This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Location is not available Access Denied

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

My screen, when I click various icons, becomes kind of a milky white color. Then I realize that nothing is responding. The task manager will not work. I unplug, take the battery out, then do the same in reverse and start over.

When I start the computer all of the desktop icons except for about five are all gone. Sometimes I am able to find the files back on the desktop. But I don't understand what it is that I do that apparently fixes the problem.

Then when I am working programs are "not responding" again.

I have a log from HJT. I am going to paste it here and hope, one it is the right place and two hope I have given the right information. I am in way over my head here.

Thank you from Cincinnati

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:33:46 AM, on 3/4/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIEDB.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…o&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…o&pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: HP Print Clips - {FFFFFFFF-FF12-44C5-91EC-068E3AA1B2D7} - c:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [SynTPStart] "C:\Program Files\Synaptics\SynTP\SynTPStart.exe"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" /Start
O4 - HKLM\..\Run: [NvSvc] "C:\Windows\system32\RUNDLL32.EXE" C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] "C:\Windows\system32\RUNDLL32.EXE" C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] "C:\Windows\system32\RUNDLL32.EXE" C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CanonMyPrinter] "C:\Program Files\Canon\MyPrinter\BJMyPrt.exe" /logon
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [Sidebar] "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
O4 - HKCU\..\Run: [ehTray.exe] "C:\Windows\ehome\ehTray.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Users\Owner\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [EPSON TX105 Series] "C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDB.EXE" /FU "C:\Windows\TEMP\E_S299C.tmp" /EF "HKCU"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: HP Smart Select - {58ECB495-38F0-49cb-A538-10282ABF65E7} - c:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/…NPUplden-us.cab
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. (www.webroot.com) - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

–
End of file - 8191 bytes

I have run malwarebytes' Anti-Malware and here is the log

4/15/2009 3:27:50 PM
mbam-log-2009-04-15 (15-27-50).txt

Scan type: Quick Scan
Objects scanned: 63673
Time elapsed: 5 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
Hi,

Please do the following:

  • Download OTListIt2 to your desktop.
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTListIt.Txt and Extras.Txt.
    Note:These logs can be located in the OTListIt2. folder on you C:\ drive if they fail to open automatically.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.
THANKS.

OTListIt logfile created on: 4/21/2009 10:29:08 AM - Run 1
OTListIt2 by OldTimer - Version 2.0.14.0 Folder = C:\Users\Laptop Office\Desktop
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16830)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.94 Gb Total Physical Memory | 1.07 Gb Available Physical Memory | 55.38% Memory free
4.00 Gb Paging File | 2.81 Gb Available in Paging File | 70.26% Paging File free
Paging file location(s): ?:\pagefile.sys;

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 137.35 Gb Total Space | 96.51 Gb Free Space | 70.27% Space Free | Partition Type: NTFS
Drive D: | 11.70 Gb Total Space | 1.86 Gb Free Space | 15.90% Space Free | Partition Type: NTFS
Drive E: | 538.23 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: LAPTOPOFFICE-PC
Current User Name: Laptop Office
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== Processes (SafeList) ==========

PRC - C:\Program Files\Trend Micro\BM\TMBMSRV.exe (Trend Micro Inc.)
PRC - C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
PRC - C:\Program Files\CyberLink\Shared Files\RichVideo.exe ()
PRC - C:\Program Files\Trend Micro\TrendSecure\SecurityActivityDashboard\tmarsvc.exe (Trend Micro Inc.)
PRC - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe (Trend Micro Inc.)
PRC - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe (Trend Micro Inc.)
PRC - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\ProToolbarUpdate.exe (Trend Micro Inc.)
PRC - C:\Windows\system32\DRIVERS\xaudio.exe (Conexant Systems, Inc.)
PRC - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Program Files\Trend Micro\Internet Security\TmPfw.exe (Trend Micro Inc.)
PRC - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe (Hewlett-Packard)
PRC - C:\Windows\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
PRC - C:\Program Files\HP\QuickPlay\QPService.exe (CyberLink Corp.)
PRC - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe ( Hewlett-Packard Development Company, L.P.)
PRC - C:\Windows\system32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe (Hewlett-Packard)
PRC - C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard)
PRC - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
PRC - C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe (Trend Micro Inc.)
PRC - C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
PRC - C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (Trend Micro Inc.)
PRC - C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
PRC - C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe ()
PRC - C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
PRC - C:\Windows\system32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\PlatformDependent\ProToolbarComm.exe (Trend Micro Inc.)
PRC - C:\Program Files\Trend Micro\TrendSecure\TSCFPlatformCOMSvr.exe (Trend Micro Inc.)
PRC - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe (Hewlett-Packard)
PRC - C:\Program Files\Trend Micro\TrendSecure\TSCFCommander.exe (Trend Micro Inc.)
PRC - C:\Program Files\MSN\MSNIA\CC\MSNCC\logonmgr.exe (Microsoft Corporation.)
PRC - C:\Program Files\MSN\MSNIA\CC\MSNCC\msncc.exe (Microsoft Corporation)
PRC - C:\Program Files\Internet Explorer\ieuser.exe (Microsoft Corporation)
PRC - C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
PRC - C:\Users\Laptop Office\Desktop\OTListIt2.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (Com4Qlb [On_Demand | Stopped]) – C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe (Hewlett-Packard Development Company, L.P.)
SRV - (ehRecvr [On_Demand | Stopped]) – C:\Windows\ehome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [On_Demand | Stopped]) – C:\Windows\ehome\ehsched.exe (Microsoft Corporation)
SRV - (ehstart [Auto | Stopped]) – C:\Windows\ehome\ehstart.dll (Microsoft Corporation)
SRV - (FontCache3.0.0.0 [On_Demand | Running]) – C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (GameConsoleService [On_Demand | Stopped]) – C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (gupdate1c9c068e1f0fd46 [Auto | Stopped]) – C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (gusvc [Auto | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (HP Health Check Service [Auto | Running]) – c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe (Hewlett-Packard)
SRV - (hpqwmiex [Auto | Running]) – C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe (Hewlett-Packard Development Company, L.P.)
SRV - (IDriverT [On_Demand | Stopped]) – C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (idsvc [Unknown | Running]) – C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing [Disabled | Stopped]) – C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (odserv [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (RichVideo [Auto | Running]) – C:\Program Files\CyberLink\Shared Files\RichVideo.exe ()
SRV - (Security Activity Dashboard Service [Auto | Running]) – C:\Program Files\Trend Micro\TrendSecure\SecurityActivityDashboard\tmarsvc.exe (Trend Micro Inc.)
SRV - (SfCtlCom [Auto | Running]) – C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe (Trend Micro Inc.)
SRV - (TMBMServer [Auto | Running]) – C:\Program Files\Trend Micro\BM\TMBMSRV.exe (Trend Micro Inc.)
SRV - (TmPfw [Auto | Running]) – C:\Program Files\Trend Micro\Internet Security\TmPfw.exe (Trend Micro Inc.)
SRV - (TmProxy [Auto | Running]) – C:\Program Files\Trend Micro\Internet Security\TmProxy.exe (Trend Micro Inc.)
SRV - (Vongo Service [On_Demand | Stopped]) – C:\Program Files\Vongo\VongoService.exe (Starz Entertainment Group LLC)
SRV - (WinDefend [Auto | Stopped]) – C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (XAudioService [Auto | Running]) – C:\Windows\system32\DRIVERS\xaudio.exe (Conexant Systems, Inc.)

