,227 | —- | C] () – C:\WINDOWS\system.ini
[2004/09/14 02:35:56 | 00,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2004/08/20 06:14:46 | 00,086,016 | —- | C] () – C:\WINDOWS\System32\PcdrKernelModeServices.dll
[2004/08/20 06:14:46 | 00,065,536 | —- | C] () – C:\WINDOWS\System32\ProgressTrace.dll
[2003/04/11 02:04:00 | 00,028,672 | —- | C] () – C:\WINDOWS\System32\JAWTAccessBridge.dll
[1999/01/22 14:46:58 | 00,065,536 | —- | C] () – C:\WINDOWS\System32\MSRTEDIT.DLL
========== Files - Modified Within 30 Days ==========
[2009/04/11 13:04:02 | 00,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/04/11 13:03:09 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/04/11 12:50:32 | 00,000,187 | —- | M] () – C:\WINDOWS\System\hpsysdrv.DAT
[2009/04/11 12:49:51 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/04/11 12:17:38 | 00,000,408 | —- | M] () – C:\WINDOWS\Xmapidelujo.dat
[2009/04/11 10:42:22 | 00,001,745 | —- | M] () – C:\DOCUME~1\HP_Owner\Desktop\HijackThis.lnk
[2009/04/11 09:15:44 | 00,000,000 | —- | M] () – C:\WINDOWS\Jtureceweweci.bin
[2009/04/10 18:35:35 | 00,000,269 | —- | M] () – C:\WINDOWS\SysMech.INI
[2009/04/10 17:09:21 | 00,125,081 | —- | M] () – C:\logfile
[2009/04/10 13:53:48 | 00,475,448 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/04/10 13:53:48 | 00,405,640 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2009/04/10 13:53:48 | 00,064,064 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2009/04/10 13:53:12 | 00,000,364 | —- | M] () – C:\WINDOWS\tasks\Symantec NetDetect.job
[2009/04/09 17:10:31 | 00,046,696 | —- | M] () – C:\Documents and Settings\HP_Owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/04/08 20:07:04 | 00,000,093 | —- | M] () – C:\WINDOWS\wininit.ini
[2009/04/08 13:11:41 | 00,018,432 | —- | M] () – C:\WINDOWS\System32\digiwet.dll
[2009/04/07 09:37:18 | 00,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/04/04 16:18:19 | 00,002,137 | —- | M] () – C:\DOCUME~1\ALLUSE~1\Desktop\iTunes.lnk
[2009/04/04 09:47:40 | 00,000,116 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2009/04/03 18:48:33 | 00,192,976 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/04/03 18:40:26 | 00,000,905 | —- | M] () – C:\DOCUME~1\ALLUSE~1\Desktop\OpenOffice.org 3.0.lnk
[2009/03/29 11:07:04 | 00,000,442 | —- | M] () – C:\WINDOWS\tasks\EasyShare Registration Task.job
[2009/03/25 16:44:24 | 00,936,288 | —- | M] () – C:\WINDOWS\System32\Incinerator.dll
[2009/03/22 13:58:42 | 02,568,192 | R— | M] () – C:\DOCUME~1\ALLUSE~1\Documents\ESBK.mbb
[2009/03/22 13:58:41 | 01,331,200 | R— | M] () – C:\DOCUME~1\ALLUSE~1\Documents\ESBK.mb
[2009/03/18 19:44:45 | 00,000,944 | —- | M] () – C:\DOCUME~1\HP_Owner\Desktop\Spybot - Search & Destroy.lnk
========== LOP Check ==========
[2009/03/22 12:44:16 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data
[2009/03/22 12:45:06 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2008/09/11 17:28:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\acccore
[2006/04/28 20:00:41 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Adobe
[2008/09/24 13:58:08 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL
[2008/09/24 13:53:24 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL Downloads
[2008/03/25 16:56:04 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL OCP
[2008/10/24 20:08:44 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple
[2006/12/27 19:38:35 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Apple Computer
[2009/03/06 21:11:21 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BigFishGamesCache
[2005/09/11 17:34:18 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BVRP Software
[2005/07/01 19:19:43 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GameHouse
[2006/10/20 14:04:44 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google
[2008/07/13 16:36:35 | 00,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\GTek
[2008/08/02 16:19:27 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Hewlett-Packard
[2008/08/02 16:11:47 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HP
[2008/08/02 16:11:47 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HP Product Assistant
[2005/02/22 22:39:18 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\InstallShield
[2008/11/08 22:34:09 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\iolo
[2007/08/05 11:12:14 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Kodak
[2008/09/01 11:50:09 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Lavasoft
[2008/09/24 13:58:32 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Macromedia
[2008/11/08 22:19:44 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\McAfee
[2007/12/17 19:06:39 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\McAfee.com
