Hi TomK
OTListIt logfile created on: 22/04/2009 16:26:10 - Run 1
OTListIt2 by OldTimer - Version 2.0.14.0 Folder = D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
1023.48 Mb Total Physical Memory | 243.28 Mb Available Physical Memory | 23.77% Memory free
2.40 Gb Paging File | 1.62 Gb Available in Paging File | 67.45% Paging File free
Paging file location(s): C:\pagefile.sys 0 0;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 29.99 Gb Total Space | 13.88 Gb Free Space | 46.29% Space Free | Partition Type: NTFS
Drive D: | 113.04 Gb Total Space | 19.54 Gb Free Space | 17.29% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: 048919120306
Current User Name: Renshai Warrior
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On
========== Processes (SafeList) ==========
PRC - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Program Files\Tall Emu\Online Armor\oasrv.exe (Tall Emu)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe (America Online, Inc.)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Grisoft\AVG7\avgamsvr.exe (GRISOFT, s.r.o.)
PRC - C:\Program Files\Grisoft\AVG7\avgupsvc.exe (GRISOFT, s.r.o.)
PRC - C:\Program Files\Grisoft\AVG7\avgemc.exe (GRISOFT, s.r.o.)
PRC - C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
PRC - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe ()
PRC - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe (Cyberlink)
PRC - c:\APPS\HIDSERVICE\HIDSERVICE.exe ()
PRC - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe (Cyberlink)
PRC - C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
PRC - C:\Program Files\Tall Emu\Online Armor\oacat.exe (Tall Emu)
PRC - C:\WINDOWS\system32\slserv.exe ( )
PRC - C:\WINDOWS\System32\PAStiSvc.exe ()
PRC - C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe (Ulead Systems, Inc.)
PRC - C:\apps\ABoard\ABoard.exe (NEC Computers International)
PRC - C:\Program Files\Grisoft\AVG7\avgcc.exe (GRISOFT, s.r.o.)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Tall Emu\Online Armor\oaui.exe (Tall Emu)
PRC - c:\APPS\Powercinema\Kernel\TV\CLSched.exe ()
PRC - C:\WINDOWS\PixArt\PAC207\Monitor.exe (PixArt Imaging Incorporation)
PRC - C:\apps\ABoard\AOSD.exe (NEC Computers International)
PRC - C:\Program Files\QuickTime\qttask.exe (Apple Inc.)
PRC - C:\Program Files\Search Settings\SearchSettings.exe (Vendio Services, Inc.)
PRC - C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
PRC - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
PRC - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
PRC - C:\Program Files\Tall Emu\Online Armor\oahlp.exe (Tall Emu)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe (IObit)
PRC - C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\WINDOWS\STK02N\STK02NM.exe (Syntek Ltd.)
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
PRC - C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
PRC - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
PRC - D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\OTListIt2.exe (OldTimer Tools)
========== Win32 Services (SafeList) ==========
SRV - (Adobe LM Service [On_Demand | Stopped]) – C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe (Adobe Systems)
SRV - (AOL ACS [Auto | Running]) – C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe (America Online, Inc.)
SRV - (Apple Mobile Device [Auto | Running]) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (Avg7Alrt [Auto | Running]) – C:\Program Files\Grisoft\AVG7\avgamsvr.exe (GRISOFT, s.r.o.)
SRV - (Avg7UpdSvc [Auto | Running]) – C:\Program Files\Grisoft\AVG7\avgupsvc.exe (GRISOFT, s.r.o.)
SRV - (AVGEMS [Auto | Running]) – C:\Program Files\Grisoft\AVG7\avgemc.exe (GRISOFT, s.r.o.)
SRV - (Bonjour Service [Auto | Running]) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (CLCapSvc [Auto | Running]) – c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe ()
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (CLSched [Auto | Running]) – c:\APPS\Powercinema\Kernel\TV\CLSched.exe ()
SRV - (CyberLink Media Library Service [Auto | Running]) – C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe (Cyberlink)
SRV - (FLEXnet Licensing Service [On_Demand | Stopped]) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (fsssvc [On_Demand | Stopped]) – C:\Program Files\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (GenericHidService [Auto | Running]) – c:\APPS\HIDSERVICE\HIDSERVICE.exe ()
SRV - (gusvc [On_Demand | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (helpsvc [Auto | Running]) – C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (idsvc [Unknown | Running]) – C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (iPod Service [On_Demand | Running]) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (JavaQuickStarterService [Auto | Running]) – C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (NetTcpPortSharing [Disabled | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (NVSvc [Auto | Running]) – C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
SRV - (OAcat [Auto | Running]) – C:\Program Files\Tall Emu\Online Armor\oacat.exe (Tall Emu)
SRV - (odserv [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (PCPitstop Scheduling [Disabled | Stopped]) – C:\Program Files\PCPitstop\PCPitstopScheduleService.exe ()
SRV - (ServiceLayer [On_Demand | Stopped]) – C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
SRV - (SLService [Auto | Running]) – C:\WINDOWS\system32\slserv.exe ( )
SRV - (STI Simulator [Auto | Running]) – C:\WINDOWS\System32\PAStiSvc.exe ()
SRV - (SvcOnlineArmor [Auto | Running]) – C:\Program Files\Tall Emu\Online Armor\oasrv.exe (Tall Emu)
SRV - (WinDefend [Auto | Running]) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (Afc [On_Demand | Running]) – C:\WINDOWS\system32\drivers\Afc.sys (Arcsoft, Inc.)
DRV - (AliIde [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (amdagp [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (asc [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (Avg7Core [System | Running]) – C:\WINDOWS\System32\Drivers\avg7core.sys (GRISOFT, s.r.o.)
DRV - (Avg7RsW [System | Running]) – C:\WINDOWS\System32\Drivers\avg7rsw.sys (GRISOFT, s.r.o.)
DRV - (Avg7RsXP [System | Running]) – C:\WINDOWS\System32\Drivers\avg7rsxp.sys (GRISOFT, s.r.o.)
DRV - (AvgClean [System | Running]) – C:\WINDOWS\System32\Drivers\avgclean.sys (GRISOFT, s.r.o.)
DRV - (AvgTdi [Auto | Running]) – C:\WINDOWS\System32\Drivers\avgtdi.sys (GRISOFT, s.r.o.)
DRV - (CmdIde [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (dac2w2k [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (DCamUSBSTK02N [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\STK02NW2.sys (Syntek Ltd.)
DRV - (fssfltr [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (GEARAspiWDM [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (HdAudAddService [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\HdAudio.sys (Windows ® Server 2003 DDK provider)
DRV - (HDAudBus [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HDAudBus.sys (Windows ® Server 2003 DDK provider)
DRV - (IKFileSec [Boot | Running]) – C:\WINDOWS\system32\drivers\ikfilesec.sys (PCTools Research Pty Ltd.)
DRV - (IKSysFlt [System | Running]) – C:\WINDOWS\system32\drivers\iksysflt.sys (PCTools Research Pty Ltd.)