========== Driver Services (SafeList) ==========

DRV - (adp94xx [Disabled | Stopped]) – C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (adpahci [Disabled | Stopped]) – C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (adpu160m [Disabled | Stopped]) – C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (adpu320 [Disabled | Stopped]) – C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (aic78xx [Disabled | Stopped]) – C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (aliide [Disabled | Stopped]) – C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (arc [Disabled | Stopped]) – C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (arcsas [Disabled | Stopped]) – C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (athr [On_Demand | Running]) – C:\Windows\system32\DRIVERS\athr.sys (Atheros Communications, Inc.)
DRV - (BCM43XV [On_Demand | Stopped]) – C:\Windows\system32\DRIVERS\bcmwl6.sys (Broadcom Corporation)
DRV - (BrFiltLo [On_Demand | Stopped]) – C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp [On_Demand | Stopped]) – C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (Brserid [Disabled | Stopped]) – C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrSerWdm [Disabled | Stopped]) – C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm [Disabled | Stopped]) – C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer [On_Demand | Stopped]) – C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (cmdide [Disabled | Stopped]) – C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (E100B [On_Demand | Stopped]) – C:\Windows\system32\DRIVERS\e100b325.sys (Intel Corporation)
DRV - (E1G60 [On_Demand | Stopped]) – C:\Windows\system32\DRIVERS\E1G60I32.sys (Intel Corporation)
DRV - (elxstor [Disabled | Stopped]) – C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (HBtnKey [On_Demand | Running]) – C:\Windows\system32\DRIVERS\cpqbttn.sys (Hewlett-Packard Development Company, L.P.)
DRV - (HdAudAddService [On_Demand | Running]) – C:\Windows\system32\drivers\CHDART.sys (Conexant Systems Inc.)
DRV - (HpCISSs [Disabled | Stopped]) – C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (HpqKbFiltr [On_Demand | Running]) – C:\Windows\system32\DRIVERS\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)
DRV - (HSFHWAZL [On_Demand | Stopped]) – C:\Windows\system32\DRIVERS\VSTAZL3.SYS (Conexant Systems, Inc.)
DRV - (HSF_DPV [On_Demand | Running]) – C:\Windows\system32\DRIVERS\HSX_DPV.sys (Conexant Systems, Inc.)
DRV - (HSXHWAZL [On_Demand | Running]) – C:\Windows\system32\DRIVERS\HSXHWAZL.sys (Conexant Systems, Inc.)
DRV - (ialm [On_Demand | Stopped]) – C:\Windows\system32\DRIVERS\igdkmd32.sys (Intel Corporation)
DRV - (iaStorV [Disabled | Stopped]) – C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (iirsp [Disabled | Stopped]) – C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (iteatapi [Disabled | Stopped]) – C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (iteraid [Disabled | Stopped]) – C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (LSI_FC [Disabled | Stopped]) – C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (LSI_SAS [Disabled | Stopped]) – C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (LSI_SCSI [Disabled | Stopped]) – C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (mdmxsdk [Auto | Running]) – C:\Windows\system32\DRIVERS\mdmxsdk.sys (Conexant)
DRV - (megasas [Disabled | Stopped]) – C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (Mraid35x [Disabled | Stopped]) – C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (nfrd960 [Disabled | Stopped]) – C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (ntrigdigi [Disabled | Stopped]) – C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (NVENETFD [On_Demand | Running]) – C:\Windows\system32\DRIVERS\nvmfdx32.sys (NVIDIA Corporation)
DRV - (nvlddmkm [On_Demand | Running]) – C:\Windows\system32\DRIVERS\nvlddmkm.sys (NVIDIA Corporation)
DRV - (nvraid [Disabled | Stopped]) – C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nvsmu [On_Demand | Running]) – C:\Windows\system32\DRIVERS\nvsmu.sys (NVIDIA Corporation)
DRV - (nvstor [Disabled | Stopped]) – C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (ql2300 [Disabled | Stopped]) – C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (ql40xx [Disabled | Stopped]) – C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (rimmptsk [Auto | Running]) – C:\Windows\system32\DRIVERS\rimmptsk.sys (REDC)
DRV - (rimsptsk [Auto | Running]) – C:\Windows\system32\DRIVERS\rimsptsk.sys (REDC)
DRV - (rismxdp [Auto | Running]) – C:\Windows\system32\DRIVERS\rixdptsk.sys (REDC)
DRV - (secdrv [Auto | Running]) – C:\Windows\System32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (SiSRaid2 [Disabled | Stopped]) – C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (SiSRaid4 [Disabled | Stopped]) – C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (Symc8xx [Disabled | Stopped]) – C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_hi [Disabled | Stopped]) – C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Sym_u3 [Disabled | Stopped]) – C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (SynTP [On_Demand | Running]) – C:\Windows\system32\DRIVERS\SynTP.sys (Synaptics, Inc.)
DRV - (tmactmon [Auto | Running]) – C:\Windows\system32\DRIVERS\tmactmon.sys (Trend Micro Inc.)
DRV - (tmcomm [Auto | Running]) – C:\Windows\system32\DRIVERS\tmcomm.sys (Trend Micro Inc.)
DRV - (tmevtmgr [Auto | Running]) – C:\Windows\system32\DRIVERS\tmevtmgr.sys (Trend Micro Inc.)
DRV - (tmlwf [System | Running]) – C:\Windows\system32\DRIVERS\tmlwf.sys (Trend Micro Inc.)
DRV - (tmpreflt [Auto | Running]) – C:\Windows\system32\DRIVERS\tmpreflt.sys (Trend Micro Inc.)
DRV - (tmtdi [System | Running]) – C:\Windows\system32\DRIVERS\tmtdi.sys (Trend Micro Inc.)
DRV - (tmwfp [Auto | Running]) – C:\Windows\system32\DRIVERS\tmwfp.sys (Trend Micro Inc.)
DRV - (tmxpflt [Auto | Running]) – C:\Windows\system32\DRIVERS\tmxpflt.sys (Trend Micro Inc.)
DRV - (uliahci [Disabled | Stopped]) – C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (UlSata [Disabled | Stopped]) – C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (ulsata2 [Disabled | Stopped]) – C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (usbaudio [On_Demand | Running]) – C:\Windows\system32\drivers\usbaudio.sys (Microsoft Corporation)
DRV - (viaide [Disabled | Stopped]) – C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (vsapint [Auto | Running]) – C:\Windows\system32\DRIVERS\vsapint.sys (Trend Micro Inc.)
DRV - (vsmraid [Disabled | Stopped]) – C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (winachsf [On_Demand | Running]) – C:\Windows\system32\DRIVERS\HSX_CNXT.sys (Conexant Systems, Inc.)
DRV - (XAudio [Auto | Running]) – C:\Windows\system32\DRIVERS\xaudio.sys (Conexant Systems, Inc.)
DRV - (CamDrL [On_Demand | Stopped]) – C:\Windows\system32\DRIVERS\Camdrl.sys (Logitech Inc.)
DRV - (LVUSBSta [On_Demand | Running]) – C:\Windows\system32\DRIVERS\LVUSBSta.sys (Logitech Inc.)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…o&pf=laptop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…o&pf=laptop

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…o&pf=laptop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\extensions\\{22181a4d-af90-4ca3-a569-faed9118d6bc}: C:\PROGRAM FILES\TREND MICRO\TRENDSECURE\TISPROTOOLBAR\FIREFOXEXTENSION [2009/04/18 11:21:47 | 00,000,000 | —D | M]


O1 HOSTS File: (761 bytes) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (TSToolbarBHO) - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll (Trend Micro Inc.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - Reg Error: Key error. File not found
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - Reg Error: Key error. File not found
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O2 - BHO: (HP Print Clips) - {FFFFFFFF-FF12-44C5-91EC-068E3AA1B2D7} - c:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Reg Error: Key error. File not found
O3 - HKLM\..\Toolbar: (Trend Micro Toolbar) - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll (Trend Micro Inc.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" (Adobe Systems Incorporated)
O4 - HKLM..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe File not found
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe (Hewlett-Packard)
O4 - HKLM..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart (NVIDIA Corporation)
O4 - HKLM..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start ( Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" (CyberLink Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe" (Trend Micro Inc.)
O4 - HKLM..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide (Microsoft Corporation)
O4 - HKCU..\Run: [HPAdvisor] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autoRun (Hewlett-Packard)
O4 - HKCU..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet (Yahoo! Inc.)
O4 - HKCU..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (Microsoft Corporation)
O4 - HKCU..\Run: [OE] C:\Program Files\Trend Micro\Internet Security\TMAS_OE\TMAS_OEMon.exe (Trend Micro Inc.)
O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (Microsoft Corporation)
O4 - HKCU..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: HP Smart Select - {58ECB495-38F0-49cb-A538-10282ABF65E7} - c:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [@%SystemRoot%\system32\nlasvc.dll,-1000] - C:\Windows\system32\NLAapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [@%SystemRoot%\system32\napinsp.dll,-1000] - C:\Windows\system32\napinsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [@%SystemRoot%\system32\pnrpnsp.dll,-1000] - C:\Windows\system32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [@%SystemRoot%\system32\pnrpnsp.dll,-1001] - C:\Windows\system32\pnrpnsp.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_02)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\TrendSecure\TISProToolbar\TSToolbar.dll (Trend Micro Inc.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\autoexec.bat () - [ NTFS ]
O32 - Autorun File - D:\AUTOMODE () - [ NTFS ]
O32 - Autorun File - E:\autorun.exe () - [ CDFS ]
O32 - Autorun File - E:\autorun.exe () - [ CDFS ]
O32 - Autorun File - E:\autorun.inf () - [ CDFS ]
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found

