OTL logfile created on: 10/18/2009 7:16:40 AM - Run 1
OTL by OldTimer - Version 3.0.21.0 Folder = C:\Documents and Settings\Joe\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.40 Gb Available Physical Memory | 70.23% Memory free
3.85 Gb Paging File | 3.30 Gb Available in Paging File | 85.85% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298.08 Gb Total Space | 247.01 Gb Free Space | 82.87% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 485.82 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 372.60 Gb Total Space | 237.73 Gb Free Space | 63.80% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: SYLVESTE-EACB35
Current User Name: Joe
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\Joe\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe ( )
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe (Panda Software)
PRC - C:\Program Files\Intuit\QuickBooks 2005\QBDBMgrN.exe (iAnywhere Solutions, Inc.)
PRC - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\APVXDWIN.EXE (Panda Software International)
PRC - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\AVENGINE.EXE (Panda Software International)
PRC - c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE (Panda Software International)
PRC - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe (Panda Software International)
PRC - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe (Panda Software International)
PRC - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe (Panda Software International)
PRC - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\psimsvc.exe (Panda Software International)
PRC - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe (Panda Software International)
PRC - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\WebProxy.exe (Panda Security International)
PRC - C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
PRC - C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe (Seagate Technology LLC)
PRC - C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe (Webroot Software, Inc. (www.webroot.com))
PRC - C:\Program Files\Webroot\WebrootSecurity\SpySweeperUI.exe (Webroot Software, Inc.)
PRC - C:\Program Files\Webroot\WebrootSecurity\SSU.EXE (Webroot Software, Inc. (www.webroot.com))
PRC - C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe (Webroot Software, Inc. )
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\WINDOWS\System32\HPZipm12.exe (HP)
PRC - C:\WINDOWS\System32\nvsvc32.exe (NVIDIA Corporation)
========== Win32 Services (SafeList) ==========
SRV - (aawservice [Auto | Running]) – C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)
SRV - (Apple Mobile Device [Disabled | Stopped]) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (aspnet_state [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation)
SRV - (Bonjour Service [Disabled | Stopped]) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (FLEXnet Licensing Service [Disabled | Stopped]) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (FreeAgentGoNext Service [Auto | Running]) – C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe (Seagate Technology LLC)
SRV - (gupdate1ca49c726445554 [Auto | Stopped]) – C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (helpsvc [Auto | Running]) – C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (iPod Service [Disabled | Stopped]) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (LVCOMSer [Disabled | Stopped]) – C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.)
SRV - (LVPrcSrv [Auto | Running]) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (LVSrvLauncher [Disabled | Stopped]) – C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe (Logitech Inc.)
SRV - (MDM [Auto | Running]) – C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (Microsoft Corporation)
SRV - (NVSvc [Auto | Running]) – C:\WINDOWS\System32\nvsvc32.exe (NVIDIA Corporation)
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (Panda Software Controller [Auto | Running]) – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PsCtrls.exe (Panda Software International)
SRV - (PAVFNSVR [Auto | Running]) – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PavFnSvr.exe (Panda Software International)
SRV - (PavPrSrv [Auto | Running]) – C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe (Panda Software)
SRV - (PAVSRV [Auto | Running]) – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavsrv51.exe (Panda Software International)
SRV - (Pml Driver HPZ12 [Auto | Running]) – C:\WINDOWS\System32\HPZipm12.exe (HP)
SRV - (PSHost [Auto | Running]) – c:\program files\panda security\panda antivirus + firewall 2008\firewall\PSHOST.EXE (Panda Software International)
SRV - (PSIMSVC [Auto | Running]) – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\psimsvc.exe (Panda Software International)
SRV - (QBCFMonitorService [Auto | Running]) – C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe ( )
SRV - (QBFCService [On_Demand | Stopped]) – C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe (Intuit Inc.)
SRV - (QuickBooksDB17 [Auto | Running]) – C:\Program Files\Intuit\QuickBooks 2005\QBDBMgrN.exe (iAnywhere Solutions, Inc.)
SRV - (TPSrv [Auto | Running]) – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\TPSrv.exe (Panda Software International)
SRV - (WebrootSpySweeperService [Auto | Running]) – C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe (Webroot Software, Inc. (www.webroot.com))
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)
SRV - (WRConsumerService [Auto | Running]) – C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe (Webroot Software, Inc. )
========== Driver Services (SafeList) ==========
DRV - (ADIDTSFiltService [On_Demand | Running]) – C:\WINDOWS\System32\drivers\adidts.sys (Analog Devices, Inc.)
DRV - (ADIHdAudAddService [On_Demand | Running]) – C:\WINDOWS\System32\drivers\ADIHdAud.sys (Analog Devices, Inc.)
DRV - (AEAudio [On_Demand | Running]) – C:\WINDOWS\System32\drivers\AEAudio.sys (Andrea Electronics Corporation)
DRV - (AegisP [Auto | Running]) – C:\WINDOWS\System32\DRIVERS\AegisP.sys (Meetinghouse Data Communications)
DRV - (APPFLT [System | Running]) – C:\WINDOWS\System32\Drivers\APPFLT.SYS (Panda Software)
DRV - (AvFlt [On_Demand | Running]) – File not found
DRV - (CDRPDACC [Auto | Running]) – C:\Program Files\321Studios\Shared\CDRPDACC.SYS (Arrowkey)
DRV - (cpoint [Auto | Running]) – C:\WINDOWS\System32\drivers\cpoint.sys (Panda Software)
DRV - (dot4ufd [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\hppaufd0.sys (HP)
DRV - (DSAFLT [System | Running]) – C:\WINDOWS\System32\Drivers\DSAFLT.SYS (Panda Software International)
DRV - (FilterService [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\lvuvcflt.sys (Logitech Inc.)
DRV - (FNETMON [System | Running]) – C:\WINDOWS\System32\Drivers\fnetmon.SYS (Panda Software)
DRV - (GEARAspiWDM [On_Demand | Running]) – C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (HDAudBus [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\HDAudBus.sys (Windows ® Server 2003 DDK provider)
DRV - (HPZid412 [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\HPZid412.sys (HP)
DRV - (HPZipr12 [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\HPZipr12.sys (HP)
DRV - (HPZius12 [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\HPZius12.sys (HP)
DRV - (IDSFLT [System | Running]) – C:\WINDOWS\System32\Drivers\IDSFLT.SYS (Panda Software International)
DRV - (Iviaspi [On_Demand | Running]) – C:\WINDOWS\System32\drivers\iviaspi.sys (InterVideo, Inc.)
DRV - (ivicd [Boot | Running]) – C:\WINDOWS\system32\drivers\ivicd.sys (InterVideo)
DRV - (iviudf [On_Demand | Stopped]) – C:\WINDOWS\System32\drivers\IviUdf.sys (InterVideo)
DRV - (JGOGO [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\JGOGO.sys (JMicron )
DRV - (JRAID [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\jraid.sys (JMicron Technology Corp.)
DRV - (LVcKap [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\LVcKap.sys (Logitech Inc.)
DRV - (LVMVDrv [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\LVMVDrv.sys (Logitech Inc.)
DRV - (lvpopflt [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\lvpopflt.sys (Logitech Inc.)
DRV - (LVPr2Mon [On_Demand | Running]) – C:\WINDOWS\System32\drivers\LVPr2Mon.sys ()
DRV - (lvselsus [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\lvselsus.sys (Logitech Inc.)
DRV - (LVUSBSta [On_Demand | Stopped]) – C:\WINDOWS\System32\drivers\LVUSBSta.sys (Logitech Inc.)
DRV - (LVUVC [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\lvuvc.sys (Logitech Inc.)