DRV - (IntcAzAudAddService [On_Demand | Running]) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (mraid35x [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (Mtlmnt5 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\Mtlmnt5.sys ( )
DRV - (Mtlstrm [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\Mtlstrm.sys ( )
DRV - (NtMtlFax [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\NtMtlFax.sys ( )
DRV - (nv [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\nv4_mini.sys (NVIDIA Corporation)
DRV - (OADevice [System | Running]) – C:\WINDOWS\system32\drivers\OADriver.sys (Tall Emu Pty Ltd)
DRV - (OAmon [System | Running]) – C:\WINDOWS\system32\drivers\OAmon.sys (Tall Emu Pty Ltd)
DRV - (OAnet [System | Running]) – C:\WINDOWS\system32\drivers\OAnet.sys (Tall Emu Pty Ltd)
DRV - (PAC207 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\pfc027.sys (PixArt Imaging Inc.)
DRV - (pctfw2 [System | Stopped]) – C:\WINDOWS\system32\drivers\pctfw2.sys ()
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (ql1080 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql12160 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1280 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (RecAgent [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\RecAgent.sys (Smart Link)
DRV - (RTL8023 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\Rtlnic51.sys (Realtek Semiconductor Corporation )
DRV - (SE27bus [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\SE27bus.sys (MCCI)
DRV - (SE27mdfl [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\SE27mdfl.sys (MCCI)
DRV - (SE27mdm [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\SE27mdm.sys (MCCI)
DRV - (SE27mgmt [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\SE27mgmt.sys (MCCI)
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (sisagp [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (Slntamr [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\slntamr.sys ( )
DRV - (SlNtHal [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\Slnthal.sys ( )
DRV - (SlWdmSup [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\SlWdmSup.sys (Vireo Software)
DRV - (Sparrow [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (SQTECH905C [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\Capt905c.sys (Service & Quality Technology.)
DRV - (ss_bus [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\ss_bus.sys (MCCI Corporation)
DRV - (ss_mdfl [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys (MCCI Corporation)
DRV - (ss_mdm [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\ss_mdm.sys (MCCI Corporation)
DRV - (StarOpen [System | Running]) – C:\WINDOWS\System32\drivers\StarOpen.sys ()
DRV - (symc810 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (symc8xx [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (sym_hi [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (sym_u3 [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (ultra [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (USBAAPL [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\usbaapl.sys (Apple, Inc.)
DRV - (usbbus [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\lgusbbus.sys (LG Electronics Inc.)
DRV - (UsbDiag [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys (LG Electronics Inc.)
DRV - (USBModem [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys (LG Electronics Inc.)
DRV - (wanatw [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\wanatw4.sys (America Online, Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Live Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.live.com/results.aspx?q={sea…ferrer:source?}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.co.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,AutoSearch = http://ie.search.msn.com/{SUB_RFC1766}/src…autosearch.aspx
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - HKLM\software\mozilla\Firefox\extensions\\[removed]: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2009/01/16 09:45:18 | 00,000,000 | —D | M]
O1 HOSTS File: (989825 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 ad.a8.net
O1 - Hosts: 127.0.0.1 asy.a8ww.net
O1 - Hosts: 127.0.0.1 a9rhiwa.cn #[Google.Warning]
O1 - Hosts: 127.0.0.1 www.a9rhiwa.cn
O1 - Hosts: 127.0.0.1 acezip.net #[SiteAdvisor.acezip.net]
O1 - Hosts: 127.0.0.1 www.acezip.net #[Win32/Adware.180Solutions]
O1 - Hosts: 127.0.0.1 phpadsnew.abac.com
O1 - Hosts: 127.0.0.1 a.abnad.net
O1 - Hosts: 127.0.0.1 b.abnad.net
O1 - Hosts: 127.0.0.1 c.abnad.net #[eTrust.Tracking.Cookie]
O1 - Hosts: 127.0.0.1 d.abnad.net
O1 - Hosts: 127.0.0.1 e.abnad.net
O1 - Hosts: 127.0.0.1 t.abnad.net
O1 - Hosts: 127.0.0.1 z.abnad.net
O1 - Hosts: 127.0.0.1 banners.absolpublisher.com
O1 - Hosts: 127.0.0.1 tracking.absolstats.com
O1 - Hosts: 127.0.0.1 adv.abv.bg
O1 - Hosts: 127.0.0.1 bimg.abv.bg
O1 - Hosts: 127.0.0.1 www2.a-counter.kiev.ua
O1 - Hosts: 127.0.0.1 track.acclaimnetwork.com
O1 - Hosts: 127.0.0.1 accuserveadsystem.com
O1 - Hosts: 127.0.0.1 www.accuserveadsystem.com
O1 - Hosts: 127.0.0.1 gtb5.acecounter.com
O1 - Hosts: 127.0.0.1 gtcc1.acecounter.com
O1 - Hosts: 28606 more lines…
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (&Google; Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - Reg Error: Key error. File not found
O4 - HKLM..\Run: [@OnlineArmor GUI] "C:\Program Files\Tall Emu\Online Armor\oaui.exe" (Tall Emu)
O4 - HKLM..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe (NEC Computers International)
O4 - HKLM..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP (GRISOFT, s.r.o.)
O4 - HKLM..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 (Microsoft Corporation)
O4 - HKLM..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" (Apple Inc.)
O4 - HKLM..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime (Apple Inc.)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe (Vendio Services, Inc.)
O4 - HKLM..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot (RealNetworks, Inc.)
O4 - HKLM..\Run: [Ulead AutoDetector v2] C:\Program Files\Common Files\Ulead Systems\AutoDetector\monitor.exe (Ulead Systems, Inc.)
O4 - HKLM..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide (Microsoft Corporation)
O4 - HKCU..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup (IObit)
O4 - HKCU..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (Microsoft Corporation)
O4 - HKCU..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (Microsoft Corporation)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: D:\Documents and Settings\All Users\Start Menu\Programs\Startup\STK02N 2.3 PNP Monitor.lnk = C:\WINDOWS\STK02N\STK02NM.exe (Syntek Ltd.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O8 - Extra context menu item: &ieSpell; Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM (Red Egg Software)
O8 - Extra context menu item: Add to Windows &Live; Favorites - http://favorites.live.com/quickadd.aspx File not found
O8 - Extra context menu item: Check &Spelling; - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM (Red Egg Software)
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 (Microsoft Corporation)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog; This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKLM\..Trusted Domains: 51 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: 63 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://www.pcpitstop.com/betapit/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {138E6DC9-722B-4F4B-B09D-95D191869696} http://www.bebo.com/files/BeboUploader.5.1.4.cab (Bebo Uploader Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17D667BA-5675-4AAB-9221-08B9379384D4}
http://cdnimg.piczo.com/images/uploader/pi…st_uploader.cab (Image Uploader Control)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71}
http://download.microsoft.com/download/e/2…78f/wvc1dmo.cab (Reg Error: Value error.)
