Hey, thank you so much for the quick reply. Should I warn the others that use this computer about their bank accounts and information? I don't think anyone but I have accessed their bank account from this computer recently, but I could be wrong. There was a purchase made from Amazon by someone else not that long ago as well. Should I tell them to take steps to protect their bank accounts, or was that a false alarm? Thank you!
Here is the OTListIt.txt
OTListIt logfile created on: 4/26/2009 9:57:03 AM - Run 1
OTListIt2 by OldTimer - Version 2.0.14.0 Folder = C:\Documents and Settings\Aaron Jefferson\Desktop
Windows XP Media Center Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1.99 Gb Total Physical Memory | 1.39 Gb Available Physical Memory | 69.98% Memory free
2.58 Gb Paging File | 2.11 Gb Available in Paging File | 81.69% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 144.33 Gb Total Space | 72.72 Gb Free Space | 50.39% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: FAMILYCOMP
Current User Name: Aaron Jefferson
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On
========== Processes (SafeList) ==========
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Grisoft\AVG Free\avgamsvr.exe (GRISOFT, s.r.o.)
PRC - C:\Program Files\Grisoft\AVG Free\avgupsvc.exe (GRISOFT, s.r.o.)
PRC - C:\Program Files\Grisoft\AVG Free\avgemc.exe (GRISOFT, s.r.o.)
PRC - C:\Program Files\Common Files\Command Software\dvpapi.exe (Command Software Systems, Inc.)
PRC - C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation)
PRC - C:\WINDOWS\eHome\ehSched.exe (Microsoft Corporation)
PRC - C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
PRC - C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\system32\libusbd-nt.exe (http://libusb-win32.sourceforge.net)
PRC - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
PRC - C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
PRC - C:\WINDOWS\system32\PnkBstrA.exe ()
PRC - C:\WINDOWS\System32\PAStiSvc.exe ()
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.)
PRC - C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
PRC - C:\WINDOWS\ehome\mcrdsvc.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\WINDOWS\ehome\ehtray.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\dla\tfswctrl.exe (Sonic Solutions)
PRC - C:\Program Files\Verizon\Servicepoint\VerizonServicepoint.exe (Verizon)
PRC - C:\Program Files\Yahoo!\browser\ybrwicon.exe (Yahoo!, Inc.)
PRC - C:\WINDOWS\eHome\ehmsas.exe (Microsoft Corporation)
PRC - C:\Program Files\Grisoft\AVG Free\avgcc.exe (GRISOFT, s.r.o.)
PRC - C:\Program Files\Yahoo!\browser\ycommon.exe (Yahoo!, Inc.)
PRC - C:\WINDOWS\PixArt\PAC7311\Monitor.exe (PixArt Imaging Incorporation)
PRC - C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
PRC - C:\Program Files\Verizon\McciTrayApp.exe (Motive Communications, Inc.)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\MySpace\IM\MySpaceIM.exe ()
PRC - C:\Program Files\AIM6\aim6.exe (AOL LLC)
PRC - C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe (Microsoft Corporation)
PRC - C:\Program Files\Digital Line Detect\DLG.exe (BVRP Software)
PRC - C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Program Files\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe (Viewpoint Corporation)
PRC - C:\Program Files\AIM6\aolsoftware.exe (AOL LLC)
PRC - C:\WINDOWS\system32\igfxsrvc.exe (Intel Corporation)
PRC - C:\Documents and Settings\Aaron Jefferson\Desktop\OTListIt2.exe (OldTimer Tools)
========== Win32 Services (SafeList) ==========
SRV - (aawservice [Auto | Stopped]) – File not found
SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (Avg7Alrt [Auto | Running]) – C:\Program Files\Grisoft\AVG Free\avgamsvr.exe (GRISOFT, s.r.o.)
SRV - (Avg7UpdSvc [Auto | Running]) – C:\Program Files\Grisoft\AVG Free\avgupsvc.exe (GRISOFT, s.r.o.)
SRV - (AVGEMS [Auto | Running]) – C:\Program Files\Grisoft\AVG Free\avgemc.exe (GRISOFT, s.r.o.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (DSBrokerService [On_Demand | Stopped]) – C:\Program Files\DellSupport\brkrsvc.exe ()
SRV - (dvpapi [Auto | Running]) – C:\Program Files\Common Files\Command Software\dvpapi.exe (Command Software Systems, Inc.)
SRV - (ehRecvr [Auto | Running]) – C:\WINDOWS\eHome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [Auto | Running]) – C:\WINDOWS\eHome\ehSched.exe (Microsoft Corporation)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) – c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (gupdate1c9b8c3899ec20a [Auto | Stopped]) – C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (gusvc [Auto | Stopped]) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (helpsvc [Auto | Running]) – C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (idsvc [Unknown | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (JavaQuickStarterService [Auto | Running]) – C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (Lavasoft Ad-Aware Service [Auto | Running]) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (libusbd [Auto | Running]) – C:\WINDOWS\system32\libusbd-nt.exe (http://libusb-win32.sourceforge.net)
SRV - (McrdSvc [Auto | Running]) – C:\WINDOWS\ehome\mcrdsvc.exe (Microsoft Corporation)
SRV - (MDM [Auto | Running]) – C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
SRV - (MHN [On_Demand | Stopped]) – C:\WINDOWS\System32\mhn.dll (Microsoft Corporation)
SRV - (NetSvc [On_Demand | Stopped]) – C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe (Intel® Corporation)
SRV - (NetTcpPortSharing [Disabled | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (NVSvc [Auto | Running]) – C:\WINDOWS\system32\nvsvc32.exe (NVIDIA Corporation)
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (PnkBstrA [Auto | Running]) – C:\WINDOWS\system32\PnkBstrA.exe ()
SRV - (RP_FWS [Auto | Stopped]) – File not found
SRV - (STI Simulator [Auto | Running]) – C:\WINDOWS\System32\PAStiSvc.exe ()
SRV - (UserAccess7 [Auto | Running]) – C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.)
SRV - (Viewpoint Manager Service [Auto | Running]) – C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (Afc [On_Demand | Running]) – C:\WINDOWS\system32\drivers\Afc.sys (Arcsoft, Inc.)
DRV - (AliIde [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (amdagp [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (asc [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550 [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (Avg7Core [System | Running]) – C:\WINDOWS\System32\Drivers\avg7core.sys (GRISOFT, s.r.o.)
DRV - (Avg7RsW [System | Running]) – C:\WINDOWS\System32\Drivers\avg7rsw.sys (GRISOFT, s.r.o.)
DRV - (Avg7RsXP [System | Running]) – C:\WINDOWS\System32\Drivers\avg7rsxp.sys (GRISOFT, s.r.o.)
DRV - (AvgClean [System | Running]) – C:\WINDOWS\System32\Drivers\avgclean.sys (GRISOFT, s.r.o.)
DRV - (AvgTdi [Auto | Running]) – C:\WINDOWS\System32\Drivers\avgtdi.sys (GRISOFT, s.r.o.)
DRV - (CmdIde [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (cnmpar21 [Auto | Running]) – C:\BJPrinter\CNMWINDOWS\Canon S300 Installer\Inst\cnmpar21.sys (CANON INC.)
DRV - (CSS DVP [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\css-dvp.sys (Command Software Systems, Inc.)
DRV - (dac2w2k [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (drvmcdb [Boot | Running]) – C:\WINDOWS\system32\drivers\drvmcdb.sys (Sonic Solutions)
DRV - (drvnddm [Auto | Running]) – C:\WINDOWS\system32\drivers\drvnddm.sys (Sonic Solutions)
DRV - (DSproct [On_Demand | Stopped]) – C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys (Gteko Ltd.)
DRV - (dsunidrv [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\dsunidrv.sys (Gteko Ltd.)
DRV - (E100B [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\e100b325.sys (Intel Corporation)
DRV - (es1371 [On_Demand | Running]) – C:\WINDOWS\system32\drivers\es1371mp.sys (Creative Technology Ltd.)
DRV - (Freedom [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\FREEDOM.SYS (Zero-Knowledge Systems Inc.)
DRV - (gameenum [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\gameenum.sys (Microsoft Corporation)
DRV - (hamachi_oem [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\gan_adapter.sys (Applied Networking Inc.)
DRV - (HDAudBus [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\HDAudBus.sys (Windows ® Server 2003 DDK provider)
DRV - (HSFHWBS2 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys (Conexant Systems, Inc.)
DRV - (HSF_DP [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\HSF_DP.sys (Conexant Systems, Inc.)