========== Files/Folders - Created Within 30 Days ==========

[2009/04/21 10:27:13 | 00,501,248 | —- | C] (OldTimer Tools) – C:\Users\Laptop Office\Desktop\OTListIt2.exe
[2009/04/20 19:04:54 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Roaming\MSNInstaller
[2009/04/20 19:04:40 | 00,001,997 | —- | C] () – C:\Users\Public\Desktop\MSN Installer.lnk
[2009/04/20 09:34:21 | 00,000,000 | —D | C] – C:\Program Files\Common Files\logishrd
[2009/04/20 03:02:39 | 00,268,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\es.dll
[2009/04/19 22:31:33 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Local\Yahoo
[2009/04/19 22:18:34 | 00,000,952 | —- | C] () – C:\Users\Public\Desktop\Yahoo! Messenger.lnk
[2009/04/19 22:17:49 | 00,000,000 | —D | C] – C:\ProgramData\Yahoo!
[2009/04/19 03:50:07 | 00,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IPSECSVC.DLL
[2009/04/19 03:50:07 | 00,272,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\polstore.dll
[2009/04/19 03:50:07 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winipsec.dll
[2009/04/19 03:50:07 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FwRemoteSvr.dll
[2009/04/19 03:49:21 | 00,241,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceApi.dll
[2009/04/19 03:49:20 | 00,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceTypes.dll
[2009/04/19 03:49:20 | 00,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceClassExtension.dll
[2009/04/19 03:48:31 | 00,704,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PhotoScreensaver.scr
[2009/04/19 03:48:28 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wtsapi32.dll
[2009/04/19 03:48:27 | 00,258,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\acpi.sys
[2009/04/19 03:48:27 | 00,020,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\compbatt.sys
[2009/04/19 03:48:27 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\wmiacpi.sys
[2009/04/19 03:48:26 | 00,028,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\battc.sys
[2009/04/19 03:48:26 | 00,014,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\CmBatt.sys
[2009/04/19 03:48:24 | 00,542,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sysmain.dll
[2009/04/19 03:48:23 | 00,714,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\timedate.cpl
[2009/04/19 03:48:21 | 01,652,417 | —- | C] () – C:\Windows\System32\wlan.tmf
[2009/04/19 03:48:21 | 00,289,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanmsm.dll
[2009/04/19 03:48:21 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanhlp.dll
[2009/04/19 03:48:21 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanapi.dll
[2009/04/19 03:48:20 | 00,502,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlansvc.dll
[2009/04/19 03:48:20 | 00,299,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlansec.dll
[2009/04/19 03:47:38 | 00,194,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WebClnt.dll
[2009/04/19 03:47:38 | 00,110,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxdav.sys
[2009/04/19 03:46:08 | 00,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winhttp.dll
[2009/04/19 03:45:26 | 00,297,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gdi32.dll
[2009/04/19 03:44:46 | 01,060,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ntfs.sys
[2009/04/19 03:44:45 | 00,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\monitor.sys
[2009/04/19 03:42:40 | 00,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxsmb10.sys
[2009/04/19 03:41:59 | 00,500,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtcprx.dll
[2009/04/19 03:41:59 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xolehlp.dll
[2009/04/19 03:40:21 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Apphlpdm.dll
[2009/04/19 03:40:17 | 04,247,552 | —- | C] (Microsoft) – C:\Windows\System32\GameUXLegacyGDFs.dll
[2009/04/19 03:40:17 | 01,687,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gameux.dll
[2009/04/19 03:39:25 | 00,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmpeffects.dll
[2009/04/19 03:38:45 | 01,194,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msxml3.dll
[2009/04/19 03:38:45 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msxml3r.dll
[2009/04/19 03:37:56 | 00,356,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MediaMetadataHandler.dll
[2009/04/19 03:37:17 | 00,425,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netapi32.dll
[2009/04/19 03:36:26 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tzres.dll
[2009/04/19 03:34:50 | 08,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmploc.DLL
[2009/04/19 03:34:49 | 10,619,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmp.dll
[2009/04/19 03:34:49 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spwmp.dll
[2009/04/19 03:34:48 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdxm.ocx
[2009/04/19 03:34:48 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxmasf.dll
[2009/04/19 03:31:02 | 11,315,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shell32.dll
[2009/04/19 03:29:18 | 00,109,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ataport.sys
[2009/04/19 03:29:18 | 00,045,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\pciidex.sys
[2009/04/19 03:29:18 | 00,021,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\atapi.sys
[2009/04/19 03:29:18 | 00,015,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\pciide.sys
[2009/04/19 03:29:17 | 00,211,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\volsnap.sys
[2009/04/19 03:29:16 | 00,154,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\nwifi.sys
[2009/04/19 03:28:44 | 02,923,520 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2009/04/19 03:27:35 | 00,216,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\netio.sys
[2009/04/19 03:27:35 | 00,167,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tcpipcfg.dll
[2009/04/19 03:27:35 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netcfg.exe
[2009/04/19 03:27:35 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netiougc.exe
[2009/04/19 03:27:34 | 00,803,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\tcpip.sys
[2009/04/19 03:24:37 | 01,585,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\setupapi.dll
[2009/04/19 03:23:40 | 00,371,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srcore.dll
[2009/04/19 03:23:40 | 00,313,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rstrui.exe
[2009/04/19 03:23:40 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srclient.dll
[2009/04/19 03:23:40 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srdelayed.exe
[2009/04/19 03:23:39 | 00,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpd_ci.dll
[2009/04/19 03:23:39 | 00,019,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kd1394.dll
[2009/04/19 03:23:38 | 00,944,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winload.exe
[2009/04/19 03:23:38 | 00,905,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winresume.exe
[2009/04/19 03:23:37 | 00,620,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ci.dll
[2009/04/19 03:23:36 | 00,224,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\clfs.sys
[2009/04/19 03:23:36 | 00,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\umpnpmgr.dll
[2009/04/19 03:23:36 | 00,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drvinst.exe
[2009/04/19 03:23:36 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cfgmgr32.dll
[2009/04/19 03:23:35 | 00,260,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dpx.dll
[2009/04/19 03:23:35 | 00,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nshhttp.dll
[2009/04/19 03:23:35 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kbd106n.dll
[2009/04/19 03:23:34 | 00,558,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oleaut32.dll
[2009/04/19 03:23:34 | 00,039,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lodctr.exe
[2009/04/19 03:23:33 | 00,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\loadperf.dll
[2009/04/19 03:23:33 | 00,032,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\unlodctr.exe
[2009/04/19 03:23:33 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\prflbmsg.dll
[2009/04/19 03:23:32 | 00,595,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\schedsvc.dll
[2009/04/19 03:23:31 | 00,495,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Wdf01000.sys
[2009/04/19 03:23:31 | 00,035,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\WdfLdr.sys
[2009/04/19 03:23:30 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dispci.dll
[2009/04/19 03:23:30 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\batt.dll
[2009/04/19 03:23:30 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\f3ahvoas.dll
[2009/04/19 03:23:29 | 00,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\i8042prt.sys
[2009/04/19 03:23:29 | 00,035,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\kbdclass.sys