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B}
http://www.eset.eu/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24}
http://messenger.zone.msn.com/EN-GB/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {6824D897-F7E1-4E41-B84B-B1D3FA4BF1BD}
http://utilities.pcpitstop.com/Exterminate…opAntiVirus.dll (PCPitstop AntiVirus)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://update.microsoft.com/microsoftupdat…b?1202757372421 (MUWebControl Class)
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} http://www.nick.com/common/groove/gx/GrooveAX27.cab (Groove Control)
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737}
http://leahminiratssexy.spaces.live.com/Ph…ad/MsnPUpld.cab (Windows Live Photo Upload Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Value error.)
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C}
http://bmm.imgag.com/imgag/cp/install/crusher-uk.cab (Creative Toolbox Plug-in)
O16 - DPF: {BF6BBE9A-0656-4598-A0CD-32DAC03959B5}
https://www.tescophoto.com/wpp/tesco/app/opcuploader.cab (Image Uploader 3.0 Control)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_11)
O16 - DPF: {D1548A26-B8F6-4E86-AE74-E7062CCC2E2A}
http://www.miniclip.com/igloader/igloader.CAB (igLoader Content on Demand)
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003}
http://www.auctiva.com/hostedimages/active…oad/XUpload.ocx (Persits Software XUpload)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zone.msn.com/binary/MineS…er.cab56986.cab (Minesweeper Flags Class)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {4F07DA45-8170-4859-9B5F-037EF2970034} - C:\Program Files\Tall Emu\Online Armor\oaevent.dll (Tall Emu)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
========== Files/Folders - Created Within 30 Days ==========
[2009/04/22 16:21:53 | 00,501,248 | —- | C] (OldTimer Tools) – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\OTListIt2.exe
[2009/04/21 22:56:53 | 00,000,667 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\Fashion Dash.lnk
[2009/04/17 18:33:30 | 00,000,000 | —D | C] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Shockwave_DressUpRush
[2009/04/16 09:41:42 | 00,473,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fastprox.dll
[2009/04/16 09:41:42 | 00,401,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcss.dll
[2009/04/16 09:41:42 | 00,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\services.exe
[2009/04/16 09:41:41 | 00,729,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2009/04/16 09:41:41 | 00,714,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntdll.dll
[2009/04/16 09:41:41 | 00,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\advapi32.dll
[2009/04/16 09:41:41 | 00,453,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiprvsd.dll
[2009/04/16 09:40:55 | 00,002,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp4res.dll
[2009/04/15 23:36:49 | 00,000,000 | —D | C] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Jane s Hotel Family Hero
[2009/04/15 21:35:35 | 00,000,812 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\Spybot - Search & Destroy.lnk
[2009/04/15 12:35:47 | 00,002,055 | —- | C] () – D:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2009/04/15 12:35:08 | 00,000,000 | —D | C] – C:\Program Files\iPod
[2009/04/15 12:34:56 | 00,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/04/15 12:34:56 | 00,000,000 | —D | C] – C:\Program Files\iTunes
[2009/04/14 16:34:34 | 00,304,182 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\me n ba1.bmp
[2009/04/14 16:32:13 | 00,036,822 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\P07-04-09_23.21.JPG
[2009/04/10 16:40:45 | 00,001,495 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\LimeWire 4.12.15.lnk
[2009/04/09 20:29:00 | 00,000,000 | R–D | C] – D:\Documents and Settings\Renshai Warrior.048919120306.001\My Documents\Copy of lisas new pics
[2009/04/09 19:54:36 | 00,000,565 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\ImageSlicer.lnk
[2009/04/09 19:54:35 | 00,000,000 | —D | C] – C:\Program Files\ImageSlicer
[2009/04/06 17:38:04 | 00,000,591 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\SpywareBlaster.lnk
[2009/04/06 17:36:26 | 02,869,536 | —- | C] (Javacool Software LLC ) – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\spywareblastersetup41.exe
[2009/04/06 16:05:08 | 00,000,000 | —D | C] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\iTunes
[2009/04/06 15:49:20 | 00,000,000 | —D | C] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\movies
[2009/04/02 20:05:04 | 00,032,537 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\My Documents\Contacts for mini_rats_sexy (hotmail).cttNEW.ctt
[2009/04/02 18:37:19 | 00,107,596 | —- | C] () – C:\toolkit_widget.gif
[2009/04/02 18:36:51 | 00,000,687 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\DriverScan.lnk
[2009/04/02 18:35:53 | 00,000,000 | —D | C] – C:\Program Files\DriverGuide DriverScan
[2009/04/02 18:34:04 | 03,603,464 | —- | C] (iCentric Corp.) – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\drvscn.exe
[2009/03/30 20:13:45 | 00,000,000 | —D | C] – D:\Documents and Settings\All Users\Application Data\PCPitstop
[2009/03/30 20:12:35 | 00,001,663 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\PC Pitstop Exterminate2.lnk
[2009/03/29 14:42:44 | 00,001,546 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\PC Pitstop Driver Alert.lnk
[2009/03/29 14:42:44 | 00,000,000 | —D | C] – C:\Program Files\PCPitstop
[2009/03/29 14:06:42 | 00,009,676 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\SecIEZone.hta
[2009/03/27 20:43:08 | 00,000,000 | —D | C] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Search Settings
[2009/03/27 20:24:32 | 00,002,453 | —- | C] () – D:\Documents and Settings\All Users\Documents\Global.sw2
[2009/03/27 20:24:32 | 00,000,000 | -H– | C] () – C:\WINDOWS\SwSys2.bmp
[2009/03/27 20:24:32 | 00,000,000 | -H– | C] () – C:\WINDOWS\SwSys1.bmp
[2009/03/27 20:24:31 | 00,000,000 | —D | C] – D:\Documents and Settings\All Users\Documents\Softwrap
[2009/03/27 20:24:30 | 00,000,000 | —D | C] – D:\Documents and Settings\All Users\Documents\Fonts
[2009/03/27 20:24:30 | 00,000,000 | —D | C] – D:\Documents and Settings\All Users\Documents\Config
[2009/03/27 20:22:08 | 00,000,000 | —D | C] – C:\Program Files\Search Settings
[2009/03/26 17:55:12 | 00,002,083 | —- | C] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\My Documents\Data_090326_1655.pxj
[2009/01/31 17:26:27 | 00,000,399 | —- | C] () – C:\WINDOWS\System32\Remover.ini
[2009/01/31 17:26:23 | 00,000,566 | —- | C] () – C:\WINDOWS\System32\SP207.ini
[2008/07/23 17:50:52 | 03,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2008/07/23 17:47:34 | 00,000,416 | —- | C] () – C:\WINDOWS\System32\dtu100.dll.manifest
[2008/07/23 17:47:34 | 00,000,416 | —- | C] () – C:\WINDOWS\System32\dpl100.dll.manifest
[2008/07/23 17:46:38 | 00,012,288 | —- | C] () – C:\WINDOWS\System32\DivXWMPExtType.dll
[2008/06/13 22:57:59 | 00,012,288 | —- | C] () – C:\WINDOWS\System32\impborl.dll
[2008/06/10 23:23:59 | 00,000,412 | —- | C] () – C:\WINDOWS\WebTranslator.ini
[2008/04/28 11:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/04/28 11:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/04/28 11:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/04/28 11:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/04/28 11:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/04/28 11:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelKorean.dll
[2008/04/28 11:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/04/28 11:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelGerman.dll
[2008/04/28 11:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelFrench.dll
[2008/04/22 16:42:34 | 00,005,632 | —- | C] () – C:\WINDOWS\System32\drivers\StarOpen.sys
[2008/03/05 18:02:48 | 00,000,729 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2008/03/02 01:52:17 | 00,056,832 | —- | C] () – C:\WINDOWS\System32\Iyvu9_32.dll
[2008/02/09 21:09:56 | 00,000,030 | —- | C] () – C:\WINDOWS\iedit.INI
[2008/02/09 19:18:11 | 00,218,504 | —- | C] () – C:\WINDOWS\System32\drivers\pctfw2.sys
[2007/08/06 13:17:40 | 00,019,456 | —- | C] () – C:\WINDOWS\System32\OnlineScannerLang.dll
[2007/08/02 18:11:28 | 00,253,952 | —- | C] () – C:\WINDOWS\System32\OnlineScannerDLLA.dll
[2007/08/02 18:11:14 | 00,241,664 | —- | C] () – C:\WINDOWS\System32\OnlineScannerDLLW.dll
