Spyware / Malware / Virus Removal

[Resolved] Redirects

16 min read

Looking for the outcome? Ask AI

jack2059

Post #31December 14, 2009, 9:24 PM UTC

Still the same.

LDTate

Post #32December 14, 2009, 9:35 PM UTC

Run ATF Cleaner and make sure all the temp files are gone from c:\windows\temp I need to go over the last scan results.

LDTate

Post #33December 14, 2009, 9:54 PM UTC last edited December 14, 2009, 10:07 PM UTC

The only thing I saw that needed fixed was the host file.
Did that go as planned?

Does this happen with both FF and IE?

Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2

Ensure all Firefox windows are closed.
To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
When prompted to run the scan, click Yes.
GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).

jack2059

Post #34December 14, 2009, 10:30 PM UTC

hosts went fine. GooredFix by jpshortstuff (06.12.09.1) Log created at 22:26 on 14/12/2009 (Jack) Firefox version 3.5.5 (en-GB) ========== GooredScan ========== ========== GooredLog ========== C:\Program Files\Mozilla Firefox\extensions\ {972ce4c6-7e08-4474-a285-3208198ce6fd} [20:52 28/11/2009] {B13721C7-F507-4982-B2E5-502A71474FED} [15:13 04/11/2009] {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} [14:50 01/07/2009] C:\Users\Jack\Application Data\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\ [removed] [12:03 03/07/2009] [removed] [11:43 10/11/2009] [removed] [11:44 03/09/2009] {11483926-db67-4190-91b1-ef20fcec5f33} [20:54 08/11/2009] {20a82645-c095-46ed-80e3-08825760534b} [15:32 15/07/2009] {3112ca9c-de6d-4884-a869-9855de68056c} [18:15 24/11/2009] {888d99e7-e8b5-46a3-851e-1ec45da1e644} [14:12 07/12/2009] {B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [20:47 06/11/2009] {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [13:37 14/12/2009] [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{20a82645-c095-46ed-80e3-08825760534b}"="C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\" [16:39 14/04/2009] -=E.O.F=- Getting fed up of constant win32.fakealert-fc coming up.

LDTate

Post #35December 14, 2009, 10:35 PM UTC

Getting fed up of constant win32.fakealert-fc coming up.

I don't blame you.
I'm getting tired of all the request for redirection help

Does the redirects happen in both IE and FF?
Sorry if I asked that already.

jack2059

Post #36December 14, 2009, 10:43 PM UTC

Yeh happens in both, never use IE though.

LDTate

Post #37December 14, 2009, 10:58 PM UTC

Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Check the boxes beside LOP Check and Purity Check.
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.

jack2059

Post #38December 14, 2009, 11:19 PM UTC

There is no Extra.txt this time..

OTL logfile created on: 14/12/2009 23:06:02 - Run 2
OTL by OldTimer - Version 3.1.17.0 Folder = C:\Users\Jack\Desktop\Virus
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.89 Gb Available Physical Memory | 94.28% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 111.57 Gb Total Space | 19.23 Gb Free Space | 17.24% Space Free | Partition Type: NTFS
Drive D: | 111.55 Gb Total Space | 111.46 Gb Free Space | 99.92% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive X: | 2.32 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: JACK-PC
Current User Name: Jack
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\Jack\Desktop\Virus\OTL.exe (OldTimer Tools)
PRC - C:\Users\Jack\AppData\Local\temp\RtkBtMnt.exe (Realtek Semiconductor Corp.)
PRC - C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
PRC - C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
PRC - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools)
PRC - C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)
PRC - C:\Windows\System32\igfxsrvc.exe (Intel Corporation)
PRC - C:\Windows\System32\hkcmd.exe (Intel Corporation)
PRC - C:\Windows\System32\igfxext.exe (Intel Corporation)
PRC - C:\Windows\System32\igfxpers.exe (Intel Corporation)
PRC - C:\Windows\System32\igfxtray.exe (Intel Corporation)
PRC - C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Synaptics Incorporated)
PRC - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
PRC - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
PRC - C:\Windows\System32\PnkBstrA.exe ()
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
PRC - C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
PRC - C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Acer Corp.)
PRC - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (CyberLink Corp.)
PRC - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe (NewTech InfoSystems, Inc.)
PRC - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe ()
PRC - C:\Windows\System32\agrsmsvc.exe (Agere Systems)
PRC - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe (NewTech Infosystems, Inc.)
PRC - C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
PRC - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe ()
PRC - C:\Program Files\RocketDock\RocketDock.exe ()
PRC - C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Cyberlink\Shared files\RichVideo.exe ()

========== Modules (SafeList) ==========

MOD - C:\Users\Jack\Desktop\Virus\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Spyware Doctor\PCTGMhk.dll (PC Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV - (Nero BackItUp Scheduler 4.0) – File not found
SRV - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
SRV - (avast! Mail Scanner) – C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
SRV - (avast! Web Scanner) – C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
SRV - (aswUpdSv) – C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
SRV - (iPod Service) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (sdCoreService) – C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools)
SRV - (Steam Client Service) – C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (sdAuxService) – C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)
SRV - (FontCache) – C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (TeamViewer4) – C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (PnkBstrA) – C:\Windows\System32\PnkBstrA.exe ()
SRV - (gupdate1c9e779192abe64) Google Update Service (gupdate1c9e779192abe64) – C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (Apple Mobile Device) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (TVersityMediaServer) – C:\Program Files\TVersity\Media Server\MediaServer.exe ()
SRV - (Bonjour Service) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (NTIBackupSvc) – C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe (NewTech InfoSystems, Inc.)
SRV - (NTISchedulerSvc) – C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe ()
SRV - (AgereModemAudio) – C:\Windows\System32\agrsmsvc.exe (Agere Systems)
SRV - (BUNAgentSvc) – C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe (NewTech Infosystems, Inc.)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (CLHNService) – C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe ()
SRV - (MobilityService) – C:\Acer\Mobility Center\MobilityService.exe ()
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) – C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies)
SRV - (LightScribeService) – C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (RichVideo) Cyberlink RichVideo Service(CRVS) – C:\Program Files\Cyberlink\Shared files\RichVideo.exe ()
SRV - (Irmon) – C:\Windows\System32\irmon.dll (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (pcouffin) – C:\Windows\System32\drivers\pcouffin.sys (VSO Software)
DRV - (aswSP) – C:\Windows\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswFsBlk) – C:\Windows\System32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (aswMonFlt) – C:\Windows\System32\drivers\aswMonFlt.sys (ALWIL Software)
DRV - (aswTdi) – C:\Windows\System32\drivers\aswTdi.sys (ALWIL Software)
DRV - (aswRdr) – C:\Windows\System32\drivers\aswRdr.sys (ALWIL Software)
DRV - (PCTCore) – C:\Windows\system32\drivers\PCTCore.sys (PC Tools)
DRV - (hamachi) – C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (igfx) – C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
DRV - (USBAAPL) – C:\Windows\System32\drivers\usbaapl.sys (Apple, Inc.)
DRV - (SynTP) – C:\Windows\System32\drivers\SynTP.sys (Synaptics Incorporated)
DRV - (netr28) – C:\Windows\System32\drivers\netr28.sys (Ralink Technology, Corp.)
DRV - (sptd) – C:\Windows\System32\Drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (GEARAspiWDM) – C:\Windows\System32\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (PxHelp20) – C:\Windows\system32\DRIVERS\PxHelp20.sys (Sonic Solutions)
DRV - (usbaudio) USB Audio Driver (WDM) – C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (xusb21) – C:\Windows\System32\drivers\xusb21.sys (Microsoft Corporation)
DRV - (mcdbus) – C:\Windows\System32\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (RTSTOR) – C:\Windows\System32\drivers\RTSTOR.sys (Realtek Semiconductor Corp.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) – C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl (Cyberlink Corp.)
DRV - (AgereSoftModem) – C:\Windows\System32\drivers\AGRSM.sys (Agere Systems)
DRV - (yukonwlh) – C:\Windows\System32\drivers\yk60x86.sys (Marvell)
DRV - (NTIDrvr) – C:\Windows\System32\drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV - (UBHelper) – C:\Windows\System32\drivers\UBHelper.sys (NewTech Infosystems Corporation)
DRV - (adpu320) – C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (megasas) – C:\Windows\system32\drivers\megasas.sys (LSI Corporation)
DRV - (MegaSR) – C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.)
DRV - (adpu160m) – C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (SiSRaid4) – C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (HpCISSs) – C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (adpahci) – C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (LSI_SAS) – C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (ql2300) – C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (E1G60) Intel® – C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (arcsas) – C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (iaStorV) – C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (vsmraid) – C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ulsata2) – C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (LSI_FC) – C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (arc) – C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (NSCIRDA) – C:\Windows\System32\drivers\nscirda.sys (National Semiconductor Corporation)
DRV - (HSF_DPV) – C:\Windows\System32\drivers\VSTDPV3.SYS (Conexant Systems, Inc.)
DRV - (winachsf) – C:\Windows\System32\drivers\VSTCNXT3.SYS (Conexant Systems, Inc.)
DRV - (elxstor) – C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (HSFHWAZL) – C:\Windows\System32\drivers\VSTAZL3.SYS (Conexant Systems, Inc.)
DRV - (LSI_SCSI) – C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (nvraid) – C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nvstor) – C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (adp94xx) – C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (uliahci) – C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (b57nd60x) – C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (viaide) – C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) – C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) – C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (NTIPPKernel) – C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys (Cyberlink Corp.)
DRV - (NPF) – C:\Windows\System32\drivers\npf.sys (CACE Technologies)
DRV - (Xponaut_WBD) Xponaut WaveBridge Device (WDM) – C:\Windows\System32\drivers\xpntwbd.sys (Xponaut)
DRV - (DKbFltr) – C:\Windows\System32\drivers\DKbFltr.sys (Dritek System Inc.)
DRV - (ql40xx) – C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) – C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (nfrd960) – C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) – C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (aic78xx) – C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (iteraid) – C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) – C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (Symc8xx) – C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_u3) – C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) – C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) – C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) – C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) – C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) – C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) – C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) – C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) – C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) – C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (secdrv) – C:\Windows\System32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (speedfan) – C:\Windows\system32\speedfan.sys (Windows ® 2000 DDK provider)
DRV - (NuVision) Hauppauge WinTV USB Pro (PAL I,D/K) – C:\Windows\System32\drivers\Nuvision.sys (Hauppauge Computer Works)
DRV - (TPkd) – C:\Windows\System32\drivers\TPkd.sys (PACE Anti-Piracy, Inc.)
DRV - (giveio) – C:\Windows\system32\giveio.sys ()