DRV - (MTsensor [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\ASACPI.sys ()
DRV - (NETFLTDI [System | Running]) – C:\WINDOWS\System32\Drivers\NETFLTDI.SYS (Panda Software)
DRV - (NETIMFLT [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\netimflt.sys (Panda Software)
DRV - (NETIMFLT01050097 [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\netimflt.sys (Panda Software)
DRV - (NuidFltr [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\NuidFltr.sys (Microsoft Corporation)
DRV - (nv [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\nv4_mini.sys (NVIDIA Corporation)
DRV - (pavboot [Boot | Running]) – C:\WINDOWS\system32\drivers\pavboot.sys (Panda Security, S.L.)
DRV - (PAVDRV [Auto | Running]) – C:\WINDOWS\System32\DRIVERS\pavdrv51.sys (Panda Software International)
DRV - (PavProc [Auto | Running]) – C:\WINDOWS\System32\DRIVERS\PavProc.sys (Panda Software International)
DRV - (PavSRK.sys [On_Demand | Running]) – File not found
DRV - (PavTPK.sys [On_Demand | Running]) – File not found
DRV - (Pcouffin [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\Pcouffin.sys (VSO Software)
DRV - (Pfc [On_Demand | Running]) – C:\WINDOWS\System32\drivers\pfc.sys (Padus, Inc.)
DRV - (Point32 [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\point32.sys (Microsoft Corporation)
DRV - (Ptilink [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.)
DRV - (PxHelp20 [Boot | Running]) – C:\WINDOWS\System32\Drivers\PxHelp20.sys (Sonic Solutions)
DRV - (RTLWUSB [On_Demand | Running]) – C:\WINDOWS\System32\DRIVERS\RTL8187.sys (Realtek Semiconductor Corporation )
DRV - (Secdrv [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (ShldDrv [System | Running]) – C:\WINDOWS\System32\Drivers\ShlDrv51.sys (Panda Software)
DRV - (SMSFLT [System | Running]) – C:\WINDOWS\System32\Drivers\SMSFLT.SYS (Panda Software International)
DRV - (SRS_ViewSonic [On_Demand | Stopped]) – C:\WINDOWS\System32\drivers\srs_ViewSonic_i386.sys ()
DRV - (ssfs0bbc [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\ssfs0bbc.sys (Webroot Software, Inc. (www.webroot.com))
DRV - (sshrmd [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\sshrmd.sys (Webroot Software, Inc. (www.webroot.com))
DRV - (ssidrv [Boot | Running]) – C:\WINDOWS\system32\DRIVERS\ssidrv.sys (Webroot Software, Inc. (www.webroot.com))
DRV - (SymEvent [On_Demand | Stopped]) – C:\Program Files\Symantec\SYMEVENT.SYS (Symantec Corporation)
DRV - (USBAAPL [On_Demand | Stopped]) – C:\WINDOWS\System32\Drivers\usbaapl.sys (Apple, Inc.)
DRV - (usbaudio [On_Demand | Stopped]) – C:\WINDOWS\System32\drivers\usbaudio.sys (Microsoft Corporation)
DRV - (WNMFLT [System | Running]) – C:\WINDOWS\System32\Drivers\WNMFLT.SYS (Panda Software International)
DRV - (yukonwxp [On_Demand | Stopped]) – C:\WINDOWS\System32\DRIVERS\yk51x86.sys (Marvell)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.microsoft.com/isapi/redir.dll?p…ER}&ar=home
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.kauaibeachrentals.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.6.2
FF - prefs.js..extensions.enabledItems: {3112ca9c-de6d-4884-a869-9855de68056c}:6.1.20090917Wb1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:1.5.4.20081105
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.14
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/10/10 19:47:52 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/10/10 12:06:37 | 00,000,000 | —D | M]
[2008/08/28 20:20:00 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\mozilla\Extensions
[2008/08/28 20:20:00 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/10/16 17:17:06 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\mozilla\Firefox\Profiles\ux0htms7.default\extensions
[2009/10/05 19:44:57 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\mozilla\Firefox\Profiles\ux0htms7.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2009/10/02 09:49:52 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\mozilla\Firefox\Profiles\ux0htms7.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/10/05 17:03:52 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\mozilla\Firefox\Profiles\ux0htms7.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009/10/16 17:17:06 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/09/13 07:48:39 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/03/07 14:15:49 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}
[2008/04/19 11:05:12 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
[2007/11/28 18:20:35 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\talkback@mozilla(2).org
[2009/09/13 07:48:34 | 00,023,032 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/09/13 07:48:34 | 00,134,648 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/09/13 07:48:36 | 00,065,528 | —- | M] (mozilla.org) – C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2007/03/22 19:23:30 | 00,017,248 | —- | M] (Microsoft Corporation) – C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL
[2009/02/27 12:13:42 | 00,103,792 | —- | M] (Adobe Systems Inc.) – C:\Program Files\mozilla firefox\plugins\nppdf32.dll
[2009/10/10 06:34:00 | 00,140,864 | —- | M] (RealNetworks, Inc.) – C:\Program Files\mozilla firefox\plugins\nppl3260.dll
[2009/10/10 12:06:35 | 00,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin.dll
[2009/10/10 12:06:35 | 00,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll
[2009/10/10 12:06:35 | 00,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll
[2009/10/10 12:06:35 | 00,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll
[2009/10/10 12:06:36 | 00,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll
[2009/10/10 12:06:36 | 00,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll
[2009/10/10 12:06:36 | 00,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll
[2009/10/10 06:34:09 | 00,008,192 | —- | M] (RealNetworks, Inc.) – C:\Program Files\mozilla firefox\plugins\nprjplug.dll
[2009/10/10 06:33:56 | 00,094,208 | —- | M] (RealNetworks, Inc.) – C:\Program Files\mozilla firefox\plugins\nprpjplug.dll
[2009/05/05 05:36:57 | 00,001,394 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2009/05/05 05:36:57 | 00,002,193 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2009/05/05 05:36:57 | 00,001,534 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2009/05/05 05:36:57 | 00,002,343 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009/05/05 05:36:57 | 00,001,706 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/05/05 05:36:57 | 00,001,178 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2009/05/05 05:36:57 | 00,000,792 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo.xml
O1 HOSTS File: (734 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O4 - HKLM..\Run: [APVXDWIN] C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\APVXDWIN.EXE (Panda Software International)
O4 - HKLM..\Run: [JMB36X Configure] C:\WINDOWS\System32\JMRaidTool.exe (JMicron Technology Corp.)