[2007/07/27 15:49:02 | 00,225,355 | —- | C] () – C:\WINDOWS\System32\lnod32apiW.dll
[2007/07/27 15:49:02 | 00,196,683 | —- | C] () – C:\WINDOWS\System32\lnod32apiA.dll
[2005/12/05 20:25:22 | 00,139,264 | —- | C] () – C:\WINDOWS\System32\lnod32umc.dll
[2005/12/05 13:37:10 | 00,106,496 | —- | C] () – C:\WINDOWS\System32\lnod32upd.dll
[2005/10/17 22:33:24 | 00,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2005/10/17 21:31:23 | 00,198,144 | —- | C] () – C:\WINDOWS\System32\_psisdecd.dll
[2005/10/17 20:38:47 | 00,000,514 | —- | C] () – C:\WINDOWS\System32\SETUPPC.INI
[2005/10/17 20:33:02 | 00,007,584 | —- | C] () – C:\WINDOWS\HDReg.ini
[2005/10/17 20:23:13 | 00,192,512 | —- | C] () – C:\WINDOWS\System32\RTCOMDLL.dll
[2005/10/17 20:23:13 | 00,156,160 | —- | C] () – C:\WINDOWS\System32\RtlCPAPI.dll
[2005/10/17 20:17:53 | 00,475,136 | —- | C] () – C:\WINDOWS\System32\SLLights.dll
[2005/10/17 20:17:53 | 00,155,648 | —- | C] () – C:\WINDOWS\System32\amr_cpl.dll
[2005/10/17 20:17:53 | 00,135,168 | —- | C] () – C:\WINDOWS\System32\SLMOHServ.dll
[2005/10/17 20:17:53 | 00,014,976 | —- | C] ( ) – C:\WINDOWS\System32\drivers\winddx.sys
[2005/05/20 14:05:02 | 00,005,606 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2005/01/25 16:15:42 | 00,010,240 | —- | C] () – C:\WINDOWS\System32\PA207USD.DLL
[2004/12/14 12:04:48 | 00,266,240 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2004/12/14 12:02:49 | 01,175,552 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2004/08/10 17:13:32 | 00,000,780 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/08/10 16:38:23 | 00,001,242 | —- | C] () – C:\WINDOWS\win.ini
[2004/08/10 16:38:18 | 00,000,227 | —- | C] () – C:\WINDOWS\system.ini
[1980/01/01 00:00:00 | 01,301,128 | —- | C] ( ) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[1980/01/01 00:00:00 | 00,548,952 | —- | C] ( ) – C:\WINDOWS\System32\drivers\slntamr.sys
[1980/01/01 00:00:00 | 00,540,672 | —- | C] () – C:\WINDOWS\System32\nvhwvid.dll
[1980/01/01 00:00:00 | 00,221,736 | —- | C] ( ) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[1980/01/01 00:00:00 | 00,188,416 | —- | C] () – C:\WINDOWS\System32\slextspk.dll
[1980/01/01 00:00:00 | 00,167,384 | —- | C] ( ) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[1980/01/01 00:00:00 | 00,159,744 | —- | C] () – C:\WINDOWS\System32\SLGen.dll
[1980/01/01 00:00:00 | 00,086,128 | —- | C] ( ) – C:\WINDOWS\System32\drivers\slnthal.sys
[1980/01/01 00:00:00 | 00,049,152 | —- | C] () – C:\WINDOWS\System32\coinst.dll
========== Files - Modified Within 30 Days ==========
[1 C:\WINDOWS\*.tmp files]
[2009/04/22 16:21:57 | 00,501,248 | —- | M] (OldTimer Tools) – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\OTListIt2.exe
[2009/04/22 12:05:21 | 00,002,055 | —- | M] () – D:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2009/04/22 09:55:00 | 00,000,330 | -H– | M] () – C:\WINDOWS\tasks\MP Scheduled Scan.job
[2009/04/22 09:52:07 | 00,021,787 | —- | M] () – C:\WINDOWS\System32\nvapps.xml
[2009/04/22 09:51:36 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/04/22 09:51:27 | 00,221,188 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts.idx
[2009/04/22 09:51:08 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/04/21 23:40:45 | 07,017,118 | -H– | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Local Settings\Application Data\IconCache.db
[2009/04/21 22:56:53 | 00,001,467 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\Shockwave Games.lnk
[2009/04/21 22:56:53 | 00,000,667 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\Fashion Dash.lnk
[2009/04/21 21:59:17 | 00,000,442 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1DE2267F-30A9-468A-A978-AF44CEFC6682}.job
[2009/04/21 18:18:39 | 00,001,242 | —- | M] () – C:\WINDOWS\win.ini
[2009/04/18 18:59:00 | 00,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/04/17 11:00:03 | 00,001,587 | —- | M] () – D:\Documents and Settings\All Users\Desktop\Photo Impression 5.lnk
[2009/04/17 10:52:04 | 00,162,304 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/04/16 21:28:14 | 00,000,591 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\SpywareBlaster.lnk
[2009/04/16 20:19:38 | 00,525,770 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/04/16 20:19:38 | 00,445,448 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2009/04/16 20:19:38 | 00,073,022 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2009/04/16 20:08:12 | 00,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2009/04/15 21:42:28 | 00,989,825 | —- | M] () – C:\WINDOWS\System32\drivers\etc\HOSTS
[2009/04/15 21:35:35 | 00,000,812 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\Spybot - Search & Destroy.lnk
[2009/04/14 16:08:50 | 00,000,729 | —- | M] () – C:\WINDOWS\cdplayer.ini
[2009/04/11 10:25:08 | 00,996,789 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts.20090415-214227.backup
[2009/04/10 16:40:45 | 00,001,495 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\LimeWire 4.12.15.lnk
[2009/04/09 19:54:36 | 00,000,565 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\ImageSlicer.lnk
[2009/04/07 23:21:32 | 00,036,822 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\P07-04-09_23.21.JPG
[2009/04/06 17:36:32 | 02,869,536 | —- | M] (Javacool Software LLC ) – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\spywareblastersetup41.exe
[2009/04/06 15:57:24 | 24,921,544 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MRT.exe
[2009/04/02 20:05:04 | 00,032,537 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\My Documents\Contacts for mini_rats_sexy (hotmail).cttNEW.ctt
[2009/04/02 18:36:51 | 00,000,687 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\DriverScan.lnk
[2009/04/02 18:34:20 | 03,603,464 | —- | M] (iCentric Corp.) – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\drvscn.exe
[2009/03/30 20:12:35 | 00,001,663 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\PC Pitstop Exterminate2.lnk
[2009/03/29 14:42:44 | 00,001,546 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\PC Pitstop Driver Alert.lnk
[2009/03/29 14:08:51 | 00,009,676 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop\SecIEZone.hta
[2009/03/29 10:23:01 | 00,002,453 | —- | M] () – D:\Documents and Settings\All Users\Documents\Global.sw2
[2009/03/27 20:24:32 | 00,000,000 | -H– | M] () – C:\WINDOWS\SwSys2.bmp
[2009/03/27 20:24:32 | 00,000,000 | -H– | M] () – C:\WINDOWS\SwSys1.bmp
[2009/03/27 07:58:38 | 01,203,922 | —- | M] () – C:\WINDOWS\System32\dllcache\sysmain.sdb
[2009/03/26 17:55:12 | 00,002,083 | —- | M] () – D:\Documents and Settings\Renshai Warrior.048919120306.001\My Documents\Data_090326_1655.pxj
========== LOP Check ==========
[2009/04/15 12:34:56 | 00,000,000 | RH-D | M] – D:\Documents and Settings\All Users\Application Data
[2009/04/15 12:35:31 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2006/05/26 01:12:53 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\ACIDPEAKPLAYVGA
[2008/09/23 11:20:46 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Adobe
[2008/02/12 12:27:39 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Adobe Systems
[2008/02/09 22:21:26 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\AOL
[2008/02/19 15:59:20 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Apple
[2007/12/25 09:15:36 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Apple Computer
[2009/01/11 19:42:35 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Ashtons. Family Resort
[2009/04/20 21:16:32 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\avg7
[2008/04/22 15:10:54 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\avg8(2)
[2006/03/06 12:46:01 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\blueyonder
[2007/05/11 21:06:27 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\BVRP Software
[2007/11/09 11:03:10 | 00,000,000 | -H-D | M] – D:\Documents and Settings\All Users\Application Data\CanonBJ
[2005/10/17 14:31:37 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\CyberLink
[2008/06/15 12:17:38 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Exetender
[2007/03/04 17:48:00 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Fileroadreferror
[2008/09/22 12:24:03 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\FLEXnet
[2009/03/03 19:33:50 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Gogii
[2009/01/22 15:21:11 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Google