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…p;m=aspire_5735

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.live.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://uk.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.startup.homepage: "http://forum.consolegaming.eu/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.2
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.10
FF - prefs.js..extensions.enabledItems: {11483926-db67-4190-91b1-ef20fcec5f33}:0.3.2
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:3.6.1
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
FF - prefs.js..extensions.enabledItems: [removed]:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 9
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..network.proxy.backup.ftp: "[removed]"
FF - prefs.js..network.proxy.backup.ftp_port: 3124
FF - prefs.js..network.proxy.backup.gopher: "[removed]"
FF - prefs.js..network.proxy.backup.gopher_port: 3124
FF - prefs.js..network.proxy.backup.socks: "[removed]"
FF - prefs.js..network.proxy.backup.socks_port: 3124
FF - prefs.js..network.proxy.backup.ssl: "[removed]"
FF - prefs.js..network.proxy.backup.ssl_port: 3124
FF - prefs.js..network.proxy.ftp: "[removed]"
FF - prefs.js..network.proxy.ftp_port: 3128
FF - prefs.js..network.proxy.gopher: "[removed]"
FF - prefs.js..network.proxy.gopher_port: 3128
FF - prefs.js..network.proxy.http: "[removed]"
FF - prefs.js..network.proxy.http_port: 3128
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "[removed]"
FF - prefs.js..network.proxy.socks_port: 3128
FF - prefs.js..network.proxy.ssl: "204.85.191.10"
FF - prefs.js..network.proxy.ssl_port: 3128

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/12/02 18:18:42 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/12/02 18:18:41 | 00,000,000 | —D | M]