[2009/04/10 20:12:57 | 00,000,000 | –SD | M] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2004/10/21 22:30:41 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Motive
[2005/03/06 02:19:07 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2005/08/27 01:02:26 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PopCap
[2005/03/04 01:37:21 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\QuickTime
[2004/10/21 19:57:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SBSI
[2009/03/19 18:32:25 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2008/09/25 18:25:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Symantec
[2009/03/28 17:04:57 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2008/09/11 17:28:41 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2006/11/06 22:59:07 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WhiteCap (Holiday Edition)
[2006/07/20 18:19:05 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2008/02/02 15:46:10 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data\yahoo!
[2009/04/03 18:42:12 | 00,000,000 | RH-D | M] – C:\Documents and Settings\HP_Owner\Application Data
[2005/08/28 22:04:21 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\.bittorrent
[2008/05/20 22:39:05 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\.gaim
[2008/04/04 17:22:24 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\acccore
[2008/01/28 14:17:03 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Adobe
[2005/03/14 16:14:24 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\AdobeUM
[2007/01/07 17:07:44 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Aim
[2008/09/24 13:58:51 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\AOL
[2007/11/11 15:27:20 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Apple Computer
[2006/06/12 17:45:57 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Flickr
[2005/03/03 19:02:55 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\GlobalSCAPE
[2007/03/21 21:08:26 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Google
[2008/07/13 16:34:56 | 00,000,000 | -H-D | M] – C:\Documents and Settings\HP_Owner\Application Data\GTek
[2006/12/03 11:52:33 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Help
[2008/08/02 16:34:33 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\HP
[2009/02/16 17:19:46 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\HPAppData
[2004/10/21 19:51:38 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Identities
[2009/01/19 14:55:08 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\iLike
[2005/06/22 19:50:04 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\InterVideo
[2008/12/22 16:15:28 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\iolo
[2008/09/11 17:25:14 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\JAMS
[2005/03/07 00:58:27 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Jasc Software Inc
[2008/09/01 11:49:03 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Lavasoft
[2005/03/06 00:51:42 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Leadertech
[2005/06/06 20:37:12 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Macromedia
[2007/09/10 23:07:41 | 00,000,000 | –SD | M] – C:\Documents and Settings\HP_Owner\Application Data\Microsoft
[2006/10/10 19:52:04 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Microsoft Web Folders
[2005/09/12 19:28:46 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Motive
[2008/08/28 16:56:50 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Mozilla
[2009/04/03 18:42:12 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\OpenOffice.org
[2009/03/28 17:21:42 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\OpenOffice.org2
[2005/05/22 21:12:53 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Raptisoft
[2005/03/04 16:13:56 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Real
[2004/10/21 22:52:10 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\SampleView
[2005/03/06 00:52:01 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Sonic
[2006/06/12 14:11:26 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Sony Corporation
[2004/10/21 20:27:33 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Sun
[2005/03/04 01:34:39 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Symantec
[2006/06/03 14:13:40 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Talkback
[2006/10/07 14:35:08 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Template
[2008/05/03 10:47:41 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Thunderbird
[2007/11/11 15:36:58 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\U3
[2007/01/13 12:00:17 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Viewpoint
[2005/11/20 17:13:09 | 00,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\VSO_HWE
[2006/06/18 23:27:58 | 00,000,000 | RH-D | M] – C:\Documents and Settings\HP_Owner\Application Data\yahoo!