[2006/09/07 11:28:45 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\GrimActiveFilm16
[2008/04/22 11:03:39 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Grisoft
[2008/02/20 20:06:42 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Installations
[2008/02/24 01:02:39 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Lavasoft
[2007/03/07 11:26:23 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\logs
[2008/08/27 10:20:38 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Malwarebytes
[2006/05/25 17:17:35 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Messenger Plus!
[2008/06/16 21:30:12 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Metaboli Player
[2009/01/12 23:56:50 | 00,000,000 | –SD | M] – D:\Documents and Settings\All Users\Application Data\Microsoft
[2009/04/21 23:41:25 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Microsoft Help
[2006/03/06 12:52:38 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Motive
[2006/03/06 12:29:44 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\MotiveSysIDs
[2008/08/11 23:01:54 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\MumboJumbo
[2008/09/21 16:14:08 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\NortonInstaller
[2008/09/23 11:42:57 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\NOS
[2006/05/17 19:35:12 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\nView_Profiles
[2009/01/20 15:50:28 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Oberon Games
[2005/10/17 13:37:22 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\OD2
[2009/01/18 20:41:49 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\OnlineArmor
[2007/08/05 13:35:58 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\PC Suite
[2007/03/20 21:08:36 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\PC Tools
[2009/03/30 20:13:45 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\PCPitstop
[2009/04/13 18:45:58 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\PlayFirst
[2006/03/18 13:40:41 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\POPWWPROFILES
[2007/11/22 14:01:31 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Pure Networks
[2005/10/17 13:32:28 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\QuickTime
[2006/08/26 14:54:03 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\RTE
[2006/08/09 14:01:15 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Rule Readme Real 16
[2009/04/15 23:27:18 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Sandlot Games
[2005/10/17 21:15:16 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\SBSI
[2008/07/31 20:44:09 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Skype
[2008/02/12 21:19:55 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\SmartSound Software Inc
[2009/04/15 21:37:33 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2009/04/22 14:59:27 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\TEMP
[2008/09/28 19:09:51 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Trymedia
[2007/02/13 12:19:17 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Ubisoft
[2007/09/30 17:51:08 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\UDL
[2008/07/31 16:24:48 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Ulead Systems
[2005/10/17 13:32:34 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Viewpoint
[2006/05/03 14:25:08 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2007/02/15 11:16:23 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
[2008/11/04 17:50:15 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\WLInstaller
[2008/08/06 13:24:02 | 00,000,000 | —D | M] – D:\Documents and Settings\All Users\Application Data\Zylom
[2009/04/17 18:33:30 | 00,000,000 | -H-D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data
[2009/03/03 19:47:15 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Adobe
[2008/06/23 20:32:08 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\AdobeUM
[2008/02/09 22:24:23 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\AOL
[2008/04/08 10:14:54 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Apple Computer
[2009/01/24 19:04:30 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\ArcSoft
[2009/01/11 20:33:43 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Ashtons. Family Resort
[2009/04/21 09:57:41 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\AVG7
[2008/05/03 20:09:26 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Canon
[2008/02/14 11:59:23 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\CyberLink
[2008/09/13 20:03:23 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\DivX
[2008/02/12 19:36:33 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\ErrorSmart
[2008/12/07 17:01:56 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\GameInvest
[2008/11/30 18:40:03 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Gamelab
[2008/07/28 20:34:48 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Google
[2008/12/14 15:20:20 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Home Sweet Home 2
[2008/08/06 19:08:02 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Identities
[2008/03/29 17:22:06 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\ieSpell
[2009/01/24 19:01:04 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\InstallShield
[2009/01/13 16:04:18 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\IObit
[2008/08/06 19:08:07 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Jane s Hotel
[2009/04/15 23:36:49 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Jane s Hotel Family Hero
[2008/02/21 10:35:53 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Leadertech
[2009/01/10 17:14:15 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\LG Electronics
[2009/04/10 16:41:00 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\LimeWire
[2008/02/09 22:24:23 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Macromedia
[2008/08/27 10:20:42 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Malwarebytes
[2009/03/29 00:53:59 | 00,000,000 | –SD | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Microsoft
[2009/01/16 23:13:26 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\My Games
[2008/02/20 20:08:27 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Nokia
[2009/01/20 15:50:28 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Oberon Games
[2008/02/22 21:39:25 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\OD2
[2009/04/22 09:52:19 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\OnlineArmor
[2008/02/12 12:32:46 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Opera
[2008/02/20 20:07:57 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\PC Suite
[2008/02/09 19:18:00 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\PC Tools
[2008/11/30 19:54:43 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\PetShowCraze
[2009/04/21 22:57:48 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\PlayFirst
[2009/01/06 17:27:07 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Pogo Games
[2008/02/09 22:24:23 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Real
[2008/04/22 16:45:29 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Samsung
[2009/03/27 20:43:08 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Search Settings
[2009/04/17 18:33:49 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Shockwave_DressUpRush
[2009/04/09 19:54:51 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Softplicity
[2008/02/21 10:36:23 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Sonic
[2008/02/11 21:42:25 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Sun
[2008/07/27 19:26:56 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Template
[2008/02/15 16:29:01 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Ulead Systems
[2008/06/15 00:04:45 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Uniblue
[2008/07/31 20:44:53 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\VersionTracker Pro
[2008/04/11 16:17:24 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Viewpoint
[2008/12/07 18:35:49 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\ViquaSoft
[2008/09/22 11:17:11 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Windows Live Writer
[2008/10/23 19:23:09 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\WinPatrol
[2008/08/30 12:57:18 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Yahoo!