[2009/04/14 15:14:20 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mozilla\Extensions
[2009/12/14 13:37:37 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions
[2009/11/08 20:54:24 | 00,000,000 | —D | M] (No name found) – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\{11483926-db67-4190-91b1-ef20fcec5f33}
[2009/12/07 14:12:10 | 00,000,000 | —D | M] (ReloadEvery) – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2009/11/06 20:47:10 | 00,000,000 | —D | M] (BitComet Video Downloader) – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2009/12/14 13:37:23 | 00,000,000 | —D | M] (Adblock Plus) – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2009/07/03 12:03:32 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\[removed]
[2009/11/10 11:43:06 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\[removed]
[2009/09/03 11:44:43 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\[removed]
[2009/12/13 16:42:58 | 00,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2009/07/17 08:40:12 | 00,704,512 | —- | M] (BitComet) – C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2009/11/03 01:42:02 | 00,001,538 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2009/11/03 01:42:02 | 00,000,947 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2009/11/03 01:42:02 | 00,000,769 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2009/11/03 01:42:02 | 00,000,831 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: (683 bytes) - C:\Windows\System32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - No CLSID value found.
O2 - BHO: (MSN Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ArcadeDeluxeAgent] C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [ISTray] C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [Persistence] C:\Windows\System32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [PlayMovie] C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Acer Corp.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Skytel] C:\Windows\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - Startup: C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &D;&ownload; &with; BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D;&ownload; all video with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D;&ownload; all with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.)
O15 - HKLM\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://www.pcpitstop.com/betapit/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} http://dl.tvunetworks.com/TVUAx.cab (CTVUAxCtrl Object)
O16 - DPF: {588031A3-94BF-4CDD-86D0-939F6F93910F} https://fixit.support.microsoft.com/ActiveX/FixItClient.CAB (FixItClient Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: Justin.tv Publisher http://www.justin.tv/plugins/justintv_publisher.CAB (Reg Error: Key error.)
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 21:43:36 | 00,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2009/07/30 08:30:42 | 00,000,154 | R— | M] () - X:\autorun.cfg – [ UDF ]
O32 - AutoRun File - [2008/11/27 12:02:24 | 00,214,280 | R— | M] (Sports Interactive) - X:\autorun.exe – [ UDF ]
O32 - AutoRun File - [2006/09/11 13:26:42 | 00,000,027 | R— | M] () - X:\autorun.inf – [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] – "%1" %*
O35 - exefile [open] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2009/12/14 22:31:47 | 00,000,000 | —D | C] – C:\Users\Jack\Desktop\Folder
[2009/12/13 18:13:05 | 00,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2009/12/13 17:56:51 | 00,000,000 | —D | C] – C:\Windows\temp
[2009/12/13 17:45:16 | 00,000,000 | —D | C] – C:\32788R22FWJFW
[2009/12/13 16:44:17 | 00,000,000 | —D | C] – C:\Program Files\Common Files\SWF Studio
[2009/12/13 16:26:05 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Local\temp
[2009/12/13 13:56:05 | 02,452,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dat
[2009/12/13 13:55:51 | 00,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2009/12/13 13:55:49 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieencode.dll
[2009/12/13 13:55:46 | 00,380,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2009/12/13 13:55:30 | 00,512,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript.dll
[2009/12/13 00:01:56 | 00,038,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\WdfLdr.sys
[2009/12/13 00:00:38 | 01,461,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WdfCoInstaller01009.dll
[2009/12/13 00:00:38 | 00,206,120 | —- | C] (Synaptics Incorporated) – C:\Windows\System32\SynCtrl.dll
[2009/12/13 00:00:38 | 00,120,104 | —- | C] (Synaptics Incorporated) – C:\Windows\System32\SynTPCo4.dll
[2009/12/13 00:00:37 | 00,228,784 | —- | C] (Synaptics Incorporated) – C:\Windows\System32\drivers\SynTP.sys
[2009/12/12 23:13:55 | 00,208,896 | —- | C] (Acer Inc.) – C:\Windows\System32\SysHook.dll
[2009/12/12 23:13:55 | 00,061,440 | —- | C] (Acer Inc.) – C:\Windows\System32\MCEPlugin.dll
[2009/12/12 23:12:18 | 00,000,000 | —D | C] – C:\Users\Jack\Desktop\Virus
[2009/12/12 20:39:16 | 00,000,000 | —D | C] – C:\Program Files\ESET
[2009/12/12 18:11:36 | 00,000,000 | —D | C] – C:\Windows\Minidump
[2009/12/12 17:53:18 | 00,212,480 | —- | C] (SteelWerX) – C:\Windows\SWXCACLS.exe
[2009/12/12 17:53:18 | 00,161,792 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2009/12/12 17:53:18 | 00,136,704 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2009/12/12 17:53:18 | 00,031,232 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2009/12/12 17:52:35 | 00,000,000 | —D | C] – C:\Windows\ERDNT
[2009/12/12 17:48:06 | 00,000,000 | —D | C] – C:\Qoobox
[2009/12/10 20:07:28 | 00,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\httpapi.dll
[2009/12/10 20:07:27 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nshhttp.dll
[2009/12/10 20:06:40 | 00,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rastls.dll
[2009/12/08 17:58:34 | 00,000,000 | —D | C] – C:\Users\Jack\Desktop\Episode 1.avi; Episode 2.avi; Episode 3.avi; Episode 4.avi; Episode 5.avi; Episode 6
[2009/12/07 21:17:31 | 00,000,000 | —D | C] – C:\ProgramData\Vso
[2009/12/07 21:15:06 | 00,047,360 | —- | C] (VSO Software) – C:\Windows\System32\drivers\pcouffin.sys
[2009/12/07 21:15:06 | 00,047,360 | —- | C] (VSO Software) – C:\Users\Jack\AppData\Roaming\pcouffin.sys
[2009/12/07 21:15:05 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Roaming\Vso
[2009/12/07 21:15:05 | 00,000,000 | —D | C] – C:\Users\Jack\Documents\PcSetup
[2009/12/07 19:47:44 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Local\Threat Expert
[2009/12/07 19:17:43 | 00,000,000 | —D | C] – C:\ProgramData\NtiDvdCopy
[2009/12/07 16:17:15 | 00,000,000 | —D | C] – C:\Users\Jack\Desktop\The Damned United
[2009/12/07 16:16:12 | 00,000,000 | —D | C] – C:\Program Files\vso
[2009/12/02 21:04:21 | 00,000,000 | —D | C] – C:\SDFix
[2009/12/02 18:25:17 | 00,000,000 | —D | C] – C:\Program Files\iPod
[2009/12/02 18:25:09 | 00,000,000 | —D | C] – C:\Program Files\iTunes
[2009/12/02 18:17:39 | 00,000,000 | —D | C] – C:\Program Files\QuickTime
[2009/11/30 17:46:42 | 00,233,136 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctgntdi.sys
[2009/11/30 17:46:42 | 00,098,600 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctwfpfilter.sys
[2009/11/30 17:46:39 | 00,207,792 | —- | C] (PC Tools) – C:\Windows\System32\drivers\PCTCore.sys
[2009/11/30 17:46:39 | 00,087,784 | —- | C] (PC Tools) – C:\Windows\System32\drivers\PCTAppEvent.sys
[2009/11/30 17:46:30 | 00,070,408 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctplsg.sys
[2009/11/30 17:46:09 | 00,000,000 | —D | C] – C:\Program Files\Spyware Doctor
[2009/11/30 17:46:09 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Roaming\PC Tools
[2009/11/30 17:46:09 | 00,000,000 | —D | C] – C:\ProgramData\PC Tools
[2009/11/30 17:46:09 | 00,000,000 | —D | C] – C:\Program Files\Common Files\PC Tools
[2009/11/30 17:13:44 | 00,000,000 | -HSD | C] – C:\Users\Jack\AppData\Roaming\lowsec
[2009/11/29 13:42:03 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/11/28 20:44:47 | 00,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2009/11/28 20:44:47 | 00,000,000 | —D | C] – C:\Program Files\Spybot - Search & Destroy
[2009/11/28 13:03:02 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Roaming\Malwarebytes
[2009/11/28 13:02:58 | 00,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/11/28 13:02:57 | 00,019,160 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2009/11/28 13:02:57 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/11/28 13:02:57 | 00,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2009/11/27 23:02:18 | 00,000,000 | —D | C] – C:\Users\Jack\Documents\Pamela
[2009/11/27 23:01:54 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Roaming\Pamela
[2009/11/25 16:52:34 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tzres.dll
[2009/11/25 13:24:01 | 00,714,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\timedate.cpl
[2009/11/18 03:24:40 | 00,000,000 | —D | C] – C:\Program Files\Windows Portable Devices
[2009/11/18 03:02:58 | 03,023,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIRibbon.dll
[2009/11/18 03:02:58 | 01,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIRibbonRes.dll
[2009/11/18 03:02:58 | 00,092,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIAnimation.dll
[2009/11/18 03:02:33 | 00,369,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMPhoto.dll
[2009/11/18 03:02:33 | 00,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cdd.dll
[2009/11/18 03:02:32 | 00,829,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10warp.dll
[2009/11/18 03:02:32 | 00,828,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d2d1.dll
[2009/11/18 03:02:32 | 00,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsGdiConverter.dll
[2009/11/18 03:02:32 | 00,189,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecsExt.dll
[2009/11/18 03:02:32 | 00,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsRasterService.dll
[2009/11/18 03:02:32 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelineprxy.dll
[2009/11/18 03:02:31 | 01,554,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xpsservices.dll
[2009/11/18 03:02:31 | 01,064,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DWrite.dll
[2009/11/18 03:02:31 | 00,974,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecs.dll
[2009/11/18 03:02:31 | 00,847,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\OpcServices.dll
[2009/11/18 03:02:31 | 00,793,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FntCache.dll
[2009/11/18 03:02:31 | 00,667,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelinesvc.exe
[2009/11/18 03:02:31 | 00,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d11.dll
[2009/11/18 03:02:31 | 00,486,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10level9.dll
[2009/11/18 03:02:31 | 00,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxgi.dll