O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMCTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [SpySweeper] C:\Program Files\Webroot\WebrootSecurity\SpySweeperUI.exe (Webroot Software, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavlsp.dll (Panda Software International)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavlsp.dll (Panda Software International)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavlsp.dll (Panda Software International)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\pavlsp.dll (Panda Software International)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} http://office.microsoft.com/officeupdate/content/opuc3.cab (Office Update Installation Engine)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C}
http://update.microsoft.com/windowsupdate/…b?1158470061578 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://update.microsoft.com/microsoftupdat…b?1158609863000 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_09)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avldr: DllName - avldr.dll - C:\WINDOWS\System32\avldr.dll (Panda Software International)
O20 - Winlogon\Notify\WRNotifier: DllName - WRLogonNTF.dll - File not found
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/16 17:04:02 | 00,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
O35 - comfile [open] – "%1" %* File not found
O35 - exefile [open] – "%1" %* File not found
========== Files/Folders - Created Within 30 Days ==========
[13 C:\WINDOWS\*.tmp files]
[2009/09/30 12:29:27 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/10/05 19:45:04 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Google
[2009/10/14 13:03:21 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/10/10 06:34:37 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Real
[2009/10/12 12:20:03 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Webroot
[2009/10/05 19:46:49 | 00,000,000 | —D | C] – C:\Documents and Settings\Joe\Application Data\iPodifier
[2009/10/14 13:03:29 | 00,000,000 | —D | C] – C:\Documents and Settings\Joe\Application Data\Malwarebytes
[2009/10/05 16:56:26 | 00,000,000 | —D | C] – C:\Documents and Settings\Joe\Application Data\vlc
[2009/10/12 12:20:04 | 00,000,000 | —D | C] – C:\Documents and Settings\Joe\Application Data\Webroot
[2009/10/14 07:41:06 | 00,000,000 | —D | C] – C:\Documents and Settings\Joe\Local Settings\Application Data\PCHealth
[2009/10/10 06:34:41 | 00,000,000 | —D | C] – C:\Documents and Settings\Joe\Local Settings\Application Data\Real
[2009/10/10 06:45:01 | 00,000,000 | —D | C] – C:\Documents and Settings\Joe\Local Settings\Application Data\Temp
[3 C:\Documents and Settings\Joe\My Documents\*.tmp files]
[2009/10/10 06:33:51 | 00,000,000 | —D | C] – C:\Program Files\Common Files\xing shared
[2009/10/02 09:35:48 | 00,000,000 | —D | C] – C:\Program Files\CCleaner
[2009/10/05 17:12:50 | 00,000,000 | —D | C] – C:\Program Files\ConvertHelper
[2009/10/05 16:55:30 | 00,000,000 | —D | C] – C:\Program Files\iPodifier
[2009/10/14 13:03:21 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/10/16 10:22:43 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/10/12 12:20:03 | 00,000,000 | —D | C] – C:\Program Files\Webroot
[2009/10/18 07:15:11 | 00,521,216 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Joe\Desktop\OTL.exe
[2009/10/16 20:15:04 | 00,000,000 | -HSD | C] – C:\RECYCLER
[2009/10/16 10:43:53 | 00,000,000 | —D | C] – C:\WINDOWS\temp
[2009/10/16 00:13:58 | 00,000,000 | —D | C] – C:\WINDOWS\Temporary Internet Files
[2009/10/16 00:13:58 | 00,000,000 | —D | C] – C:\WINDOWS\Cookies
[2009/10/16 00:13:56 | 00,000,000 | —D | C] – C:\WINDOWS\Recent
[2009/10/16 00:13:56 | 00,000,000 | —D | C] – C:\WINDOWS\History
[2009/10/14 13:03:23 | 00,038,224 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/10/14 13:03:21 | 00,019,160 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/10/14 13:02:28 | 04,045,528 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\Joe\Desktop\mbam-setup.exe
[2009/10/12 21:35:20 | 00,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2009/10/12 21:35:20 | 00,161,792 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2009/10/12 21:35:20 | 00,136,704 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2009/10/12 21:35:20 | 00,031,232 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2009/10/12 21:35:16 | 00,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2009/10/12 21:34:58 | 00,000,000 | —D | C] – C:\Qoobox
[2009/10/12 12:20:04 | 01,563,008 | —- | C] (Webroot Software, Inc.) – C:\WINDOWS\WRSetup.dll
[2009/10/12 08:21:35 | 00,028,544 | —- | C] (Panda Security, S.L.) – C:\WINDOWS\System32\drivers\pavboot.sys
[2009/10/12 00:02:05 | 00,000,000 | —D | C] – C:\9dfddd438a0e0976f6dfd7342a39
[2009/10/12 00:02:01 | 00,000,000 | —D | C] – C:\e428179bf115bdf1fb5c653fc3
[2009/10/10 11:54:39 | 93,074,728 | —- | C] (Apple Inc.) – C:\Documents and Settings\Joe\Desktop\iTunesSetup.exe
[2009/10/10 06:36:13 | 00,000,000 | —D | C] – C:\Documents and Settings\Joe\My Documents\Downloads
[2009/10/10 06:34:00 | 00,185,920 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\rmoc3260.dll
[2009/10/10 06:33:53 | 00,006,656 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5016.dll
[2009/10/10 06:33:53 | 00,005,632 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5032.dll
[2009/10/05 17:12:21 | 03,782,822 | —- | C] (DownloadHelper ) – C:\Documents and Settings\Joe\Desktop\ConvertHelperSetup.exe
[2009/10/05 16:54:35 | 09,211,285 | —- | C] (InstallShield Software Corporation ) – C:\Documents and Settings\Joe\Desktop\iPodifierv1_50_0_4.exe
[2009/10/02 09:34:51 | 03,309,072 | —- | C] (Piriform Ltd) – C:\Documents and Settings\Joe\Desktop\ccsetup224.exe
[2008/06/09 21:41:30 | 00,047,360 | —- | C] (VSO Software) – C:\Documents and Settings\Joe\Application Data\pcouffin.sys
========== Files - Modified Within 30 Days ==========
[39 C:\WINDOWS\System32\*.tmp files]
[13 C:\WINDOWS\*.tmp files]
[3 C:\Documents and Settings\Joe\My Documents\*.tmp files]
[2009/10/18 07:15:20 | 00,521,216 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Joe\Desktop\OTL.exe
[2009/10/18 07:13:53 | 00,260,976 | —- | M] () – C:\WINDOWS\System32\drivers\etc\DsaFlt.rls.bck
[2009/10/18 07:13:53 | 00,260,976 | —- | M] () – C:\WINDOWS\System32\drivers\etc\DsaFlt.rls
[2009/10/18 07:13:53 | 00,000,056 | —- | M] () – C:\WINDOWS\System32\drivers\etc\DsaFlt.cfg.bck
[2009/10/18 07:13:53 | 00,000,056 | —- | M] () – C:\WINDOWS\System32\drivers\etc\DsaFlt.cfg
[2009/10/18 07:10:13 | 00,419,744 | —- | M] () – C:\WINDOWS\System32\drivers\APPFCONT.DAT.bck
[2009/10/18 07:10:13 | 00,419,744 | —- | M] () – C:\WINDOWS\System32\drivers\APPFCONT.DAT
[2009/10/18 07:10:13 | 00,001,264 | —- | M] () – C:\WINDOWS\System32\drivers\APPFLTR.CFG.bck
[2009/10/18 07:10:13 | 00,001,264 | —- | M] () – C:\WINDOWS\System32\drivers\APPFLTR.CFG
[2009/10/18 07:10:13 | 00,000,252 | —- | M] () – C:\WINDOWS\System32\drivers\etc\IdsFlt.cfg.bck
[2009/10/18 07:10:13 | 00,000,252 | —- | M] () – C:\WINDOWS\System32\drivers\etc\IdsFlt.cfg
[2009/10/18 07:10:13 | 00,000,064 | —- | M] () – C:\WINDOWS\System32\drivers\etc\NetFlt.cfg.bck