DRV - (ialm [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\ialmnt5.sys (Intel Corporation)
DRV - (Lbd [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (libusb0 [On_Demand | Running]) – C:\WINDOWS\system32\drivers\libusb0.sys ()
DRV - (mdmxsdk [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys (Conexant)
DRV - (MODEMCSA [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (mraid35x [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (MREMPR5 [On_Demand | Stopped]) – C:\Program Files\Common Files\Motive\MREMPR5.sys (Motive, Inc.)
DRV - (MRENDIS5 [On_Demand | Stopped]) – C:\Program Files\Common Files\Motive\MRENDIS5.sys (Motive, Inc.)
DRV - (nv [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\nv4_mini.sys (NVIDIA Corporation)
DRV - (PAC7311 [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\PA707UCM.SYS (PixArt Imaging Inc.)
DRV - (Point32 [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\point32.sys (Microsoft Corporation)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (ql1080 [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql12160 [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1280 [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (SDDMI2 [On_Demand | Stopped]) – C:\WINDOWS\system32\DDMI2.sys (Gteko Ltd.)
DRV - (Secdrv [Auto | Running]) – C:\WINDOWS\system32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (sfdrv01 [Boot | Running]) – C:\WINDOWS\System32\drivers\sfdrv01.sys (Protection Technology (StarForce))
DRV - (sfhlp02 [Boot | Running]) – C:\WINDOWS\System32\drivers\sfhlp02.sys (Protection Technology (StarForce))
DRV - (sfsync04 [Boot | Running]) – C:\WINDOWS\System32\drivers\sfsync04.sys (Protection Technology (StarForce))
DRV - (sisagp [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (Sparrow [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (sptd [Boot | Running]) – C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (sscdbhk5 [System | Running]) – C:\WINDOWS\system32\drivers\sscdbhk5.sys (Sonic Solutions)
DRV - (ssrtln [System | Running]) – C:\WINDOWS\system32\drivers\ssrtln.sys (Sonic Solutions)
DRV - (STHDA [On_Demand | Running]) – C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (symc810 [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (symc8xx [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (sym_hi [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (sym_u3 [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (tfsnboio [Auto | Running]) – C:\WINDOWS\system32\dla\tfsnboio.sys (Sonic Solutions)
DRV - (tfsncofs [Auto | Running]) – C:\WINDOWS\system32\dla\tfsncofs.sys (Sonic Solutions)
DRV - (tfsndrct [Auto | Running]) – C:\WINDOWS\system32\dla\tfsndrct.sys (Sonic Solutions)
DRV - (tfsndres [Auto | Running]) – C:\WINDOWS\system32\dla\tfsndres.sys (Sonic Solutions)
DRV - (tfsnifs [Auto | Running]) – C:\WINDOWS\system32\dla\tfsnifs.sys (Sonic Solutions)
DRV - (tfsnopio [Auto | Running]) – C:\WINDOWS\system32\dla\tfsnopio.sys (Sonic Solutions)
DRV - (tfsnpool [Auto | Running]) – C:\WINDOWS\system32\dla\tfsnpool.sys (Sonic Solutions)
DRV - (tfsnudf [Auto | Running]) – C:\WINDOWS\system32\dla\tfsnudf.sys (Sonic Solutions)
DRV - (tfsnudfa [Auto | Running]) – C:\WINDOWS\system32\dla\tfsnudfa.sys (Sonic Solutions)
DRV - (ultra [Disabled | Stopped]) – C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (usbaudio [On_Demand | Stopped]) – C:\WINDOWS\system32\drivers\usbaudio.sys (Microsoft Corporation)
DRV - (winachsf [On_Demand | Stopped]) – C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys (Conexant Systems, Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.microsoft.com/isapi/redir.dll?p…&ar;=msnhome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.microsoft.com/isapi/redir.dll?p…ER}&ar;=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch =
http://red.clientapps.yahoo.com/customize/…/search/ie.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL =
http://www.google.com/ig/dell?hl=en&client;=dell
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page =
http://www.google.com/ig/dell?hl=en&client;=dell
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.google.com/ig/dell?hl=en&client;=dell
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL =
http://www.google.com/search?q={searchTerm…tf8&oe;=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.microsoft.com/isapi/redir.dll?p…&ar;=msnhome
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.2
FF - prefs.js..extensions.enabledItems: eastasian@eunheui:1.1.2
FF - prefs.js..extensions.enabledItems: [removed]:1.0.2
FF - prefs.js..extensions.enabledItems: {ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}:2.4
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.071303000004
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: [removed]:2.2
FF - prefs.js..extensions.enabledItems: {f701c26a-479a-4724-b4f1-870db12f063c}:[removed]
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.1b3
FF - HKLM\software\mozilla\Firefox\extensions\\[removed]: C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2008/12/01 20:37:53 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.8\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS [2009/03/29 14:11:02 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.8\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS [2009/03/28 22:02:56 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.1b3\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX 3.1 BETA 3\COMPONENTS [2009/04/07 01:07:47 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.1b3\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX 3.1 BETA 3\PLUGINS [2009/04/01 14:46:27 | 00,000,000 | —D | M]
[2008/09/07 10:38:18 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Extensions
[2008/09/07 10:38:18 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/04/26 02:00:21 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions
[2008/06/18 15:15:13 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}
[2008/09/13 13:19:10 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\{66871bd1-5ba2-4739-b485-2a15f5969bd8}
[2009/04/01 14:47:24 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009/03/06 14:53:39 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\{BF32D2C8-9C75-404b-ACF4-880DB4679236}
[2008/09/13 13:20:29 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\{c1dffba0-628e-11d9-9669-0800200c9a66}
[2009/03/06 14:54:47 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\{d62e0de0-401b-11dd-ae16-0800200c9a66}
[2009/04/01 14:47:22 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}
[2009/04/01 14:47:24 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\{f701c26a-479a-4724-b4f1-870db12f063c}
[2009/03/06 14:53:28 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\[removed]
[2008/10/21 23:26:10 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\eastasian@eunheui
[2008/07/29 12:16:33 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\[removed]
[2008/10/26 14:07:12 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\[removed]
[2009/04/03 17:07:10 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\[removed]
[2008/01/19 18:25:38 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\[removed]
[2008/10/26 15:03:03 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\mozilla\Firefox\Profiles\8xecet85.default\extensions\[removed]
[2008/12/12 14:23:54 | 00,002,158 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Application Data\Mozilla\FireFox\Profiles\8xecet85.default\searchplugins\MySpace.xml
[2009/04/05 09:10:07 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/03/28 22:02:56 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2007/06/30 11:36:24 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
[2008/12/01 20:38:06 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
[2009/03/28 22:02:49 | 00,023,032 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/03/28 22:02:49 | 00,134,648 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/03/07 00:18:21 | 00,001,394 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2009/03/07 00:18:21 | 00,002,193 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2009/03/07 00:18:21 | 00,001,534 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2009/03/07 00:18:21 | 00,002,343 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009/03/07 00:18:21 | 00,001,706 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/03/07 00:18:21 | 00,001,178 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2009/03/07 00:18:21 | 00,000,792 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo.xml
O1 HOSTS File: (698 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll (Google)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {5D956A61-05E7-427B-A2B1-BF32FB18B1BE} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - Reg Error: Key error. File not found
O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
O4 - HKLM..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP (GRISOFT, s.r.o.)
O4 - HKLM..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe (Sonic Solutions)
O4 - HKLM..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe (Microsoft Corporation)
O4 - HKLM..\Run: [hcsystray] C:\Program Files\Kuma Games\hcsystray\hc_tray.exe File not found
O4 - HKLM..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" (Microsoft Corporation)
O4 - HKLM..\Run: [Monitor] C:\WINDOWS\PixArt\PAC7311\Monitor.exe (PixArt Imaging Incorporation)
O4 - HKLM..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall File not found
O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /install ()
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Verizon_McciTrayApp] C:\Program Files\Verizon\McciTrayApp.exe (Motive Communications, Inc.)
O4 - HKLM..\Run: [VerizonServicepoint.exe] C:\Program Files\Verizon\Servicepoint\VerizonServicepoint.exe (Verizon)
O4 - HKLM..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe" File not found
O4 - HKLM..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe (Yahoo!, Inc.)