[2009/11/18 03:02:31 | 00,351,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsPrint.dll
[2009/11/18 03:02:31 | 00,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PhotoMetadataHandler.dll
[2009/11/18 03:02:31 | 00,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxdiag.exe
[2009/11/18 03:02:31 | 00,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1core.dll
[2009/11/18 03:02:31 | 00,195,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxdiagn.dll
[2009/11/18 03:02:31 | 00,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10core.dll
[2009/11/18 03:02:31 | 00,161,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1.dll
[2009/11/18 03:02:30 | 01,030,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10.dll
[2009/11/18 03:02:05 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\BthMtpContextHandler.dll
[2009/11/18 03:02:05 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDShextAutoplay.exe
[2009/11/18 03:01:59 | 00,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceConnectApi.dll
[2009/11/18 03:01:55 | 00,546,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpd_ci.dll
[2009/11/18 03:01:55 | 00,350,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDSp.dll
[2009/11/18 03:01:55 | 00,334,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceApi.dll
[2009/11/18 03:01:55 | 00,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceWMDRM.dll
[2009/11/18 03:01:55 | 00,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceTypes.dll
[2009/11/18 03:01:55 | 00,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceClassExtension.dll
[2009/11/18 03:00:36 | 00,555,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIAutomationCore.dll
[2009/11/18 03:00:36 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oleaccrc.dll
[2008/12/20 20:59:40 | 00,049,152 | —- | C] ( ) – C:\Windows\Interop.IWshRuntimeLibrary.dll
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2009/12/14 23:01:50 | 09,175,040 | -HS- | M] () – C:\Users\Jack\ntuser.dat
[2009/12/14 22:52:00 | 00,000,884 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2009/12/14 22:52:00 | 00,000,880 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2009/12/14 21:22:01 | 00,690,960 | —- | M] () – C:\Windows\System32\PerfStringBackup.INI
[2009/12/14 21:22:01 | 00,600,378 | —- | M] () – C:\Windows\System32\perfh009.dat
[2009/12/14 21:22:01 | 00,105,852 | —- | M] () – C:\Windows\System32\perfc009.dat
[2009/12/14 21:20:45 | 00,000,683 | —- | M] () – C:\Windows\System32\drivers\etc\HOSTS
[2009/12/14 21:15:59 | 00,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2009/12/14 21:15:50 | 00,003,216 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/12/14 21:15:50 | 00,003,216 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/12/14 21:15:38 | 00,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2009/12/14 21:15:34 | 31,466,29120 | -HS- | M] () – C:\hiberfil.sys
[2009/12/14 21:14:41 | 00,524,288 | -HS- | M] () – C:\Users\Jack\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TMContainer00000000000000000001.regtrans-ms
[2009/12/14 21:14:41 | 00,065,536 | -HS- | M] () – C:\Users\Jack\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TM.blf
[2009/12/14 21:14:36 | 02,139,453 | -H– | M] () – C:\Users\Jack\AppData\Local\IconCache.db
[2009/12/13 17:57:10 | 00,000,215 | —- | M] () – C:\Windows\system.ini
[2009/12/13 17:43:29 | 00,000,064 | —- | M] () – C:\Users\Jack\defogger_reenable
[2009/12/13 14:57:48 | 34,096,1837 | —- | M] () – C:\Windows\MEMORY.DMP
[2009/12/13 00:03:49 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_SynTP_01009.Wdf
[2009/12/13 00:02:20 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2009/12/12 23:26:05 | 00,096,256 | —- | M] () – C:\Users\Jack\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/12/09 22:54:07 | 00,261,632 | —- | M] () – C:\Windows\PEV.exe
[2009/12/07 21:15:06 | 00,047,360 | —- | M] (VSO Software) – C:\Windows\System32\drivers\pcouffin.sys
[2009/12/07 21:15:06 | 00,047,360 | —- | M] (VSO Software) – C:\Users\Jack\AppData\Roaming\pcouffin.sys
[2009/12/07 21:15:06 | 00,007,887 | —- | M] () – C:\Users\Jack\AppData\Roaming\pcouffin.cat
[2009/12/07 21:15:06 | 00,001,144 | —- | M] () – C:\Users\Jack\AppData\Roaming\pcouffin.inf
[2009/12/07 19:53:45 | 00,001,024 | RH– | M] () – C:\Users\Public\Documents\NTIMP3.dll
[2009/12/03 16:14:06 | 00,038,224 | —- | M] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/12/03 16:13:56 | 00,019,160 | —- | M] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2009/11/29 15:08:20 | 00,006,080 | —- | M] () – C:\Users\Jack\AppData\Local\d3d9caps.dat
[2009/11/27 23:58:30 | 00,002,577 | —- | M] () – C:\Windows\System32\config.nt
[2009/11/26 14:22:00 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_xusb21_01007.Wdf
[2009/11/26 13:05:41 | 00,000,000 | —- | M] () – C:\Windows\System32\LogConfigTemp.xml
[2009/11/24 23:54:29 | 01,280,480 | —- | M] (ALWIL Software) – C:\Windows\System32\aswBoot.exe
[2009/11/24 23:50:12 | 00,114,768 | —- | M] (ALWIL Software) – C:\Windows\System32\drivers\aswSP.sys
[2009/11/24 23:50:00 | 00,020,560 | —- | M] (ALWIL Software) – C:\Windows\System32\drivers\aswFsBlk.sys
[2009/11/24 23:49:48 | 00,053,328 | —- | M] (ALWIL Software) – C:\Windows\System32\drivers\aswMonFlt.sys
[2009/11/24 23:49:07 | 00,048,560 | —- | M] (ALWIL Software) – C:\Windows\System32\drivers\aswTdi.sys
[2009/11/24 23:48:57 | 00,023,120 | —- | M] (ALWIL Software) – C:\Windows\System32\drivers\aswRdr.sys
[2009/11/24 23:47:28 | 00,097,480 | —- | M] (ALWIL Software) – C:\Windows\System32\AvastSS.scr
[2009/11/18 03:24:31 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2009/12/13 18:15:44 | 31,466,29120 | -HS- | C] () – C:\hiberfil.sys
[2009/12/13 15:58:44 | 00,000,064 | —- | C] () – C:\Users\Jack\defogger_reenable
[2009/12/13 13:57:17 | 00,000,802 | —- | C] () – C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
[2009/12/13 00:03:49 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_SynTP_01009.Wdf
[2009/12/13 00:02:20 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2009/12/13 00:02:02 | 00,000,003 | —- | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf
[2009/12/12 18:11:14 | 34,096,1837 | —- | C] () – C:\Windows\MEMORY.DMP
[2009/12/12 17:53:18 | 00,261,632 | —- | C] () – C:\Windows\PEV.exe
[2009/12/12 17:53:18 | 00,098,816 | —- | C] () – C:\Windows\sed.exe
[2009/12/12 17:53:18 | 00,080,412 | —- | C] () – C:\Windows\grep.exe
[2009/12/12 17:53:18 | 00,077,312 | —- | C] () – C:\Windows\MBR.exe
[2009/12/12 17:53:18 | 00,068,096 | —- | C] () – C:\Windows\zip.exe
[2009/12/07 21:16:00 | 00,000,034 | —- | C] () – C:\Users\Jack\AppData\Roaming\pcouffin.log
[2009/12/07 21:15:06 | 00,007,887 | —- | C] () – C:\Users\Jack\AppData\Roaming\pcouffin.cat
[2009/12/07 21:15:06 | 00,001,144 | —- | C] () – C:\Users\Jack\AppData\Roaming\pcouffin.inf
[2009/11/30 17:46:43 | 00,007,387 | —- | C] () – C:\Windows\System32\drivers\pctgntdi.cat
[2009/11/30 17:46:39 | 00,007,412 | —- | C] () – C:\Windows\System32\drivers\PCTAppEvent.cat
[2009/11/30 17:46:39 | 00,007,383 | —- | C] () – C:\Windows\System32\drivers\pctcore.cat
[2009/11/30 17:46:30 | 00,007,383 | —- | C] () – C:\Windows\System32\drivers\pctplsg.cat
[2009/11/29 15:00:32 | 00,143,660 | —- | C] () – C:\Users\Jack\AppData\Local\edsinstaller.txt-20091129.log
[2009/11/26 14:22:00 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_xusb21_01007.Wdf
[2009/11/18 03:24:31 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2009/09/17 12:13:56 | 00,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/08/23 18:13:41 | 00,000,258 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2009/08/21 19:32:47 | 00,002,905 | —- | C] () – C:\Users\Jack\AppData\Local\edsinstaller.txt-20090821.log
[2009/07/30 22:08:35 | 00,000,000 | -H– | C] () – C:\Users\Jack\AppData\Roaming\Cricket2009.exe.lock
[2009/07/16 19:36:54 | 00,000,369 | —- | C] () – C:\ProgramData\hpzinstall.log
[2009/07/03 12:39:37 | 00,139,152 | —- | C] () – C:\Windows\System32\drivers\PnkBstrK.sys
[2009/07/03 12:39:37 | 00,139,152 | —- | C] () – C:\Users\Jack\AppData\Roaming\PnkBstrK.sys
[2009/07/01 13:22:20 | 00,000,143 | —- | C] () – C:\Users\Jack\AppData\Roaming\default.rss
[2009/07/01 12:58:38 | 00,000,039 | —- | C] () – C:\Windows\Irremote.ini
[2009/06/29 14:50:29 | 00,003,528 | —- | C] () – C:\ProgramData\ArcadeDeluxe2.log
[2009/06/16 15:14:30 | 00,000,262 | —- | C] () – C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/06/13 21:09:29 | 00,404,480 | —- | C] () – C:\Windows\System32\libmplayer.dll
[2009/06/13 21:09:29 | 00,200,704 | —- | C] () – C:\Windows\System32\TomsMoComp_ff.dll
[2009/06/13 21:09:29 | 00,114,688 | —- | C] () – C:\Windows\System32\libmpeg2_ff.dll
[2009/06/13 21:03:00 | 00,057,344 | —- | C] () – C:\Windows\System32\ff_vfw.dll
[2009/06/13 21:03:00 | 00,000,547 | —- | C] () – C:\Windows\System32\ff_vfw.dll.manifest
[2009/05/17 16:58:03 | 00,000,349 | —- | C] () – C:\Windows\vtplus32.ini
[2009/05/17 16:57:47 | 00,000,569 | —- | C] () – C:\Windows\HCWPNP.INI
[2009/05/17 16:56:17 | 00,009,206 | —- | C] () – C:\Windows\NTTuner.ini
[2009/04/30 09:00:45 | 00,000,376 | —- | C] () – C:\Windows\ODBC.INI
[2009/04/25 21:12:24 | 00,140,288 | —- | C] () – C:\Windows\System32\igfxtvcx.dll
[2009/04/17 21:09:54 | 00,006,080 | —- | C] () – C:\Users\Jack\AppData\Local\d3d9caps.dat
[2009/04/16 00:04:44 | 00,096,256 | —- | C] () – C:\Users\Jack\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/04/15 20:04:08 | 00,069,632 | —- | C] () – C:\Windows\System32\xmltok.dll
[2009/04/15 20:04:08 | 00,036,864 | —- | C] () – C:\Windows\System32\xmlparse.dll
[2009/04/14 22:09:06 | 00,024,206 | —- | C] () – C:\Users\Jack\AppData\Roaming\UserTile.png
[2008/12/20 20:44:52 | 00,147,456 | —- | C] () – C:\Windows\System32\igfxCoIn_v1527.dll
[2008/12/20 20:13:23 | 00,001,694 | —- | C] () – C:\Windows\RtDefLvl.ini
[2008/05/15 05:47:54 | 00,001,024 | RH– | C] () – C:\Windows\System32\NTIOFM4.dll
[2008/05/15 05:47:54 | 00,001,024 | RH– | C] () – C:\Windows\System32\NTIBUN5.dll
[2008/05/14 12:48:18 | 01,060,424 | —- | C] () – C:\Windows\System32\WdfCoInstaller01000.dll
[2008/05/14 12:48:14 | 00,872,448 | —- | C] () – C:\Windows\iconv.dll
[2008/05/14 12:48:14 | 00,743,424 | —- | C] () – C:\Windows\libxml2.dll
[2008/05/14 12:48:13 | 00,000,042 | —- | C] () – C:\Windows\Prelaunch.ini
[2007/11/06 20:19:28 | 00,053,299 | —- | C] () – C:\Windows\System32\pthreadVC.dll
[2006/11/02 07:40:29 | 00,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2003/09/11 20:11:22 | 00,000,000 | —- | C] () – C:\Windows\System32\px.ini
[2001/12/26 23:12:30 | 00,065,536 | —- | C] () – C:\Windows\System32\multiplex_vcd.dll
[2001/09/04 06:46:38 | 00,110,592 | —- | C] () – C:\Windows\System32\Hmpg12.dll
[2001/07/30 23:33:56 | 00,118,784 | —- | C] () – C:\Windows\System32\HMPV2_ENC.dll
[2001/07/24 05:04:36 | 00,118,784 | —- | C] () – C:\Windows\System32\HMPV2_ENC_MMX.dll
[1996/04/03 19:33:26 | 00,005,248 | —- | C] () – C:\Windows\System32\giveio.sys