[2005/10/17 13:32:34 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\You've Got Pictures Screensaver
[2008/11/16 00:02:26 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Zen Puzzle Garden
[2008/08/07 21:22:26 | 00,000,000 | —D | M] – D:\Documents and Settings\Renshai Warrior.048919120306.001\Application Data\Zylom
[2009/04/18 18:59:00 | 00,000,284 | —- | M] () – C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2004/08/04 14:00:00 | 00,000,065 | RH– | M] () – C:\WINDOWS\Tasks\desktop.ini
[2009/04/22 09:55:00 | 00,000,330 | -H– | M] () – C:\WINDOWS\Tasks\MP Scheduled Scan.job
[2008/02/09 15:49:43 | 00,000,258 | —- | M] () – C:\WINDOWS\Tasks\Registration reminder 1.job
[2008/02/09 15:49:44 | 00,000,258 | —- | M] () – C:\WINDOWS\Tasks\Registration reminder 2.job
[2009/04/22 09:51:36 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT
[2009/04/21 21:59:17 | 00,000,442 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{1DE2267F-30A9-468A-A978-AF44CEFC6682}.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 173 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:567D3254
@Alternate Data Stream - 161 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:68FB0053
@Alternate Data Stream - 152 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:6B520784
@Alternate Data Stream - 152 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:63596073
@Alternate Data Stream - 152 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:5E3B85EF
@Alternate Data Stream - 147 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:E9A4C114
@Alternate Data Stream - 147 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:766442E5
@Alternate Data Stream - 145 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:BC9021B2
@Alternate Data Stream - 145 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:2164CF08
@Alternate Data Stream - 145 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:0725B4DA
@Alternate Data Stream - 141 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:38D53DB8
@Alternate Data Stream - 140 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:15C56B30
@Alternate Data Stream - 139 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:5D52AB7A
@Alternate Data Stream - 137 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:EDDEC855
@Alternate Data Stream - 137 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:148EE14E
@Alternate Data Stream - 136 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:A98B12D4
@Alternate Data Stream - 135 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:6D6C4572
@Alternate Data Stream - 125 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:CA84168C
@Alternate Data Stream - 125 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
@Alternate Data Stream - 125 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:1CB8D545
@Alternate Data Stream - 124 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:F1FF5647
@Alternate Data Stream - 124 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:73828A71
@Alternate Data Stream - 124 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:2B99FE60
@Alternate Data Stream - 123 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:96FAC731
@Alternate Data Stream - 123 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:615435BE
@Alternate Data Stream - 123 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:47BE4EDF
@Alternate Data Stream - 121 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:52562F72
@Alternate Data Stream - 120 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:F951183D
@Alternate Data Stream - 118 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:435657D8
@Alternate Data Stream - 117 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:F69BB936
@Alternate Data Stream - 117 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:D37AE80B
@Alternate Data Stream - 117 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:74699137
@Alternate Data Stream - 114 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:78CC8F21
@Alternate Data Stream - 114 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:3CF23EC3
@Alternate Data Stream - 114 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:0AA21473
@Alternate Data Stream - 113 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:A2F5F542
@Alternate Data Stream - 112 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:3BB21850
@Alternate Data Stream - 111 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:B19CC382
@Alternate Data Stream - 110 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:EAC3589E
@Alternate Data Stream - 110 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:9CF56DF4
@Alternate Data Stream - 110 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:27AD48A5
@Alternate Data Stream - 110 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:20DB22E7
@Alternate Data Stream - 108 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:45858237
@Alternate Data Stream - 108 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:0A051701
@Alternate Data Stream - 106 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:C6798065
@Alternate Data Stream - 106 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:949483BD
@Alternate Data Stream - 100 bytes -> D:\Documents and Settings\All Users\Application Data\TEMP:C4A1F01E
< End of report >
OTListIt Extras logfile created on: 22/04/2009 16:26:11 - Run 1
OTListIt2 by OldTimer - Version 2.0.14.0 Folder = D:\Documents and Settings\Renshai Warrior.048919120306.001\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
1023.48 Mb Total Physical Memory | 243.28 Mb Available Physical Memory | 23.77% Memory free
2.40 Gb Paging File | 1.62 Gb Available in Paging File | 67.45% Paging File free
Paging file location(s): C:\pagefile.sys 0 0;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 29.99 Gb Total Space | 13.88 Gb Free Space | 46.29% Space Free | Partition Type: NTFS
Drive D: | 113.04 Gb Total Space | 19.54 Gb Free Space | 17.29% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: 048919120306
Current User Name: Renshai Warrior
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html [@ = htmlfile] – C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0 (America Online, Inc.)
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync (Microsoft Corporation)
C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call (Microsoft Corporation)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
%ProgramFiles%\AOL 9.0\aol.exe:*:Enabled:AOL (America Online, Inc.)
%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\logo_ubi.exe:*:Enabled:SPLINTER CELL PANDORA File not found
%ProgramFiles%\UBISOFT\Splinter Cell Pandora Tomorrow\pandora.exe:*:Enabled:PANDORA File not found
C:\Program Files\Grisoft\AVG7\avginet.exe:*:Enabled:avginet.exe (GRISOFT, s.r.o.)
C:\Program Files\Grisoft\AVG7\avgamsvr.exe:*:Enabled:avgamsvr.exe (GRISOFT, s.r.o.)
C:\Program Files\Grisoft\AVG7\avgcc.exe:*:Enabled:avgcc.exe (GRISOFT, s.r.o.)
C:\Program Files\Grisoft\AVG7\avgemc.exe:*:Enabled:avgemc.exe (GRISOFT, s.r.o.)