[2009/04/19 03:23:29 | 00,034,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mouclass.sys
[2009/04/19 03:23:29 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\sermouse.sys
[2009/04/19 03:23:29 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\kbdhid.sys
[2009/04/19 03:21:37 | 03,503,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2009/04/19 03:21:37 | 03,469,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2009/04/19 03:21:37 | 00,549,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rpcss.dll
[2009/04/19 03:21:36 | 00,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelineprxy.dll
[2009/04/19 03:21:35 | 00,654,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelinesvc.exe
[2009/04/19 03:21:31 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasads.dll
[2009/04/19 03:21:31 | 00,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasdatastore.dll
[2009/04/19 03:21:30 | 00,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sdohlp.dll
[2009/04/19 03:21:30 | 00,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasrecst.dll
[2009/04/19 03:20:16 | 00,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMASF.DLL
[2009/04/19 03:20:16 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\LAPRXY.DLL
[2009/04/19 03:20:16 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\asferror.dll
[2009/04/19 03:19:50 | 01,233,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lsasrv.dll
[2009/04/19 03:19:50 | 00,875,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kernel32.dll
[2009/04/19 03:19:50 | 00,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\secur32.dll
[2009/04/19 03:19:50 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lsass.exe
[2009/04/19 03:19:49 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\amxread.dll
[2009/04/19 03:19:48 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\apilogen.dll
[2009/04/19 03:19:14 | 00,425,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PhotoMetadataHandler.dll
[2009/04/19 03:19:13 | 00,712,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecs.dll
[2009/04/19 03:19:12 | 00,347,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecsExt.dll
[2009/04/19 03:18:36 | 00,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printcom.dll
[2009/04/19 03:18:35 | 00,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32spl.dll
[2009/04/19 03:18:08 | 00,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rmcast.sys
[2009/04/19 03:18:08 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wshrm.dll
[2009/04/19 03:17:40 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sbunattend.exe
[2009/04/19 03:16:46 | 00,290,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\srv.sys
[2009/04/19 03:16:20 | 00,162,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dnsapi.dll
[2009/04/19 03:16:20 | 00,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dnsrslvr.dll
[2009/04/19 03:16:19 | 00,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dnscacheugc.exe
[2009/04/19 03:15:26 | 00,269,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\schannel.dll
[2009/04/19 03:14:53 | 02,855,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mf.dll
[2009/04/19 03:14:53 | 00,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfps.dll
[2009/04/19 03:14:53 | 00,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rrinstaller.exe
[2009/04/19 03:14:53 | 00,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfpmp.exe
[2009/04/19 03:14:53 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mferror.dll
[2009/04/19 03:14:52 | 00,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\logagent.exe
[2009/04/19 03:14:51 | 02,433,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVCORE.DLL
[2009/04/19 03:14:51 | 00,996,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMNetMgr.dll
[2009/04/19 03:14:18 | 00,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxsmb20.sys
[2009/04/19 03:14:17 | 00,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\srv2.sys
[2009/04/19 03:14:17 | 00,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxsmb.sys
[2009/04/19 03:14:17 | 00,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\srvnet.sys
[2009/04/19 03:13:55 | 00,788,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rpcrt4.dll
[2009/04/19 03:12:56 | 00,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\INETRES.dll
[2009/04/19 03:12:55 | 00,737,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetcomm.dll
[2009/04/19 03:12:21 | 01,645,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\connect.dll
[2009/04/19 03:11:46 | 01,327,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\quartz.dll
[2009/04/19 03:11:14 | 02,028,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32k.sys
[2009/04/19 03:10:14 | 00,000,000 | —D | C] – C:\Program Files\MSXML 4.0
[2009/04/19 03:09:32 | 01,341,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msxml6.dll
[2009/04/19 03:09:32 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msxml6r.dll
[2009/04/19 03:07:13 | 00,385,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2009/04/19 03:07:13 | 00,230,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieaksie.dll
[2009/04/19 03:07:13 | 00,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieakui.dll
[2009/04/19 03:07:13 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\advpack.dll
[2009/04/19 03:07:13 | 00,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\admparse.dll
[2009/04/19 03:07:12 | 00,383,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2009/04/19 03:07:11 | 00,826,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wininet.dll
[2009/04/19 03:07:11 | 00,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2009/04/19 03:07:10 | 00,214,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxtrans.dll
[2009/04/19 03:07:09 | 00,347,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxtmsft.dll
[2009/04/19 03:07:08 | 00,459,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2009/04/19 03:07:07 | 00,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2009/04/19 03:07:06 | 06,066,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieframe.dll
[2009/04/19 03:07:03 | 00,477,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtmled.dll
[2009/04/19 03:07:03 | 00,389,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2009/04/19 03:07:03 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieencode.dll
[2009/04/19 03:07:03 | 00,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtmler.dll
[2009/04/19 03:07:02 | 03,595,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.dll
[2009/04/19 03:07:01 | 01,383,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2009/04/19 03:07:00 | 00,671,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstime.dll
[2009/04/19 03:06:59 | 00,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icardie.dll
[2009/04/19 03:06:58 | 01,830,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2009/04/19 03:06:57 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieUnatt.exe
[2009/04/19 03:06:55 | 01,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\urlmon.dll
[2009/04/19 03:06:55 | 00,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\occache.dll
[2009/04/19 03:06:54 | 00,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iertutil.dll
[2009/04/19 03:06:54 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pngfilt.dll
[2009/04/19 03:06:53 | 00,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2009/04/19 03:06:53 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2009/04/19 03:06:53 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2009/04/18 19:17:31 | 00,000,162 | -H– | C] () – C:\Users\Laptop Office\Desktop\~$ Concepto.doc
[2009/04/18 19:17:29 | 00,149,504 | —- | C] () – C:\Users\Laptop Office\Desktop\El Concepto.doc
[2009/04/18 17:03:28 | 00,001,931 | —- | C] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2009/04/18 17:02:44 | 00,001,976 | —- | C] () – C:\Users\Public\Desktop\Google Earth.lnk
[2009/04/18 17:01:46 | 00,000,896 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachine.job
[2009/04/18 17:01:31 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Local\Google
[2009/04/18 17:01:01 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Roaming\Yahoo!
[2009/04/18 17:01:01 | 00,000,000 | —D | C] – C:\ProgramData\Yahoo! Companion
[2009/04/18 17:00:57 | 00,000,000 | —D | C] – C:\ProgramData\Google Updater
[2009/04/18 17:00:52 | 00,000,868 | —- | C] () – C:\Windows\tasks\Google Software Updater.job
[2009/04/18 17:00:50 | 00,000,000 | —D | C] – C:\Program Files\Google
[2009/04/18 16:32:34 | 00,340,992 | —- | C] () – C:\Users\Laptop Office\Desktop\RETROS.doc
[2009/04/18 16:04:13 | 00,000,162 | -H– | C] () – C:\Users\Laptop Office\Desktop\~$ticulados.doc
[2009/04/18 16:04:11 | 01,568,768 | —- | C] () – C:\Users\Laptop Office\Desktop\Articulados.doc
[2009/04/18 15:45:01 | 00,000,000 | —D | C] – C:\Users\Laptop Office\Documents\My Received Files