========== LOP Check ==========

[2008/05/15 05:46:38 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Acer GameZone Console
[2009/07/01 15:27:40 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Azureus
[2009/04/27 10:28:09 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Big Fish Games
[2009/08/13 12:13:48 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\BraCa_Soft
[2009/08/26 13:06:12 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Clone2Go DVD Ripper
[2009/07/29 20:44:52 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\DAEMON Tools Pro
[2009/10/11 22:03:19 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\EA
[2009/04/14 18:40:06 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\eSobi
[2009/04/14 23:36:30 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\FloodLightGames
[2009/09/11 16:02:17 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\GetRightToGo
[2009/05/17 16:59:07 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\InterTrust
[2009/08/09 15:05:38 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Jasc
[2009/07/18 20:54:52 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\JPEGsnoop
[2009/11/30 19:29:21 | 00,000,000 | -HSD | M] – C:\Users\Jack\AppData\Roaming\lowsec
[2009/05/04 15:07:54 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\MessengerGadget
[2009/06/10 18:40:59 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\NavNet Solutions
[2009/11/27 23:21:28 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Pamela
[2009/04/14 22:09:06 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\PeerNetworking
[2009/09/27 19:05:17 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\play2p
[2009/06/29 14:51:11 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\PowerCinema
[2009/04/15 01:09:16 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\PrettyMay
[2009/08/27 20:04:32 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\proDAD
[2009/04/23 23:18:00 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Publish Providers
[2009/08/31 15:30:52 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\River Past G5
[2009/08/27 21:20:45 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Sony
[2009/10/30 20:11:57 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Sports Interactive
[2009/12/08 21:13:24 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Spotify
[2009/08/26 17:05:21 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\TeamViewer
[2009/08/28 10:30:30 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Unity
[2009/09/30 12:04:29 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\vghd
[2009/12/11 20:13:54 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Vso
[2009/12/14 21:14:43 | 00,032,624 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 99 bytes -> C:\ProgramData\TEMP:861A898F
@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:8AB6C1D7
@Alternate Data Stream - 196 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 159 bytes -> C:\ProgramData\TEMP:B623B5B8
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:443E07A5
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:FEBEC560
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:A8ADE5D8
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:4CF61E54
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86
< End of report >

LDTate

Post #39December 14, 2009, 11:44 PM UTC

Do you know what all the AppData\Roaming programs are?
C:\Users\Jack\AppData\Roaming\lowsec

jack2059

Post #40December 14, 2009, 11:50 PM UTC

Theres a folder in there for all the programs on the laptop. Normal for vista apparently.

LDTate

Post #41December 15, 2009, 12:02 AM UTC

1. launch Notepad (Start>All Programs>Accessories), and copy/paste all the Quoted REGEDIT below to it. Don't forget to include REGEDIT4.
Save in: Desktop
File Name: fixme.reg
Save as Type: All files
Click: Save

REGEDIT4

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7A7FFD93-A4A6-DBC6-498D-4E6ECA6B2EED}

2. Save this text as fixme.reg. Make sure the "Save as type:" is "All Files (*.*)" and save it to your desktop. Include the word REGEDIT4

3. Double-click on fixme.reg. When it asks you to merge the information to the registry click Yes.

4.Empty Recycle Bin

Reboot and "copy/paste" a new log file into this thread.
Also please describe how your computer behaves at the moment.

jack2059

Post #42December 15, 2009, 12:18 AM UTC

I dont think its running any different, maybe a little slower.

OTL logfile created on: 15/12/2009 00:08:44 - Run 3
OTL by OldTimer - Version 3.1.17.0 Folder = C:\Users\Jack\Desktop\Virus
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.81 Gb Available Physical Memory | 90.71% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 111.57 Gb Total Space | 19.21 Gb Free Space | 17.22% Space Free | Partition Type: NTFS
Drive D: | 111.55 Gb Total Space | 111.46 Gb Free Space | 99.92% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive X: | 2.32 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: JACK-PC
Current User Name: Jack
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\Jack\AppData\Local\temp\RtkBtMnt.exe (Realtek Semiconductor Corp.)
PRC - C:\Users\Jack\Desktop\Virus\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
PRC - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
PRC - C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
PRC - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools)
PRC - C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)
PRC - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
PRC - C:\Windows\System32\igfxsrvc.exe (Intel Corporation)
PRC - C:\Windows\System32\hkcmd.exe (Intel Corporation)
PRC - C:\Windows\System32\igfxext.exe (Intel Corporation)
PRC - C:\Windows\System32\igfxpers.exe (Intel Corporation)
PRC - C:\Windows\System32\igfxtray.exe (Intel Corporation)
PRC - C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Synaptics Incorporated)
PRC - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
PRC - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
PRC - C:\Windows\System32\PnkBstrA.exe ()
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
PRC - C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
PRC - C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Acer Corp.)
PRC - C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (CyberLink Corp.)
PRC - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe (NewTech InfoSystems, Inc.)
PRC - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe ()
PRC - C:\Windows\System32\agrsmsvc.exe (Agere Systems)
PRC - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe (NewTech Infosystems, Inc.)
PRC - C:\Program Files\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
PRC - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe ()
PRC - C:\Program Files\RocketDock\RocketDock.exe ()
PRC - C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Cyberlink\Shared files\RichVideo.exe ()