C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger (Microsoft Corporation)
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook (Microsoft Corporation)
X:\Program Files\Ubisoft\Lost Via Domus\Yeti_Final_Win32.exe:*:Disabled:Yeti_Final_Win32.exe File not found
X:\Program files\Silverfall\Silverfall.exe:*:Enabled:Silverfall.exe File not found
C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL 9.0 (America Online, Inc.)
C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync (Microsoft Corporation)
C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call (Microsoft Corporation)
C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger (Microsoft Corporation)
C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire (Lime Wire, LLC)
C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour (Apple Inc.)
C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes (Apple Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{020D8396-D6D9-4B53-A9A1-83C47E2E27AA}" = Windows Live Call
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{0AAA9C97-74D4-47CE-B089-0B147EF3553C}" = Windows Live Messenger
"{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP160" = Canon MP160
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD
"{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}" = Adobe ExtendScript Toolkit 2
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java™ 6 Update 11
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{2BA00471-0328-3743-93BD-FA813353A783}" = Microsoft .NET Framework 3.0 Service Pack 1
"{2FC099BD-AC9B-33EB-809C-D332E1B27C40}" = Microsoft .NET Framework 3.5
"{341201D4-4F61-4ADB-987E-9CCE4D83A58D}" = Windows Live Toolbar Extension (Windows Live Toolbar)
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3EBC0693-0A27-4B50-90A1-A8B688911C7A}" = Samsung PC Studio 3
"{40727DD3-9679-4D09-81D0-25F0017DF61C}" = ArcSoft VideoImpression 2
"{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}" = Microsoft Works
"{43602F34-1AA3-44FB-AEB2-D08C2C73743F}" = Paint.NET v3.36
"{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"{4AB8B41B-3AF1-46BE-99B0-0ACD3B300C0A}" = Junk Mail filter update
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3}" = iTunes
"{63C1109E-D977-49ED-BCE3-D00D0BF187D6}" = Windows Live Mail
"{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}" = Adobe Setup
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6A92E5C5-0578-443D-91F3-92ECE5F2CAE2}" = Windows Live Writer
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}" = Adobe Color Common Settings
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{74224F8D-4A17-4816-9EDB-7BB854DE532C}" = NVIDIA PhysX v8.04.25
"{7745B7A9-F323-4BB9-9811-01BF57A028DA}" = Map Button (Windows Live Toolbar)
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}" = Windows Live Favorites for Windows Live Toolbar
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}" = Macromedia Shockwave Player
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{83d96ed0-98aa-4515-8ddc-816f3efdd104}" = MyDSC2
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROR_{3EC77D26-799B-4CD8-914F-C1565E796173}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROR_{430971B1-C31E-45DA-81E0-72C095BAB72C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROR_{F7A31780-33C4-4E39-951A-5EC9B91D7BF1}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROR_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROR_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007
"{91120000-0014-0000-0000-0000000FF1CE}_PROR_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{91174F3E-4337-4D35-8E8F-9794B7C363DA}" = Digital Camera Driver
"{9422C8EA-B0C6-4197-B8FC-DC797658CA00}" = Windows Live Sign-in Assistant
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95120000-0120-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9541FED0-327F-4DF0-8B96-EF57EF622F19}" = Sonic RecordNow!
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{993960EE-CA4D-443F-8F88-E24260DD5FD2}" = LG PC Suite
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A06275F4-324B-4E85-95E6-87B2CD729401}" = Windows Defender
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A5C4AD72-25FE-4899-B6DF-6D8DF63C93CF}" = Highlight Viewer (Windows Live Toolbar)
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{AFA20D47-69C3-4030-8DF8-D37466E70F13}" = Apple Mobile Device Support
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}" = Adobe Setup
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{BA084E7C-8ABA-4670-BDE8-B85E689A5C1B}" = PC Connectivity Solution
"{BBF71276-E8DF-4D5E-8869-3397BF04CF1C}" = PhotoImpression
"{C3ABE126-2BB2-4246-BFE1-6797679B3579}" = LG USB Modem driver
"{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio 3
"{C679F9B9-C65D-4C65-BD6C-BF90B859E281}" = PC Camer@
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D0C73318-7B4A-4D16-A0C4-3B83F075EA88}" = Search Settings 1.2
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D1BB4446-AE9C-4256-9A7F-4D46604D2462}" = Adobe Setup
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D9D754A1-EAC5-406C-A28B-C49B1E846711}" = Windows Live Essentials
"{DC509FE5-1445-46C9-827C-6120429CB942}" = Windows Live Family Safety
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E42E07F5-5A90-4BA9-B55A-79FCF9EAF9B5}" = STK02N 2.3
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}" = Samsung PC Studio 3 USB Driver Installer
"{F084395C-40FB-4DB3-981C-B51E74E1E83D}" = Smart Menus (Windows Live Toolbar)
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F69E83CF-B440-43F8-89E6-6EA80712109B}" = Windows Live Communications Platform
"{F73A5B18-EB75-4B2C-B32D-9457576E2417}" = Windows Live Photo Gallery
"{FDD810CA-D5E3-40E9-AB7B-36440B0D41EF}" = Windows Live Sync
"{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9}" = Disc2Phone
"3DGroove" = 3D Groove Playback Engine
"6A630DCEC5EEC912115F2FF59D8C2C769798D930" = Windows Driver Package - Nokia Modem (10/12/2007 3.6)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Adobe_2ac78060bc5856b0c1cf873bb919b58" = Adobe Photoshop CS3
"Adobe_3e054d2218e7aa282c2369d939e58ff" = Adobe ExtendScript Toolkit 2
"Adobe_6c8e2cb4fd241c55406016127a6ab2e" = Adobe Color Common Settings
"Advanced SystemCare 3_is1" = Advanced SystemCare 3
"AVG7Uninstall" = AVG 7.5
"BearShare MediaBar" = MediaBar 2.0
"CCleaner" = CCleaner (remove only)
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Dress Up Rush" = Dress Up Rush
"DriverGuide DriverScan" = DriverGuide DriverScan
"ERUNT_is1" = ERUNT 1.1j
"EsetOnlineScanner" = ESET Online Scanner
"Fashion Dash™" = Fashion Dash™
"HijackThis" = HijackThis 2.0.2
"Hijackthis_is1" = Hijackthis 1.99.1
"HM Screensaver" = HM Screensaver 1.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ieSpell" = ieSpell 2.2.0 (build 647)
"Indeo® software" = Indeo® software
"InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"Jane's Hotel" = Jane's Hotel
"LimeWire" = LimeWire 4.12.15
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Messenger Plus! Live" = Messenger Plus! Live
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5" = Microsoft .NET Framework 3.5
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MsgPlus! Plugin" = Messenger Plus! 3
"Network Play System (Patching)" = Network Play System (Patching)
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"OnlineArmor_is1" = Online Armor 3.0
"PC Pitstop Driver Alert_is1" = PC Pitstop Driver Alert 1.0.0.13
"PC Pitstop Exterminate2_is1" = PC Pitstop Exterminate2 2.0
"PROR" = Microsoft Office Professional 2007 Trial
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SpongeBob Promo" = SpongeBob Promo Screen Saver
"SpywareBlaster_is1" = SpywareBlaster 4.2
"Total Image Converter_is1" = TotalImageConverter
"Total Image Slicer_is1" = ImageSlicer
"Wedding Dash® 2: Rings Around the World" = Wedding Dash® 2: Rings Around the World
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XviD" = XviD MPEG-4 Codec
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 19/04/2009 20:13:27 | Computer Name = 048919120306 | Source = MsiInstaller | ID = 11406
Description = Product: Microsoft Office Professional 2007 – Error 1406.Setup cannot
write the value Contexts to the registry key \Software\Microsoft\Office\12.0\User
Settings\Excel_Core\Create\Software\Microsoft\Internet Explorer\MenuExt\E&xport;
to Microsoft Excel. Verify that you have sufficient permissions to access the
registry or contact Microsoft Product Support Services (PSS) for assistance. For
information about how to contact PSS, seePSS10R.CHM.