[2009/04/07 09:37:18 | 00,000,284 | —- | M] () – C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2004/08/04 15:00:00 | 00,000,065 | RH– | M] () – C:\WINDOWS\Tasks\desktop.ini
[2009/03/29 11:07:04 | 00,000,442 | —- | M] () – C:\WINDOWS\Tasks\EasyShare Registration Task.job
[2009/04/11 12:49:51 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT
[2009/04/10 13:53:12 | 00,000,364 | —- | M] () – C:\WINDOWS\Tasks\Symantec NetDetect.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 149 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C22674B6
< End of report >
Extras:
OTListIt Extras logfile created on: 4/11/2009 1:23:48 PM - Run 2
OTListIt2 by OldTimer - Version 2.0.12.2 Folder = C:\Documents and Settings\HP_Owner\My Documents\Downloaded Files
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18241)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
503.30 Mb Total Physical Memory | 213.35 Mb Available Physical Memory | 42.39% Memory free
1.20 Gb Paging File | 0.95 Gb Available in Paging File | 79.45% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 67.19 Gb Total Space | 38.25 Gb Free Space | 56.93% Space Free | Partition Type: NTFS
Drive D: | 7.32 Gb Total Space | 1.95 Gb Free Space | 26.65% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: JEN
Current User Name: HP_Owner
Logged in as Administrator.
Current Boot Mode: SafeMode with Networking
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
%ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes (Apple Inc.)
C:\Program Files\Common Files\AOL\1129155530\ee\AOLServiceHost.exe:*:Enabled:AOL Services File not found
C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader (AOL LLC)
C:\Program Files\America Online 9.0a\waol.exe:*:Enabled:America Online 9.0a (America Online, Inc.)
C:\Program Files\AIM\aim.exe:*:Enabled:AOL Instant Messenger (America Online, Inc.)
C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager (Microsoft Corporation)
C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager (Microsoft Corporation)
C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application (Microsoft Corporation)
C:\Program Files\AOL 9.1\waol.exe:*:Enabled:AOL 9.1 (AOL, LLC.)
C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe (Hewlett-Packard Development Co. L.P.)
C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe (Hewlett-Packard Development Co. L.P.)
C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe (Hewlett-Packard Development Co. L.P.)
C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe (Hewlett-Packard Development Co. L.P.)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe:*:Enabled:BackWeb for Pavilion (Hewlett-Packard)
C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink File not found
C:\Documents and Settings\HP_Owner\My Documents\Installed Programs\httprat\httpserver.exe:*:Enabled:httpserver File not found
C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire ()
C:\Program Files\Trillian\trillian.exe:*:Enabled:Trillian (Cerulean Studios)
C:\Program Files\AIM\AIMExpansion.exe:*:Enabled:AIMExpansion (Xeon Programming, Inc.)
C:\StubInstaller.exe:*:Enabled:LimeWire swarmed installer (LimeWire)
C:\Program Files\BitTorrent\btdownloadgui.exe:*:Disabled:btdownloadgui ()
C:\Program Files\Common Files\AOL\1129155530\ee\AOLServiceHost.exe:*:Enabled:AOL Services File not found
C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader (AOL LLC)
C:\Program Files\Common Files\AOL\1132882615\ee\aolsoftware.exe:*:Enabled:AOL Services File not found
C:\Program Files\Common Files\AOL\1132882615\ee\aim6.exe:*:Enabled:AIM File not found
C:\Program Files\America Online 9.0a\waol.exe:*:Enabled:America Online 9.0a (America Online, Inc.)
C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer (RealNetworks, Inc.)
C:\Program Files\AIM\aim.exe:*:Enabled:AOL Instant Messenger (America Online, Inc.)