[2009/04/18 13:46:28 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Roaming\Adobe
[2009/04/18 13:46:28 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Local\Adobe
[2009/04/18 12:57:56 | 00,000,000 | -HSD | C] – C:\System Volume Information
[2009/04/18 12:52:42 | 20,792,48384 | -HS- | C] () – C:\hiberfil.sys
[2009/04/18 12:29:54 | 03,426,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_32.dll
[2009/04/18 12:29:04 | 00,000,000 | —D | C] – C:\Program Files\Microsoft SQL Server Compact Edition
[2009/04/18 11:37:30 | 00,000,000 | —D | C] – C:\Program Files\Microsoft
[2009/04/18 11:37:17 | 00,000,000 | —D | C] – C:\Users\Public\Documents\microsoft
[2009/04/18 11:36:53 | 00,000,000 | —D | C] – C:\Program Files\Windows Live SkyDrive
[2009/04/18 11:36:30 | 00,000,000 | —D | C] – C:\Program Files\Windows Live
[2009/04/18 11:25:48 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Windows Live
[2009/04/18 11:20:11 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Local\Trend Micro
[2009/04/18 11:18:58 | 00,000,000 | —D | C] – C:\Windows\LocalSSL
[2009/04/18 11:18:44 | 00,000,000 | —D | C] – C:\Users\Public\Documents\Trend Micro
[2009/04/18 11:18:23 | 00,050,192 | —- | C] (Trend Micro Inc.) – C:\Windows\System32\drivers\tmevtmgr.sys
[2009/04/18 11:18:22 | 00,153,104 | —- | C] (Trend Micro Inc.) – C:\Windows\System32\drivers\tmcomm.sys
[2009/04/18 11:18:22 | 00,050,192 | —- | C] (Trend Micro Inc.) – C:\Windows\System32\drivers\tmactmon.sys
[2009/04/18 11:16:33 | 01,195,512 | —- | C] (Trend Micro Inc.) – C:\Windows\System32\drivers\vsapint.sys
[2009/04/18 11:16:33 | 00,205,328 | —- | C] (Trend Micro Inc.) – C:\Windows\System32\drivers\tmxpflt.sys
[2009/04/18 11:16:33 | 00,036,368 | —- | C] (Trend Micro Inc.) – C:\Windows\System32\drivers\tmpreflt.sys
[2009/04/18 11:16:20 | 00,000,939 | —- | C] () – C:\Users\Public\Desktop\Trend Micro Internet Security Pro.lnk
[2009/04/18 11:16:04 | 00,000,000 | —D | C] – C:\ProgramData\Trend Micro
[2009/04/18 11:14:11 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/04/18 11:10:27 | 01,524,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wucltux.dll
[2009/04/18 11:10:26 | 01,809,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wuaueng.dll
[2009/04/18 11:10:26 | 00,051,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wuauclt.exe
[2009/04/18 11:10:26 | 00,043,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wups2.dll
[2009/04/18 11:09:55 | 06,291,456 | -H– | C] () – C:\Users\Laptop Office\AppData\Local\IconCache.db
[2009/04/18 11:09:50 | 00,561,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wuapi.dll
[2009/04/18 11:09:50 | 00,083,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wudriver.dll
[2009/04/18 11:09:50 | 00,034,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wups.dll
[2009/04/18 11:09:22 | 00,162,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wuwebv.dll
[2009/04/18 11:09:22 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wuapp.exe
[2009/04/18 10:54:35 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Local\Hewlett-Packard
[2009/04/18 10:54:12 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Local\QuickPlay
[2009/04/18 10:54:07 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Roaming\Symantec
[2009/04/18 10:54:02 | 00,076,568 | —- | C] () – C:\Users\Laptop Office\AppData\Local\GDIPFONTCACHEV1.DAT
[2009/04/18 10:53:35 | 00,000,402 | -HS- | C] () – C:\Users\Laptop Office\Documents\desktop.ini
[2009/04/18 10:53:35 | 00,000,282 | -HS- | C] () – C:\Users\Laptop Office\Desktop\desktop.ini
[2009/04/18 10:53:35 | 00,000,174 | -HS- | C] () – C:\Users\Laptop Office\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
[2009/04/18 10:53:25 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Roaming\Identities
[2009/04/18 10:53:12 | 00,000,081 | —- | C] () – C:\Windows\System32\LOG
[2009/04/18 10:53:09 | 00,000,044 | —- | C] () – C:\Windows\System\hpsysdrv.dat
[2009/04/18 10:23:43 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Roaming\Macromedia
[2009/04/18 10:13:18 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Roaming\Hewlett-Packard
[2009/04/18 10:12:48 | 00,002,055 | —- | C] () – C:\Users\Public\Desktop\eBay.lnk
[2009/04/18 10:12:48 | 00,002,045 | —- | C] () – C:\Users\Public\Desktop\MSN.lnk
[2009/04/18 10:12:48 | 00,001,865 | —- | C] () – C:\Users\Public\Desktop\HP Total Care Advisor.lnk
[2009/04/18 10:12:46 | 00,001,851 | —- | C] () – C:\Users\Public\Desktop\Internet & Digital Services.lnk
[2009/04/18 10:12:35 | 00,000,000 | —D | C] – C:\Program Files\Yahoo!
[2009/04/18 10:11:08 | 00,000,000 | —D | C] – C:\ProgramData\Electronic Arts
[2009/04/18 10:10:17 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Local\Downloaded Installations
[2009/04/18 10:06:12 | 00,000,000 | —D | C] – C:\Program Files\Electronic Arts
[2009/04/18 10:05:54 | 00,236,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_3.dll
[2009/04/18 10:05:54 | 00,062,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xinput1_2.dll
[2009/04/18 10:05:53 | 00,230,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_2.dll
[2009/04/18 10:05:52 | 00,062,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xinput1_1.dll
[2009/04/18 10:05:51 | 00,229,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_1.dll
[2009/04/18 10:05:41 | 02,388,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_30.dll
[2009/04/18 10:05:40 | 00,230,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_0.dll
[2009/04/18 10:05:40 | 00,014,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\x3daudio1_0.dll
[2009/04/18 10:05:39 | 02,332,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_29.dll
[2009/04/18 10:05:38 | 02,323,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_28.dll
[2009/04/18 10:05:37 | 02,319,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_27.dll
[2009/04/18 10:05:36 | 02,297,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_26.dll
[2009/04/18 10:05:33 | 02,337,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_25.dll
[2009/04/18 10:05:32 | 02,222,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_24.dll
[2009/04/18 10:03:47 | 00,000,000 | RHS- | C] () – C:\Windows\System32\drivers\103C_HP_cNB_Presario F700 Notebook PC_Y5335KV_0U_QCNF8064LG4_E458057-001_4A_I30EA_SQuanta_V86.09_F.05_T071207_WV3-0_L409_M1983_J160_7AMD_8F82_91.90_#071025_N10DE054C;168C001C_(KC490UA#ABA)_XMOBI
LE_CN10_Z_2Rev 1.MRK
[2009/04/18 10:03:26 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Local\VirtualStore
[2009/04/18 10:03:24 | 00,000,000 | -HSD | C] – C:\Users\Laptop Office\Documents\My Videos
[2009/04/18 10:03:24 | 00,000,000 | -HSD | C] – C:\Users\Laptop Office\Documents\My Pictures
[2009/04/18 10:03:24 | 00,000,000 | -HSD | C] – C:\Users\Laptop Office\Documents\My Music
[2009/04/18 10:03:24 | 00,000,000 | -HSD | C] – C:\Users\Laptop Office\AppData\Local\Temporary Internet Files
[2009/04/18 10:03:24 | 00,000,000 | -HSD | C] – C:\Users\Laptop Office\AppData\Local\History
[2009/04/18 10:03:24 | 00,000,000 | -HSD | C] – C:\Users\Laptop Office\AppData\Local\Application Data
[2009/04/18 10:03:23 | 00,000,000 | –SD | C] – C:\Users\Laptop Office\AppData\Roaming\Microsoft
[2009/04/18 10:03:23 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Roaming\Media Center Programs
[2009/04/18 10:03:23 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Local\Temp
[2009/04/18 10:03:23 | 00,000,000 | —D | C] – C:\Users\Laptop Office\AppData\Local\Microsoft
[2009/04/18 09:59:27 | 00,000,000 | -HSD | C] – C:\Users\Public\Documents\My Videos
[2009/04/18 09:59:27 | 00,000,000 | -HSD | C] – C:\Users\Public\Documents\My Pictures
[2009/04/18 09:59:27 | 00,000,000 | -HSD | C] – C:\Users\Public\Documents\My Music
[2009/04/18 09:59:27 | 00,000,000 | -HSD | C] – C:\ProgramData\Templates
[2009/04/18 09:59:27 | 00,000,000 | -HSD | C] – C:\ProgramData\Start Menu
[2009/04/18 09:59:27 | 00,000,000 | -HSD | C] – C:\ProgramData\Favorites
[2009/04/18 09:59:27 | 00,000,000 | -HSD | C] – C:\ProgramData\Documents
[2009/04/18 09:59:27 | 00,000,000 | -HSD | C] – C:\ProgramData\Desktop
[2009/04/18 09:59:27 | 00,000,000 | -HSD | C] – C:\ProgramData\Application Data
[2009/04/18 09:59:27 | 00,000,000 | -HSD | C] – C:\Documents and Settings
[2008/02/17 09:08:53 | 00,016,480 | —- | C] () – C:\Windows\System32\rixdicon.dll
[2007/02/03 08:59:04 | 00,050,127 | —- | C] () – C:\Windows\System32\lvcoinst.ini
[2006/11/02 08:35:32 | 00,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:25:21 | 00,061,440 | —- | C] () – C:\Windows\System32\igfxTMM.dll
[2006/11/02 06:23:31 | 00,000,219 | —- | C] () – C:\Windows\system.ini
[2006/11/02 06:23:31 | 00,000,144 | —- | C] () – C:\Windows\win.ini
[2006/11/02 03:40:29 | 00,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/03/09 18:58:00 | 01,060,424 | —- | C] () – C:\Windows\System32\WdfCoInstaller01000.dll