O4 - HKCU..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp (AOL LLC)
O4 - HKCU..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background File not found
O4 - HKCU..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe ()
O4 - HKCU..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent (Valve Corporation)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\Aaron Jefferson\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Documents and Settings\Aaron Jefferson\Start Menu\Programs\Startup\PowerReg Scheduler.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe (BVRP Software)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000 File not found
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: 81 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED}
https://activatemydsl.verizon.net/sdcCommon…DSL/tgctlcm.cab (Support.com Configuration Class)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files/Jewel%20Quest%203/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {25365FF3-2746-4230-9DA7-163CCA318309}
http://inst.c-wss.com/n042p/EN/install/gtdownlr.cab (Automatic Driver Installation Control)
O16 - DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} http://das.microsoft.com/activate/cab/x86/…tail/DASAct.cab (DASWebDownload Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Java Plug-in 1.4.2_03)
O16 - DPF: {CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Java Plug-in 1.4.2_13)
O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}
http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_10)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files/Jewel%20Quest%203/Images/armhelper.ocx (ArmHelper Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 () - file:///C:/DOCUME~1/AARONJ~1/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.jpg
O24 - Desktop Components:1 (My Current Home Page) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - Autorun File - C:\AUTOEXEC.BAT () - [ NTFS ]
O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell\AutoRun\command - "" = E:\setup.exe – File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
========== Files/Folders - Created Within 30 Days ==========
[2009/04/26 09:55:33 | 00,501,248 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Aaron Jefferson\Desktop\OTListIt2.exe
[2009/04/26 09:54:07 | 00,000,000 | —D | C] – C:\HostsXpert 4.2 - Hosts File Manager
[2009/04/26 09:53:51 | 00,353,485 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\HostsXpert.zip
[2009/04/26 09:28:24 | 00,000,000 | —D | C] – C:\Documents and Settings\Aaron Jefferson\Desktop\HJT
[2009/04/26 07:20:12 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/04/26 07:19:37 | 00,812,344 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\Aaron Jefferson\Desktop\HJTInstall.exe
[2009/04/26 02:09:58 | 00,000,000 | —D | C] – C:\Documents and Settings\Aaron Jefferson\Application Data\Malwarebytes
[2009/04/26 02:09:54 | 00,015,504 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/04/26 02:09:54 | 00,000,696 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/04/26 02:09:52 | 00,038,496 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/04/26 02:09:50 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/04/26 02:09:50 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/04/26 02:09:00 | 02,967,800 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\Aaron Jefferson\Desktop\mbam-setup.exe
[2009/04/25 01:26:33 | 00,000,472 | —- | C] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/04/25 01:26:17 | 00,064,160 | —- | C] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2009/04/25 01:24:26 | 00,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[2009/04/25 01:24:21 | 00,000,867 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2009/04/25 01:24:13 | 00,000,000 | —D | C] – C:\Program Files\Lavasoft
[2009/04/23 05:06:03 | 01,409,023 | -HS- | C] () – C:\WINDOWS\System32\ogekivir.ini
[2009/04/23 04:54:24 | 06,228,325 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\1302421.mp3
[2009/04/23 04:28:38 | 03,496,752 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\2598788.mp3
[2009/04/17 01:45:05 | 00,039,936 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\sources.doc
[2009/04/17 01:25:06 | 04,110,447 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\658151.mp3
[2009/04/17 00:18:42 | 09,463,128 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\2807676.mp3
[2009/04/16 21:14:10 | 00,401,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcss.dll
[2009/04/16 21:14:10 | 00,284,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pdh.dll
[2009/04/16 21:14:10 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\colbact.dll
[2009/04/16 21:14:10 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sc.exe
[2009/04/16 21:14:09 | 00,473,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fastprox.dll
[2009/04/16 21:14:09 | 00,227,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiprvse.exe
[2009/04/16 21:14:09 | 00,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\services.exe
[2009/04/16 21:14:08 | 00,715,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntdll.dll
[2009/04/16 21:14:08 | 00,617,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\advapi32.dll
[2009/04/16 21:13:39 | 00,215,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wordpad.exe
[2009/04/16 01:35:06 | 00,651,776 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\howgayisthis.ppt
[2009/04/14 20:53:55 | 00,051,200 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\ali baba.doc
[2009/04/14 14:50:36 | 00,012,800 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\summary.doc
[2009/04/12 22:04:56 | 34,874,776 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\FretsOnFire-1.3.110-win32.exe
[2009/04/12 18:54:24 | 00,016,018 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\sources.odt
[2009/04/12 18:54:14 | 00,019,854 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\ali baba.odt
[2009/04/11 02:12:16 | 00,007,168 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\My Documents\2008 Tax Spreadsheet.xlt
[2009/04/10 01:52:52 | 00,024,261 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\skjkjkjkljl;kj;khkjgkjhgjkhhjfhgfg.odt
[2009/04/10 01:52:47 | 00,021,577 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\spech prop.odt
[2009/04/10 01:52:30 | 00,048,128 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\strat outline.doc
[2009/04/09 02:44:51 | 00,022,575 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\stuf.odt
[2009/04/08 23:31:17 | 00,001,836 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2009/04/08 23:30:32 | 00,000,900 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009/04/08 23:29:33 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Google Updater
[2009/04/08 23:29:32 | 00,000,868 | —- | C] () – C:\WINDOWS\tasks\Google Software Updater.job
[2009/04/07 11:34:12 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir
[2009/04/07 11:31:59 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusb.dll
[2009/04/07 11:31:54 | 00,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\usbscan.sys
[2009/04/07 11:31:54 | 00,015,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbscan.sys
[2009/04/07 11:31:51 | 00,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ptpusd.dll
[2009/04/03 21:07:10 | 00,009,216 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\msong.doc
[2009/04/03 20:31:39 | 00,000,000 | —D | C] – C:\Documents and Settings\Aaron Jefferson\Desktop\megan music
[2009/04/03 17:07:33 | 00,000,000 | —D | C] – C:\Documents and Settings\Aaron Jefferson\Application Data\Move Networks
[2009/04/01 16:12:44 | 00,000,864 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk
[2009/04/01 16:12:10 | 00,000,000 | —D | C] – C:\Documents and Settings\Aaron Jefferson\Application Data\OpenOffice.org
[2009/04/01 16:11:45 | 00,000,905 | —- | C] () – C:\Documents and Settings\All Users\Desktop\OpenOffice.org 3.0.lnk
[2009/04/01 16:10:49 | 00,000,000 | —D | C] – C:\Program Files\JRE
[2009/04/01 16:10:44 | 00,000,000 | —D | C] – C:\Program Files\OpenOffice.org 3
[2009/04/01 16:09:12 | 00,000,000 | —D | C] – C:\Documents and Settings\Aaron Jefferson\Desktop\OpenOffice.org 3.0 (en-US) Installation Files
[2009/04/01 15:44:06 | 00,000,000 | —D | C] – C:\Documents and Settings\Aaron Jefferson\My Documents\Downloads
[2009/04/01 14:46:29 | 00,001,705 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox 3.1 Beta 3.lnk
[2009/04/01 14:46:26 | 00,000,000 | —D | C] – C:\Program Files\Mozilla Firefox 3.1 Beta 3
[2009/03/31 22:11:30 | 00,000,000 | —D | C] – C:\Documents and Settings\Aaron Jefferson\Local Settings\Application Data\PCHealth
[2009/03/29 23:43:03 | 00,097,280 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\brochure.doc
[2009/03/29 15:28:15 | 00,014,128 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\PC.docx
[2009/03/29 14:37:40 | 00,000,000 | —D | C] – C:\Documents and Settings\Aaron Jefferson\Desktop\New Folder
[2009/03/28 00:40:57 | 00,012,185 | —- | C] () – C:\Documents and Settings\Aaron Jefferson\Desktop\skjkjkjkljl;kj;khkjgkjhgjkhhjfhgfg.docx
[2009/03/27 21:46:48 | 00,000,000 | —D | C] – C:\Documents and Settings\Aaron Jefferson\Desktop\cool tha
[2009/01/24 17:06:14 | 00,089,088 | -HS- | C] () – C:\WINDOWS\System32\natapafu.dll
[2009/01/23 17:06:05 | 00,089,088 | -HS- | C] () – C:\WINDOWS\System32\merenosu.dll
[2009/01/23 05:05:52 | 00,089,600 | -HS- | C] () – C:\WINDOWS\System32\jorutizu.dll
[2009/01/14 20:02:13 | 00,033,792 | —- | C] () – C:\WINDOWS\System32\drivers\libusb0.sys
[2008/12/11 16:37:44 | 00,042,320 | —- | C] () – C:\WINDOWS\System32\xfcodec.dll