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe:*:Enabled:Kodak Software Updater ()
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe:*:Enabled:EasyShare (Eastman Kodak Company)
C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager (Microsoft Corporation)
C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager (Microsoft Corporation)
C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application (Microsoft Corporation)
C:\Program Files\Common Files\AOL\1187732637\ee\aolsoftware.exe:*:Enabled:AOL Services (AOL LLC)
C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM (AOL LLC)
C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (Mozilla Corporation)
C:\Program Files\Internet Explorer\IEXPLORE.EXE:*:Enabled:Internet Explorer (Microsoft Corporation)
E:\setup\HPZNUI01.EXE:*:Enabled:hpznui01.exe File not found
E:\setup\HPONICIFS01.EXE:*:Enabled:hponicifs01.exe File not found
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe (Hewlett-Packard Co.)
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe (Hewlett-Packard Co.)
C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe (Hewlett-Packard Co.)
C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe (Hewlett-Packard Co.)
C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe (Hewlett-Packard Co.)
C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe (Hewlett-Packard)
C:\Program Files\HP\Digital Imaging\bin\hpqcopy.exe:*:Enabled:hpqcopy.exe (Hewlett-Packard Co.)
C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe (Hewlett-Packard Co.)
C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe ()
C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe (Hewlett-Packard Co.)
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL Connectivity Service Dialer (AOL LLC)
C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL Connectivity Service (AOL LLC)
C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:*:Enabled:AOL TopSpeed (AOL LLC)
C:\Program Files\Common Files\AOL\System Information\sinf.exe:*:Enabled:AOL System Information (AOL LLC)
C:\Program Files\AOL 9.1\waol.exe:*:Enabled:AOL 9.1 (AOL, LLC.)
C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe (Hewlett-Packard Development Co. L.P.)
C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe (Hewlett-Packard Development Co. L.P.)
C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe (Hewlett-Packard Development Co. L.P.)
C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe (Hewlett-Packard Development Co. L.P.)
C:\Program Files\iolo\System Mechanic Professional 7\Personal Firewall\ioloFW.exe:*:Enabled:iolo Firewall® File not found
C:\Program Files\iolo\System Mechanic Professional 7\AntiVirus\ioloAV.exe:*:Enabled:iolo AntiVirus® File not found
C:\Program Files\iolo\System Mechanic Professional 7\AntiVirus\iAVEmailScanner.exe:*:Enabled:iolo AntiVirus® Email Protection File not found
C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour (Apple Inc.)
C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes (Apple Inc.)
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe:*:Enabled:ENABLE (Stardock Systems, Inc)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00060000-0000-1004-8002-0000C06B5161}" = WIBU-KEY Setup (WIBU-KEY Remove)
"{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}" = Notifier
"{00170409-78E1-11D2-B60F-006097C998E7}" = Microsoft Word 2000 SR-1
"{0456ebd7-5f67-4ab6-852e-63781e3f389c}" = Macromedia Flash Player
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{073F22CE-9A5B-4A40-A604-C7270AC6BF34}" = ESSSONIC
"{09DA4F91-2A09-4232-AB8C-6BC740096DE3}" = Sonic Update Manager
"{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA}" = PC-Doctor for Windows
"{0D182A5E-AEE0-42ca-BD1D-4EEB2FFA256D}" = HP Image Zone Plus 4.2.3
"{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}" = Microsoft Plus! Photo Story 2 LE
"{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{14589F05-C658-4594-9429-D437BA688686}" = IntelliMover Data Transfer Demo