========== Files - Modified Within 30 Days ==========

[2009/04/21 10:27:30 | 00,501,248 | —- | M] (OldTimer Tools) – C:\Users\Laptop Office\Desktop\OTListIt2.exe
[2009/04/21 10:04:06 | 00,003,072 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/04/21 10:04:06 | 00,003,072 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/04/21 08:48:01 | 00,000,896 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachine.job
[2009/04/21 08:23:21 | 00,000,868 | —- | M] () – C:\Windows\tasks\Google Software Updater.job
[2009/04/21 08:07:48 | 00,716,948 | —- | M] () – C:\Windows\System32\PerfStringBackup.INI
[2009/04/21 08:07:48 | 00,618,648 | —- | M] () – C:\Windows\System32\perfh009.dat
[2009/04/21 08:07:48 | 00,104,024 | —- | M] () – C:\Windows\System32\perfc009.dat
[2009/04/21 08:04:11 | 00,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2009/04/20 19:04:40 | 00,001,997 | —- | M] () – C:\Users\Public\Desktop\MSN Installer.lnk
[2009/04/20 07:55:22 | 00,000,162 | —- | M] () – C:\Users\Public\Documents\hpqp.ini
[2009/04/20 03:09:56 | 00,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2009/04/20 03:09:33 | 20,792,48384 | -HS- | M] () – C:\hiberfil.sys
[2009/04/20 03:08:25 | 06,291,456 | -H– | M] () – C:\Users\Laptop Office\AppData\Local\IconCache.db
[2009/04/20 03:02:40 | 00,268,800 | —- | M] (Microsoft Corporation) – C:\Windows\System32\es.dll
[2009/04/19 22:18:34 | 00,000,952 | —- | M] () – C:\Users\Public\Desktop\Yahoo! Messenger.lnk
[2009/04/19 04:05:54 | 00,000,749 | RH– | M] () – C:\Windows\WindowsShell.Manifest
[2009/04/19 04:05:54 | 00,000,280 | -HS- | M] () – C:\Users\Public\Documents\desktop.ini
[2009/04/19 04:05:54 | 00,000,174 | -HS- | M] () – C:\Users\Public\Desktop\desktop.ini
[2009/04/19 04:05:54 | 00,000,174 | -HS- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
[2009/04/19 04:02:51 | 00,311,488 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2009/04/19 03:50:07 | 00,361,984 | —- | M] (Microsoft Corporation) – C:\Windows\System32\IPSECSVC.DLL
[2009/04/19 03:50:07 | 00,272,896 | —- | M] (Microsoft Corporation) – C:\Windows\System32\polstore.dll
[2009/04/19 03:50:07 | 00,061,440 | —- | M] (Microsoft Corporation) – C:\Windows\System32\winipsec.dll
[2009/04/19 03:50:07 | 00,028,672 | —- | M] (Microsoft Corporation) – C:\Windows\System32\FwRemoteSvr.dll
[2009/04/19 03:49:21 | 00,241,152 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceApi.dll
[2009/04/19 03:49:20 | 00,160,768 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceTypes.dll
[2009/04/19 03:49:20 | 00,095,232 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceClassExtension.dll
[2009/04/19 03:48:31 | 00,704,000 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PhotoScreensaver.scr
[2009/04/19 03:48:28 | 00,024,064 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wtsapi32.dll
[2009/04/19 03:48:27 | 00,258,232 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\acpi.sys
[2009/04/19 03:48:27 | 00,020,920 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\compbatt.sys
[2009/04/19 03:48:27 | 00,011,264 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\wmiacpi.sys
[2009/04/19 03:48:26 | 00,028,344 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\battc.sys
[2009/04/19 03:48:26 | 00,014,208 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\CmBatt.sys
[2009/04/19 03:48:24 | 00,542,720 | —- | M] (Microsoft Corporation) – C:\Windows\System32\sysmain.dll
[2009/04/19 03:48:23 | 00,714,240 | —- | M] (Microsoft Corporation) – C:\Windows\System32\timedate.cpl
[2009/04/19 03:48:21 | 01,652,417 | —- | M] () – C:\Windows\System32\wlan.tmf
[2009/04/19 03:48:21 | 00,289,280 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wlanmsm.dll
[2009/04/19 03:48:21 | 00,067,584 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wlanhlp.dll
[2009/04/19 03:48:21 | 00,047,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wlanapi.dll
[2009/04/19 03:48:20 | 00,502,784 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wlansvc.dll
[2009/04/19 03:48:20 | 00,299,008 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wlansec.dll
[2009/04/19 03:47:38 | 00,194,560 | —- | M] (Microsoft Corporation) – C:\Windows\System32\WebClnt.dll
[2009/04/19 03:47:38 | 00,110,080 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxdav.sys
[2009/04/19 03:46:08 | 00,376,832 | —- | M] (Microsoft Corporation) – C:\Windows\System32\winhttp.dll
[2009/04/19 03:45:26 | 00,297,472 | —- | M] (Microsoft Corporation) – C:\Windows\System32\gdi32.dll
[2009/04/19 03:44:46 | 01,060,920 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\ntfs.sys
[2009/04/19 03:44:45 | 00,041,984 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\monitor.sys
[2009/04/19 03:42:40 | 00,211,456 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxsmb10.sys
[2009/04/19 03:41:59 | 00,500,736 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msdtcprx.dll
[2009/04/19 03:41:59 | 00,030,208 | —- | M] (Microsoft Corporation) – C:\Windows\System32\xolehlp.dll
[2009/04/19 03:40:21 | 00,028,672 | —- | M] (Microsoft Corporation) – C:\Windows\System32\Apphlpdm.dll
[2009/04/19 03:40:18 | 04,247,552 | —- | M] (Microsoft) – C:\Windows\System32\GameUXLegacyGDFs.dll
[2009/04/19 03:40:17 | 01,687,040 | —- | M] (Microsoft Corporation) – C:\Windows\System32\gameux.dll
[2009/04/19 03:39:25 | 00,303,616 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wmpeffects.dll
[2009/04/19 03:38:45 | 01,194,496 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msxml3.dll
[2009/04/19 03:38:45 | 00,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msxml3r.dll
[2009/04/19 03:37:56 | 00,356,864 | —- | M] (Microsoft Corporation) – C:\Windows\System32\MediaMetadataHandler.dll
[2009/04/19 03:37:17 | 00,425,472 | —- | M] (Microsoft Corporation) – C:\Windows\System32\netapi32.dll
[2009/04/19 03:36:26 | 00,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\System32\tzres.dll
[2009/04/19 03:34:50 | 10,619,904 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wmp.dll
[2009/04/19 03:34:50 | 08,147,968 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wmploc.DLL
[2009/04/19 03:34:49 | 00,007,680 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spwmp.dll
[2009/04/19 03:34:48 | 00,004,096 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msdxm.ocx
[2009/04/19 03:34:48 | 00,004,096 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dxmasf.dll
[2009/04/19 03:31:02 | 11,315,712 | —- | M] (Microsoft Corporation) – C:\Windows\System32\shell32.dll
[2009/04/19 03:29:18 | 00,109,624 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\ataport.sys
[2009/04/19 03:29:18 | 00,045,112 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\pciidex.sys
[2009/04/19 03:29:18 | 00,021,560 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\atapi.sys
[2009/04/19 03:29:18 | 00,015,928 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\pciide.sys
[2009/04/19 03:29:17 | 00,211,000 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\volsnap.sys
[2009/04/19 03:29:16 | 00,154,624 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\nwifi.sys
[2009/04/19 03:28:44 | 02,923,520 | —- | M] (Microsoft Corporation) – C:\Windows\explorer.exe
[2009/04/19 03:27:35 | 00,216,632 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\netio.sys
[2009/04/19 03:27:35 | 00,167,424 | —- | M] (Microsoft Corporation) – C:\Windows\System32\tcpipcfg.dll
[2009/04/19 03:27:35 | 00,024,064 | —- | M] (Microsoft Corporation) – C:\Windows\System32\netcfg.exe
[2009/04/19 03:27:35 | 00,022,016 | —- | M] (Microsoft Corporation) – C:\Windows\System32\netiougc.exe
[2009/04/19 03:27:34 | 00,803,328 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\tcpip.sys
[2009/04/19 03:24:37 | 01,585,664 | —- | M] (Microsoft Corporation) – C:\Windows\System32\setupapi.dll
[2009/04/19 03:23:45 | 00,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\en-US\i8042prt.sys.mui
[2009/04/19 03:23:45 | 00,005,632 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\en-US\sermouse.sys.mui
[2009/04/19 03:23:45 | 00,004,608 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\en-US\mouclass.sys.mui
[2009/04/19 03:23:45 | 00,004,608 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\en-US\kbdclass.sys.mui
[2009/04/19 03:23:45 | 00,003,072 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\en-US\mouhid.sys.mui
[2009/04/19 03:23:45 | 00,003,072 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\en-US\kbdhid.sys.mui
[2009/04/19 03:23:40 | 00,371,712 | —- | M] (Microsoft Corporation) – C:\Windows\System32\srcore.dll
[2009/04/19 03:23:40 | 00,313,856 | —- | M] (Microsoft Corporation) – C:\Windows\System32\rstrui.exe
[2009/04/19 03:23:40 | 00,040,960 | —- | M] (Microsoft Corporation) – C:\Windows\System32\srclient.dll
[2009/04/19 03:23:40 | 00,016,384 | —- | M] (Microsoft Corporation) – C:\Windows\System32\srdelayed.exe
[2009/04/19 03:23:39 | 00,613,888 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wpd_ci.dll
[2009/04/19 03:23:39 | 00,019,000 | —- | M] (Microsoft Corporation) – C:\Windows\System32\kd1394.dll
[2009/04/19 03:23:38 | 00,944,184 | —- | M] (Microsoft Corporation) – C:\Windows\System32\winload.exe
[2009/04/19 03:23:38 | 00,905,400 | —- | M] (Microsoft Corporation) – C:\Windows\System32\winresume.exe
[2009/04/19 03:23:37 | 00,620,088 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ci.dll
[2009/04/19 03:23:36 | 00,224,824 | —- | M] (Microsoft Corporation) – C:\Windows\System32\clfs.sys
[2009/04/19 03:23:36 | 00,221,696 | —- | M] (Microsoft Corporation) – C:\Windows\System32\umpnpmgr.dll
[2009/04/19 03:23:36 | 00,101,888 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drvinst.exe
[2009/04/19 03:23:36 | 00,019,456 | —- | M] (Microsoft Corporation) – C:\Windows\System32\cfgmgr32.dll
[2009/04/19 03:23:35 | 00,260,096 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dpx.dll
[2009/04/19 03:23:35 | 00,023,552 | —- | M] (Microsoft Corporation) – C:\Windows\System32\nshhttp.dll
[2009/04/19 03:23:35 | 00,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\System32\kbd106n.dll
[2009/04/19 03:23:34 | 00,558,080 | —- | M] (Microsoft Corporation) – C:\Windows\System32\oleaut32.dll
[2009/04/19 03:23:34 | 00,039,424 | —- | M] (Microsoft Corporation) – C:\Windows\System32\lodctr.exe
[2009/04/19 03:23:33 | 00,115,200 | —- | M] (Microsoft Corporation) – C:\Windows\System32\loadperf.dll
[2009/04/19 03:23:33 | 00,032,256 | —- | M] (Microsoft Corporation) – C:\Windows\System32\unlodctr.exe
[2009/04/19 03:23:33 | 00,017,408 | —- | M] (Microsoft Corporation) – C:\Windows\System32\prflbmsg.dll
[2009/04/19 03:23:32 | 00,595,456 | —- | M] (Microsoft Corporation) – C:\Windows\System32\schedsvc.dll
[2009/04/19 03:23:31 | 00,495,160 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\Wdf01000.sys
[2009/04/19 03:23:31 | 00,035,384 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\WdfLdr.sys
[2009/04/19 03:23:30 | 00,035,328 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dispci.dll
[2009/04/19 03:23:30 | 00,012,800 | —- | M] (Microsoft Corporation) – C:\Windows\System32\batt.dll
[2009/04/19 03:23:30 | 00,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\System32\f3ahvoas.dll
[2009/04/19 03:23:29 | 00,054,784 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\i8042prt.sys
[2009/04/19 03:23:29 | 00,035,384 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\kbdclass.sys