[2008/12/07 01:05:58 | 00,000,262 | —- | C] () – C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2008/07/29 00:58:19 | 00,000,008 | —- | C] () – C:\WINDOWS\Dotmaze.INI
[2008/07/07 17:30:48 | 00,717,296 | —- | C] () – C:\WINDOWS\System32\drivers\sptd.sys
[2008/07/01 13:38:06 | 00,000,324 | —- | C] () – C:\WINDOWS\game.ini
[2008/04/28 12:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/04/28 12:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/04/28 12:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/04/28 12:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/04/28 12:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/04/28 12:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelKorean.dll
[2008/04/28 12:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/04/28 12:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelGerman.dll
[2008/04/28 12:11:16 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\AgCPanelFrench.dll
[2008/04/09 20:45:15 | 00,000,632 | —- | C] () – C:\WINDOWS\CoDUO.INI
[2008/04/09 19:40:29 | 00,000,632 | —- | C] () – C:\WINDOWS\CoD.INI
[2008/03/21 16:30:08 | 03,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2008/01/10 08:16:20 | 00,159,839 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2008/01/10 08:15:30 | 00,755,027 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2007/11/15 20:29:35 | 00,005,632 | —- | C] () – C:\WINDOWS\System32\CNMVS38.DLL
[2007/11/15 20:29:01 | 00,000,272 | —- | C] () – C:\WINDOWS\_delis32.ini
[2007/10/01 21:05:42 | 00,000,047 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2007/10/01 20:35:47 | 00,000,518 | —- | C] () – C:\WINDOWS\System32\SP7311.INI
[2007/09/22 21:12:19 | 00,000,399 | —- | C] () – C:\WINDOWS\AudioConverter.INI
[2007/09/04 12:56:10 | 00,164,352 | —- | C] () – C:\WINDOWS\System32\unrar.dll
[2007/05/11 19:52:32 | 00,022,328 | —- | C] () – C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2007/04/03 20:27:17 | 00,000,600 | —- | C] () – C:\WINDOWS\Quake.INI
[2007/03/22 21:07:47 | 00,000,436 | —- | C] () – C:\WINDOWS\cncscore.ini
[2006/12/01 22:08:03 | 00,006,048 | —- | C] () – C:\WINDOWS\System32\MCC16.dll
[2006/08/17 10:50:28 | 00,000,084 | —- | C] () – C:\WINDOWS\galaxy.ini
[2006/08/03 23:12:03 | 00,000,070 | —- | C] () – C:\WINDOWS\21DC7EF8.ini
[2006/07/31 19:42:43 | 00,065,536 | —- | C] () – C:\WINDOWS\System32\YCRWin32.dll
[2006/07/17 18:37:57 | 00,056,832 | —- | C] () – C:\WINDOWS\System32\iyvu9_32.dll
[2006/06/20 08:44:33 | 00,000,029 | —- | C] () – C:\WINDOWS\Battle.ini
[2006/06/20 00:39:36 | 00,000,018 | —- | C] () – C:\WINDOWS\gfact.ini
[2006/06/05 19:15:14 | 00,000,950 | —- | C] () – C:\WINDOWS\EntPack.ini
[2006/06/01 18:22:00 | 01,724,416 | —- | C] () – C:\WINDOWS\System32\nvwdmcpl.dll
[2006/06/01 18:22:00 | 01,507,328 | —- | C] () – C:\WINDOWS\System32\nview.dll
[2006/06/01 18:22:00 | 01,101,824 | —- | C] () – C:\WINDOWS\System32\nvwimg.dll
[2006/06/01 18:22:00 | 00,581,632 | —- | C] () – C:\WINDOWS\System32\nvhwvid.dll
[2006/06/01 18:22:00 | 00,466,944 | —- | C] () – C:\WINDOWS\System32\nvshell.dll
[2006/06/01 18:22:00 | 00,286,720 | —- | C] () – C:\WINDOWS\System32\nvnt4cpl.dll
[2006/05/26 19:29:01 | 00,000,029 | —- | C] () – C:\WINDOWS\atid.ini
[2006/05/26 09:29:14 | 00,005,120 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2006/04/16 13:31:46 | 00,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006/04/03 08:26:36 | 00,000,547 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll.manifest
[2006/03/01 18:49:08 | 00,006,686 | -HS- | C] () – C:\WINDOWS\System32\KGyGaAvL.sys
[2006/03/01 18:49:08 | 00,000,152 | RHS- | C] () – C:\WINDOWS\System32\47CEF6479A.sys
[2006/03/01 18:42:43 | 00,000,924 | —- | C] () – C:\WINDOWS\SIERRA.INI
[2006/03/01 18:17:48 | 00,069,632 | R— | C] () – C:\WINDOWS\System32\xmltok.dll
[2006/03/01 18:17:48 | 00,036,864 | R— | C] () – C:\WINDOWS\System32\xmlparse.dll
[2006/02/19 13:47:04 | 00,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2006/02/19 13:37:29 | 00,000,190 | —- | C] () – C:\WINDOWS\wininit.ini
[2006/02/19 13:13:04 | 00,000,392 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2005/08/16 06:37:24 | 00,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2005/08/16 06:18:43 | 00,000,807 | —- | C] () – C:\WINDOWS\win.ini
[2005/08/16 06:18:41 | 00,000,231 | —- | C] () – C:\WINDOWS\system.ini
[2005/08/05 16:01:54 | 00,235,008 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2005/04/09 19:04:54 | 00,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2004/12/07 23:21:10 | 00,065,536 | —- | C] () – C:\WINDOWS\System32\xfire_lsp_10650.dll
[2002/10/03 15:42:27 | 00,000,034 | —- | C] () – C:\WINDOWS\Q3version.ini
[2002/03/13 18:46:46 | 00,053,248 | R— | C] () – C:\WINDOWS\System32\zlib.dll
========== Files - Modified Within 30 Days ==========
[22 C:\WINDOWS\System32\*.tmp files]
[4 C:\WINDOWS\*.tmp files]
[2009/04/26 09:55:34 | 00,501,248 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Aaron Jefferson\Desktop\OTListIt2.exe
[2009/04/26 09:53:52 | 00,353,485 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\HostsXpert.zip
[2009/04/26 09:52:24 | 00,051,200 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\ali baba.doc
[2009/04/26 08:04:26 | 00,000,900 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009/04/26 07:19:38 | 00,812,344 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\Aaron Jefferson\Desktop\HJTInstall.exe
[2009/04/26 07:15:03 | 00,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/04/26 07:14:56 | 00,199,342 | —- | M] () – C:\WINDOWS\System32\nvapps.xml
[2009/04/26 07:14:42 | 00,000,868 | —- | M] () – C:\WINDOWS\tasks\Google Software Updater.job
[2009/04/26 07:14:26 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/04/26 07:14:23 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/04/26 07:14:19 | 21,371,49440 | -HS- | M] () – C:\hiberfil.sys
[2009/04/26 07:12:33 | 00,011,168 | -H– | M] () – C:\WINDOWS\System32\fotajime
[2009/04/26 02:09:54 | 00,000,696 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/04/26 02:09:06 | 02,967,800 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\Aaron Jefferson\Desktop\mbam-setup.exe
[2009/04/25 15:37:27 | 00,046,592 | -HS- | M] () – C:\WINDOWS\System32\sadeyoli.exe
[2009/04/25 02:42:25 | 00,039,936 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\sources.doc
[2009/04/25 01:26:33 | 00,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/04/25 01:26:07 | 00,015,688 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2009/04/25 01:25:54 | 00,064,160 | —- | M] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2009/04/25 01:24:21 | 00,000,867 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2009/04/24 18:30:00 | 00,000,370 | —- | M] () – C:\WINDOWS\tasks\McAfee.com Scan for Viruses - My Computer (PIMPCOMP-Aaron Jefferson).job
[2009/04/24 17:06:15 | 00,089,088 | -HS- | M] () – C:\WINDOWS\System32\natapafu.dll
[2009/04/24 17:06:14 | 00,047,104 | -HS- | M] () – C:\WINDOWS\System32\hizudenu.exe
[2009/04/23 17:06:06 | 00,089,088 | -HS- | M] () – C:\WINDOWS\System32\merenosu.dll
[2009/04/23 07:54:12 | 06,228,325 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\1302421.mp3
[2009/04/23 05:27:23 | 01,409,023 | -HS- | M] () – C:\WINDOWS\System32\ogekivir.ini
[2009/04/23 05:05:53 | 00,089,600 | -HS- | M] () – C:\WINDOWS\System32\jorutizu.dll
[2009/04/23 04:28:41 | 03,496,752 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\2598788.mp3
[2009/04/23 00:54:35 | 04,110,447 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\658151.mp3
[2009/04/20 01:46:37 | 00,019,854 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\ali baba.odt
[2009/04/18 20:51:42 | 02,120,120 | -H– | M] () – C:\Documents and Settings\Aaron Jefferson\Local Settings\Application Data\IconCache.db
[2009/04/17 03:15:19 | 00,528,784 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/04/17 03:15:19 | 00,445,870 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2009/04/17 03:15:19 | 00,072,824 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2009/04/17 03:10:54 | 00,388,000 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/04/17 03:04:04 | 00,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2009/04/17 01:43:25 | 00,016,018 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\sources.odt
[2009/04/17 01:00:07 | 00,651,776 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\howgayisthis.ppt
[2009/04/17 00:18:46 | 09,463,128 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\2807676.mp3
[2009/04/14 14:50:38 | 00,012,800 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\summary.doc
[2009/04/12 22:06:50 | 34,874,776 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\FretsOnFire-1.3.110-win32.exe
[2009/04/11 02:12:19 | 00,007,168 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\My Documents\2008 Tax Spreadsheet.xlt
[2009/04/10 08:52:14 | 00,048,128 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\strat outline.doc
[2009/04/10 01:52:53 | 00,024,261 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\skjkjkjkljl;kj;khkjgkjhgjkhhjfhgfg.odt
[2009/04/10 01:52:47 | 00,021,577 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\spech prop.odt
[2009/04/09 02:44:51 | 00,022,575 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\stuf.odt
[2009/04/08 23:31:17 | 00,001,836 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2009/04/07 11:34:10 | 00,000,376 | —- | M] () – C:\WINDOWS\ODBC.INI
[2009/04/06 15:32:54 | 00,038,496 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/04/06 15:32:46 | 00,015,504 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/04/05 09:48:40 | 00,009,216 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\msong.doc
[2009/04/03 19:41:20 | 00,103,128 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/04/01 16:14:21 | 00,012,642 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\Chuck Norris.docx