"{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}" = ESSPCD
"{1526D87C-A955-4FAB-BF18-697BA457E352}" = Norton WMI Update
"{162B71B8-8464-4680-A086-601D555B331D}" = Apple Mobile Device Support
"{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{195F2C6C-A343-4b10-B1A4-3F00AB9E9DD9}" = Fax
"{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{279D3818-7287-4ab4-A927-542EBEA9E365}" = ProductContext
"{2BBC9458-07CA-4843-848B-5C8146E5EFA8}" = CreativeProjects
"{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}" = essvatgt
"{2FCE4FC5-6930-40E7-A4F1-F862207424EF}" = InterVideo WinDVD Creator
"{3248F0A8-6813-11D6-A77B-00B0D0150030}" = J2SE Runtime Environment 5.0 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160040}" = Java™ 6 Update 4
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{345112D9-0930-4A68-AB71-A831BA5DE7AA}" = Microsoft IntelliType Pro 6.2
"{34A59AC3-6C5C-4A09-A7F5-369A37176C8A}" = AiOSoftware
"{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36FDBE6E-6684-462b-AE98-9A39A1B200CC}" = HPProductAssistant
"{380CC749-8C28-4C74-BE01-45921D062302}" = BPDSoftware_Ini
"{3851147E-5A91-4469-BA4D-13FFFCC8A920}" = Microsoft Windows OneCare Live v2.5.2900.24 Idcrl Install
"{3AE681E0-4E8D-453F-950A-48534D3C0724}" = Copy
"{3AEF2F6C-F1D3-47CD-BF3B-A327F1FABE58}" = PSPrinters06
"{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}" = Google Earth
"{41254D7B-EADF-4078-AE4A-BD73B300EE86}" = Unload
"{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}" = Microsoft Works
"{41853D20-40CC-4266-978D-F128BB97CA96}" = 6400_Help
"{4537EA4B-F603-4181-89FB-2953FC695AB1}" = netbrdg
"{457791C5-D702-4143-A7B2-2744BE9573F2}" = HP Software Update
"{4C04DF1B-6A39-4299-9DD1-1FA60000266E}" = HP Photosmart Cameras 4.0
"{503AA035-41E2-4858-B31F-1E49AC66C309}" = Norton Security Center
"{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}" = SmartWebPrintingOC
"{52A69E11-7CEB-4a7d-9607-68BA4F39A89B}" = DeviceDiscovery
"{561A9B4E-2E48-4149-B977-59C7AFF62B52}" = HPIZ423
"{5660022E-F3F2-4126-8CC5-9726C47150EB}" = Microsoft Windows Live OneCare Resources v2.5.2900.24
"{5ACE69F0-A3E8-44eb-88C1-0A841E700180}" = TrayApp
"{5BB4D7C1-52F2-4BFD-9E40-0D419E2E3021}" = bpd_scan
"{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}" = Sony USB Driver
"{5D934326-165A-413b-B056-26BE1EC082AF}" = J6400
"{5F00C9A6-C407-4CA8-B97E-92F751EBCD0E}" = iLike Sidebar
"{605A4E39-613C-4A12-B56F-DEFBE6757237}" = SHASTA
"{608D2A3C-6889-4C11-9B54-A42F45ACBFDB}" = fflink
"{643EAE81-920C-4931-9F0B-4B343B225CA6}" = ESSBrwr
"{6513E869-647F-40FD-A55D-CFC92579B9BA}" = PX Engine
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{679EC478-3FF9-4987-B2FF-C2C2B27532A2}" = DocProc
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}" = Microsoft Plus! Digital Media Edition Installer
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{725249C3-B94C-4141-8799-0D3BA43D0812}" = CameraDrivers
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7DCF7BBA-39A9-4e27-9154-F57BCED90CBF}" = HP Officejet J6400 Series
"{85C8D391-0EAE-4492-8A0A-2EE8B0B6DA03}" = BPDSoftware
"{85CFDC2D-710E-49D5-B799-F3743CA506BA}" = Microsoft Protection Service
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8943CE61-53BD-475E-90E1-A580869E98A2}" = staticcr
"{8A502E38-29C9-49FA-BCFA-D727CA062589}" = ESSTOOLS
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver
"{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport
"{8AB8D458-939E-403F-0097-9BA1C1F013D5}" = The Sims 2
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8B21B9EF-6DBF-4F63-8CC7-9F6A56D1EE8E}" = GTOneCare
"{8C5FAD77-F678-4758-A296-C12F08D179E0}" = Microsoft IntelliPoint 6.2
"{8E92D746-CD9F-4B90-9668-42B74C14F765}" = ESSini
"{91517631-A9F3-4B7C-B482-43E0068FD55A}" = ESSgui
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD Player
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9541FED0-327F-4DF0-8B96-EF57EF622F19}" = Sonic RecordNow!