Error - 19/04/2009 20:13:32 | Computer Name = 048919120306 | Source = MsiInstaller | ID = 1024
Description = Product: Microsoft Office Professional 2007 - Update 'Security Update
for Microsoft Office Excel 2007 (KB959997)' could not be installed. Error code
1603. Windows Installer can create logs to help troubleshoot issues with installing
software packages. Use the following link for instructions on turning on logging
support:
http://go.microsoft.com/fwlink/?LinkId=23127
Error - 20/04/2009 15:01:14 | Computer Name = 048919120306 | Source = MsiInstaller | ID = 11406
Description = Product: Microsoft Office Professional 2007 – Error 1406.Setup cannot
write the value to the registry key \Software\Microsoft\Office\12.0\User Settings\Excel_Core\Create\Software\Microsoft\Internet
Explorer\MenuExt\E&xport; to Microsoft Excel. Verify that you have sufficient permissions
to access the registry or contact Microsoft Product Support Services (PSS) for
assistance. For information about how to contact PSS, seePSS10R.CHM.
Error - 20/04/2009 15:01:19 | Computer Name = 048919120306 | Source = MsiInstaller | ID = 1024
Description = Product: Microsoft Office Professional 2007 - Update 'Security Update
for Microsoft Office Excel 2007 (KB959997)' could not be installed. Error code
1603. Windows Installer can create logs to help troubleshoot issues with installing
software packages. Use the following link for instructions on turning on logging
support:
http://go.microsoft.com/fwlink/?LinkId=23127
Error - 20/04/2009 19:07:24 | Computer Name = 048919120306 | Source = MsiInstaller | ID = 11406
Description = Product: Microsoft Office Professional 2007 – Error 1406.Setup cannot
write the value Contexts to the registry key \Software\Microsoft\Office\12.0\User
Settings\Excel_Core\Create\Software\Microsoft\Internet Explorer\MenuExt\E&xport;
to Microsoft Excel. Verify that you have sufficient permissions to access the
registry or contact Microsoft Product Support Services (PSS) for assistance. For
information about how to contact PSS, seePSS10R.CHM.
Error - 20/04/2009 19:07:29 | Computer Name = 048919120306 | Source = MsiInstaller | ID = 1024
Description = Product: Microsoft Office Professional 2007 - Update 'Security Update
for Microsoft Office Excel 2007 (KB959997)' could not be installed. Error code
1603. Windows Installer can create logs to help troubleshoot issues with installing
software packages. Use the following link for instructions on turning on logging
support:
http://go.microsoft.com/fwlink/?LinkId=23127
Error - 21/04/2009 15:01:46 | Computer Name = 048919120306 | Source = MsiInstaller | ID = 11406
Description = Product: Microsoft Office Professional 2007 – Error 1406.Setup cannot
write the value to the registry key \Software\Microsoft\Office\12.0\User Settings\Excel_Core\Create\Software\Microsoft\Internet
Explorer\MenuExt\E&xport; to Microsoft Excel. Verify that you have sufficient permissions
to access the registry or contact Microsoft Product Support Services (PSS) for
assistance. For information about how to contact PSS, seePSS10R.CHM.
Error - 21/04/2009 15:01:58 | Computer Name = 048919120306 | Source = MsiInstaller | ID = 1024
Description = Product: Microsoft Office Professional 2007 - Update 'Security Update
for Microsoft Office Excel 2007 (KB959997)' could not be installed. Error code
1603. Windows Installer can create logs to help troubleshoot issues with installing
software packages. Use the following link for instructions on turning on logging
support:
http://go.microsoft.com/fwlink/?LinkId=23127
Error - 21/04/2009 18:41:29 | Computer Name = 048919120306 | Source = MsiInstaller | ID = 11406
Description = Product: Microsoft Office Professional 2007 – Error 1406.Setup cannot
write the value Contexts to the registry key \Software\Microsoft\Office\12.0\User
Settings\Excel_Core\Create\Software\Microsoft\Internet Explorer\MenuExt\E&xport;
to Microsoft Excel. Verify that you have sufficient permissions to access the
registry or contact Microsoft Product Support Services (PSS) for assistance. For
information about how to contact PSS, seePSS10R.CHM.
Error - 21/04/2009 18:41:35 | Computer Name = 048919120306 | Source = MsiInstaller | ID = 1024
Description = Product: Microsoft Office Professional 2007 - Update 'Security Update
for Microsoft Office Excel 2007 (KB959997)' could not be installed. Error code
1603. Windows Installer can create logs to help troubleshoot issues with installing
software packages. Use the following link for instructions on turning on logging
support:
http://go.microsoft.com/fwlink/?LinkId=23127
[ System Events ]
Error - 19/04/2009 04:53:15 | Computer Name = 048919120306 | Source = Service Control Manager | ID = 7000
Description = The X4HSX32 service failed to start due to the following error: %%3
Error - 19/04/2009 15:01:59 | Computer Name = 048919120306 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Security Update for Microsoft Office Excel 2007 (KB959997).
Error - 19/04/2009 20:13:32 | Computer Name = 048919120306 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Security Update for Microsoft Office Excel 2007 (KB959997).
Error - 20/04/2009 05:38:28 | Computer Name = 048919120306 | Source = Service Control Manager | ID = 7000
Description = The X4HSX32 service failed to start due to the following error: %%3
Error - 20/04/2009 15:01:42 | Computer Name = 048919120306 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Security Update for Microsoft Office Excel 2007 (KB959997).
Error - 20/04/2009 19:07:29 | Computer Name = 048919120306 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Security Update for Microsoft Office Excel 2007 (KB959997).
Error - 21/04/2009 04:57:17 | Computer Name = 048919120306 | Source = Service Control Manager | ID = 7000
Description = The X4HSX32 service failed to start due to the following error: %%3
Error - 21/04/2009 15:02:20 | Computer Name = 048919120306 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Security Update for Microsoft Office Excel 2007 (KB959997).
Error - 21/04/2009 18:41:35 | Computer Name = 048919120306 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Security Update for Microsoft Office Excel 2007 (KB959997).
Error - 22/04/2009 04:52:33 | Computer Name = 048919120306 | Source = Service Control Manager | ID = 7000
Description = The X4HSX32 service failed to start due to the following error: %%3
< End of report >