[2009/04/01 16:13:54 | 00,014,128 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\PC.docx
[2009/04/01 16:12:44 | 00,000,864 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk
[2009/04/01 16:11:45 | 00,000,905 | —- | M] () – C:\Documents and Settings\All Users\Desktop\OpenOffice.org 3.0.lnk
[2009/04/01 14:55:35 | 00,000,807 | —- | M] () – C:\WINDOWS\win.ini
[2009/04/01 14:46:29 | 00,001,705 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox 3.1 Beta 3.lnk
[2009/03/29 23:43:03 | 00,097,280 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\brochure.doc
[2009/03/29 15:27:58 | 00,012,185 | —- | M] () – C:\Documents and Settings\Aaron Jefferson\Desktop\skjkjkjkljl;kj;khkjgkjhgjkhhjfhgfg.docx
========== LOP Check ==========
[2009/04/26 02:09:58 | 00,000,000 | RH-D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data
[2008/04/06 12:27:24 | 00,000,000 | -HSD | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\.#
[2008/06/13 11:17:59 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\7Wonders
[2009/02/15 02:18:20 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\acccore
[2009/04/10 22:49:37 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Adobe
[2007/07/26 14:35:04 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\AdobeUM
[2007/12/13 19:49:52 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Apple Computer
[2007/10/01 21:23:01 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\ArcSoft
[2007/12/29 18:00:11 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Avernum 4 Saved Games
[2009/04/23 14:40:41 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\AVG7
[2008/07/13 19:00:13 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Bioshock
[2006/12/29 14:50:09 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\BitTorrent
[2007/05/13 17:15:32 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Command & Conquer 3 Tiberium Wars Demo
[2006/04/12 20:30:51 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Corel
[2006/03/01 18:49:26 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Corel Photo Album
[2008/02/28 23:24:04 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\CyberLink
[2006/03/01 23:02:10 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Earthlink
[2006/03/01 22:57:11 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\EarthLink Toolbar
[2006/07/04 03:13:25 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\FileOpen
[2009/02/13 21:48:31 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\FMZilla
[2006/08/16 18:10:10 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Gearbox Software
[2006/12/03 19:55:12 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Google
[2007/04/08 20:41:13 | 00,000,000 | -H-D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Gtek
[2008/09/17 21:40:50 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Haihaisoft Universal Player
[2006/03/17 00:36:15 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Help
[2005/08/16 06:50:20 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Identities
[2008/11/16 21:04:58 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\iWin
[2006/10/17 20:47:00 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Lavasoft
[2006/02/28 19:38:54 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Leadertech
[2006/09/23 23:20:13 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Macromedia
[2009/04/26 02:09:58 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Malwarebytes
[2006/04/14 15:51:35 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\McAfee.com Personal Firewall
[2009/04/01 15:22:39 | 00,000,000 | –SD | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Microsoft
[2008/11/26 16:21:37 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Motive
[2009/04/06 21:44:05 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Move Networks
[2008/09/07 10:38:18 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Mozilla
[2008/07/13 01:57:25 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\My Games
[2007/05/02 18:37:03 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\MySpace
[2009/02/23 14:30:30 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Neverball
[2007/02/25 19:00:41 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\OpenArena
[2009/04/01 16:12:10 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\OpenOffice.org
[2009/02/06 17:44:12 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\OverDrive
[2006/04/01 13:36:21 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\PlayFirst
[2008/05/17 21:48:17 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\RadialPoint
[2007/05/13 00:45:13 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\SecondLife
[2006/09/24 00:27:37 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\SecuROM
[2008/04/09 16:14:03 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Sierra Entertainment
[2008/03/06 20:54:53 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Skype
[2006/02/28 19:39:04 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Sonic
[2008/10/26 11:01:16 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\SoundSpectrum
[2008/11/16 21:03:48 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\SpinTop
[2006/02/19 13:28:19 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Sun
[2009/02/01 03:31:24 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\SystemRequirementsLab
[2009/02/22 16:49:29 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\uTorrent
[2008/12/11 03:22:19 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Ventrilo
[2006/08/03 23:12:00 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Verizon
[2007/04/09 10:08:05 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Viewpoint
[2008/11/26 19:29:41 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Winamp
[2007/06/29 23:27:42 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\WinRAR
[2009/01/07 01:14:45 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Xfire
[2008/01/18 00:01:06 | 00,000,000 | —D | M] – C:\Documents and Settings\Aaron Jefferson\Application Data\Yahoo!
[2009/04/26 02:09:50 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data
[2009/04/25 01:24:27 | 00,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[2006/11/15 17:50:29 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{A3C6D9CB-7EFF-4326-B823-70F2FF658883}
[2009/02/15 02:16:16 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\acccore
[2007/08/14 17:02:52 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Adobe
[2006/11/15 17:49:43 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic
[2008/09/26 20:39:35 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL
[2008/02/16 11:49:11 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL Downloads
[2006/12/16 14:51:21 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AOL OCP
[2007/02/09 13:22:21 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\avg7
[2008/02/14 17:33:49 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Dell
[2005/08/16 22:54:52 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DIGStream
[2007/05/12 19:05:48 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google
[2009/04/25 16:46:14 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Google Updater
[2006/12/01 23:12:52 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Grisoft
[2006/02/19 13:39:16 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GTek
[2008/09/17 21:40:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Haihaisoft
[2006/02/19 13:37:51 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\InstallShield
[2009/04/25 01:26:14 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Lavasoft
[2009/04/26 02:09:50 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2006/02/19 13:44:33 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\McAfee
[2006/02/19 13:44:04 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\McAfee.com
[2006/04/20 12:04:49 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\McAfee.com Personal Firewall
[2008/04/09 15:01:48 | 00,000,000 | –SD | M] – C:\Documents and Settings\All Users\Application Data\Microsoft
[2009/04/01 14:57:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2006/12/01 22:08:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Motive
[2009/04/07 11:34:12 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir
[2007/01/24 09:04:02 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Napster
[2008/07/23 18:02:03 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NexonUS
[2006/08/18 17:51:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NVIDIA
[2008/09/01 16:30:02 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
[2008/02/16 11:14:30 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\OrbNetworks
[2006/09/23 22:54:54 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PopCap
[2006/02/19 13:37:08 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\QuickTime
[2008/08/17 15:57:58 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sandlot Games
[2008/11/05 21:29:18 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SpinTop Games
[2006/12/31 19:40:46 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
[2009/03/29 04:05:36 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2006/12/29 15:47:41 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Trymedia
[2006/07/31 20:40:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Verizon
[2009/02/15 02:16:18 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2006/03/02 20:28:39 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
[2008/05/17 21:46:25 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\YAHOO
[2006/07/31 19:53:12 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\yahoo!
[2009/04/25 01:26:33 | 00,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2004/08/10 07:00:00 | 00,000,065 | RH– | M] () – C:\WINDOWS\Tasks\desktop.ini
[2009/04/26 07:14:42 | 00,000,868 | —- | M] () – C:\WINDOWS\Tasks\Google Software Updater.job
[2009/04/26 08:04:26 | 00,000,900 | —- | M] () – C:\WINDOWS\Tasks\GoogleUpdateTaskMachine.job
[2009/04/24 18:30:00 | 00,000,370 | —- | M] () – C:\WINDOWS\Tasks\McAfee.com Scan for Viruses - My Computer (PIMPCOMP-Aaron Jefferson).job
[2008/05/16 19:55:38 | 00,000,310 | -H– | M] () – C:\WINDOWS\Tasks\Microsoft_Hardware_Launch_IPoint_exe.job
[2009/04/26 07:14:26 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 97 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FE0E5BC2
@Alternate Data Stream - 487 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 246 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5D114334
@Alternate Data Stream - 149 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8908BDEA
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F9D83120
@Alternate Data Stream - 107 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:9E293BFE
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:11DA80B5
< End of report >
Here is the Extras.txt
OTListIt Extras logfile created on: 4/26/2009 9:57:04 AM - Run 1
OTListIt2 by OldTimer - Version 2.0.14.0 Folder = C:\Documents and Settings\Aaron Jefferson\Desktop
Windows XP Media Center Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1.99 Gb Total Physical Memory | 1.39 Gb Available Physical Memory | 69.98% Memory free
2.58 Gb Paging File | 2.11 Gb Available in Paging File | 81.69% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 144.33 Gb Total Space | 72.72 Gb Free Space | 50.39% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: FAMILYCOMP
Current User Name: Aaron Jefferson
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Output = Minimal
File Age = 30 Days
Company Name Whitelist: On
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox 3.1 Beta 3\firefox.exe (Mozilla Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall" = 1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"9420:TCP" = 9420:TCP:*:Enabled:Akamai NetSession Interface
"5000:UDP" = 5000:UDP:*:Enabled:Akamai NetSession Interface
"2327:TCP" = 2327:TCP:*:Enabled:Akamai NetSession Interface
"2544:TCP" = 2544:TCP:*:Enabled:Akamai NetSession Interface
"1267:TCP" = 1267:TCP:*:Enabled:Akamai NetSession Interface
"1339:TCP" = 1339:TCP:*:Enabled:Akamai NetSession Interface
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL File not found
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL File not found
C:\Program Files\America Online 9.0\waol.exe:*:Enabled:America Online 9.0 (America Online, Inc.)
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 File not found
C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) File not found
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL File not found
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL File not found
C:\Program Files\America Online 9.0\waol.exe:*:Enabled:America Online 9.0 (America Online, Inc.)
C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger (Microsoft Corporation)
C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader (AOL LLC)
C:\Program Files\Common Files\AOL\1148691186\ee\aolsoftware.exe:*:Enabled:AOL Services File not found
C:\Program Files\Common Files\AOL\1148691186\ee\aim6.exe:*:Enabled:AIM File not found
C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger File not found
C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server File not found
C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger File not found
C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server File not found
C:\nestc042\NESTCL95.EXE:*:Enabled:NESTCL95 ()
C:\Program Files\Yahoo!\Yahoo! Music Engine\YahooMusicEngine.exe:*:Enabled:Verizon Yahoo! Music Engine File not found
C:\Program Files\America's Army\System\ArmyOps.exe:*:Enabled:ArmyOps File not found
C:\Program Files\Call of Duty Game of the Year Edition\CoDUOMP.exe:*:Enabled:CoDUOMP File not found
D:\NESTCL95.EXE:*:Enabled:NESTCL95 File not found
D:\nestc042\NESTCL95.EXE:*:Enabled:NESTCL95 File not found
C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire (Xfire Inc.)
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\counter-strike source\hl2.exe:*:Enabled:hl2 ()
C:\Program Files\Wolfenstein - Enemy Territory\ET.exe:*:Enabled:ET File not found
C:\Program Files\Tale of Tales\The Endless Forest\Q3DSvr.scr:*:Enabled:Q3DSvr File not found
C:\Program Files\NovaLogic\Delta Force Black Hawk Down\UPDATE.EXE:*:Enabled:UPDATE File not found
C:\Q3Ademo\quake3.exe:*:Enabled:quake3 File not found
C:\Program Files\Sony\Station\LaunchPad\LaunchPad.exe:*:Enabled:LaunchPad File not found
C:\Program Files\THQ\Dawn Of War\W40k.exe:*:Enabled:W40k File not found
C:\Program Files\THQ\Dawn Of War\W40kWA.exe:*:Enabled:W40kWA File not found
C:\Program Files\Grisoft\AVG Free\avginet.exe:*:Enabled:avginet.exe (GRISOFT, s.r.o.)
C:\Program Files\Grisoft\AVG Free\avgamsvr.exe:*:Enabled:avgamsvr.exe (GRISOFT, s.r.o.)
C:\Program Files\Grisoft\AVG Free\avgcc.exe:*:Enabled:avgcc.exe (GRISOFT, s.r.o.)
C:\Program Files\Grisoft\AVG Free\avgemc.exe:*:Enabled:avgemc.exe (GRISOFT, s.r.o.)
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\day of defeat source\hl2.exe:*:Enabled:hl2 ()
C:\Program Files\RndLabs\BaboViolent 2\BaboViolent2.exe:*:Enabled:BaboViolent2 File not found
C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent File not found
C:\Program Files\Quake III Arena\quake3.exe:*:Enabled:quake3 File not found
C:\StubInstaller.exe:*:Enabled:LimeWire swarmed installer File not found
C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire File not found
C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s File not found
C:\Soldat\Soldat.exe:*:Enabled:Soldat File not found
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\ricochet\hl.exe:*:Enabled:Half-Life Launcher (Valve)
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\counter-strike\hl.exe:*:Enabled:Half-Life Launcher (Valve)
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\day of defeat\hl.exe:*:Enabled:Half-Life Launcher (Valve)
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\half-life blue shift\hl.exe:*:Enabled:Half-Life Launcher (Valve)
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\opposing force\hl.exe:*:Enabled:Half-Life Launcher (Valve)
C:\Program Files\EA GAMES\Medal of Honor Allied Assault Breakthrough Demo\moh_breakthrough_demo.exe:*:Enabled:Medal of Honor Allied Assault™ Breakthrough Demo File not found
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\half-life 2\hl2.exe:*:Enabled:hl2 ()
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\source sdk base\hl2.exe:*:Enabled:hl2 ()
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2 ()
C:\Program Files\National Guard\Guard Shield\PRISM.exe:*:Enabled:Guard Shield File not found
%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 (Microsoft Corporation)
C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 File not found
C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) File not found
C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM (AOL LLC)
C:\Program Files\Microsoft Games\Halo\halo.exe:*:Enabled:Halo File not found
C:\Sierra\Empire Earth Demo\Empire Earth.exe:*:Enabled:Empire Earth File not found
C:\Program Files\Valve\Steam\steam.exe:*:Enabled:Steam (Valve Corporation)
C:\Program Files\Sierra\Contract JACK\fpupdate.exe:*:Enabled:fpupdate File not found
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\team fortress 2\hl2.exe:*:Enabled:hl2 ()
C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb File not found
C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray (Orb Networks)
C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client File not found
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\half-life\hl.exe:*:Enabled:Half-Life Launcher (Valve)
C:\Program Files\Deep Silver\Rush For Berlin\RushForBerlin.exe:*:Enabled:Rush for Berlin File not found
C:\Program Files\Invasion Interactive Ltd\Rising Eagle\bin\win32\RisingEagle.exe:*:Enabled:RisingEagle File not found
C:\Unreal Anthology\UT2004\System\UT2004.exe:*:Enabled:UT2004 File not found
C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe:*:Enabled:Nexon Game Manager (Nexon)
C:\Nexon\Combat Arms\NMService.exe:*:Enabled:Nexon Messenger Core (Nexon Corp.)
C:\Program Files\Activision Value\Soldier of Fortune Payback\sof3.exe:*:Enabled:sof3 File not found
C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III File not found
C:\Program Files\Dead Wake\bin\server.exe:*:Disabled:server File not found
C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:Windows Media Player (Microsoft Corporation)
C:\Program Files\Defcon\defcon.exe:*:Enabled:Defcon File not found
C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (Mozilla Corporation)
C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe ()
C:\Program Files\Valve\Steam\SteamApps\vaporsnake90\garrysmod\hl2.exe:*:Enabled:hl2 ()
C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent File not found
C:\Program Files\Valve\Steam\SteamApps\common\heretic shadow of the serpent riders\heretic.bat:*:Enabled:Heretic: Shadow of the Serpent Riders ()
C:\Program Files\Valve\Steam\SteamApps\common\peggle extreme\PeggleExtreme.exe:*:Enabled:Peggle Extreme ()
C:\Program Files\Valve\Steam\SteamApps\common\shadowgrounds\Shadowgrounds.exe:*:Enabled:Shadowgrounds (Frozenbyte Oy)
C:\Program Files\Valve\Steam\SteamApps\common\shadowgrounds\ShadowgroundsLauncher.exe:*:Enabled:Shadowgrounds ()
C:\Program Files\Valve\Steam\SteamApps\common\commander keen\testapp3.bat:*:Enabled:Commander Keen Complete Pack ()
C:\Program Files\Valve\Steam\SteamApps\common\commander keen\testapp4.bat:*:Enabled:Commander Keen Complete Pack ()
C:\Program Files\Valve\Steam\SteamApps\common\commander keen\testapp5.bat:*:Enabled:Commander Keen Complete Pack ()
C:\Program Files\Valve\Steam\SteamApps\common\bejeweled 2 deluxe\WinBej2.exe:*:Enabled:Bejeweled 2 Deluxe (PopCap.com)
C:\Program Files\Free Music Zilla\FMZilla.exe:*:Enabled:FMZilla ()
C:\Documents and Settings\Aaron Jefferson\Local Settings\Application Data\Xenocode\ApplianceCaches\KumaClient.exe_v60664C46\Native\STUBEXE\@PROGRAMFILES@\Kuma Games\Kuma.exe:*:Enabled:Kuma ()
C:\Program Files\Valve\Steam\SteamApps\common\oddworld abes exoddus\Exoddus.exe:*:Enabled:Oddworld: Abe's Exoddus (Oddworld Inhabitants, Inc.)
C:\WINDOWS\explorer.exe:*:Enabled:Windows Explorer (Microsoft Corporation)
C:\WINDOWS\ehome\ehtray.exe:*:Enabled:ehtray (Microsoft Corporation)
C:\Program Files\Valve\Steam\SteamApps\common\farcry\Bin32\FarCry.exe:*:Enabled:Far Cry (Crytek)
C:\Program Files\Valve\Steam\SteamApps\common\farcry\Bin32\FarCryConfigurator.exe:*:Enabled:Far Cry (Crytek)
C:\Program Files\Google\Update\GoogleUpdate.exe:*:Enabled:GoogleUpdate (Google Inc.)
C:\Program Files\OpenOffice.org 3\program\soffice.exe:*:Enabled:soffice (OpenOffice.org)
C:\Program Files\Mozilla Firefox 3.1 Beta 3\firefox.exe:*:Enabled:firefox (Mozilla Corporation)
C:\WINDOWS\system32\taskmgr.exe:*:Enabled:taskmgr (Microsoft Corporation)
C:\Program Files\MySpace\IM\MySpaceIM.exe:*:Enabled:MySpace Instant Messenger ()
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam™
"{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic RecordNow Data
"{11B3D22F-AAAA-4A52-99A5-A2966CE640EA}" = Terror Strike
"{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}" = Sonic DLA
"{15095BF3-A3D7-4DDF-B193-3A496881E003}" = Microsoft .NET Framework 3.0
"{1898B8E5-43E2-4BCA-AD6A-B9FBE0C93F84}" = Heroes of Might and Magic V Demo
"{1DDF840B-A50A-491E-BF44-6D6964C451A8}" = VGA USB Camera
"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD LE
"{21A127AE-2DAF-40B7-8374-34C3E629521C}" = Far Cry (Patch 1.3)
"{244E21B9-164C-4EC1-AED8-9BD64161E66D}" = ArcSoft VideoImpression 2
"{25EF03E6-F17B-11D6-88EA-000476CD2443}" = Verizon Online Help & Support
"{26A24AE4-039D-4CA4-87B4-2F83216010FF}" = Java™ 6 Update 10
"{2EF0D7ED-F944-4E0D-AC78-7DA00C0B81E4}_is1" = Penumbra Episode 1
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{311F799A-FCE9-4D9E-B5D2-CBB8859B40BB}" = Microsoft XNA Framework Redistributable 1.0 Refresh
"{3248F0A8-6813-11D6-A77B-00B0D0150030}" = J2SE Runtime Environment 5.0 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{33BB4982-DC52-4886-A03B-F4C5C80BEE89}" = Windows Media Player 10
"{34D6EED8-7650-4E1C-BC26-F5B2DDE185C6}" = OverDrive Media Console
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36592557-65CE-4A4D-9970-764F17E0AFD3}" = MSI v2 to redistribute Rigs of Rods
"{3C662203-292F-4E9D-AE02-281071C06903}" = Far Cry (Patch 1.33)
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{4667B940-BB01-428B-986E-A0CC46497BF7}" = ELIcon
"{471BB1D9-6F59-4093-B46D-373772D5C111}" = Far Cry Demo
"{491DD792-AD81-429C-9EB4-86DD3D22E333}" = Windows Communication Foundation
"{548EAC70-EE00-11DD-908C-005056806466}" = Google Earth
"{5905F42D-3F5F-4916-ADA6-94A3646AEE76}" = Dell Driver Reset Tool
"{62BD0AE0-4EB1-4BBB-8F43-B6400C8FEB2C}" = AOLIcon
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD 5.5
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D5FCA42-1486-4E32-AFE8-1B7E2AA59D33}" = Digital Content Portal
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{7148F0A8-6813-11D6-A77B-00B0D0142130}" = Java 2 Runtime Environment, SE v1.4.2_13
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74224F8D-4A17-4816-9EDB-7BB854DE532C}" = NVIDIA PhysX v8.04.25
"{74F7662C-B1DB-489E-A8AC-07A06B24978B}" = Dell System Restore
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}" = Windows Workflow Foundation
"{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}" = DellSupport
"{7F142D56-3326-11D5-B229-002078017FBF}" = Modem Helper
"{83F793B5-8BBF-42FD-A8A6-868CB3E2AAEA}" = Intel® PROSet for Wired Connections
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver
"{8C5FAD77-F678-4758-A296-C12F08D179E0}" = Microsoft IntelliPoint 6.2
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9941F0AA-B903-4AF4-A055-83A9815CC011}" = Sonic Encoders
"{A683A2C0-821C-486F-858C-FA634DB5E864}" = EducateU
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAB2A3A6-6789-4260-9966-517498589AB5}" = ArcSoft PhotoImpression 5
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic RecordNow Audio
"{AC76BA86-7AD7-1033-7B44-A70000000000}" = Adobe Reader 7.0
"{AF19F291-F22F-4798-9662-525305AE9E48}" = WordPerfect Office 12
"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic RecordNow Copy
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
"{B6F7DBE7-2FE2-458F-A738-B10832746036}" = Microsoft Reader
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C2444FA0-04AA-4221-B652-73713947ED22}" = Anti-Spyware
"{C30C5DEF-9BB0-4E2A-AFE2-B5844FE4485A}" = PlanetSide
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D2988E9B-C73F-422C-AD4B-A66EBE257120}" = MCU
"{D3386797-A836-4030-AB5D-4E89F2F15F33}" = Authentium
"{D45EC259-4A19-4656-B588-C2C360DD18EA}" = Half-Life® 2
"{D792A069-B96B-40BA-BCB4-E5651A6E5926}" = Far Cry (Patch 1)
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E47BA573-BBC4-40C1-8A7D-B25F2F2B0DAE}" = Far Cry (Patch 1.32)
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{E93E5EF6-D361-481E-849D-F16EF5C78EBC}" = Musicmatch for Windows Media Player
"{EE8592F6-FC2B-4AFD-B527-109D127C039F}" = Far Cry (Patch 1.31)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F44DA61E-720D-4E79-871F-F6E628B33242}" = OpenOffice.org 3.0
"{FBF2FEC6-5F91-4FB8-8113-1F92466341EC}" = Uru - Ages Beyond Myst Demo
"7 Wonders" = 7 Wonders
"Ad-Aware" = Ad-Aware
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"AIM_6" = AIM 6
"AOL Uninstaller" = AOL Uninstaller (Choose which Products to Remove)
"AVG7Uninstall" = AVG Free Edition
"Call of Duty Game of the Year Edition" = Call of Duty Game of the Year Edition
"CANONBJ_Deinstall_CNMCP38.DLL" = Canon S300
"CANONBJ_Deinstall_CNMS300.CPD" = Canon S300
"CDisplay_is1" = CDisplay 1.8
"Chain of Command : Eastern Front" = Chain of Command : Eastern Front 1.0
"Chrysalis-B" = Chrysalis-B
"CNXT_MODEM_PCI_VEN_14F1&DEV;_2F20&SUBSYS;_200F14F1" = Conexant D850 56K V.9x DFVc Modem
"Combat Arms" = Combat Arms
"Dell Digital Jukebox Driver" = Dell Digital Jukebox Driver
"Deus Ex" = Deus Ex
"EmeraldQFE2" = Windows Media Player 10 Hotfix [See EmeraldQFE2 for more information]
"eMusic Promotion" = 50 FREE MP3s +1 Free Audiobook!