[2009/04/19 03:23:29 | 00,034,360 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\mouclass.sys
[2009/04/19 03:23:29 | 00,019,968 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\sermouse.sys
[2009/04/19 03:23:29 | 00,015,872 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\kbdhid.sys
[2009/04/19 03:21:37 | 03,503,584 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2009/04/19 03:21:37 | 03,469,280 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2009/04/19 03:21:37 | 00,549,888 | —- | M] (Microsoft Corporation) – C:\Windows\System32\rpcss.dll
[2009/04/19 03:21:36 | 00,024,576 | —- | M] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelineprxy.dll
[2009/04/19 03:21:35 | 00,654,336 | —- | M] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelinesvc.exe
[2009/04/19 03:21:31 | 00,053,248 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iasads.dll
[2009/04/19 03:21:31 | 00,037,888 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iasdatastore.dll
[2009/04/19 03:21:30 | 00,158,720 | —- | M] (Microsoft Corporation) – C:\Windows\System32\sdohlp.dll
[2009/04/19 03:21:30 | 00,097,280 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iasrecst.dll
[2009/04/19 03:20:16 | 00,223,232 | —- | M] (Microsoft Corporation) – C:\Windows\System32\WMASF.DLL
[2009/04/19 03:20:16 | 00,009,728 | —- | M] (Microsoft Corporation) – C:\Windows\System32\LAPRXY.DLL
[2009/04/19 03:20:16 | 00,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\System32\asferror.dll
[2009/04/19 03:19:50 | 01,233,408 | —- | M] (Microsoft Corporation) – C:\Windows\System32\lsasrv.dll
[2009/04/19 03:19:50 | 00,875,520 | —- | M] (Microsoft Corporation) – C:\Windows\System32\kernel32.dll
[2009/04/19 03:19:50 | 00,072,704 | —- | M] (Microsoft Corporation) – C:\Windows\System32\secur32.dll
[2009/04/19 03:19:50 | 00,007,680 | —- | M] (Microsoft Corporation) – C:\Windows\System32\lsass.exe
[2009/04/19 03:19:49 | 00,025,600 | —- | M] (Microsoft Corporation) – C:\Windows\System32\amxread.dll
[2009/04/19 03:19:48 | 00,014,848 | —- | M] (Microsoft Corporation) – C:\Windows\System32\apilogen.dll
[2009/04/19 03:19:14 | 00,425,472 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PhotoMetadataHandler.dll
[2009/04/19 03:19:13 | 00,712,704 | —- | M] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecs.dll
[2009/04/19 03:19:12 | 00,347,648 | —- | M] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecsExt.dll
[2009/04/19 03:18:36 | 00,037,376 | —- | M] (Microsoft Corporation) – C:\Windows\System32\printcom.dll
[2009/04/19 03:18:35 | 00,441,856 | —- | M] (Microsoft Corporation) – C:\Windows\System32\win32spl.dll
[2009/04/19 03:18:08 | 00,113,664 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\rmcast.sys
[2009/04/19 03:18:08 | 00,014,848 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wshrm.dll
[2009/04/19 03:17:40 | 00,011,776 | —- | M] (Microsoft Corporation) – C:\Windows\System32\sbunattend.exe
[2009/04/19 03:16:46 | 00,290,304 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\srv.sys
[2009/04/19 03:16:20 | 00,162,816 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dnsapi.dll
[2009/04/19 03:16:20 | 00,083,968 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dnsrslvr.dll
[2009/04/19 03:16:19 | 00,024,576 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dnscacheugc.exe
[2009/04/19 03:15:26 | 00,269,824 | —- | M] (Microsoft Corporation) – C:\Windows\System32\schannel.dll
[2009/04/19 03:14:53 | 02,855,424 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mf.dll
[2009/04/19 03:14:53 | 00,098,816 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mfps.dll
[2009/04/19 03:14:53 | 00,052,736 | —- | M] (Microsoft Corporation) – C:\Windows\System32\rrinstaller.exe
[2009/04/19 03:14:53 | 00,024,576 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mfpmp.exe
[2009/04/19 03:14:53 | 00,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mferror.dll
[2009/04/19 03:14:52 | 00,094,720 | —- | M] (Microsoft Corporation) – C:\Windows\System32\logagent.exe
[2009/04/19 03:14:51 | 02,433,536 | —- | M] (Microsoft Corporation) – C:\Windows\System32\WMVCORE.DLL
[2009/04/19 03:14:51 | 00,996,352 | —- | M] (Microsoft Corporation) – C:\Windows\System32\WMNetMgr.dll
[2009/04/19 03:14:18 | 00,058,368 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxsmb20.sys
[2009/04/19 03:14:17 | 00,130,048 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\srv2.sys
[2009/04/19 03:14:17 | 00,101,888 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxsmb.sys
[2009/04/19 03:14:17 | 00,084,992 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\srvnet.sys
[2009/04/19 03:13:55 | 00,788,992 | —- | M] (Microsoft Corporation) – C:\Windows\System32\rpcrt4.dll
[2009/04/19 03:12:56 | 00,084,480 | —- | M] (Microsoft Corporation) – C:\Windows\System32\INETRES.dll
[2009/04/19 03:12:55 | 00,737,792 | —- | M] (Microsoft Corporation) – C:\Windows\System32\inetcomm.dll
[2009/04/19 03:12:21 | 01,645,568 | —- | M] (Microsoft Corporation) – C:\Windows\System32\connect.dll
[2009/04/19 03:11:46 | 01,327,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\quartz.dll
[2009/04/19 03:11:14 | 02,028,032 | —- | M] (Microsoft Corporation) – C:\Windows\System32\win32k.sys
[2009/04/19 03:09:32 | 01,341,440 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msxml6.dll
[2009/04/19 03:09:32 | 00,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msxml6r.dll
[2009/04/19 03:07:13 | 00,385,024 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2009/04/19 03:07:13 | 00,230,400 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieaksie.dll
[2009/04/19 03:07:13 | 00,161,792 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieakui.dll
[2009/04/19 03:07:13 | 00,124,928 | —- | M] (Microsoft Corporation) – C:\Windows\System32\advpack.dll
[2009/04/19 03:07:13 | 00,072,704 | —- | M] (Microsoft Corporation) – C:\Windows\System32\admparse.dll
[2009/04/19 03:07:12 | 00,383,488 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2009/04/19 03:07:11 | 00,826,368 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wininet.dll
[2009/04/19 03:07:11 | 00,027,648 | —- | M] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2009/04/19 03:07:10 | 00,214,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dxtrans.dll
[2009/04/19 03:07:09 | 00,347,136 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dxtmsft.dll
[2009/04/19 03:07:08 | 00,459,264 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2009/04/19 03:07:07 | 00,180,736 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2009/04/19 03:07:06 | 06,066,176 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieframe.dll
[2009/04/19 03:07:03 | 00,477,696 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtmled.dll
[2009/04/19 03:07:03 | 00,389,120 | —- | M] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2009/04/19 03:07:03 | 00,078,336 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieencode.dll
[2009/04/19 03:07:03 | 00,048,128 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtmler.dll
[2009/04/19 03:07:02 | 03,595,264 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtml.dll
[2009/04/19 03:07:02 | 01,383,424 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2009/04/19 03:07:00 | 00,671,232 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mstime.dll
[2009/04/19 03:06:59 | 00,063,488 | —- | M] (Microsoft Corporation) – C:\Windows\System32\icardie.dll
[2009/04/19 03:06:58 | 01,830,912 | —- | M] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2009/04/19 03:06:57 | 00,026,624 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieUnatt.exe
[2009/04/19 03:06:55 | 01,160,192 | —- | M] (Microsoft Corporation) – C:\Windows\System32\urlmon.dll
[2009/04/19 03:06:55 | 00,102,912 | —- | M] (Microsoft Corporation) – C:\Windows\System32\occache.dll
[2009/04/19 03:06:54 | 00,268,288 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iertutil.dll
[2009/04/19 03:06:54 | 00,044,544 | —- | M] (Microsoft Corporation) – C:\Windows\System32\pngfilt.dll
[2009/04/19 03:06:53 | 00,070,656 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2009/04/19 03:06:53 | 00,056,320 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2009/04/19 03:06:53 | 00,044,544 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2009/04/18 22:40:52 | 00,149,504 | —- | M] () – C:\Users\Laptop Office\Desktop\El Concepto.doc
[2009/04/18 19:17:31 | 00,000,162 | -H– | M] () – C:\Users\Laptop Office\Desktop\~$ Concepto.doc
[2009/04/18 17:03:28 | 00,001,931 | —- | M] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2009/04/18 17:02:44 | 00,001,976 | —- | M] () – C:\Users\Public\Desktop\Google Earth.lnk
[2009/04/18 16:39:54 | 00,340,992 | —- | M] () – C:\Users\Laptop Office\Desktop\RETROS.doc
[2009/04/18 16:16:05 | 01,568,768 | —- | M] () – C:\Users\Laptop Office\Desktop\Articulados.doc
[2009/04/18 16:04:13 | 00,000,162 | -H– | M] () – C:\Users\Laptop Office\Desktop\~$ticulados.doc
[2009/04/18 11:16:20 | 00,000,939 | —- | M] () – C:\Users\Public\Desktop\Trend Micro Internet Security Pro.lnk
[2009/04/18 11:10:27 | 01,524,736 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wucltux.dll
[2009/04/18 11:10:26 | 01,809,944 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wuaueng.dll
[2009/04/18 11:10:26 | 00,051,224 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wuauclt.exe
[2009/04/18 11:10:26 | 00,043,544 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wups2.dll
[2009/04/18 11:09:50 | 00,561,688 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wuapi.dll
[2009/04/18 11:09:50 | 00,083,456 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wudriver.dll
[2009/04/18 11:09:50 | 00,034,328 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wups.dll
[2009/04/18 11:09:22 | 00,162,064 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wuwebv.dll
[2009/04/18 11:09:22 | 00,031,232 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wuapp.exe
[2009/04/18 10:54:02 | 00,076,568 | —- | M] () – C:\Users\Laptop Office\AppData\Local\GDIPFONTCACHEV1.DAT
[2009/04/18 10:53:35 | 00,000,402 | -HS- | M] () – C:\Users\Laptop Office\Documents\desktop.ini
[2009/04/18 10:53:35 | 00,000,282 | -HS- | M] () – C:\Users\Laptop Office\Desktop\desktop.ini
[2009/04/18 10:53:35 | 00,000,174 | -HS- | M] () – C:\Users\Laptop Office\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
[2009/04/18 10:53:12 | 00,000,081 | —- | M] () – C:\Windows\System32\LOG
[2009/04/18 10:53:09 | 00,000,044 | —- | M] () – C:\Windows\System\hpsysdrv.dat
[2009/04/18 10:12:46 | 00,001,851 | —- | M] () – C:\Users\Public\Desktop\Internet & Digital Services.lnk
[2009/04/18 10:03:47 | 00,000,000 | RHS- | M] () – C:\Windows\System32\drivers\103C_HP_cNB_Presario F700 Notebook PC_Y5335KV_0U_QCNF8064LG4_E458057-001_4A_I30EA_SQuanta_V86.09_F.05_T071207_WV3-0_L409_M1983_J160_7AMD_8F82_91.90_#071025_N10DE054C;168C001C_(KC490UA#ABA)_XMOBI
LE_CN10_Z_2Rev 1.MRK
[2009/04/06 07:57:26 | 24,921,544 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mrt.exe
[2009/04/02 19:08:54 | 00,050,192 | —- | M] (Trend Micro Inc.) – C:\Windows\System32\drivers\tmactmon.sys
[2009/04/02 19:08:52 | 00,050,192 | —- | M] (Trend Micro Inc.) – C:\Windows\System32\drivers\tmevtmgr.sys
[2009/04/02 19:08:48 | 00,153,104 | —- | M] (Trend Micro Inc.) – C:\Windows\System32\drivers\tmcomm.sys