"{981FB376-8418-4EA8-BBED-9DE5AA63E7D5}" = SkinsHP1
"{99052DB7-9592-4522-A558-5417BBAD48EE}" = Microsoft ActiveSync
"{999D43F4-9709-4887-9B1A-83EBB15A8370}" = VPRINTOL
"{9CB2512B-3EC4-43DF-8002-46BDAB5EDD1B}" = QuickProjects
"{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}" = ESScore
"{9EEBF8D5-8712-4D1D-88F4-4CDC2D270BC3}" = PrintScreen
"{A0B9F8DF-C949-45ed-9808-7DC5C0C19C81}" = Status
"{A1062847-0846-427A-92A1-BB8251A91E91}" = HP PSC & OfficeJet 4.0
"{A11409F1-CD33-4076-85CB-4EE4A8439BFE}" = Scan
"{A1960A82-DB70-474D-A86B-FA74466103C6}" = Drivers Install For Linksys Easylink Advisor
"{A1DCC235-DACC-4E1F-8D11-D630634B4AEF}" = PhotoGallery
"{A2500497-FD32-493e-B8E5-28D6728DBEF5}" = Readme
"{A4EA3AB4-E78C-4286-96DF-26035507CE55}" = AiO_Scan
"{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}" = Photosmart 320,370,7400,8100,8400 Series
"{AB18B0BA-A08F-48B8-8D0E-AA9DDDCA22EA}" = CuteFTP 6 Professional
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-A70700000002}" = Adobe Reader 7.0.7
"{ACDE260A-602B-4cfb-A650-D0DBA6FFAD85}" = NetDeviceManager
"{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}" = ESSCDBK
"{B103C8A7-D1CC-4B1A-BD41-883F652E097D}" = muvee autoProducer 3.5 magicMoments - HPD
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}" = OfotoXMI
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B45D9FEE-1AF4-46F3-9A83-2545F81547F5}" = CreativeProjectsTemplates
"{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}" = CCScore
"{B56D5B09-C4FB-4EA0-8EAD-7BC3E2715A2D}" = DocumentViewer
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}" = HPSSupply
"{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}" = KSU
"{BBD3F66B-1180-4785-B679-3F91572CD3B4}_is1" = iolo technologies' System Mechanic Professional
"{BCC992E5-5C81-4066-9B55-03DC10B24D21}" = InstantShare
"{BD3DCAB0-3FE5-44FB-90DA-EFB0A2CD1387}" = Works Synchronization
"{C26B06A9-27BB-45B0-9873-9C623EC2BA38}" = iTunes
"{C3F058C0-A21C-452D-8D99-95B1A45F417D}" = InterVideo DiscLabel
"{C67DF120-4DD3-11D4-A3CA-005004AD2A5B}" = Authentium AntiVirus SDK - 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg
"{D0122362-6333-4DE4-93F6-A5A2F3CC101A}" = HP Organize
"{D050D7362D214723AD585B541FFB6C11}" = DivX Content Uploader
"{D07A8E7E-D324-4945-BA8C-E532AD008FF3}" = Microsoft Windows OneCare Live v2.5.2900.24
"{D2E0F0CC-6BE0-490b-B08B-9267083E34C9}" = MarketResearch
"{D32470A1-B10C-4059-BA53-CF0486F68EBC}" = Kodak EasyShare software
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component
"{DB02F716-6275-42E9-B8D2-83BA2BF5100B}" = SFR
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01
"{E26B83D1-C0BB-41BC-8F44-31D5354DD6AF}" = Microsoft Windows OneCare Live AntiSpyware and AntiVirus
"{E79987F0-0E34-42CC-B8FF-6C860AEEB26A}" = tooltips
"{EF1DD862-1F5C-4BC8-B3B6-BBB5AD3B460E}" = Motorola Handset USB Driver
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F22C222C-3CE2-4A4B-A83F-AF4681371ABE}" = kgcbase
"{F419D20A-7719-4639-8E30-C073A040D878}" = HP Deskjet Preloaded Printer Drivers
"{F44DA61E-720D-4E79-871F-F6E628B33242}" = OpenOffice.org 3.0
"{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}" = SKINXSDK
"{F843C6A3-224D-4615-94F8-3C461BD9AEA0}" = Jasc Paint Shop Pro 9