========== Modules (SafeList) ==========

MOD - C:\Users\Jack\Desktop\Virus\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Spyware Doctor\PCTGMhk.dll (PC Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV - (Nero BackItUp Scheduler 4.0) – File not found
SRV - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast4\ashServ.exe (ALWIL Software)
SRV - (avast! Mail Scanner) – C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (ALWIL Software)
SRV - (avast! Web Scanner) – C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (ALWIL Software)
SRV - (aswUpdSv) – C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (ALWIL Software)
SRV - (iPod Service) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (sdCoreService) – C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools)
SRV - (Steam Client Service) – C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (sdAuxService) – C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)
SRV - (FontCache) – C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (TeamViewer4) – C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (PnkBstrA) – C:\Windows\System32\PnkBstrA.exe ()
SRV - (gupdate1c9e779192abe64) Google Update Service (gupdate1c9e779192abe64) – C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (Apple Mobile Device) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (TVersityMediaServer) – C:\Program Files\TVersity\Media Server\MediaServer.exe ()
SRV - (Bonjour Service) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (NTIBackupSvc) – C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe (NewTech InfoSystems, Inc.)
SRV - (NTISchedulerSvc) – C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe ()
SRV - (AgereModemAudio) – C:\Windows\System32\agrsmsvc.exe (Agere Systems)
SRV - (BUNAgentSvc) – C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe (NewTech Infosystems, Inc.)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (CLHNService) – C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe ()
SRV - (MobilityService) – C:\Acer\Mobility Center\MobilityService.exe ()
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) – C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies)
SRV - (LightScribeService) – C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (RichVideo) Cyberlink RichVideo Service(CRVS) – C:\Program Files\Cyberlink\Shared files\RichVideo.exe ()
SRV - (Irmon) – C:\Windows\System32\irmon.dll (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (pcouffin) – C:\Windows\System32\drivers\pcouffin.sys (VSO Software)
DRV - (aswSP) – C:\Windows\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswFsBlk) – C:\Windows\System32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (aswMonFlt) – C:\Windows\System32\drivers\aswMonFlt.sys (ALWIL Software)
DRV - (aswTdi) – C:\Windows\System32\drivers\aswTdi.sys (ALWIL Software)
DRV - (aswRdr) – C:\Windows\System32\drivers\aswRdr.sys (ALWIL Software)
DRV - (PCTCore) – C:\Windows\system32\drivers\PCTCore.sys (PC Tools)
DRV - (hamachi) – C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (igfx) – C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
DRV - (USBAAPL) – C:\Windows\System32\drivers\usbaapl.sys (Apple, Inc.)
DRV - (SynTP) – C:\Windows\System32\drivers\SynTP.sys (Synaptics Incorporated)
DRV - (netr28) – C:\Windows\System32\drivers\netr28.sys (Ralink Technology, Corp.)
DRV - (sptd) – C:\Windows\System32\Drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (GEARAspiWDM) – C:\Windows\System32\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (PxHelp20) – C:\Windows\system32\DRIVERS\PxHelp20.sys (Sonic Solutions)
DRV - (usbaudio) USB Audio Driver (WDM) – C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (xusb21) – C:\Windows\System32\drivers\xusb21.sys (Microsoft Corporation)
DRV - (mcdbus) – C:\Windows\System32\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (RTSTOR) – C:\Windows\System32\drivers\RTSTOR.sys (Realtek Semiconductor Corp.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - ({49DE1C67-83F8-4102-99E0-C16DCC7EEC796}) – C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl (Cyberlink Corp.)
DRV - (AgereSoftModem) – C:\Windows\System32\drivers\AGRSM.sys (Agere Systems)
DRV - (yukonwlh) – C:\Windows\System32\drivers\yk60x86.sys (Marvell)
DRV - (NTIDrvr) – C:\Windows\System32\drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV - (UBHelper) – C:\Windows\System32\drivers\UBHelper.sys (NewTech Infosystems Corporation)
DRV - (adpu320) – C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (megasas) – C:\Windows\system32\drivers\megasas.sys (LSI Corporation)
DRV - (MegaSR) – C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.)
DRV - (adpu160m) – C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (SiSRaid4) – C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (HpCISSs) – C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (adpahci) – C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (LSI_SAS) – C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (ql2300) – C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (E1G60) Intel® – C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (arcsas) – C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (iaStorV) – C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (vsmraid) – C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ulsata2) – C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (LSI_FC) – C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (arc) – C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (NSCIRDA) – C:\Windows\System32\drivers\nscirda.sys (National Semiconductor Corporation)
DRV - (HSF_DPV) – C:\Windows\System32\drivers\VSTDPV3.SYS (Conexant Systems, Inc.)
DRV - (winachsf) – C:\Windows\System32\drivers\VSTCNXT3.SYS (Conexant Systems, Inc.)
DRV - (elxstor) – C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (HSFHWAZL) – C:\Windows\System32\drivers\VSTAZL3.SYS (Conexant Systems, Inc.)
DRV - (LSI_SCSI) – C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (nvraid) – C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nvstor) – C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (adp94xx) – C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (uliahci) – C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (b57nd60x) – C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (viaide) – C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) – C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) – C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (NTIPPKernel) – C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys (Cyberlink Corp.)
DRV - (NPF) – C:\Windows\System32\drivers\npf.sys (CACE Technologies)
DRV - (Xponaut_WBD) Xponaut WaveBridge Device (WDM) – C:\Windows\System32\drivers\xpntwbd.sys (Xponaut)
DRV - (DKbFltr) – C:\Windows\System32\drivers\DKbFltr.sys (Dritek System Inc.)
DRV - (ql40xx) – C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) – C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (nfrd960) – C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) – C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (aic78xx) – C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (iteraid) – C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) – C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (Symc8xx) – C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_u3) – C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) – C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) – C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) – C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) – C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) – C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) – C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) – C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) – C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) – C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (secdrv) – C:\Windows\System32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (speedfan) – C:\Windows\system32\speedfan.sys (Windows ® 2000 DDK provider)
DRV - (NuVision) Hauppauge WinTV USB Pro (PAL I,D/K) – C:\Windows\System32\drivers\Nuvision.sys (Hauppauge Computer Works)
DRV - (TPkd) – C:\Windows\System32\drivers\TPkd.sys (PACE Anti-Piracy, Inc.)
DRV - (giveio) – C:\Windows\system32\giveio.sys ()

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…p;m=aspire_5735

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.live.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://uk.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.startup.homepage: "http://forum.consolegaming.eu/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.2
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {B042753D-F57E-4e8e-A01B-7379A6D4CEFB}:1.10
FF - prefs.js..extensions.enabledItems: {11483926-db67-4190-91b1-ef20fcec5f33}:0.3.2
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:3.6.1
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
FF - prefs.js..extensions.enabledItems: [removed]:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 9
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..network.proxy.backup.ftp: "[removed]"
FF - prefs.js..network.proxy.backup.ftp_port: 3124
FF - prefs.js..network.proxy.backup.gopher: "[removed]"
FF - prefs.js..network.proxy.backup.gopher_port: 3124
FF - prefs.js..network.proxy.backup.socks: "[removed]"
FF - prefs.js..network.proxy.backup.socks_port: 3124
FF - prefs.js..network.proxy.backup.ssl: "[removed]"
FF - prefs.js..network.proxy.backup.ssl_port: 3124
FF - prefs.js..network.proxy.ftp: "[removed]"
FF - prefs.js..network.proxy.ftp_port: 3128
FF - prefs.js..network.proxy.gopher: "[removed]"
FF - prefs.js..network.proxy.gopher_port: 3128
FF - prefs.js..network.proxy.http: "[removed]"
FF - prefs.js..network.proxy.http_port: 3128
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "[removed]"
FF - prefs.js..network.proxy.socks_port: 3128
FF - prefs.js..network.proxy.ssl: "204.85.191.10"
FF - prefs.js..network.proxy.ssl_port: 3128

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/12/02 18:18:42 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/12/02 18:18:41 | 00,000,000 | —D | M]