[2009/10/18 07:10:13 | 00,000,064 | —- | M] () – C:\WINDOWS\System32\drivers\etc\NetFlt.cfg
[2009/10/18 07:10:13 | 00,000,056 | —- | M] () – C:\WINDOWS\System32\drivers\etc\WnmFlt.cfg.bck
[2009/10/18 07:10:13 | 00,000,056 | —- | M] () – C:\WINDOWS\System32\drivers\etc\WnmFlt.cfg
[2009/10/18 07:10:13 | 00,000,056 | —- | M] () – C:\WINDOWS\System32\drivers\etc\SmsFlt.cfg.bck
[2009/10/18 07:10:13 | 00,000,056 | —- | M] () – C:\WINDOWS\System32\drivers\etc\SmsFlt.cfg
[2009/10/18 07:08:49 | 00,063,084 | —- | M] () – C:\WINDOWS\System32\nvapps.xml
[2009/10/18 07:08:40 | 00,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/10/18 07:08:37 | 00,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2009/10/18 07:07:26 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/10/18 07:06:50 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/10/17 16:45:00 | 00,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2009/10/17 16:24:00 | 00,000,256 | —- | M] () – C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job
[2009/10/16 21:27:32 | 00,001,393 | —- | M] () – C:\WINDOWS\imsins.BAK
[2009/10/16 21:01:31 | 00,032,768 | —- | M] () – C:\Documents and Settings\Joe\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/10/16 17:46:08 | 00,001,813 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2009/10/16 17:14:21 | 02,664,072 | —- | M] () – C:\Documents and Settings\Joe\Desktop\esetsmartinstaller_enu.exe
[2009/10/16 10:41:59 | 00,000,227 | —- | M] () – C:\WINDOWS\system.ini
[2009/10/16 10:22:43 | 00,001,734 | —- | M] () – C:\Documents and Settings\Joe\Desktop\HijackThis.lnk
[2009/10/14 13:03:26 | 00,000,696 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/10/14 13:02:54 | 04,045,528 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\Joe\Desktop\mbam-setup.exe
[2009/10/14 11:21:44 | 00,025,088 | —- | M] () – C:\Documents and Settings\Joe\My Documents\Aloha and Welcome to our refuge here in Poipu Beach.doc
[2009/10/14 11:20:46 | 00,002,497 | —- | M] () – C:\Documents and Settings\Joe\Desktop\Microsoft Office Word 2003 (2).lnk
[2009/10/14 10:32:01 | 00,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/10/14 07:41:36 | 00,008,051 | —- | M] () – C:\WINDOWS\ccscan4.ini
[2009/10/13 13:18:54 | 00,555,820 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/10/13 13:18:54 | 00,480,312 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2009/10/13 13:18:54 | 00,086,858 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2009/10/13 13:12:08 | 00,000,049 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2009/10/13 07:41:19 | 00,002,521 | —- | M] () – C:\Documents and Settings\Joe\Desktop\Microsoft Office Outlook 2003.lnk
[2009/10/13 02:40:08 | 00,001,475 | —- | M] () – C:\Documents and Settings\Joe\Desktop\Windows Explorer.lnk
[2009/10/12 21:31:20 | 00,000,286 | —- | M] () – C:\Documents and Settings\Joe\Desktop\Shortcut to ComboFix.lnk
[2009/10/12 20:28:21 | 00,002,767 | —- | M] () – C:\Documents and Settings\Joe\Desktop\Attach.zip
[2009/10/12 20:10:09 | 00,000,734 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2009/10/12 17:09:00 | 00,000,000 | —- | M] () – C:\Documents and Settings\Joe\Desktop\settings.dat
[2009/10/12 16:57:13 | 00,000,768 | —- | M] () – C:\Documents and Settings\Joe\Desktop\Shortcut to RootRepeal.lnk
[2009/10/12 16:01:12 | 00,000,584 | —- | M] () – C:\Documents and Settings\Joe\Desktop\Shortcut to dds.lnk
[2009/10/12 12:20:42 | 00,001,669 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Spy Sweeper.lnk
[2009/10/12 12:15:11 | 00,000,295 | —- | M] () – C:\Documents and Settings\Joe\Desktop\Shortcut to uhssp610128.lnk
[2009/10/12 08:20:33 | 00,177,240 | —- | M] () – C:\Documents and Settings\Joe\Desktop\activescan2_en.exe
[2009/10/11 08:10:09 | 00,236,544 | —- | M] () – C:\WINDOWS\PEV.exe
[2009/10/10 12:16:47 | 00,001,804 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2009/10/10 12:05:23 | 00,001,604 | —- | M] () – C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2009/10/10 11:57:18 | 93,074,728 | —- | M] (Apple Inc.) – C:\Documents and Settings\Joe\Desktop\iTunesSetup.exe
[2009/10/10 06:34:06 | 00,000,715 | —- | M] () – C:\Documents and Settings\All Users\Desktop\RealPlayer SP.lnk
[2009/10/10 06:34:00 | 00,185,920 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\rmoc3260.dll
[2009/10/10 06:33:53 | 00,006,656 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5016.dll
[2009/10/10 06:33:53 | 00,005,632 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5032.dll
[2009/10/10 06:33:36 | 00,278,528 | —- | M] (Real Networks, Inc) – C:\WINDOWS\System32\pncrt.dll
[2009/10/05 17:12:34 | 03,782,822 | —- | M] (DownloadHelper ) – C:\Documents and Settings\Joe\Desktop\ConvertHelperSetup.exe
[2009/10/05 16:55:37 | 00,001,648 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iPodifier.lnk
[2009/10/05 16:54:49 | 09,211,285 | —- | M] (InstallShield Software Corporation ) – C:\Documents and Settings\Joe\Desktop\iPodifierv1_50_0_4.exe
[2009/10/05 16:52:58 | 00,000,719 | —- | M] () – C:\Documents and Settings\All Users\Desktop\VLC media player.lnk
[2009/10/05 16:51:06 | 18,527,244 | —- | M] () – C:\Documents and Settings\Joe\Desktop\vlc-1.0.2-win32.exe
[2009/10/04 08:02:18 | 00,001,781 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Logitech QuickCam.lnk
[2009/10/02 14:49:03 | 00,000,246 | —- | M] () – C:\Documents and Settings\Joe\My Documents\appleipod.bat
[2009/10/02 09:34:55 | 03,309,072 | —- | M] (Piriform Ltd) – C:\Documents and Settings\Joe\Desktop\ccsetup224.exe
[2009/10/02 08:01:57 | 25,198,016 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MRT.exe
[2009/09/28 14:10:59 | 00,023,552 | —- | M] () – C:\Documents and Settings\Joe\My Documents\KBRtelephone record.xls
[2009/09/24 19:37:11 | 00,667,136 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\wininet.dll
[2009/09/24 19:37:11 | 00,667,136 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2009/09/24 19:37:11 | 00,627,712 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\urlmon.dll
[2009/09/24 19:37:11 | 00,627,712 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2009/09/24 19:37:10 | 03,070,976 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshtml.dll
[2009/09/24 19:37:10 | 03,070,976 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2009/09/24 19:37:10 | 01,509,888 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\shdocvw.dll
[2009/09/24 19:37:10 | 01,509,888 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shdocvw.dll
[2009/09/24 19:37:09 | 00,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ieencode.dll
[2009/09/24 19:37:09 | 00,081,920 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieencode.dll
[2009/09/20 15:33:29 | 00,028,672 | —- | M] () – C:\Documents and Settings\Joe\My Documents\Hi Beverly changes.doc
========== Files - No Company Name ==========
[2009/10/16 17:13:54 | 02,664,072 | —- | C] () – C:\Documents and Settings\Joe\Desktop\esetsmartinstaller_enu.exe
[2009/10/16 10:22:43 | 00,001,734 | —- | C] () – C:\Documents and Settings\Joe\Desktop\HijackThis.lnk
[2009/10/14 13:03:26 | 00,000,696 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/10/13 22:08:11 | 00,001,393 | —- | C] () – C:\WINDOWS\imsins.BAK
[2009/10/12 21:35:20 | 00,236,544 | —- | C] () – C:\WINDOWS\PEV.exe
[2009/10/12 21:35:20 | 00,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2009/10/12 21:35:20 | 00,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2009/10/12 21:35:20 | 00,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2009/10/12 21:31:20 | 00,000,286 | —- | C] () – C:\Documents and Settings\Joe\Desktop\Shortcut to ComboFix.lnk
[2009/10/12 20:28:21 | 00,002,767 | —- | C] () – C:\Documents and Settings\Joe\Desktop\Attach.zip
[2009/10/12 17:09:00 | 00,000,000 | —- | C] () – C:\Documents and Settings\Joe\Desktop\settings.dat
[2009/10/12 16:57:13 | 00,000,768 | —- | C] () – C:\Documents and Settings\Joe\Desktop\Shortcut to RootRepeal.lnk
[2009/10/12 16:01:12 | 00,000,584 | —- | C] () – C:\Documents and Settings\Joe\Desktop\Shortcut to dds.lnk
[2009/10/12 12:20:42 | 00,001,669 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Spy Sweeper.lnk
[2009/10/12 12:15:11 | 00,000,295 | —- | C] () – C:\Documents and Settings\Joe\Desktop\Shortcut to uhssp610128.lnk
[2009/10/12 08:20:33 | 00,177,240 | —- | C] () – C:\Documents and Settings\Joe\Desktop\activescan2_en.exe
[2009/10/10 12:05:23 | 00,001,604 | —- | C] () – C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2009/10/10 06:40:30 | 00,000,886 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2009/10/10 06:40:30 | 00,000,882 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2009/10/10 06:34:06 | 00,000,715 | —- | C] () – C:\Documents and Settings\All Users\Desktop\RealPlayer SP.lnk
[2009/10/10 06:31:55 | 00,001,813 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2009/10/05 16:55:37 | 00,001,648 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iPodifier.lnk
[2009/10/05 16:49:46 | 18,527,244 | —- | C] () – C:\Documents and Settings\Joe\Desktop\vlc-1.0.2-win32.exe
[2009/09/28 14:10:59 | 00,023,552 | —- | C] () – C:\Documents and Settings\Joe\My Documents\KBRtelephone record.xls
[2009/09/26 17:59:12 | 00,025,088 | —- | C] () – C:\Documents and Settings\Joe\My Documents\Aloha and Welcome to our refuge here in Poipu Beach.doc
[2009/09/20 07:54:32 | 00,028,672 | —- | C] () – C:\Documents and Settings\Joe\My Documents\Hi Beverly changes.doc
[2009/06/26 15:39:23 | 00,000,694 | —- | C] () – C:\WINDOWS\win.ini
[2009/04/21 18:26:56 | 00,031,088 | —- | C] () – C:\WINDOWS\System32\wrLZMA.dll
[2009/02/18 18:37:44 | 00,037,504 | R— | C] () – C:\WINDOWS\System32\drivers\SRS_ViewSonic_i386.sys
[2009/02/18 18:37:44 | 00,019,712 | R— | C] () – C:\WINDOWS\System32\drivers\GraphicEQ_opt_kern_i386.sys
[2009/01/10 12:51:54 | 00,204,800 | —- | C] () – C:\WINDOWS\System32\IVIresizeW7.dll
[2009/01/10 12:51:54 | 00,200,704 | —- | C] () – C:\WINDOWS\System32\IVIresizeA6.dll
[2009/01/10 12:51:54 | 00,192,512 | —- | C] () – C:\WINDOWS\System32\IVIresizeP6.dll
[2009/01/10 12:51:54 | 00,192,512 | —- | C] () – C:\WINDOWS\System32\IVIresizeM6.dll
[2009/01/10 12:51:54 | 00,188,416 | —- | C] () – C:\WINDOWS\System32\IVIresizePX.dll
[2009/01/10 12:51:54 | 00,020,480 | —- | C] () – C:\WINDOWS\System32\IVIresize.dll
[2009/01/10 12:51:24 | 00,005,248 | —- | C] () – C:\WINDOWS\System32\drivers\udffsrec.sys
[2009/01/01 12:55:38 | 00,000,026 | —- | C] () – C:\WINDOWS\dvdSanta.INI
[2009/01/01 12:35:24 | 00,394,240 | —- | C] () – C:\WINDOWS\System32\Smab.dll
[2009/01/01 12:35:23 | 00,027,648 | —- | C] () – C:\WINDOWS\System32\AVSredirect.dll
[2008/06/09 21:41:30 | 00,007,887 | —- | C] () – C:\Documents and Settings\Joe\Application Data\pcouffin.cat
[2008/06/09 21:41:30 | 00,001,144 | —- | C] () – C:\Documents and Settings\Joe\Application Data\pcouffin.inf
[2008/06/09 21:41:30 | 00,000,033 | —- | C] () – C:\Documents and Settings\Joe\Application Data\pcouffin.log
[2008/05/12 15:53:16 | 03,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2008/05/12 15:50:16 | 00,000,416 | —- | C] () – C:\WINDOWS\System32\dtu100.dll.manifest
[2008/05/12 15:50:16 | 00,000,416 | —- | C] () – C:\WINDOWS\System32\dpl100.dll.manifest
[2008/05/12 15:50:08 | 00,831,488 | —- | C] () – C:\WINDOWS\System32\divx_xx0a.dll
[2008/05/12 15:49:02 | 00,012,288 | —- | C] () – C:\WINDOWS\System32\DivXWMPExtType.dll
[2008/04/19 11:23:25 | 00,000,065 | —- | C] () – C:\Program Files\Common Files\appop.log
[2008/02/20 19:55:07 | 00,000,050 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2007/12/27 16:29:28 | 00,765,952 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2007/12/27 16:29:28 | 00,180,224 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2007/12/27 15:56:13 | 02,255,360 | —- | C] () – C:\WINDOWS\System32\libavcodec.dll
[2007/12/27 15:56:13 | 00,395,776 | —- | C] () – C:\WINDOWS\System32\libmplayer.dll
[2007/12/27 15:56:13 | 00,262,144 | —- | C] () – C:\WINDOWS\System32\TomsMoComp_ff.dll
[2007/12/27 15:56:13 | 00,112,640 | —- | C] () – C:\WINDOWS\System32\libmpeg2_ff.dll
[2007/10/11 18:59:24 | 00,025,624 | —- | C] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2007/08/28 08:47:35 | 00,077,824 | R— | C] () – C:\WINDOWS\System32\hpzids01.dll
[2007/08/28 08:25:04 | 00,001,970 | —- | C] () – C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2007/03/03 09:07:58 | 00,059,500 | —- | C] () – C:\WINDOWS\System32\lvcoinst.ini
[2007/01/02 19:05:14 | 00,001,353 | —- | C] () – C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2006/12/02 22:22:47 | 00,000,049 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2006/12/02 22:22:46 | 00,032,768 | —- | C] () – C:\Documents and Settings\Joe\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/12/02 10:50:56 | 00,001,269 | —- | C] () – C:\WINDOWS\hpbvnstp.ini
[2006/11/22 20:11:54 | 00,000,126 | —- | C] () – C:\Documents and Settings\Joe\Local Settings\Application Data\fusioncache.dat
[2006/10/01 17:40:15 | 00,684,032 | —- | C] () – C:\WINDOWS\libeay32.dll
[2006/10/01 17:40:15 | 00,155,648 | —- | C] () – C:\WINDOWS\ssleay32.dll
[2006/09/30 15:15:04 | 00,000,044 | —- | C] () – C:\WINDOWS\W9kenl42.dll
[2006/09/30 15:14:21 | 00,008,051 | —- | C] () – C:\WINDOWS\ccscan4.ini
[2006/09/30 14:39:43 | 00,000,005 | -HS- | C] () – C:\WINDOWS\System32\beaafadcc_s.dll
[2006/09/30 13:59:46 | 00,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006/09/16 21:57:56 | 00,078,464 | —- | C] () – C:\Documents and Settings\Joe\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2006/09/16 18:16:15 | 00,000,000 | —- | C] () – C:\WINDOWS\msicpl.ini
[2006/09/16 18:14:26 | 00,009,728 | R— | C] () – C:\WINDOWS\System32\sysinfoX64.sys
[2006/09/16 18:14:26 | 00,008,192 | R— | C] () – C:\WINDOWS\System32\sysinfo.sys
[2006/09/16 17:27:54 | 00,024,285 | —- | C] () – C:\WINDOWS\Ascd_log.ini
[2006/09/16 17:26:08 | 00,023,885 | —- | C] () – C:\WINDOWS\Ascd_tmp.ini
[2006/09/16 17:26:07 | 00,005,810 | R— | C] () – C:\WINDOWS\System32\drivers\ASACPI.sys
[2006/09/16 17:26:04 | 00,005,824 | —- | C] () – C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2006/09/16 17:24:53 | 00,000,062 | -HS- | C] () – C:\Documents and Settings\Joe\Application Data\desktop.ini
[2006/09/16 05:03:12 | 00,000,062 | -HS- | C] () – C:\Documents and Settings\All Users\Application Data\desktop.ini
[2005/12/13 20:51:00 | 01,662,976 | —- | C] () – C:\WINDOWS\System32\nvwdmcpl.dll
[2005/12/13 20:51:00 | 01,466,368 | —- | C] () – C:\WINDOWS\System32\nview.dll
[2005/12/13 20:51:00 | 01,019,904 | —- | C] () – C:\WINDOWS\System32\nvwimg.dll
[2005/12/13 20:51:00 | 00,581,632 | —- | C] () – C:\WINDOWS\System32\nvhwvid.dll
[2005/12/13 20:51:00 | 00,466,944 | —- | C] () – C:\WINDOWS\System32\nvshell.dll
[2005/12/13 20:51:00 | 00,286,720 | —- | C] () – C:\WINDOWS\System32\nvnt4cpl.dll
[2005/12/13 20:51:00 | 00,196,608 | —- | C] () – C:\WINDOWS\System32\nvapi.dll
[2004/08/04 02:00:00 | 00,000,227 | —- | C] () – C:\WINDOWS\system.ini
[2004/05/04 08:29:54 | 00,192,512 | —- | C] () – C:\WINDOWS\System32\HPB2550V.DLL
[2003/01/07 15:05:08 | 00,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
[2002/10/15 12:54:04 | 00,153,088 | —- | C] () – C:\WINDOWS\System32\unrar.dll
[2001/09/13 13:52:08 | 00,109,056 | —- | C] () – C:\WINDOWS\System32\reg.dll
[2001/07/31 03:17:12 | 00,094,274 | —- | C] () – C:\WINDOWS\System32\HPBHEALR.DLL
[2001/07/06 16:30:00 | 00,003,399 | —- | C] () – C:\WINDOWS\System32\hptcpmon.ini
[1999/01/04 13:25:00 | 00,528,384 | —- | C] () – C:\WINDOWS\System32\tx32.dll
[1998/11/04 02:20:00 | 00,000,478 | —- | C] () – C:\WINDOWS\System32\Ic32.ini
========== LOP Check ==========
[2009/10/14 13:03:21 | 00,000,000 | RH-D | M] – C:\Documents and Settings\All Users\Application Data
[2009/09/30 12:30:27 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/04/22 07:23:03 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2006/10/01 16:49:00 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Avg7
[2007/12/27 16:32:10 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVS4YOU
[2006/11/22 20:04:47 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\COMMON FILES
[2006/09/16 18:17:12 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\CyberLink
[2009/01/01 13:11:58 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DVD Shrink
[2009/01/01 09:45:46 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FLEXnet
[2006/12/27 05:04:21 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Intuit
[2008/04/04 21:29:09 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Logishrd
[2009/05/02 06:51:05 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Seagate
[2008/02/13 10:19:18 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\sentinel
[2008/06/09 21:56:39 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2007/03/15 11:29:31 | 00,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
[2009/10/14 13:03:29 | 00,000,000 | -H-D | M] – C:\Documents and Settings\Joe\Application Data
[2008/07/04 20:09:33 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\AVI ReComp
[2007/12/27 16:39:29 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\AVS4YOU
[2009/10/17 17:04:48 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\Azureus
[2006/09/16 18:18:24 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\CyberLink
[2008/06/05 18:14:08 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\GeoVid
[2009/01/10 12:51:10 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\InterVideo
[2006/11/22 20:11:38 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\Intuit
[2009/10/05 19:46:49 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\iPodifier
[2006/09/30 14:38:40 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\Leadertech
[2009/01/01 12:58:39 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\LimeWire
[2007/01/02 19:40:34 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\Red Chair Software
[2008/06/09 21:50:34 | 00,000,000 | —D | M] – C:\Documents and Settings\Joe\Application Data\Vso
[2009/10/14 10:32:01 | 00,000,284 | —- | M] () – C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
[2009/10/17 16:24:00 | 00,000,256 | —- | M] () – C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job
[2004/08/04 02:00:00 | 00,000,065 | RH– | M] () – C:\WINDOWS\Tasks\desktop.ini
[2009/10/18 07:08:37 | 00,000,882 | —- | M] () – C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2009/10/17 16:45:00 | 00,000,886 | —- | M] () – C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2009/10/18 07:07:26 | 00,000,006 | -H– | M] () – C:\WINDOWS\Tasks\SA.DAT
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:242231A9
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B9D8E22
< End of report >
OTL Extras logfile created on: 10/18/2009 7:16:57 AM - Run 1
OTL by OldTimer - Version 3.0.21.0 Folder = C:\Documents and Settings\Joe\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.40 Gb Available Physical Memory | 70.23% Memory free
3.85 Gb Paging File | 3.30 Gb Available in Paging File | 85.85% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298.08 Gb Total Space | 247.01 Gb Free Space | 82.87% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 485.82 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 372.60 Gb Total Space | 237.73 Gb Free Space | 63.80% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: SYLVESTE-EACB35
Current User Name: Joe
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.chm [@ = chm.file] – C:\WINDOWS\hh.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.js [@ = JSFile] – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PAVSCRIP.EXE (Panda Software International)
.jse [@ = JSEFile] – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PAVSCRIP.EXE (Panda Software International)
.vbe [@ = VBEFile] – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PAVSCRIP.EXE (Panda Software International)
.vbs [@ = VBSFile] – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PAVSCRIP.EXE (Panda Software International)
.wsf [@ = WSFFile] – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PAVSCRIP.EXE (Panda Software International)
.wsh [@ = WSHFile] – C:\Program Files\Panda Security\Panda Antivirus + Firewall 2008\PAVSCRIP.EXE (Panda Software International)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
chm.file [open] – "%SYSTEMROOT%\hh.exe" %1 (Microsoft Corporation)
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
htmlfile – "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] – "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] – "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
http [open] – "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
https [open] – "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
jsfile [open] – C:\PROGRA~1\PANDAS~2\PANDAA~1\PAVSCRIP.EXE "%1" %* (Panda Software International)
jsefile [open] – C:\PROGRA~1\PANDAS~2\PANDAA~1\PAVSCRIP.EXE "%1" %* (Panda Software International)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
vbefile [open] – C:\PROGRA~1\PANDAS~2\PANDAA~1\PAVSCRIP.EXE "%1" %* (Panda Software International)
vbsfile [open] – C:\PROGRA~1\PANDAS~2\PANDAA~1\PAVSCRIP.EXE "%1" %* (Panda Software International)
wsffile [open] – C:\PROGRA~1\PANDAS~2\PANDAA~1\PAVSCRIP.EXE "%1" %* (Panda Software International)
wshfile [open] – C:\PROGRA~1\PANDAS~2\PANDAA~1\PAVSCRIP.EXE "%1" %* (Panda Software International)
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] – "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – "%programfiles%\internet explorer\iexplore.exe" (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
"DisableMonitoring" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
"DisableMonitoring" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger – (Logitech)
"C:\Program Files\MSN Messenger\msnmsgr.exe" = C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 – File not found
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) – File not found
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Azureus\Azureus.exe" = C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus – (Azureus Inc)
"C:\Program Files\Intuit\QuickBooks 2005\QBDBMgrN.exe" = C:\Program Files\Intuit\QuickBooks 2005\QBDBMgrN.exe:*:Enabled:QuickBooks 2007 Data Manager – (iAnywhere Solutions, Inc.)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger – (Logitech)
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour – (Apple Inc.)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype – (Skype Technologies S.A.)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00140409-78E1-11D2-B60F-006097C998E7}" = Microsoft Publisher 2000
"{054C3038-FFAC-446D-9682-E25891DC2E05}" = QuickBooks Product Listing Service
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{0BF5FBE7-3907-4A1F-9E48-8B66E52850D6}" = TrayApp
"{0C34B801-6AEC-4667-B053-03A67E2D0415}" = Apple Application Support
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1CB34CE9-0E6B-493F-BB66-3425E5DF76E5}" = CP_CalendarTemplates1
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1E1F1E70-14D8-4380-8652-BD1A895A7D65}" = Status
"{22E9CF2B-4063-4dab-A251-93FA46F7DECC}_is1" = Spy Sweeper
"{23B35809-5E4A-4F14-8332-1CDEDDFAC089}" = CP_Package_Variety2
"{24BEBF2E-73F3-4599-840B-EDC612CCDD0D}" = Destinations
"{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}" = Skype™ 4.0
"{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1" = ConvertHelper 2.2
"{2A548002-9042-4083-A270-B67473DE1073}" = SkinsHP1
"{31263605-FC84-4787-B847-BA445B147E24}" = ScannerCopy
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0150090}" = J2SE Runtime Environment 5.0 Update 9
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{341201D4-4F61-4ADB-987E-9CCE4D83A58D}" = Windows Live Toolbar Extension (Windows Live Toolbar)
"{34F3FCF1-817B-4D61-B6AF-19D9486AFEA0}" = Unload
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35725FBC-A136-4A46-9F29-091759D9BB93}" = MVision
"{35E1A8C8-6646-4101-B0AA-42D1EB2AB3AE}" = Windows Live Outlook Toolbar (Windows Live Toolbar)
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JRAID
"{3AC54383-31D1-4907-961B-B12CBB1D0AE8}" = MobileMe Control Panel
"{3F5B6210-0903-4DC6-8034-8F488AA3A782}" = Spy Sweeper Core
"{3FE0CFAB-584A-4AA5-B8CD-C32284CFA308}" = RandMap
"{4041C245-7099-4C96-9738-5EBC23827B3C}" = BufferChm
"{47FBF7F9-FBD3-43EF-823B-7684D56C1962}" = Tabbed Browsing (Windows Live Toolbar)
"{494D17B5-3369-4905-8C4B-80C972C5E0FF}" = CP_Panorama1Config
"{49672EC2-171B-47B4-8CE7-50D7806360D7}" = Windows Live Sign-in Assistant
"{4BE53DB2-C1F2-44D1-A9AB-1630BA7F2AF1}" = SolutionCenter
"{522D1D79-9C0A-4361-91F8-2AFF8EC6C2E1}" = CP_Package_Variety1
"{53B2CFE9-A508-4457-B2CA-5D253536BFB7}" = OneCare Advisor (Windows Live Toolbar)
"{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder
"{548B3DC6-2300-47E1-BA7B-74AD25F8DEBF}" = Form Fill (Windows Live Toolbar)
"{5A3F6A80-7913-475E-8B96-477A952CFA43}" = SupportSoft Assisted Service
"{5F26311C-B135-4F7F-B11E-8E650F83651E}" = DeviceFunctionQFolder
"{6693E024-E2D3-477C-8EF9-4D484F3B3071}" = Seagate Manager Installer
"{66A7A386-6F35-41A7-A731-101F0C0153C8}" = Popup Blocker (Windows Live Toolbar)
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{68108E66-D13A-4EE8-A6F4-40E4B90C2A26}" = Windows Live Toolbar Feed Detector (Windows Live Toolbar)
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7745B7A9-F323-4BB9-9811-01BF57A028DA}" = Map Button (Windows Live Toolbar)
"{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}" = Windows Live Favorites for Windows Live Toolbar
"{79F8E1D4-36C1-439C-95FA-F695050B5B07}" = Sonic_PrimoSDK
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7E545666-F422-45FD-B3DF-C0B99A1A579F}" = QuickBooks Pro 2007
"{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI
"{869C3062-4745-4949-B6C9-98AF24D89030}" = PhotoGallery
"{873D68B3-EDE5-4DFD-85AC-FFC430FB7EE2}" = Form Viewer
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A62A068-3FD6-495A-9F66-26FE94F32EC9}" = Rhapsody Player Engine
"{8AC049F7-1383-45C3-9E7D-F93CA667F9E1}" = UMVPLStandalone
"{8AEEE6D6-C95D-465A-B8D3-B7AE2FA7B8B4}" = InterVideo Launcher
"{8B3F4499-32E6-470D-8586-E6C03420F889}" = ASUS WiFi-AP Solo
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{945AC98B-3DC8-45BE-BAE0-22CEEE37A103}" = Logitech QuickCam
"{98032D6F-3EE6-4646-B68C-40BF012AC89B}" = Panda Antivirus + Firewall 2008
"{9D4ABB0C-F60B-44A6-956C-A4A63D5495C9}" = CueTour
"{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}" = QuickTime
"{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}" = Windows Defender Signatures
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-1033-0000-7760-000000000004}" = Adobe Acrobat 9 Pro
"{AC76BA86-1033-0000-7760-000000000004}{AC76BA86-1033-0000-7760-000000000004}" = Adobe Acrobat 9 Pro
"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1
"{B11E71BA-498C-42D4-9F1A-9D7A89D9DA61}" = CP_AtenaShokunin1Config
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{B57F2FF0-5A25-4332-B503-4592B370C02F}" = CP_Package_Variety3
"{BCB4C18A-ACA6-4383-8688-E19933A705DD}" = Microsoft SOAP Toolkit 3.0
"{BDCF27CA-BFC4-4F49-8D24-A925C9505AB8}" = Windows Rights Management Client with Service Pack 2
"{BEF726DD-4037-4214-8C6A-E625C02D2870}" = Logitech Audio Echo Cancellation Component
"{BF4E9ED0-EF26-4A4C-A123-6A6A1ABEE411}" = DocProc
"{C6812939-B117-48E6-A3BA-1709C14A3C8C}" = Scan
"{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA
"{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
"{C98E8D9D-21DE-4F87-A9B7-142BB89840FC}" = Toolbox
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D187FF17-89F8-455F-ACC4-E7A70746A2C2}" = Extensis Intellihance Pro 4.0
"{D4163F73-AAE4-4E4F-9E9E-70828C2ADB58}" = iPodifier
"{D5A145FC-D00C-4F1A-9119-EB4D9D659750}" = Windows Live Toolbar
"{DEBB2986-15B0-4D28-95FA-5C966A396589}" = HPProductAssistant
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E5A1DE9A-A21C-43A1-B06D-5146BAF62033}" = PanoStandAlone
"{E5A8DDAB-AE80-48C6-A75B-D0FAB83B299D}" = HP PSC & OfficeJet 6.1.A
"{EA516024-D84D-41F1-814F-83175A6188F2}" = Logitech Video Enumerator
"{EBC91840-41E1-4CC3-AC11-0B889546223C}" = Microsoft IntelliPoint 5.5
"{EC2715CE-C182-483C-84CC-81D7D914CF14}" = WebReg
"{EC905264-BCFE-423B-9C42-C3A106266790}" = Windows Rights Management Client Backwards Compatibility SP2
"{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}" = HP Software Update
"{EFB21DE7-8C19-4A88-BB28-A766E16493BC}" = Adobe Photoshop CS
"{F02CF4B0-05EC-4938-A8D2-F739AF3B4363}" = Microsoft IntelliType Pro 5.5
"{F084395C-40FB-4DB3-981C-B51E74E1E83D}" = Smart Menus (Windows Live Toolbar)
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA
"{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AmoK DVD Shrinker" = AmoK DVD Shrinker 1.3
"AVI MPEG RM WMV Joiner_is1" = AVI/MPEG/RM/WMV Joiner 4.82
"AVI ReComp" = AVI ReComp 1.4.3
"AviSynth" = AviSynth 2.5
"AVS DVDMenu Editor_is1" = AVS DVDMenu Editor 1.2.1.19
"AVS VideotoGO_is1" = AVS Video to GO
"AVS4YOU Video Converter_is1" = AVS Video Converter 5.6
"Azureus" = Azureus
"CCleaner" = CCleaner (remove only)
"Complete Cleanup_is1" = Complete Cleanup
"Crystal Player" = Crystal Player Professional 1.97
"DVD Shrink_is1" = DVD Shrink 3.2
"DVD X Rescue" = DVD X Rescue
"dvdSanta 4.00 - Create Your Own DVD Movies!_is1" = dvdSanta 4.00
"DVDXCopyPlatinum" = DVDXCopy Platinum 3.2.1
"Google Chrome" = Google Chrome
"HandBrake" = HandBrake 0.9.3
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 6.1
"HP Solution Center & Imaging Support Tools" = HP Solution Center and Imaging Support Tools 6.1
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"InstallShield_{6693E024-E2D3-477C-8EF9-4D484F3B3071}" = Seagate Manager Installer
"Jack the CD Ripper_is1" = Jack the CD Ripper v2.0
"legacyqcam_10.51" = Logitech Legacy USB Camera Driver Package
"LiveReg" = LiveReg (Symantec Corporation)
"lvdrivers_11.50" = Logitech QuickCam Driver Package
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Mozilla Firefox (3.0.14)" = Mozilla Firefox (3.0.14)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"Pop-Up Stopper Free Edition" = Pop-Up Stopper Free Edition
"RealPlayer 12.0" = RealPlayer
"Registry Mechanic_is1" = Registry Mechanic
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"ST6UNST #1" = FolderClone
"ST6UNST #2" = RezStream Professional 2007
"SUPER ©" = SUPER © Version 2007.bld.23 (July 4, 2007)
"VLC media player" = VLC media player 1.0.2
"VobSub" = VobSub v2.23 (Remove Only)
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Live Toolbar" = Windows Live Toolbar
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XP TCP/IP Repair_is1" = XP TCP/IP Repair
"Xvid_is1" = Xvid 1.1.3 final uninstall
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GoToMeeting" = GoToMeeting/GoToWebinar 3.0.0.198
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 10/13/2009 7:20:09 PM | Computer Name = SYLVESTE-EACB35 | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET
Framework 1' could not be installed. Error code 1603. Additional information is
available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup52E5.txt.
Error - 10/13/2009 7:20:09 PM | Computer Name = SYLVESTE-EACB35 | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET
Framework 2' could not be installed. Error code 1603. Additional information is
available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup52E5.txt.
Error - 10/13/2009 7:20:09 PM | Computer Name = SYLVESTE-EACB35 | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET
Framework ASP .NET' could not be installed. Error code 1603. Additional information
is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup52E5.txt.
Error - 10/13/2009 7:20:09 PM | Computer Name = SYLVESTE-EACB35 | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 2.0 Service Pack 2 - Update '.NET
Framework WinForms' could not be installed. Error code 1603. Additional information
is available in the log file C:\WINDOWS\TEMP\dd_NET_Framework20_Setup52E5.txt.
Error - 10/14/2009 4:10:06 AM | Computer Name = SYLVESTE-EACB35 | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb953300,
P2 1033, P3 1605, P4 msi, P5 f, P6 9.0.40302.0, P7 install, P8 x86, P9 xp, P10
0.
Error - 10/14/2009 4:17:52 PM | Computer Name = SYLVESTE-EACB35 | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This operation returned because the timeout period expired.
Error - 10/16/2009 4:20:44 PM | Computer Name = SYLVESTE-EACB35 | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb953300,
P2 1033, P3 1605, P4 msi, P5 f, P6 9.0.40302.0, P7 install, P8 x86, P9 xp, P10
0.
Error - 10/17/2009 3:27:55 AM | Computer Name = SYLVESTE-EACB35 | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb953300,
P2 1033, P3 1605, P4 msi, P5 f, P6 9.0.40302.0, P7 install, P8 x86, P9 xp, P10
0.
Error - 10/17/2009 12:41:32 PM | Computer Name = SYLVESTE-EACB35 | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb953300,
P2 1033, P3 1605, P4 msi, P5 f, P6 9.0.40302.0, P7 install, P8 x86, P9 xp, P10
0.
Error - 10/17/2009 11:20:50 PM | Computer Name = SYLVESTE-EACB35 | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 2.0-kb953300,
P2 1033, P3 1605, P4 msi, P5 f, P6 9.0.40302.0, P7 install, P8 x86, P9 xp, P10
0.
[ System Events ]
Error - 10/13/2009 4:24:30 PM | Computer Name = SYLVESTE-EACB35 | Source = DCOM | ID = 10010
Description = The server {E60687F7-01A1-40AA-86AC-DB1CBF673334} did not register
with DCOM within the required timeout.
Error - 10/13/2009 7:09:07 PM | Computer Name = SYLVESTE-EACB35 | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Webroot Spy Sweeper Engine
service to connect.
Error - 10/13/2009 7:09:07 PM | Computer Name = SYLVESTE-EACB35 | Source = Service Control Manager | ID = 7000
Description = The Webroot Spy Sweeper Engine service failed to start due to the
following error: %%1053
Error - 10/13/2009 7:20:47 PM | Computer Name = SYLVESTE-EACB35 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework
3.5 Family Update for .NET versions 2.0 through 3.5 (KB951847) x86.
Error - 10/13/2009 7:37:13 PM | Computer Name = SYLVESTE-EACB35 | Source = MRxSmb | ID = 8003
Description = The master browser has received a server announcement from the computer
TOSHIBA-USER that believes that it is the master browser for the domain on transport
NetBT_Tcpip_{1FD78618-6EEF-4. The master browser is stopping or an election is being
forced.
Error - 10/13/2009 8:49:16 PM | Computer Name = SYLVESTE-EACB35 | Source = MRxSmb | ID = 8003
Description = The master browser has received a server announcement from the computer
TOSHIBA-USER that believes that it is the master browser for the domain on transport
NetBT_Tcpip_{1FD78618-6EEF-4. The master browser is stopping or an election is being
forced.
Error - 10/13/2009 10:25:29 PM | Computer Name = SYLVESTE-EACB35 | Source = MRxSmb | ID = 8003
Description = The master browser has received a server announcement from the computer
TOSHIBA-USER that believes that it is the master browser for the domain on transport
NetBT_Tcpip_{1FD78618-6EEF-4. The master browser is stopping or an election is being
forced.
Error - 10/13/2009 11:25:33 PM | Computer Name = SYLVESTE-EACB35 | Source = MRxSmb | ID = 8003
Description = The master browser has received a server announcement from the computer
TOSHIBA-USER that believes that it is the master browser for the domain on transport
NetBT_Tcpip_{1FD78618-6EEF-4. The master browser is stopping or an election is being
forced.
Error - 10/17/2009 11:20:30 PM | Computer Name = SYLVESTE-EACB35 | Source = ssidrv | ID = 131098
Description = Failed to set monitor event rule.
Error - 10/17/2009 11:20:51 PM | Computer Name = SYLVESTE-EACB35 | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Microsoft .NET Framework 2.0 Service Pack 1 Security Update
for Windows 2000, Windows Server 2003, and Windows XP (KB953300).
< End of report >