"{F9593CFB-D836-49BC-BFF1-0E669A411D9F}" = WIRELESS
"{FAF7F1D7-C0E7-47EA-8AAA-84E4F9EA3C94}" = Works Suite OS Pack
"{FCDB1C92-03C6-4C76-8625-371224256091}" = ESSPDock
"{FDF9943A-3D5C-46B3-9679-586BD237DDEE}" = SKIN0001
"{FF26F7EA-BCEE-478C-9A1B-6B4F88717D73}" = CueTour
"Adobe Flash Player Plugin" = Adobe Flash Player Plugin
"AdobeESD" = Adobe Download Manager 2.0 (Remove Only)
"Agere Systems Soft Modem" = Agere Systems PCI Soft Modem
"AIM Gadgets 2.8" = AIM Gadgets 2.8
"AIM_6" = AIM 6
"AOL Instant Messenger" = AOL Instant Messenger
"AOL Uninstaller" = AOL Uninstaller (Choose which Products to Remove)
"AolCoach" = AOL Coach Version 1.0(Build:20030807.3)
"BackWeb-309731 Uninstaller" = Updates from HP
"BFGC" = Big Fish Games Client
"BFG-Mystery Case Files - Return to Ravenhearst" = Mystery Case Files: Return to Ravenhearst ™
"BitTorrent" = BitTorrent 4.0.4
"DVD43_is1" = DVD43 v3.6.2
"EasyLinkAdvisor" = Linksys EasyLink Advisor 1.6 (0032)
"Flickr Uploadr" = Flickr Uploadr 2.3
"Gaim" = Gaim (remove only)
"GTK 2.0" = GTK+ Runtime 2.6.10 rev a (remove only)
"Help and Support Additions" = Help and Support Additions
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 10.0
"HP Photo & Imaging" = HP Image Zone 4.2.3
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing
"HP Solution Center & Imaging Support Tools" = HP Solution Center 10.0
"HPExtendedCapabilities" = HP Customer Participation Program 10.0
"HPOCR" = OCR Software by I.R.I.S. 10.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8 Beta 2
"InstallShield_{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA}" = PC-Doctor for Windows
"InstallShield_{AB18B0BA-A08F-48B8-8D0E-AA9DDDCA22EA}" = CuteFTP 6 Professional
"LimeWire" = LimeWire PRO 4.12.3
"LiveUpdate" = LiveUpdate 2.6 (Symantec Corporation)
"Macromedia Shockwave Player" = Macromedia Shockwave Player
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Money2005b" = Microsoft Money 2005
"Mozilla Firefox (3.0.5)" = Mozilla Firefox (3.0.5)
"Mozilla Thunderbird (2.0.0.14)" = Mozilla Thunderbird (2.0.0.14)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MTS2_ColourOptions_is1" = Colour Options 2.0 (beta) for The Sims 2 (and Sims 2 University
"Nero - Burning Rom!UninstallKey" = Nero OEM
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Panda ActiveScan" = Panda ActiveScan
"PS2" = PS2
"RealArcade 1.2" = RealArcade
"RealPlayer 6.0" = RealPlayer
"SereneScreen Marine Aquarium 2 MD_is1" = SereneScreen Marine Aquarium 2 MD
"SereneScreen Marine Aquarium 2_is1" = SereneScreen Marine Aquarium 2
"Shop for HP Supplies" = Shop for HP Supplies
"Trillian" = Trillian
"ViewpointMediaPlayer" = Viewpoint Media Player
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"WindowBlinds" = WindowBlinds
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR archiver
"WinSS" = Windows Live OneCare
"WinZip" = WinZip
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XviD_is1" = XviD MPEG-4 Video Codec
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 2/21/2009 4:22:00 PM | Computer Name = JEN | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 5.1.2600.2180, faulting
module HPZinw12.dll, version 12.1.1.54, fault address 0x00006db4.