[2009/04/14 15:14:20 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mozilla\Extensions
[2009/12/14 13:37:37 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions
[2009/11/08 20:54:24 | 00,000,000 | —D | M] (No name found) – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\{11483926-db67-4190-91b1-ef20fcec5f33}
[2009/12/07 14:12:10 | 00,000,000 | —D | M] (ReloadEvery) – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2009/11/06 20:47:10 | 00,000,000 | —D | M] (BitComet Video Downloader) – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2009/12/14 13:37:23 | 00,000,000 | —D | M] (Adblock Plus) – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2009/07/03 12:03:32 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\[removed]
[2009/11/10 11:43:06 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\[removed]
[2009/09/03 11:44:43 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\imrwxte5.default\extensions\[removed]
[2009/12/13 16:42:58 | 00,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2009/07/17 08:40:12 | 00,704,512 | —- | M] (BitComet) – C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
[2009/11/03 01:42:02 | 00,001,538 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2009/11/03 01:42:02 | 00,000,947 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2009/11/03 01:42:02 | 00,000,769 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2009/11/03 01:42:02 | 00,000,831 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: (683 bytes) - C:\Windows\System32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (no name) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - No CLSID value found.
O2 - BHO: (MSN Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (MSN Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolbar\3.0.1203.0\msneshellx.dll (Microsoft Corp.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ArcadeDeluxeAgent] C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [ISTray] C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [Persistence] C:\Windows\System32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [PlayMovie] C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Acer Corp.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Skytel] C:\Windows\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [RocketDock] C:\Program Files\RocketDock\RocketDock.exe ()
O4 - Startup: C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: &D;&ownload; &with; BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D;&ownload; all video with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D;&ownload; all with BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.16.dll (BitComet)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (Intertrust Technologies, Inc.)
O15 - HKLM\..Trusted Domains: 57 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://www.pcpitstop.com/betapit/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} http://dl.tvunetworks.com/TVUAx.cab (CTVUAxCtrl Object)
O16 - DPF: {588031A3-94BF-4CDD-86D0-939F6F93910F} https://fixit.support.microsoft.com/ActiveX/FixItClient.CAB (FixItClient Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: Justin.tv Publisher http://www.justin.tv/plugins/justintv_publisher.CAB (Reg Error: Key error.)
O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 21:43:36 | 00,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2009/07/30 08:30:42 | 00,000,154 | R— | M] () - X:\autorun.cfg – [ UDF ]
O32 - AutoRun File - [2008/11/27 12:02:24 | 00,214,280 | R— | M] (Sports Interactive) - X:\autorun.exe – [ UDF ]
O32 - AutoRun File - [2006/09/11 13:26:42 | 00,000,027 | R— | M] () - X:\autorun.inf – [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] – "%1" %*
O35 - exefile [open] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2009/12/14 22:31:47 | 00,000,000 | —D | C] – C:\Users\Jack\Desktop\Folder
[2009/12/13 18:13:05 | 00,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2009/12/13 17:56:51 | 00,000,000 | —D | C] – C:\Windows\temp
[2009/12/13 17:45:16 | 00,000,000 | —D | C] – C:\32788R22FWJFW
[2009/12/13 16:44:17 | 00,000,000 | —D | C] – C:\Program Files\Common Files\SWF Studio
[2009/12/13 16:26:05 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Local\temp
[2009/12/13 13:56:05 | 02,452,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dat
[2009/12/13 13:55:51 | 00,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2009/12/13 13:55:49 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieencode.dll
[2009/12/13 13:55:46 | 00,380,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2009/12/13 13:55:30 | 00,512,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript.dll
[2009/12/13 00:01:56 | 00,038,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\WdfLdr.sys
[2009/12/13 00:00:38 | 01,461,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WdfCoInstaller01009.dll
[2009/12/13 00:00:38 | 00,206,120 | —- | C] (Synaptics Incorporated) – C:\Windows\System32\SynCtrl.dll
[2009/12/13 00:00:38 | 00,120,104 | —- | C] (Synaptics Incorporated) – C:\Windows\System32\SynTPCo4.dll
[2009/12/13 00:00:37 | 00,228,784 | —- | C] (Synaptics Incorporated) – C:\Windows\System32\drivers\SynTP.sys
[2009/12/12 23:13:55 | 00,208,896 | —- | C] (Acer Inc.) – C:\Windows\System32\SysHook.dll
[2009/12/12 23:13:55 | 00,061,440 | —- | C] (Acer Inc.) – C:\Windows\System32\MCEPlugin.dll
[2009/12/12 23:12:18 | 00,000,000 | —D | C] – C:\Users\Jack\Desktop\Virus
[2009/12/12 20:39:16 | 00,000,000 | —D | C] – C:\Program Files\ESET
[2009/12/12 18:11:36 | 00,000,000 | —D | C] – C:\Windows\Minidump
[2009/12/12 17:53:18 | 00,212,480 | —- | C] (SteelWerX) – C:\Windows\SWXCACLS.exe
[2009/12/12 17:53:18 | 00,161,792 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2009/12/12 17:53:18 | 00,136,704 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2009/12/12 17:53:18 | 00,031,232 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2009/12/12 17:52:35 | 00,000,000 | —D | C] – C:\Windows\ERDNT
[2009/12/12 17:48:06 | 00,000,000 | —D | C] – C:\Qoobox
[2009/12/10 20:07:28 | 00,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\httpapi.dll
[2009/12/10 20:07:27 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nshhttp.dll
[2009/12/10 20:06:40 | 00,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rastls.dll
[2009/12/08 17:58:34 | 00,000,000 | —D | C] – C:\Users\Jack\Desktop\Episode 1.avi; Episode 2.avi; Episode 3.avi; Episode 4.avi; Episode 5.avi; Episode 6
[2009/12/07 21:17:31 | 00,000,000 | —D | C] – C:\ProgramData\Vso
[2009/12/07 21:15:06 | 00,047,360 | —- | C] (VSO Software) – C:\Windows\System32\drivers\pcouffin.sys
[2009/12/07 21:15:06 | 00,047,360 | —- | C] (VSO Software) – C:\Users\Jack\AppData\Roaming\pcouffin.sys
[2009/12/07 21:15:05 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Roaming\Vso
[2009/12/07 21:15:05 | 00,000,000 | —D | C] – C:\Users\Jack\Documents\PcSetup
[2009/12/07 19:47:44 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Local\Threat Expert
[2009/12/07 19:17:43 | 00,000,000 | —D | C] – C:\ProgramData\NtiDvdCopy
[2009/12/07 16:17:15 | 00,000,000 | —D | C] – C:\Users\Jack\Desktop\The Damned United
[2009/12/07 16:16:12 | 00,000,000 | —D | C] – C:\Program Files\vso
[2009/12/02 21:04:21 | 00,000,000 | —D | C] – C:\SDFix
[2009/12/02 18:25:17 | 00,000,000 | —D | C] – C:\Program Files\iPod
[2009/12/02 18:25:09 | 00,000,000 | —D | C] – C:\Program Files\iTunes
[2009/12/02 18:17:39 | 00,000,000 | —D | C] – C:\Program Files\QuickTime
[2009/11/30 17:46:42 | 00,233,136 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctgntdi.sys
[2009/11/30 17:46:42 | 00,098,600 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctwfpfilter.sys
[2009/11/30 17:46:39 | 00,207,792 | —- | C] (PC Tools) – C:\Windows\System32\drivers\PCTCore.sys
[2009/11/30 17:46:39 | 00,087,784 | —- | C] (PC Tools) – C:\Windows\System32\drivers\PCTAppEvent.sys
[2009/11/30 17:46:30 | 00,070,408 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctplsg.sys
[2009/11/30 17:46:09 | 00,000,000 | —D | C] – C:\Program Files\Spyware Doctor
[2009/11/30 17:46:09 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Roaming\PC Tools
[2009/11/30 17:46:09 | 00,000,000 | —D | C] – C:\ProgramData\PC Tools
[2009/11/30 17:46:09 | 00,000,000 | —D | C] – C:\Program Files\Common Files\PC Tools
[2009/11/30 17:13:44 | 00,000,000 | -HSD | C] – C:\Users\Jack\AppData\Roaming\lowsec
[2009/11/29 13:42:03 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/11/28 20:44:47 | 00,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2009/11/28 20:44:47 | 00,000,000 | —D | C] – C:\Program Files\Spybot - Search & Destroy
[2009/11/28 13:03:02 | 00,000,000 | —D | C] – C:\Users\Jack\AppData\Roaming\Malwarebytes
[2009/11/28 13:02:58 | 00,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/11/28 13:02:57 | 00,019,160 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2009/11/28 13:02:57 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/11/28 13:02:57 | 00,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2009/11/27 23:02:18 | 00,000,000 | —D | C] – C:\Users\Jack\Documents\Pamela
[2009/11/25 16:52:34 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tzres.dll
[2009/11/25 13:24:01 | 00,714,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\timedate.cpl
[2009/11/18 03:24:40 | 00,000,000 | —D | C] – C:\Program Files\Windows Portable Devices
[2009/11/18 03:02:58 | 03,023,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIRibbon.dll
[2009/11/18 03:02:58 | 01,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIRibbonRes.dll
[2009/11/18 03:02:58 | 00,092,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIAnimation.dll
[2009/11/18 03:02:33 | 00,369,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMPhoto.dll
[2009/11/18 03:02:33 | 00,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cdd.dll
[2009/11/18 03:02:32 | 00,829,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10warp.dll
[2009/11/18 03:02:32 | 00,828,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d2d1.dll
[2009/11/18 03:02:32 | 00,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsGdiConverter.dll
[2009/11/18 03:02:32 | 00,189,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecsExt.dll
[2009/11/18 03:02:32 | 00,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsRasterService.dll