========== LOP Check ==========

[2009/04/21 08:23:21 | 00,000,868 | —- | M] () – C:\Windows\Tasks\Google Software Updater.job
[2009/04/21 08:48:01 | 00,000,896 | —- | M] () – C:\Windows\Tasks\GoogleUpdateTaskMachine.job
[2009/04/20 03:09:56 | 00,000,006 | -H– | M] () – C:\Windows\Tasks\SA.DAT
[2009/04/20 03:08:37 | 00,006,960 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

< End of report >
OTListIt Extras logfile created on: 4/21/2009 10:29:08 AM - Run 1
OTListIt2 by OldTimer - Version 2.0.14.0 Folder = C:\Users\Laptop Office\Desktop
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16830)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.94 Gb Total Physical Memory | 1.07 Gb Available Physical Memory | 55.38% Memory free
4.00 Gb Paging File | 2.81 Gb Available in Paging File | 70.26% Paging File free
Paging file location(s): ?:\pagefile.sys;

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 137.35 Gb Total Space | 96.51 Gb Free Space | 70.27% Space Free | Partition Type: NTFS
Drive D: | 11.70 Gb Total Space | 1.86 Gb Free Space | 15.90% Space Free | Partition Type: NTFS
Drive E: | 538.23 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: LAPTOPOFFICE-PC
Current User Name: Laptop Office
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] – C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 0
"InternetSettingsDisableNotify" = 0
"AutoUpdateDisableNotify" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"DisableNotifications" = 0
"EnableFirewall" = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"" =
C:\Program Files\Vongo\VongoService.exe:*:enabled:VongoService (Starz Entertainment Group LLC)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink (EarthLink, Inc.)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06E74B9B-631F-4378-BF3A-40D868450C05}" = HPPhotoSmartPhotobookHolidayPack1
"{082702D5-5DD8-4600-BCE5-48B15174687F}" = HP Doc Viewer
"{082F8ABA-84D5-4837-9DFC-F365D91A07D4}" = HP Smart Web Printing
"{0AAA9C97-74D4-47CE-B089-0B147EF3553C}" = Windows Live Messenger
"{11B83AD3-7A46-4C2E-A568-9505981D4C6F}" = HP Update
"{11BB336F-0E58-4977-B866-F24FA334616B}" = HP Active Support Library
"{12A76360-388E-4B27-ABEB-D5FC5378DD2A}" = HPPhotoSmartPhotobookWebPack1
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{172AEB5E-CBB2-4CDD-A4CF-388600825839}" = HPPhotoSmartPhotobookPlayfulPack1
"{1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A}" = Adobe Shockwave Player
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = DVD Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{209CDA54-D390-46A2-A97C-7BF61734418D}" = WeatherBug Gadget
"{2284D904-C138-4B58-93EC-5C362AB5130A}" = The Sims™ Life Stories
"{228C6B46-64E2-404E-898A-EF0830603EF4}" = HPNetworkAssistant
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{250E9609-E830-43EB-B379-DAB7546A2422}" = muvee autoProducer 6.1
"{254C37AA-6B72-4300-84F6-98A82419187E}" = Hewlett-Packard Active Check
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{28EDCE9C-3304-4331-8AB3-F3EBE94C35B4}" = HP Help and Support
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2
"{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons 6.30 D2
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3C52E7DA-C431-4239-B66B-1BF703D5B194}" = Windows Live Photo Gallery
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{40E12A55-C504-4223-AFAC-7672DBF1ACDE}" = Trend Micro Internet Security Pro
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = HP DVD Play 3.6
"{4CACFCD9-F71B-413A-8DF5-1A6419D5CDC6}" = Cards_Calendar_OrderGift_DoMorePlugout
"{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}" = Junk Mail filter update
"{548EAC70-EE00-11DD-908C-005056806466}" = Google Earth
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
"{63C1109E-D977-49ED-BCE3-D00D0BF187D6}" = Windows Live Mail
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = Hewlett-Packard Asset Agent for Health Check
"{68471BF2-F1F7-4C89-BBBA-400B94996596}" = ESU for Microsoft Vista
"{718D791F-F4E8-4aa7-98A6-15FDED17BDD0}" = Trend Micro Internet Security Pro
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{89E052B2-5CA5-4B7A-AF0C-28CA2836B030}" = HPPhotoSmartPhotobookModernPack1
"{8C3AE2D1-854D-4650-A73D-C7CC7EE36B80}" = Vongo
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{9491C880-1C35-11DE-97B2-005056806466}" = Google Earth Plugin
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9885A11E-60E4-417C-B58B-8B31B21C0B8A}" = HP Easy Setup - Frontend
"{A07840FC-CE63-4CB8-8030-EF4B9805925A}" = HPPhotoSmartDiscLabel_PaperLabel
"{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}" = Windows Live Sync
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A81000000003}" = Adobe Reader 8.1.0
"{AC95121F-1576-45B8-82F7-3911D27882E6}" = HPPhotoSmartPhotobookScrapbookPack1
"{ADFB9653-F44C-460C-BF58-189CC552DFFE}" = hpphotosmartdisclabelplugin
"{b02df929-29a7-4fd2-9a70-81a644b635f7}" = HP Total Care Advisor
"{B4E91E95-A5BA-4E50-A465-DB7EFEB176E8}" = HPPhotoSmartDiscLabel_PrintOnDisc
"{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}" = HP Photosmart Essential 2.5
"{BD0E2B92-3814-46F0-893B-4612EA010C7E}" = HP Customer Experience Enhancements
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C6CA8874-5F22-4AF0-9BE3-016BF299C536}" = Windows Live Essentials
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CBAE4F50-9FC9-4557-AB36-9826DF3C103C}" = HP Wireless Assistant
"{DD3C88A0-C53C-41D0-A21B-6D021981D23E}" = HPPhotoSmartDiscLabelContent1
"{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01
"{E6D3A461-8DDE-45C9-8C34-A33436FCC0B4}" = HP User Guides 0091
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F5577101-33CC-4711-8235-3A95BCD49DB0}" = EA Link
"{F636EE9A-F9EC-4606-BCFA-77DD0E210788}" = HPPhotoSmartDiscLabel_Tattoo
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{F7F3B252-E772-48AA-93EB-7964BC326067}" = MSCU for Microsoft Vista
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"AIM_6" = AIM 6
"CNXT_AUDIO_HDA" = Conexant HD Audio
"CNXT_MODEM_HDA_HSF" = HDAUDIO Soft Data Fax Modem with SmartCP
"Google Chrome" = Google Chrome
"Google Updater" = Google Updater
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HP Photosmart Essential" = HP Photosmart Essential 2.5
"HP Smart Web Printing" = HP Smart Web Printing
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{F5577101-33CC-4711-8235-3A95BCD49DB0}" = EA Link
"MSNINST" = MSN
"NVIDIA Drivers" = NVIDIA Drivers
"SlingMedia.QPSlingPlayer_is1" = QuickPlay SlingPlayer 0.4.4
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"ViewpointMediaPlayer" = Viewpoint Media Player
"WildTangent hp Master Uninstall" = My HP Games
"WinLiveSuite_Wave3" = Windows Live Essentials
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 4/18/2009 12:29:27 PM | Computer Name = LaptopOffice-PC | Source = VSS | ID = 8194
Description =

Error - 4/18/2009 12:29:57 PM | Computer Name = LaptopOffice-PC | Source = System Restore | ID = 8193
Description =

Error - 4/18/2009 12:50:42 PM | Computer Name = LaptopOffice-PC | Source = WerSvc | ID = 5007
Description =

Error - 4/18/2009 10:41:31 PM | Computer Name = LaptopOffice-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 7.0.6000.16512 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Problem Reports and Solutions control panel. Process
ID: 149c Start Time: 01c9c045877eed46 Termination Time: 377

Error - 4/19/2009 4:03:54 AM | Computer Name = LaptopOffice-PC | Source = WerSvc | ID = 5007
Description =

Error - 4/20/2009 3:15:51 AM | Computer Name = LaptopOffice-PC | Source = WerSvc | ID = 5007
Description =

Error - 4/20/2009 8:00:17 AM | Computer Name = LaptopOffice-PC | Source = Application Error | ID = 1000
Description = Faulting application TMAS_OE.exe, version 5.5.0.1103, time stamp 0x4886fe8a,
faulting module TMAS_OE.exe, version 5.5.0.1103, time stamp 0x4886fe8a, exception
code 0x40000015, fault offset 0x000a6272, process id 0x1368, application start time
0x01c9c1af6031a690.

Error - 4/20/2009 10:00:54 AM | Computer Name = LaptopOffice-PC | Source = Application Error | ID = 1000
Description = Faulting application IEXPLORE.EXE, version 7.0.6000.16830, time stamp
0x49ac913e, faulting module MSVCR80.dll, version 8.0.50727.762, time stamp 0x45712238,
exception code 0xc0000005, fault offset 0x0001455c, process id 0x968, application
start time 0x01c9c1c0632b8d50.

Error - 4/20/2009 3:45:54 PM | Computer Name = LaptopOffice-PC | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 7.0.6000.16830, time stamp
0x49ac913e, faulting module hpswp_framework.dll, version 3.0.17.0, time stamp 0x46d7a0fd,
exception code 0xc000000d, fault offset 0x0000d03e, process id 0x15d0, application
start time 0x01c9c1ee6d289090.

Error - 4/20/2009 5:14:28 PM | Computer Name = LaptopOffice-PC | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 7.0.6000.16830, time stamp
0x49ac913e, faulting module ntdll.dll, version 6.0.6000.16386, time stamp 0x4549bdc9,
exception code 0xc0000005, fault offset 0x0003b15f, process id 0x9d4, application
start time 0x01c9c1aff1748a50.

[ System Events ]
Error - 4/20/2009 5:09:35 PM | Computer Name = LaptopOffice-PC | Source = DCOM | ID = 10016
Description =

Error - 4/20/2009 5:09:36 PM | Computer Name = LaptopOffice-PC | Source = DCOM | ID = 10016
Description =

Error - 4/20/2009 5:09:36 PM | Computer Name = LaptopOffice-PC | Source = DCOM | ID = 10016
Description =

Error - 4/20/2009 5:09:36 PM | Computer Name = LaptopOffice-PC | Source = DCOM | ID = 10016
Description =

Error - 4/20/2009 5:09:37 PM | Computer Name = LaptopOffice-PC | Source = DCOM | ID = 10016
Description =

Error - 4/20/2009 5:09:37 PM | Computer Name = LaptopOffice-PC | Source = DCOM | ID = 10016
Description =

Error - 4/20/2009 5:09:37 PM | Computer Name = LaptopOffice-PC | Source = DCOM | ID = 10016
Description =

Error - 4/20/2009 5:09:37 PM | Computer Name = LaptopOffice-PC | Source = DCOM | ID = 10016
Description =

Error - 4/20/2009 5:09:38 PM | Computer Name = LaptopOffice-PC | Source = DCOM | ID = 10016
Description =

Error - 4/20/2009 5:09:38 PM | Computer Name = LaptopOffice-PC | Source = DCOM | ID = 10016
Description =


< End of report >
Hi,

There isn't any obvious signs of malware in your log but lets take a deeper look.

Please do the following:

Please download ATF Cleaner by Atribune.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.
    • If you use Firefox browser
    • Click Firefox at the top and choose: Select All
  • Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
It's normal after running ATF cleaner that the PC will be slower to boot the first time.


NEXT


Download Rooter.exe to your desktop

  • Doubleclick it to start the tool
  • A Notepad file containing the report will open, also found at %systemdrive%\Rooter.txt (Where %systemdrive% is usually C: or the drive that you have installed Windows).
  • Post that in your next reply.


NEXT

Please download Malwarebytes' Anti-Malware
  • Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish, so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected. <– very important
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.



NEXT


Go to Kaspersky website and perform an online antivirus scan.
  • Read through the requirements and privacy statement and click on Accept button.
  • It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
  • When the downloads have finished, click on Settings.
  • Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
    • Spyware, Adware, Dialers, and other potentially dangerous programs
      Archives
      Mail databases
  • Click on My Computer under Scan.
  • Once the scan is complete, it will display the results. Click on View Scan Report.
  • You will see a list of infected items there. Click on Save Report As….
  • Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button. Then post it here.

In your next reply please include

  • RooterLog
  • MBAM Log
  • Kaspersky report
  • Fresh HJT log

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI