I think this is everything you wanted.
Malwarebytes' Anti-Malware 1.38
Database version: 2340
Windows 5.1.2600 Service Pack 3
06/26/09 15:31:07
mbam-log-2009-06-26 (15-31-07).txt
Scan type: Quick Scan
Objects scanned: 110096
Time elapsed: 11 minute(s), 40 second(s)
Memory Processes Infected: 2
Memory Modules Infected: 0
Registry Keys Infected: 31
Registry Values Infected: 5
Registry Data Items Infected: 2
Folders Infected: 24
Files Infected: 222
Memory Processes Infected:
C:\Program Files\AdwareAlert\AdwareAlert.exe (Rogue.AdwareAlert) -> Unloaded process successfully.
C:\Program Files\Evidence Eliminator\Ee.exe (Rogue.EvidenceEliminator) -> Unloaded process successfully.
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CLASSES_ROOT\eeshellx.shellext (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{0e6117e2-c367-4be3-8045-52669e71b5df} (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{f272845d-cec2-4f95-92ee-6d08fdfbd471} (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a7c6e906-b0b8-4810-ae82-71809ed409eb} (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\promo2.promoie (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\promo2.promoie.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\webexcellenceadvicetool.webexcellenceadvicetool (Adware.PlayMP3z) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\webexcellenceadvicetool.webexcellenceadvicetool.1 (Adware.PlayMP3z) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{755c6bc2-a679-4025-84d3-4ae283a87b14} (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{418d86be-7386-4f1a-83e0-53604adbda74} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Installer\UpgradeCodes\7c673a5b871b8cd419f47dd0de5a6d18 (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3aa42713-5c1e-48e2-b432-d8bf420dd31d} (Rogue.AntiVirus2008) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7aa32fc7-133b-4ae7-998e-ced0d9829b12} (Trojan.Dialer) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{57071861-57f2-4272-a519-6f599cadd6fd} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{cd1a4f51-6371-6621-312a-b4cd3941f6de} (Adware.PlayMP3z) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\7c673a5b871b8cd419f47dd0de5a6d18 (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{755c6bc2-a679-4025-84d3-4ae283a87b14} (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5b4016981c40d5f4b9925ed64ad7b526 (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\70b07021d02a5e347a162b223ea41cd5 (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\a491438a809f60f458df33e67c80a5d2 (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\cb6591e4426ef2b49aee7437e1144918 (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\AdwareAlert (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Evidence Eliminator (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\Evidence Eliminator Safe Recycle (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Quick Mode (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Safe Restart (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\shell\Evidence Eliminator Safe Shutdown (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers\Evidence Eliminator (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Evidence Eliminator (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Registry Mighty_is1 (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Registry Mighty (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{a7c6e906-b0b8-4810-ae82-71809ed409eb} (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AdwareAlert (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\c:\program files\adwarealert\ (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\c:\documents and settings\all users\start menu\programs\adwarealert\ (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegedit (Hijack.Regedit) -> Quarantined and deleted successfully.
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Folders Infected:
c:\documents and settings\All Users\Start Menu\Programs\AdwareAlert (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\Application Data\AdwareAlert (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\Log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\Quarantine (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04 (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\Settings (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Lynn\Application Data\AdwareAlert (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Lynn\application data\adwarealert\Log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Lynn\application data\adwarealert\Settings (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Program Files\AdwareAlert (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
C:\Program Files\MyWaySA (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\MyWaySA\SrchAsDe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\MyWaySA\SrchAsDe\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\Start Menu\Programs\Evidence Eliminator (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
C:\Program Files\Evidence Eliminator (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Help (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\Start Menu\Programs\PlayMP3z (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
C:\Program Files\Registry Mighty (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\RepairBackup (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\repairbackup\del (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\documents and settings\All Users\Start Menu\Programs\Registry Mighty (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
C:\Program Files\WebExcellenceAdviceTool (Adware.PlayMP3z) -> Quarantined and deleted successfully.
Files Infected:
C:\WINDOWS\SYSTEM32\Eeshellx.dll (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\adwarealert\AdwareAlert on the Web.lnk (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\adwarealert\AdwareAlert.lnk (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\Log\2009 Jun 26 - 03_10_24 PM_640.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\Log\2009 Jun 26 - 09_57_07 AM_218.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\0.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\0.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\1.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\1.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\10.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\10.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\11.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\11.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\12.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\12.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\13.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\13.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\14.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\14.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\15.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\15.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\16.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\16.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\17.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\17.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\18.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\18.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\19.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\19.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\2.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\2.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\20.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\20.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\21.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\21.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\22.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\22.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\23.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\23.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\24.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\24.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\25.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\25.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\3.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\3.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\4.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\4.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\5.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\5.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\6.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\6.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\7.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\7.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\8.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\8.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\9.qit (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\application data\adwarealert\quarantine\19-06-2009-16-47-04\9.qnf (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Lynn\application data\adwarealert\Log\2009 Jun 26 - 11_48_56 AM_015.log (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\program files\adwarealert\AdwareAlert.exe (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\program files\adwarealert\AdwareAlert.url (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\program files\adwarealert\DataBase.ref (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\program files\adwarealert\vistaCPtasks.xml (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\start menu\Programs\evidence eliminator\Evidence Eliminator Help.lnk (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\start menu\Programs\evidence eliminator\Evidence Eliminator License Agreement.lnk (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\start menu\Programs\evidence eliminator\Evidence Eliminator Read Me.lnk (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\start menu\Programs\evidence eliminator\Evidence Eliminator.lnk (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Ee.exe (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\INSTALL.LOG (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\License.txt (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\ReadMe.txt (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\UNWISE.EXE (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\UNWISE.INI (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Config.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Drives.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Files.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\FilesContents.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Folders.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\FolderScans.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\IECookiesKeep.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\IEDownloadedKeep.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\MozillaCookiesKeep.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\OE5ChoiceList.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\PlugInSelections.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\ScanMasks.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\TBChoiceList.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\AbsoluteFTP.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\ACDSEE Photo Viewer v3.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adaptec Easy CD Creator v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Acrobat Reader v3.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Acrobat Reader v3.1.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Acrobat Reader v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Acrobat Reader v5.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Acrobat Reader v5.1.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Acrobat Reader v6.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Acrobat Reader v7.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Acrobat v6.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Photoshop v5.0 LE.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Photoshop v5.5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Photoshop v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Photoshop v6.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Photoshop v7.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Photoshop v8.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Adobe Photoshop v9.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\ASPack.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Avant Browser.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Cabinet Manager.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Copernic 2000 Pro.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Copernic 2000.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Copernic Agent.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Corel Paintshop Pro v10.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Cute FTP v3.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Cute FTP v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Cute FTP v7.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Delphi v3.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Delphi v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Delphi v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\DiskKeeper v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\DivXPlayer.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Download Accelerator.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Eudora Mail.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\EventLog.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\FTP Explorer.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\GetRight ExplorerBar.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\GetRight v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\GoogleBar.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\GoogleNavigation.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\GoZilla.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Helios TextPad v3.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Helios TextPad v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\HelpWriter.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Icon Extractor.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\ICQ 2000a.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\InstallShield Express.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\J2 Messenger.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\JASC Paintshop Pro v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\JASC Paintshop Pro v6.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\JASC Paintshop Pro v7.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\JASC Paintshop Pro v8.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Jet PhotoShell v1.2.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Kazaa.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Limewire v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Macromedia Flash v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\MasterSplitter v2.1.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\McAfee Virus Scan v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Microangelo 98.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Micrografx Picture Publisher v7.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Micrografx Picture Publisher v8.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Microsoft FrontPage Express.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Microsoft FrontPage.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Microsoft Help Workshop.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Microsoft HTML Help.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Microsoft Office.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Microsoft Publisher 2000.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Microsoft Send-To Extensions.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Microsoft Windows Paint.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Microsoft Windows WordPad.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\My Network Places.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Napster Music Community.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\NEATO Labels.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\NeoPlanet v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Norton AntiVirus 2000 (v6).eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Norton Antivirus 2003.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Norton File Manager.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Norton Internet Security 2004.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Norton Personal Firewall.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Norton Utilities 2000.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\NoteTab Pro.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Opera Browser.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\PackageForTheWeb.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Personal Ancestral File.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Quicktime.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Real Audio Player v6 v7 v8.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Real Download v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Real Player v10.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\RealOne Player.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\RemoteDesktop.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Roxio Easy CD Creator v6.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\SureThing CD Labeler.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Telnet.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Ulead Gif Animator v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Ulead Photo Explorer v4.2.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Ulead Photo Viewer v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Ulead PhotoImpact v10.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Ulead PhotoImpact v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Ulead PhotoImpact Viewer v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\UltraEdit v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\UltraEdit v7.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Web Ferret v3.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\WinOnCD.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\WinRar v2.6.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\WinRar v2.70.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\WinRar v3.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\WinZip v7.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\WinZip v8.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Wise Installer.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Yahoo Player.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\YahooMessenger.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\ZipMagic 2000.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Data\Plug-Ins\Zone Alarm.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\program files\evidence eliminator\Help\ee.chm (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\start menu\Programs\PlayMP3z\Run PlayMP3z.pif (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
c:\program files\registry mighty\Code (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\errorlist.txt (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\MightyHelp.chm (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\MightyUpdate.exe (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\RegistryMighty.exe (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\RegistryMighty.url (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\ScanResult (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\unins000.dat (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\unins000.exe (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\Update.ini (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\repairbackup\del.txt (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\repairbackup\removestartup.dat (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\registry mighty\repairbackup\startup.dat (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\registry mighty\Registry Mighty Help.lnk (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\registry mighty\Registry Mighty on the Web.lnk (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\registry mighty\Registry Mighty.lnk (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\registry mighty\Uninstall Registry Mighty.lnk (Rogue.RegistryMighty) -> Quarantined and deleted successfully.
c:\program files\webexcellenceadvicetool\uninstall.exe (Adware.PlayMP3z) -> Quarantined and deleted successfully.
C:\WINDOWS\hosts (Trojan.Agent) -> Quarantined and deleted successfully.
c:\documents and settings\Chuck\Desktop\Evidence Eliminator.lnk (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully.
c:\documents and settings\all users\Desktop\AdwareAlert.lnk (Rogue.AdwareAlert) -> Quarantined and deleted successfully.
Rooter.exe (v1.0.2) by Eric_71
.
SeDebugPrivilege granted successfully …
.
Windows XP Home Edition (5.1.2600) Service Pack 3
[32_bits] - x86 Family 15 Model 4 Stepping 3, GenuineIntel
.
[wscsvc] (Security Center) RUNNING (state:4)
[SharedAccess] RUNNING (state:4)
Windows Firewall -> Disabled !
.
Internet Explorer 8.0.6001.18702
.
C:\ [Fixed-NTFS] .. ( Total:70 Go - Free:42 Go )
D:\ [CD_Rom]
E:\ [CD_Rom]
F:\ [Removable]
.
Scan : 15:43.03
Path : C:\Documents and Settings\Chuck\Desktop\Rooter.exe
User : Chuck ( Administrator -> YES )
.
———————-\\ Processes
.
Locked [System Process] (0)
______ System (4)
______ \SystemRoot\System32\smss.exe (848)
______ \??\C:\WINDOWS\system32\csrss.exe (904)
______ \??\C:\WINDOWS\system32\winlogon.exe (932)
______ C:\WINDOWS\system32\services.exe (976)
______ C:\WINDOWS\system32\lsass.exe (988)
______ C:\WINDOWS\system32\Ati2evxx.exe (1196)
______ C:\WINDOWS\system32\svchost.exe (1216)
______ C:\WINDOWS\system32\svchost.exe (1308)
______ C:\Program Files\Windows Defender\MsMpEng.exe (1448)
______ C:\WINDOWS\System32\svchost.exe (1488)
______ C:\WINDOWS\system32\svchost.exe (1568)
______ C:\WINDOWS\system32\svchost.exe (1700)
______ C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (1848)
______ C:\WINDOWS\system32\spoolsv.exe (1060)
______ C:\WINDOWS\system32\svchost.exe (820)
______ C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe (888)
______ C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (1396)
______ C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (1460)
______ C:\Program Files\Bonjour\mDNSResponder.exe (1612)
______ C:\WINDOWS\system32\cisvc.exe (1656)
______ C:\WINDOWS\system32\CTsvcCDA.EXE (604)
______ C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe (664)
______ C:\Program Files\Java\jre6\bin\jqs.exe (688)
______ C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe (728)
______ C:\Program Files\Google\Update\GoogleUpdate.exe (760)
______ C:\WINDOWS\system32\HPZipm12.exe (772)
______ C:\Program Files\Dell Support Center\bin\sprtsvc.exe (1864)
______ C:\WINDOWS\system32\svchost.exe (1920)
______ C:\WINDOWS\system32\MsPMSPSv.exe (1968)
______ C:\WINDOWS\System32\alg.exe (3124)
______ C:\WINDOWS\Explorer.EXE (3500)
______ C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe (2860)
______ C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe (2876)
______ C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe (2900)
______ C:\WINDOWS\system32\dla\tfswctrl.exe (2912)
______ C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (2920)
______ C:\Program Files\Qurb\QSP-3.0.311.7\QOELoader.exe (2928)
______ C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (2940)
______ C:\Program Files\Broadcom\BACS\BacsTray.exe (2948)
______ C:\Program Files\Dell Support Center\bin\sprtcmd.exe (2992)
______ C:\Program Files\Windows Defender\MSASCui.exe (3020)
______ C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe (3028)
______ C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (3032)
______ C:\Program Files\iTunes\iTunesHelper.exe (3052)
______ C:\Program Files\Java\jre6\bin\jusched.exe (3060)
______ C:\Program Files\DellSupport\DSAgnt.exe (3756)
______ C:\Program Files\Messenger\msmsgs.exe (1664)
______ C:\WINDOWS\System32\svchost.exe (2148)
______ C:\WINDOWS\system32\ctfmon.exe (1676)
______ C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe (1420)
______ C:\Program Files\iPod\bin\iPodService.exe (1336)
______ C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (168)
______ C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (364)
______ C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (2988)
______ C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe (2380)
______ C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (1344)
______ C:\Program Files\WinZip\WZQKPICK.EXE (2492)
______ C:\Program Files\Internet Explorer\iexplore.exe (748)
______ C:\Program Files\Internet Explorer\iexplore.exe (2820)
______ C:\Documents and Settings\Chuck\Desktop\Rooter.exe (1048)
.
———————-\\ Device\Harddisk0\
\Device\Harddisk0 [Sectors : 63 x 512 Bytes]
.
\Device\Harddisk0\Partition1 (Start_Offset:32256 | Length:49319424)
\Device\Harddisk0\Partition2 –[ MBR ]– (Start_Offset:49351680 | Length:75804180480)
\Device\Harddisk0\Partition3 (Start_Offset:75853532160 | Length:4137315840)
.
———————-\\ Scheduled Tasks
.
C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
C:\WINDOWS\Tasks\DESKTOP.INI
C:\WINDOWS\Tasks\GoogleUpdateTaskMachine.job
C:\WINDOWS\Tasks\MP Scheduled Scan.job
C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Chuck.job
C:\WINDOWS\Tasks\SA.DAT
C:\WINDOWS\Tasks\User_Feed_Synchronization-{086F4E41-4B7F-4D3C-8C76-346DEDB09CC2}.job
C:\WINDOWS\Tasks\User_Feed_Synchronization-{7C0A0691-A429-4DE7-9529-FD46EBE3E96F}.job
.
———————-\\ Registry
.
.
———————-\\ Files & Folders
.
C:\DOCUME~1\Chuck\Favorites\Ebay Auctions\Steinbach - Magic Of Nutcracker Reference Book - eBay (item 250359622524 end time Jan-25-09 140550 PST).url
==> Cracks & Keygens <==
.
———————-\\ Scan completed at 15:43.33
.
C:\Rooter$\Rooter_1.txt - (26/06/2009 | 15:43.33).c
OTL logfile created on: 06/26/09 15:48:09 - Run 1
OTL by OldTimer - Version 3.0.5.3 Folder = C:\Documents and Settings\Chuck\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: MM/dd/yy
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 100.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 70.60 Gb Total Space | 42.07 Gb Free Space | 59.59% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: CHUCK-LYNN
Current User Name: Chuck
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\WINDOWS\System32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
PRC - C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
PRC - C:\WINDOWS\System32\CTsvcCDA.EXE (Creative Technology Ltd)
PRC - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe (Intel Corporation)
PRC - C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)
PRC - C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
PRC - C:\WINDOWS\System32\HPZipm12.exe (HP)
PRC - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\WINDOWS\System32\MsPMSPSv.exe (Microsoft Corporation)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe (Intel Corporation)
PRC - C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe (Creative Technology Ltd)
PRC - C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe (CyberLink Corp.)
PRC - C:\WINDOWS\System32\dla\tfswctrl.exe (Sonic Solutions)
PRC - C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
PRC - C:\Program Files\Qurb\QSP-3.0.311.7\QOELoader.exe (Qurb, Inc.)
PRC - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
PRC - C:\Program Files\Broadcom\BACS\BacsTray.exe (Broadcom Corporation)
PRC - C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe (Intel Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\DellSupport\DSAgnt.exe (Gteko Ltd.)
PRC - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
PRC - C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe (Linksys, a Division of Cisco Systems, Inc.)
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
PRC - C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
PRC - C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe (Hewlett-Packard Co.)
PRC - C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit, Inc.)
PRC - C:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, Inc.)
PRC - C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
PRC - C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
PRC - C:\Documents and Settings\Chuck\Desktop\OTL.exe (OldTimer Tools)
========== Win32 Services (SafeList) ==========
SRV - (AdobeActiveFileMonitor7.0 [Auto | Running]) – C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
SRV - (Apple Mobile Device [Auto | Running]) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (Ati HotKey Poller [Auto | Running]) – C:\WINDOWS\System32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (ATI Smart [Auto | Stopped]) – C:\WINDOWS\System32\ati2sgag.exe ()
SRV - (Automatic LiveUpdate Scheduler [Auto | Running]) – C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
SRV - (Bonjour Service [Auto | Running]) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (ccEvtMgr [Auto | Running]) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccSetMgr [Auto | Running]) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (CLTNetCnService [Auto | Running]) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (comHost [On_Demand | Stopped]) – C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe (Symantec Corporation)
SRV - (Creative Service for CDROM Access [Auto | Running]) – C:\WINDOWS\System32\CTsvcCDA.EXE (Creative Technology Ltd)
SRV - (DSBrokerService [On_Demand | Stopped]) – C:\Program Files\DellSupport\brkrsvc.exe ()
SRV - (FLEXnet Licensing Service [On_Demand | Stopped]) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) – c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (gupdate1c9f210d4c28a4c [Auto | Stopped]) – C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (helpsvc [Auto | Running]) – C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (IAANTMon [Auto | Running]) – C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe (Intel Corporation)
SRV - (IDriverT [On_Demand | Stopped]) – C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (idsvc [Unknown | Stopped]) – c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (InstallShield Licensing Service [On_Demand | Stopped]) – C:\Program Files\Common Files\InstallShield Shared\Service\InstallShield Licensing Service.exe (Macrovision )
SRV - (iPod Service [On_Demand | Running]) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (JavaQuickStarterService [Auto | Running]) – C:\Program Files\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (LiveUpdate [On_Demand | Stopped]) – C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE (Symantec Corporation)
SRV - (LiveUpdate Notice [Auto | Running]) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (MDM [Auto | Running]) – C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing [Disabled | Stopped]) – c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (Pml Driver HPZ12 [Auto | Running]) – C:\WINDOWS\System32\HPZipm12.exe (HP)
SRV - (sprtsvc_dellsupportcenter [Auto | Running]) – C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (Symantec Core LC [On_Demand | Stopped]) – C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (WinDefend [Auto | Running]) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV - (WMDM PMSP Service [Auto | Running]) – C:\WINDOWS\System32\MsPMSPSv.exe (Microsoft Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (AliIde [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (amdagp [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (asc [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550 [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (ati2mtag [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.)
DRV - (b57w2k [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\b57xp32.sys (Broadcom Corporation)
DRV - (BCMNTIO [Auto | Running]) – C:\Program Files\CheckIt\Diagnostics\BCMNTIO.SYS ()
DRV - (bvrp_pci [On_Demand | Stopped]) – C:\WINDOWS\System32\drivers\bvrp_pci.sys ()
DRV - (CmdIde [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (COH_Mon [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\COH_Mon.sys (Symantec Corporation)
DRV - (CO_Mon [Auto | Running]) – C:\WINDOWS\System32\drivers\CO_Mon.sys (Symantec Corporation)
DRV - (ctsfm2k [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\ctsfm2k.sys (Creative Technology Ltd)
DRV - (dac2w2k [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (drvmcdb [Boot | Running]) – C:\WINDOWS\system32\drivers\drvmcdb.sys (Sonic Solutions)
DRV - (drvnddm [Auto | Running]) – C:\WINDOWS\System32\drivers\drvnddm.sys (Sonic Solutions)
DRV - (DSproct [On_Demand | Running]) – C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys (Gteko Ltd.)
DRV - (dsunidrv [Auto | Running]) – C:\WINDOWS\System32\DRIVERS\dsunidrv.sys (Gteko Ltd.)
DRV - (E100B [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\e100b325.sys (Intel Corporation)
DRV - (eeCtrl [System | Running]) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv [On_Demand | Running]) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (GEARAspiWDM [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (GoProto [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\goprot51.sys (Gteko Ltd.)
DRV - (HPZid412 [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\HPZid412.sys (HP)
DRV - (HPZipr12 [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\HPZipr12.sys (HP)
DRV - (HPZius12 [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\HPZius12.sys (HP)
DRV - (iaStor [Boot | Running]) – C:\WINDOWS\system32\drivers\iaStor.sys (Intel Corporation)
DRV - (IntelC51 [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\IntelC51.sys (Intel Corporation)
DRV - (IntelC52 [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\IntelC52.sys (Intel Corporation)
DRV - (IntelC53 [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\IntelC53.sys (Intel Corporation)
DRV - (MAPMEM [Auto | Running]) – C:\Program Files\CheckIt\Diagnostics\MAPMEM.SYS ()
DRV - (MCSTRM [Auto | Running]) – C:\WINDOWS\System32\drivers\mcstrm.sys (RealNetworks, Inc.)
DRV - (MODEMCSA [On_Demand | Running]) – C:\WINDOWS\System32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (mohfilt [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\mohfilt.sys (Intel Corporation)
DRV - (mraid35x [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (NAVENG [On_Demand | Running]) – C:\Program Files\Common Files\Symantec Shared\VirusDefs\20090626.016\NAVENG.SYS (Symantec Corporation)
DRV - (NAVEX15 [On_Demand | Running]) – C:\Program Files\Common Files\Symantec Shared\VirusDefs\20090626.016\NAVEX15.SYS (Symantec Corporation)
DRV - (nv [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\nv4_mini.sys (NVIDIA Corporation)
DRV - (omci [System | Running]) – C:\WINDOWS\System32\DRIVERS\omci.sys (Dell Computer Corporation)
DRV - (ossrv [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\ctoss2k.sys (Creative Technology Ltd.)
DRV - (P17 [On_Demand | Running]) – C:\WINDOWS\System32\drivers\P17.sys (Creative Technology Ltd.)
DRV - (PfModNT [Auto | Running]) – C:\WINDOWS\System32\drivers\PfModNT.sys (Creative Technology Ltd.)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (ql1080 [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql12160 [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1280 [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (SDDMI2 [On_Demand | Stopped]) – C:\WINDOWS\System32\DDMI2.sys (Gteko Ltd.)
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (sisagp [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (Sparrow [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (SPBBCDrv [System | Running]) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (SRTSP [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPL [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\SRTSPL.SYS (Symantec Corporation)
DRV - (SRTSPX [System | Running]) – C:\WINDOWS\System32\Drivers\SRTSPX.SYS (Symantec Corporation)
DRV - (sscdbhk5 [System | Running]) – C:\WINDOWS\System32\drivers\sscdbhk5.sys (Sonic Solutions)
DRV - (ssrtln [System | Running]) – C:\WINDOWS\System32\drivers\ssrtln.sys (Sonic Solutions)
DRV - (symc810 [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (symc8xx [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (SYMDNS [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMDNS.SYS (Symantec Corporation)
DRV - (SymEvent [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SYMFW [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMFW.SYS (Symantec Corporation)
DRV - (SYMIDS [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMIDS.SYS (Symantec Corporation)
DRV - (SYMIDSCO [On_Demand | Running]) – C:\Program Files\Common Files\Symantec Shared\SymcData\ipsdefs\20090618.001\SymIDSco.sys (Symantec Corporation)
DRV - (SymIM [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\SymIM.sys (Symantec Corporation)
DRV - (SymIMMP [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\SymIM.sys (Symantec Corporation)
DRV - (symlcbrd [Auto | Running]) – C:\WINDOWS\System32\drivers\symlcbrd.sys (Symantec Corporation)
DRV - (SYMNDIS [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMNDIS.SYS (Symantec Corporation)
DRV - (SYMREDRV [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (SYMTDI [System | Running]) – C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (sym_hi [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (sym_u3 [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (Sparrow [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (SPBBCDrv [System | Running]) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (SRTSP [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPL [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\SRTSPL.SYS (Symantec Corporation)
DRV - (SRTSPX [System | Running]) – C:\WINDOWS\System32\Drivers\SRTSPX.SYS (Symantec Corporation)
DRV - (sscdbhk5 [System | Running]) – C:\WINDOWS\System32\drivers\sscdbhk5.sys (Sonic Solutions)
DRV - (ssrtln [System | Running]) – C:\WINDOWS\System32\drivers\ssrtln.sys (Sonic Solutions)
DRV - (symc810 [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (symc8xx [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (SYMDNS [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMDNS.SYS (Symantec Corporation)
DRV - (SymEvent [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SYMFW [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMFW.SYS (Symantec Corporation)
DRV - (SYMIDS [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMIDS.SYS (Symantec Corporation)
DRV - (SYMIDSCO [On_Demand | Running]) – C:\Program Files\Common Files\Symantec Shared\SymcData\ipsdefs\20090618.001\SymIDSco.sys (Symantec Corporation)
DRV - (SymIM [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\SymIM.sys (Symantec Corporation)
DRV - (SymIMMP [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\SymIM.sys (Symantec Corporation)
DRV - (symlcbrd [Auto | Running]) – C:\WINDOWS\System32\drivers\symlcbrd.sys (Symantec Corporation)
DRV - (SYMNDIS [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMNDIS.SYS (Symantec Corporation)
DRV - (SYMREDRV [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (SYMTDI [System | Running]) – C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (sym_hi [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (sym_u3 [Boot | Stopped]) – C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://q13.trb.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/02/17 19:43:22 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\[removed]: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2009/01/04 11:14:20 | 00,000,000 | —D | M]
O1 HOSTS File: (734 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [bacstray] C:\Program Files\Broadcom\BACS\BacsTray.exe (Broadcom Corporation)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [CTSysVol] C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [dla] C:\WINDOWS\System32\dla\tfswctrl.exe (Sonic Solutions)
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [DVDLauncher] C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe (CyberLink Corp.)
O4 - HKLM..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe (Hewlett-Packard)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe (Intel Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [MimBoot] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mimboot.exe (Musicmatch, Inc.)
O4 - HKLM..\Run: [osCheck] C:\Program Files\Norton 360\osCheck.exe (Symantec Corporation)
O4 - HKLM..\Run: [QOELOADER] C:\Program Files\Qurb\QSP-3.0.311.7\QOELoader.exe (Qurb, Inc.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Synchronization Manager] C:\WINDOWS\System32\mobsync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DellSupport] File not found
O4 - HKCU..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKCU..\Run: [EasyLinkAdvisor] File not found
O4 - HKCU..\Run: [Evidence Eliminator] C:\Program Files\Evidence Eliminator\ee.exe File not found
O4 - HKCU..\Run: [HijackThis startup scan] File not found
O4 - HKCU..\Run: [MSMSGS] C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O4 - HKCU..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Nikon Monitor.lnk = C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE (WinZip Computing, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O8 - Extra context menu item: E&xport; to Microsoft Excel - C:\Program Files\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation)
O15 - HKLM\..Trusted Domains: musicmatch.com ([online] https in Trusted sites)
O15 - HKLM\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: microsoft.com ([*.update] http in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoft.com ([download.windowsupdate] http in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoft.com ([update] http in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoft.com ([wer] http in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoft.com ([www.update] http in Trusted sites)
O15 - HKCU\..Trusted Domains: microsoft.com ([www.update] https in Trusted sites)
O15 - HKCU\..Trusted Domains: windowsupdate.com ([download] http in Trusted sites)
O15 - HKCU\..Trusted Domains: 2 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089}
http://office.microsoft.com/templates/ieawsdc.cab (Microsoft Office Template and Media Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/8/b…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {34F12AFD-E9B5-492A-85D2-40FA4535BE83}
http://www.symantec.com/techsupp/activedata/nprdtinf.cab (AxProdInfoCtl Class)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.4.1.cab (DLM Control)
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-3-36.cab (EPUImageControl Class)
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://www.update.microsoft.com/microsoftu…b?1210951203531 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} http://www.crucial.com/controls/cpcScanner.cab (Crucial cpcScan)
O16 - DPF: {C7DB51B4-BCF7-4923-8874-7F1A0DC92277} http://office.microsoft.com/officeupdate/content/opuc4.cab (Office Update Installation Engine)
O16 - DPF: {CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941}
http://driveragent.com/files/driveragent.cab (Driver Agent ActiveX Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/01/13 13:59:06 | 00,000,619 | —- | M] () - C:\autoAlbum.log – [ NTFS ]
O32 - AutoRun File - [2004/08/10 11:04:08 | 00,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
========== Files/Folders - Created Within 30 Days ==========
[2009/06/26 15:45:49 | 00,513,536 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Chuck\Desktop\OTL.exe
[2009/06/26 15:44:57 | 00,033,792 | —- | C] () – C:\Documents and Settings\Chuck\My Documents\Rooter Log.doc
[2009/06/26 15:43:23 | 00,000,000 | —D | C] – C:\Rooter$
[2009/06/26 15:41:47 | 00,173,119 | —- | C] (Eric_71) – C:\Documents and Settings\Chuck\Desktop\Rooter.exe
[2009/06/26 15:34:01 | 00,083,968 | —- | C] () – C:\Documents and Settings\Chuck\My Documents\Malwarebytes Log.doc
[2009/06/26 15:17:00 | 00,000,000 | —D | C] – C:\Documents and Settings\Chuck\Application Data\Malwarebytes
[2009/06/26 15:16:57 | 00,000,696 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/06/26 15:16:54 | 00,038,160 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/06/26 15:16:53 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/06/26 15:16:52 | 00,019,096 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/06/26 15:16:52 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/06/26 11:18:44 | 00,001,734 | —- | C] () – C:\Documents and Settings\Chuck\Desktop\HijackThis.lnk
[2009/06/26 11:18:44 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/06/26 09:50:44 | 00,059,353 | —- | C] () – C:\Documents and Settings\Chuck\Desktop\AutoIDCards.pdf
[2009/06/21 13:46:47 | 00,000,000 | —D | C] – C:\Documents and Settings\Chuck\Desktop\backups
[2009/06/20 18:39:23 | 00,001,836 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2009/06/20 18:37:26 | 00,000,880 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009/06/20 18:37:05 | 00,000,000 | —D | C] – C:\Program Files\Google
[2009/06/18 01:09:17 | 02,823,586 | —- | C] () – C:\Documents and Settings\Chuck\Desktop\THECORRECTWAYTOANSWERTHEDOOR.wmv
[2009/06/14 10:07:25 | 01,127,767 | —- | C] () – C:\malpki.wmv
[2009/06/11 07:37:25 | 00,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieproxy.dll
[2009/06/11 07:37:25 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpshims.dll
[2009/06/10 11:39:32 | 00,000,000 | —D | C] – C:\Documents and Settings\Chuck\My Documents\Nikon Transfer
[2009/06/08 09:40:04 | 00,002,137 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2009/06/08 09:39:45 | 00,000,000 | —D | C] – C:\Program Files\iPod
[2009/06/08 09:39:41 | 00,000,000 | —D | C] – C:\Program Files\iTunes
[2009/06/08 09:39:41 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/06/08 09:39:21 | 00,000,000 | —D | C] – C:\Program Files\Bonjour
[2009/06/08 09:38:49 | 00,001,604 | —- | C] () – C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2009/06/08 09:37:20 | 00,000,284 | —- | C] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/06/08 09:37:19 | 00,000,000 | —D | C] – C:\Documents and Settings\Chuck\Local Settings\Application Data\Apple
[2009/06/08 09:37:16 | 00,000,000 | —D | C] – C:\Program Files\Apple Software Update
[2009/06/08 09:36:41 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2009/06/08 09:36:40 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Apple
[2009/06/08 09:35:31 | 00,000,000 | —D | C] – C:\Documents and Settings\Chuck\Local Settings\Application Data\Apple Computer
[2009/06/06 10:36:35 | 00,001,578 | —- | C] () – C:\Documents and Settings\Chuck\Desktop\LimeWire 5.1.3.lnk
[2009/06/06 10:30:24 | 00,000,000 | —D | C] – C:\Documents and Settings\Chuck\My Documents\LimeWire
[2009/06/06 10:29:13 | 00,000,000 | —D | C] – C:\Documents and Settings\Chuck\Application Data\LimeWire
[2009/06/06 10:28:56 | 00,000,000 | —D | C] – C:\Program Files\LimeWire
[2009/06/06 09:36:37 | 00,000,000 | —D | C] – C:\Documents and Settings\Chuck\My Documents\Incomplete
[2009/06/05 08:14:28 | 00,000,420 | -H– | C] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{086F4E41-4B7F-4D3C-8C76-346DEDB09CC2}.job
[2009/06/05 08:02:13 | 00,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2009/06/05 08:01:42 | 00,102,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iecompat.dll
[2009/06/05 08:00:36 | 00,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2008/06/07 13:36:15 | 00,000,002 | —- | C] () – C:\WINDOWS\msoffice.ini
[2007/07/10 18:11:50 | 00,000,118 | —- | C] () – C:\WINDOWS\System32\MRT.INI
[2007/06/09 08:51:43 | 00,044,544 | —- | C] () – C:\WINDOWS\System32\gif89.dll
[2007/06/09 08:49:31 | 00,000,563 | —- | C] () – C:\WINDOWS\SIERRA.INI
[2006/10/27 21:34:31 | 00,000,430 | —- | C] () – C:\WINDOWS\dssar.ini
[2006/07/13 17:08:51 | 00,004,272 | —- | C] () – C:\WINDOWS\System32\drivers\bvrp_pci.sys
[2006/04/28 18:16:06 | 00,000,023 | —- | C] () – C:\WINDOWS\BlendSettings.ini
[2006/04/18 16:07:34 | 00,000,000 | —- | C] () – C:\WINDOWS\hpqEmlSz.INI
[2006/04/10 16:43:08 | 00,000,206 | —- | C] () – C:\WINDOWS\HPGdiPlus.ini
[2005/07/10 13:37:34 | 00,000,044 | —- | C] () – C:\WINDOWS\liveup.ini
[2005/06/26 10:23:15 | 00,001,541 | —- | C] () – C:\WINDOWS\cdPlayer.ini
[2005/06/12 10:06:18 | 00,000,041 | —- | C] () – C:\WINDOWS\loc2.INI
[2005/06/12 10:06:13 | 00,000,041 | —- | C] () – C:\WINDOWS\FindServ.INI
[2005/06/10 00:25:00 | 00,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2005/06/05 08:58:21 | 00,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2005/06/05 08:50:21 | 00,000,138 | —- | C] () – C:\WINDOWS\wininit.ini
[2005/06/05 08:41:58 | 00,000,231 | —- | C] () – C:\WINDOWS\AC3API.INI
[2005/06/05 08:41:50 | 00,003,278 | —- | C] () – C:\WINDOWS\System32\LudaP17.ini
[2005/06/05 08:41:50 | 00,000,029 | —- | C] () – C:\WINDOWS\System32\ctzapxx.ini
[2005/06/05 08:41:45 | 00,000,072 | —- | C] () – C:\WINDOWS\SBWIN.INI
[2005/06/05 08:16:58 | 00,000,367 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2005/01/28 06:08:34 | 00,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2004/08/10 11:13:12 | 00,000,780 | —- | C] () – C:\WINDOWS\ORUN32.INI
[2004/08/10 11:04:08 | 00,000,751 | —- | C] () – C:\WINDOWS\WIN.INI
[2004/08/10 10:57:52 | 00,000,227 | —- | C] () – C:\WINDOWS\SYSTEM.INI
[2004/08/04 03:00:00 | 00,001,793 | —- | C] () – C:\WINDOWS\System32\FXSPERF.INI
[1979/12/31 22:00:00 | 00,065,536 | —- | C] ( ) – C:\WINDOWS\System32\A3d.dll
[1979/12/31 22:00:00 | 00,060,928 | —- | C] () – C:\WINDOWS\System32\P17.dll
[1979/12/31 22:00:00 | 00,053,248 | —- | C] () – C:\WINDOWS\System32\P17CPI.dll
========== Files - Modified Within 30 Days ==========
[2009/06/26 15:50:00 | 00,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{7C0A0691-A429-4DE7-9529-FD46EBE3E96F}.job
[2009/06/26 15:45:58 | 00,513,536 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Chuck\Desktop\OTL.exe
[2009/06/26 15:44:57 | 00,033,792 | —- | M] () – C:\Documents and Settings\Chuck\My Documents\Rooter Log.doc
[2009/06/26 15:41:48 | 00,173,119 | —- | M] (Eric_71) – C:\Documents and Settings\Chuck\Desktop\Rooter.exe
[2009/06/26 15:38:56 | 00,000,330 | -H– | M] () – C:\WINDOWS\tasks\MP Scheduled Scan.job
[2009/06/26 15:37:20 | 00,000,880 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachine.job
[2009/06/26 15:35:57 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/06/26 15:35:47 | 00,002,048 | –S- | M] () – C:\WINDOWS\BOOTSTAT.DAT
[2009/06/26 15:34:01 | 00,083,968 | —- | M] () – C:\Documents and Settings\Chuck\My Documents\Malwarebytes Log.doc
[2009/06/26 15:16:57 | 00,000,696 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/06/26 15:06:41 | 00,000,734 | —- | M] () – C:\WINDOWS\System32\drivers\ETC\hosts
[2009/06/26 12:57:32 | 00,000,420 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{086F4E41-4B7F-4D3C-8C76-346DEDB09CC2}.job
[2009/06/26 11:18:44 | 00,001,734 | —- | M] () – C:\Documents and Settings\Chuck\Desktop\HijackThis.lnk
[2009/06/26 09:50:44 | 00,059,353 | —- | M] () – C:\Documents and Settings\Chuck\Desktop\AutoIDCards.pdf
[2009/06/26 09:50:44 | 00,000,026 | —- | M] () – C:\WINDOWS\Zone.Identifier
[2009/06/26 09:30:22 | 00,002,385 | —- | M] () – C:\Documents and Settings\Chuck\Desktop\Microsoft Office PowerPoint Viewer 2007.lnk
[2009/06/22 20:59:12 | 00,025,088 | —- | M] () – C:\Documents and Settings\Chuck\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/06/22 20:00:00 | 00,000,622 | —- | M] () – C:\WINDOWS\tasks\Norton Internet Security - Run Full System Scan - Chuck.job
[2009/06/21 01:25:40 | 00,000,751 | —- | M] () – C:\WINDOWS\WIN.INI
[2009/06/21 01:25:40 | 00,000,227 | —- | M] () – C:\WINDOWS\SYSTEM.INI
[2009/06/21 01:25:40 | 00,000,211 | RHS- | M] () – C:\BOOT.INI
[2009/06/20 18:39:23 | 00,001,836 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Earth.lnk
[2009/06/18 16:23:16 | 00,000,020 | -H– | M] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2009/06/18 11:27:01 | 00,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/06/18 01:09:17 | 02,823,586 | —- | M] () – C:\Documents and Settings\Chuck\Desktop\THECORRECTWAYTOANSWERTHEDOOR.wmv
[2009/06/17 11:27:56 | 00,038,160 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/06/17 11:27:44 | 00,019,096 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/06/16 15:55:32 | 00,002,137 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2009/06/14 10:07:25 | 01,127,767 | —- | M] () – C:\malpki.wmv
[2009/06/12 17:26:19 | 00,002,307 | —- | M] () – C:\Documents and Settings\Chuck\Desktop\Microsoft Excel.lnk
[2009/06/12 03:10:55 | 00,402,328 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/06/12 03:02:37 | 00,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2009/06/08 09:38:49 | 00,001,604 | —- | M] () – C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2009/06/06 10:36:35 | 00,001,578 | —- | M] () – C:\Documents and Settings\Chuck\Desktop\LimeWire 5.1.3.lnk
[2009/06/01 09:51:12 | 23,635,392 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MRT.exe
[2009/05/31 16:12:20 | 00,002,206 | —- | M] () – C:\WINDOWS\System32\WPA.DBL
========== LOP Check ==========
[2009/06/26 15:16:53 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data
[2008/10/06 15:17:14 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2009/06/08 09:39:59 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2008/02/26 00:18:48 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Dell
[2008/12/27 20:45:37 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EnterNHelp
[2008/12/27 23:34:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\espionServerData
[2008/12/27 23:29:34 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FLEXnet
[2005/06/05 08:48:54 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Intuit
[2008/12/27 20:45:37 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Logs
[2008/03/28 00:15:31 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\n7-89-o9-3r-4t-r9
[2008/12/27 20:46:24 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nikon
[2005/06/10 00:34:35 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\OLYMPUS
[2007/03/18 12:06:59 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SadMan Software
[2005/06/05 08:15:56 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SBSI
[2008/06/16 08:30:01 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SecTaskMan
[2007/12/02 15:41:15 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SupportSoft
[2008/10/17 04:53:38 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2008/12/27 20:45:37 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ultima_T15
[2009/06/26 15:31:07 | 00,000,000 | -H-D | M] – C:\Documents and Settings\Chuck\Application Data
[2008/08/16 17:43:32 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\CyberLink
[2008/12/27 23:24:49 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\Download Manager
[2008/03/28 00:20:02 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\Eyeblaster
[2008/04/02 17:53:06 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\GameHouse
[2008/04/20 14:49:25 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\JLC's Software
[2005/06/14 22:02:30 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\Leadertech
[2009/06/19 09:04:49 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\LimeWire
[2006/08/07 22:00:58 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\Musicmatch
[2008/12/27 20:48:19 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\Nikon
[2008/08/09 14:58:27 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\Snood
[2006/06/08 11:46:52 | 00,000,000 | —D | M] – C:\Documents and Settings\Chuck\Application Data\Walgreens
[2009/06/18 11:27:01 | 00,000,284 | —- | M] () – C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2004/08/04 03:00:00 | 00,000,065 | RH– | M] () – C:\WINDOWS\Tasks\DESKTOP.INI
[2009/06/26 15:37:20 | 00,000,880 | —- | M] () – C:\WINDOWS\Tasks\GoogleUpdateTaskMachine.job
[2009/06/26 15:38:56 | 00,000,330 | -H– | M] () – C:\WINDOWS\Tasks\MP Scheduled Scan.job
[2009/06/22 20:00:00 | 00,000,622 | —- | M] () – C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Chuck.job
[2009/06/26 15:35:57 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT
[2009/06/26 12:57:32 | 00,000,420 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{086F4E41-4B7F-4D3C-8C76-346DEDB09CC2}.job
[2009/06/26 15:50:00 | 00,000,422 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{7C0A0691-A429-4DE7-9529-FD46EBE3E96F}.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 143 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 106 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CAAA7DD7
< End of report >