"File Shredder_is1" = File Shredder 2.0
"FLV Player" = FLV Player 2.0, build 24
"FoxyTunesForFirefox" = FoxyTunes for Firefox
"Fraps" = Fraps
"Free Music Zilla_is1" = Free Music Zilla
"G-Force" = G-Force
"Google Updater" = Google Updater
"Haihaisoft Universal Player" = Haihaisoft Universal Player
"Heroes of Might and Magic III Complete" = Heroes of Might and Magic III Complete
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{471BB1D9-6F59-4093-B46D-373772D5C111}" = Far Cry Demo
"Jewel Quest 3" = Jewel Quest 3
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 3.7.5
"LibUSB-Win32_is1" = LibUSB-Win32-0.1.10.1
"Magic ISO Maker v5.5 (build 0273)" = Magic ISO Maker v5.5 (build 0273)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MFatigue Uninst" = Metal Fatigue Uninstall
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.0" = Microsoft .NET Framework 3.0
"Mozilla Firefox (3.0.8)" = Mozilla Firefox (3.0.8)
"Mozilla Firefox (3.1b3)" = Mozilla Firefox (3.1b3)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MySpaceIM" = MySpaceIM
"Neverball" = Neverball 1.5.0
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nox_is1" = Nox 1.2b
"NVIDIA Drivers" = NVIDIA Drivers
"OpenAL" = OpenAL
"PeerGuardian_is1" = PeerGuardian 2.0
"PROSet" = Intel® PRO Network Connections Drivers
"Quake III Arena Point Release 1.32" = Quake III Arena Point Release 1.32
"RadialpointClientGateway_is1" = Verizon Servicepoint 1.3.21
"Real Lives 2007" = Real Lives 2007
"Red Alert" = Red Alert Windows 95
"Red Alert 2" = Command & Conquer Red Alert 2
"Sierra Utilities" = Sierra Utilities
"SoftSkies" = SoftSkies
"ST5UNST #1" = Visual Basic 5.0 Runtime Library
"ST6UNST #1" = StealthClan NameConverter V2
"Steam App 13520" = FarCry
"Steam App 15710" = Oddworld: Abe's Exoddus
"Steam App 2390" = Heretic: Shadow of the Serpent Riders
"Steam App 2500" = Shadowgrounds
"Steam App 3300" = Bejeweled 2 Deluxe
"Steam App 3483" = Peggle Extreme
"Steam App 4000" = Garry's Mod
"Steam App 4610" = Full Pipe Demo
"Steam App 9180" = Commander Keen Complete Pack
"StreetPlugin" = Learn2 Player (Uninstall Only)
"SystemRequirementsLab" = System Requirements Lab
"Tiberian Sun" = Command & Conquer Tiberian Sun
"Tradewinds 2_is1" = Tradewinds 2 CD 1.0
"Tradewinds Caravans" = Tradewinds Caravans (remove only)
"Verizon Online DSL_is1" = Verizon Online DSL
"Verizon Online Help and Support" = Verizon Online Help and Support
"Verizon Yahoo! Applications" = Verizon Yahoo! Applications
"Viewpoint Manager" = Viewpoint Manager (Remove Only)
"ViewpointMediaPlayer" = Viewpoint Media Player
"Warlords III 1.0" = Warlords III: Reign of Heroes
"WebCyberCoach_wtrb" = WebCyberCoach 3.2 Dell
"WGA" = Windows Genuine Advantage Validation Tool
"WIC" = Windows Imaging Component
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"WOLAPI" = Westwood Shared Internet Components
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Xfire" = Xfire (remove only)
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Yuri's Revenge" = Command && Conquer Red Alert 2 - Yuri's Revenge
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Quest for Glory II" = Quest for Glory II
"Steam App 130" = Half-Life: Blue Shift
"Steam App 20" = Team Fortress Classic
"Steam App 215" = Source SDK Base
"Steam App 2560" = RIP 3 - The Last Hero Demo
"Steam App 3492" = Venice Demo
"Steam App 50" = Opposing Force
"Steam App 70" = Half-Life
"Warcraft III" = Warcraft III
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 4/21/2009 5:10:14 PM | Computer Name = FAMILYCOMP | Source = Application Error | ID = 1001
Description = Fault bucket 1183719446.
Error - 4/22/2009 10:07:53 PM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/23/2009 5:29:13 AM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/23/2009 9:45:56 AM | Computer Name = FAMILYCOMP | Source = Application Error | ID = 1000
Description = Faulting application , version 0.0.0.0, faulting module unknown, version
0.0.0.0, fault address 0x00000000.
Error - 4/23/2009 2:37:35 PM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/23/2009 2:39:56 PM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/23/2009 5:17:08 PM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/23/2009 5:18:13 PM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/25/2009 1:24:40 AM | Computer Name = FAMILYCOMP | Source = Lavasoft Ad-Aware Service | ID = 0
Description =
Error - 4/26/2009 6:57:01 AM | Computer Name = FAMILYCOMP | Source = Google Update | ID = 20
Description =
[ Application Events ]
Error - 4/21/2009 5:10:14 PM | Computer Name = FAMILYCOMP | Source = Application Error | ID = 1001
Description = Fault bucket 1183719446.
Error - 4/22/2009 10:07:53 PM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/23/2009 5:29:13 AM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/23/2009 9:45:56 AM | Computer Name = FAMILYCOMP | Source = Application Error | ID = 1000
Description = Faulting application , version 0.0.0.0, faulting module unknown, version
0.0.0.0, fault address 0x00000000.
Error - 4/23/2009 2:37:35 PM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/23/2009 2:39:56 PM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/23/2009 5:17:08 PM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/23/2009 5:18:13 PM | Computer Name = FAMILYCOMP | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.1.3351, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 4/25/2009 1:24:40 AM | Computer Name = FAMILYCOMP | Source = Lavasoft Ad-Aware Service | ID = 0
Description =
Error - 4/26/2009 6:57:01 AM | Computer Name = FAMILYCOMP | Source = Google Update | ID = 20
Description =
[ OSession Events ]
Error - 11/3/2008 7:13:59 PM | Computer Name = FAMILYCOMP | Source = Microsoft Office 12 Sessions | ID = 7001
Description =
[ System Events ]
Error - 4/18/2009 8:52:07 PM | Computer Name = FAMILYCOMP | Source = DCOM | ID = 10010
Description = The server {0228576F-6E6C-4E1A-B175-0E46A316AFE2} did not register
with DCOM within the required timeout.
Error - 4/19/2009 9:52:06 PM | Computer Name = FAMILYCOMP | Source = Print | ID = 6161
Description = The document Bob Dylan | The Times They … owned by Beth failed to
print on printer Canon S300. Data type: NT EMF 1.008. Size of the spool file in
bytes: 3440556. Number of bytes printed: 2752060. Total number of pages in the
document: 2. Number of pages printed: 2. Client machine: \\FAMILYCOMP. Win32 error
code returned by the print processor: 122 (0x7a).
Error - 4/23/2009 9:47:07 AM | Computer Name = FAMILYCOMP | Source = DCOM | ID = 10010
Description = The server {FBA44040-BD27-4A09-ACC8-C08B7C723DCD} did not register
with DCOM within the required timeout.
Error - 4/23/2009 9:49:12 AM | Computer Name = FAMILYCOMP | Source = Service Control Manager | ID = 7003
Description = The Verizon Internet Security Suite Firewall service depends on the
following nonexistent service: FreeTdi
Error - 4/24/2009 1:15:25 AM | Computer Name = FAMILYCOMP | Source = Service Control Manager | ID = 7003
Description = The Verizon Internet Security Suite Firewall service depends on the
following nonexistent service: FreeTdi
Error - 4/25/2009 3:37:13 PM | Computer Name = FAMILYCOMP | Source = Service Control Manager | ID = 7003
Description = The Verizon Internet Security Suite Firewall service depends on the
following nonexistent service: FreeTdi
Error - 4/25/2009 6:17:34 PM | Computer Name = FAMILYCOMP | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service wuauserv with
arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}
Error - 4/26/2009 1:46:21 AM | Computer Name = FAMILYCOMP | Source = Service Control Manager | ID = 7003
Description = The Verizon Internet Security Suite Firewall service depends on the
following nonexistent service: FreeTdi
Error - 4/26/2009 7:14:35 AM | Computer Name = FAMILYCOMP | Source = Service Control Manager | ID = 7003
Description = The Verizon Internet Security Suite Firewall service depends on the
following nonexistent service: FreeTdi
Error - 4/26/2009 7:14:35 AM | Computer Name = FAMILYCOMP | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
IntelIde
< End of report >