Error - 2/21/2009 4:53:08 PM | Computer Name = JEN | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 5.1.2600.2180, faulting
module HPZinw12.dll, version 12.1.1.54, fault address 0x00006db4.
Error - 2/22/2009 12:33:44 AM | Computer Name = JEN | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 5.1.2600.2180, faulting
module HPZinw12.dll, version 12.1.1.54, fault address 0x00006db4.
Error - 2/22/2009 3:05:04 PM | Computer Name = JEN | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 5.1.2600.2180, faulting
module HPZinw12.dll, version 12.1.1.54, fault address 0x00006db4.
Error - 2/22/2009 7:29:30 PM | Computer Name = JEN | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 5.1.2600.2180, faulting
module HPZinw12.dll, version 12.1.1.54, fault address 0x00006db4.
Error - 2/22/2009 8:09:32 PM | Computer Name = JEN | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 5.1.2600.2180, faulting
module HPZinw12.dll, version 12.1.1.54, fault address 0x00006db4.
Error - 2/22/2009 11:07:05 PM | Computer Name = JEN | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 5.1.2600.2180, faulting
module HPZinw12.dll, version 12.1.1.54, fault address 0x00006db4.
Error - 2/23/2009 10:15:03 AM | Computer Name = JEN | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 5.1.2600.2180, faulting
module HPZinw12.dll, version 12.1.1.54, fault address 0x00006db4.
Error - 2/23/2009 6:59:00 PM | Computer Name = JEN | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 5.1.2600.2180, faulting
module HPZinw12.dll, version 12.1.1.54, fault address 0x00006db4.
Error - 2/24/2009 9:03:42 AM | Computer Name = JEN | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 5.1.2600.2180, faulting
module HPZinw12.dll, version 12.1.1.54, fault address 0x00006db4.
[ System Events ]
Error - 4/11/2009 12:59:28 PM | Computer Name = JEN | Source = MSFWDrv | ID = 262153
Description = The device, , did not respond within the timeout period.
Error - 4/11/2009 12:59:36 PM | Computer Name = JEN | Source = MSFWDrv | ID = 262153
Description = The device, , did not respond within the timeout period.
Error - 4/11/2009 1:00:22 PM | Computer Name = JEN | Source = MSFWDrv | ID = 262153
Description = The device, , did not respond within the timeout period.
Error - 4/11/2009 1:00:54 PM | Computer Name = JEN | Source = MSFWDrv | ID = 262153
Description = The device, , did not respond within the timeout period.
Error - 4/11/2009 1:01:40 PM | Computer Name = JEN | Source = MSFWDrv | ID = 262153
Description = The device, , did not respond within the timeout period.
Error - 4/11/2009 1:02:04 PM | Computer Name = JEN | Source = MSFWDrv | ID = 262153
Description = The device, , did not respond within the timeout period.
Error - 4/11/2009 1:02:15 PM | Computer Name = JEN | Source = MSFWDrv | ID = 262153
Description = The device, , did not respond within the timeout period.
Error - 4/11/2009 1:03:49 PM | Computer Name = JEN | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 4/11/2009 1:05:02 PM | Computer Name = JEN | Source = Service Control Manager | ID = 7001
Description = The OneCare Firewall service depends on the MSFWDrv service which
failed to start because of the following error: %%1068
Error - 4/11/2009 1:05:02 PM | Computer Name = JEN | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
ASPI32 FileDisk Fips intelppm
< End of report >