[2009/11/18 03:02:32 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelineprxy.dll
[2009/11/18 03:02:31 | 01,554,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xpsservices.dll
[2009/11/18 03:02:31 | 01,064,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DWrite.dll
[2009/11/18 03:02:31 | 00,974,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecs.dll
[2009/11/18 03:02:31 | 00,847,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\OpcServices.dll
[2009/11/18 03:02:31 | 00,793,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FntCache.dll
[2009/11/18 03:02:31 | 00,667,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelinesvc.exe
[2009/11/18 03:02:31 | 00,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d11.dll
[2009/11/18 03:02:31 | 00,486,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10level9.dll
[2009/11/18 03:02:31 | 00,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxgi.dll
[2009/11/18 03:02:31 | 00,351,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsPrint.dll
[2009/11/18 03:02:31 | 00,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PhotoMetadataHandler.dll
[2009/11/18 03:02:31 | 00,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxdiag.exe
[2009/11/18 03:02:31 | 00,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1core.dll
[2009/11/18 03:02:31 | 00,195,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxdiagn.dll
[2009/11/18 03:02:31 | 00,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10core.dll
[2009/11/18 03:02:31 | 00,161,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1.dll
[2009/11/18 03:02:30 | 01,030,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10.dll
[2009/11/18 03:02:05 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\BthMtpContextHandler.dll
[2009/11/18 03:02:05 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDShextAutoplay.exe
[2009/11/18 03:01:59 | 00,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceConnectApi.dll
[2009/11/18 03:01:55 | 00,546,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpd_ci.dll
[2009/11/18 03:01:55 | 00,350,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDSp.dll
[2009/11/18 03:01:55 | 00,334,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceApi.dll
[2009/11/18 03:01:55 | 00,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceWMDRM.dll
[2009/11/18 03:01:55 | 00,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceTypes.dll
[2009/11/18 03:01:55 | 00,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceClassExtension.dll
[2009/11/18 03:00:36 | 00,555,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIAutomationCore.dll
[2009/11/18 03:00:36 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oleaccrc.dll
[2008/12/20 20:59:40 | 00,049,152 | —- | C] ( ) – C:\Windows\Interop.IWshRuntimeLibrary.dll
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2009/12/15 00:14:18 | 09,175,040 | -HS- | M] () – C:\Users\Jack\ntuser.dat
[2009/12/15 00:13:28 | 00,690,960 | —- | M] () – C:\Windows\System32\PerfStringBackup.INI
[2009/12/15 00:13:28 | 00,600,378 | —- | M] () – C:\Windows\System32\perfh009.dat
[2009/12/15 00:13:28 | 00,105,852 | —- | M] () – C:\Windows\System32\perfc009.dat
[2009/12/15 00:06:54 | 00,000,880 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2009/12/15 00:06:52 | 00,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2009/12/15 00:06:47 | 00,003,216 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/12/15 00:06:47 | 00,003,216 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/12/15 00:06:33 | 00,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2009/12/15 00:06:28 | 31,466,29120 | -HS- | M] () – C:\hiberfil.sys
[2009/12/15 00:05:30 | 00,524,288 | -HS- | M] () – C:\Users\Jack\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TMContainer00000000000000000001.regtrans-ms
[2009/12/15 00:05:30 | 00,065,536 | -HS- | M] () – C:\Users\Jack\NTUSER.DAT{d8932e6d-6a6f-11db-b6ab-a038f15a5785}.TM.blf
[2009/12/15 00:05:24 | 02,143,132 | -H– | M] () – C:\Users\Jack\AppData\Local\IconCache.db
[2009/12/15 00:04:24 | 00,000,138 | —- | M] () – C:\Users\Jack\Desktop\fixme.reg
[2009/12/14 23:52:01 | 00,000,884 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2009/12/14 21:20:45 | 00,000,683 | —- | M] () – C:\Windows\System32\drivers\etc\HOSTS
[2009/12/13 17:57:10 | 00,000,215 | —- | M] () – C:\Windows\system.ini
[2009/12/13 17:43:29 | 00,000,064 | —- | M] () – C:\Users\Jack\defogger_reenable
[2009/12/13 14:57:48 | 34,096,1837 | —- | M] () – C:\Windows\MEMORY.DMP
[2009/12/13 00:03:49 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_SynTP_01009.Wdf
[2009/12/13 00:02:20 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2009/12/12 23:26:05 | 00,096,256 | —- | M] () – C:\Users\Jack\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/12/09 22:54:07 | 00,261,632 | —- | M] () – C:\Windows\PEV.exe
[2009/12/07 21:15:06 | 00,047,360 | —- | M] (VSO Software) – C:\Windows\System32\drivers\pcouffin.sys
[2009/12/07 21:15:06 | 00,047,360 | —- | M] (VSO Software) – C:\Users\Jack\AppData\Roaming\pcouffin.sys
[2009/12/07 21:15:06 | 00,007,887 | —- | M] () – C:\Users\Jack\AppData\Roaming\pcouffin.cat
[2009/12/07 21:15:06 | 00,001,144 | —- | M] () – C:\Users\Jack\AppData\Roaming\pcouffin.inf
[2009/12/07 19:53:45 | 00,001,024 | RH– | M] () – C:\Users\Public\Documents\NTIMP3.dll
[2009/12/03 16:14:06 | 00,038,224 | —- | M] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/12/03 16:13:56 | 00,019,160 | —- | M] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2009/11/29 15:08:20 | 00,006,080 | —- | M] () – C:\Users\Jack\AppData\Local\d3d9caps.dat
[2009/11/27 23:58:30 | 00,002,577 | —- | M] () – C:\Windows\System32\config.nt
[2009/11/26 14:22:00 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_xusb21_01007.Wdf
[2009/11/26 13:05:41 | 00,000,000 | —- | M] () – C:\Windows\System32\LogConfigTemp.xml
[2009/11/24 23:54:29 | 01,280,480 | —- | M] (ALWIL Software) – C:\Windows\System32\aswBoot.exe
[2009/11/24 23:50:12 | 00,114,768 | —- | M] (ALWIL Software) – C:\Windows\System32\drivers\aswSP.sys
[2009/11/24 23:50:00 | 00,020,560 | —- | M] (ALWIL Software) – C:\Windows\System32\drivers\aswFsBlk.sys
[2009/11/24 23:49:48 | 00,053,328 | —- | M] (ALWIL Software) – C:\Windows\System32\drivers\aswMonFlt.sys
[2009/11/24 23:49:07 | 00,048,560 | —- | M] (ALWIL Software) – C:\Windows\System32\drivers\aswTdi.sys
[2009/11/24 23:48:57 | 00,023,120 | —- | M] (ALWIL Software) – C:\Windows\System32\drivers\aswRdr.sys
[2009/11/24 23:47:28 | 00,097,480 | —- | M] (ALWIL Software) – C:\Windows\System32\AvastSS.scr
[2009/11/18 03:24:31 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2009/12/15 00:04:24 | 00,000,138 | —- | C] () – C:\Users\Jack\Desktop\fixme.reg
[2009/12/13 18:15:44 | 31,466,29120 | -HS- | C] () – C:\hiberfil.sys
[2009/12/13 15:58:44 | 00,000,064 | —- | C] () – C:\Users\Jack\defogger_reenable
[2009/12/13 13:57:17 | 00,000,802 | —- | C] () – C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
[2009/12/13 00:03:49 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_SynTP_01009.Wdf
[2009/12/13 00:02:20 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2009/12/13 00:02:02 | 00,000,003 | —- | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf
[2009/12/12 18:11:14 | 34,096,1837 | —- | C] () – C:\Windows\MEMORY.DMP
[2009/12/12 17:53:18 | 00,261,632 | —- | C] () – C:\Windows\PEV.exe
[2009/12/12 17:53:18 | 00,098,816 | —- | C] () – C:\Windows\sed.exe
[2009/12/12 17:53:18 | 00,080,412 | —- | C] () – C:\Windows\grep.exe
[2009/12/12 17:53:18 | 00,077,312 | —- | C] () – C:\Windows\MBR.exe
[2009/12/12 17:53:18 | 00,068,096 | —- | C] () – C:\Windows\zip.exe
[2009/12/07 21:16:00 | 00,000,034 | —- | C] () – C:\Users\Jack\AppData\Roaming\pcouffin.log
[2009/12/07 21:15:06 | 00,007,887 | —- | C] () – C:\Users\Jack\AppData\Roaming\pcouffin.cat
[2009/12/07 21:15:06 | 00,001,144 | —- | C] () – C:\Users\Jack\AppData\Roaming\pcouffin.inf
[2009/11/30 17:46:43 | 00,007,387 | —- | C] () – C:\Windows\System32\drivers\pctgntdi.cat
[2009/11/30 17:46:39 | 00,007,412 | —- | C] () – C:\Windows\System32\drivers\PCTAppEvent.cat
[2009/11/30 17:46:39 | 00,007,383 | —- | C] () – C:\Windows\System32\drivers\pctcore.cat
[2009/11/30 17:46:30 | 00,007,383 | —- | C] () – C:\Windows\System32\drivers\pctplsg.cat
[2009/11/29 15:00:32 | 00,143,660 | —- | C] () – C:\Users\Jack\AppData\Local\edsinstaller.txt-20091129.log
[2009/11/26 14:22:00 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_xusb21_01007.Wdf
[2009/11/18 03:24:31 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2009/09/17 12:13:56 | 00,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/08/23 18:13:41 | 00,000,258 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2009/08/21 19:32:47 | 00,002,905 | —- | C] () – C:\Users\Jack\AppData\Local\edsinstaller.txt-20090821.log
[2009/07/30 22:08:35 | 00,000,000 | -H– | C] () – C:\Users\Jack\AppData\Roaming\Cricket2009.exe.lock
[2009/07/16 19:36:54 | 00,000,369 | —- | C] () – C:\ProgramData\hpzinstall.log
[2009/07/03 12:39:37 | 00,139,152 | —- | C] () – C:\Windows\System32\drivers\PnkBstrK.sys
[2009/07/03 12:39:37 | 00,139,152 | —- | C] () – C:\Users\Jack\AppData\Roaming\PnkBstrK.sys
[2009/07/01 13:22:20 | 00,000,143 | —- | C] () – C:\Users\Jack\AppData\Roaming\default.rss
[2009/07/01 12:58:38 | 00,000,039 | —- | C] () – C:\Windows\Irremote.ini
[2009/06/29 14:50:29 | 00,003,528 | —- | C] () – C:\ProgramData\ArcadeDeluxe2.log
[2009/06/16 15:14:30 | 00,000,262 | —- | C] () – C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/06/13 21:09:29 | 00,404,480 | —- | C] () – C:\Windows\System32\libmplayer.dll
[2009/06/13 21:09:29 | 00,200,704 | —- | C] () – C:\Windows\System32\TomsMoComp_ff.dll
[2009/06/13 21:09:29 | 00,114,688 | —- | C] () – C:\Windows\System32\libmpeg2_ff.dll
[2009/06/13 21:03:00 | 00,057,344 | —- | C] () – C:\Windows\System32\ff_vfw.dll
[2009/06/13 21:03:00 | 00,000,547 | —- | C] () – C:\Windows\System32\ff_vfw.dll.manifest
[2009/05/17 16:58:03 | 00,000,349 | —- | C] () – C:\Windows\vtplus32.ini
[2009/05/17 16:57:47 | 00,000,569 | —- | C] () – C:\Windows\HCWPNP.INI
[2009/05/17 16:56:17 | 00,009,206 | —- | C] () – C:\Windows\NTTuner.ini
[2009/04/30 09:00:45 | 00,000,376 | —- | C] () – C:\Windows\ODBC.INI
[2009/04/25 21:12:24 | 00,140,288 | —- | C] () – C:\Windows\System32\igfxtvcx.dll
[2009/04/17 21:09:54 | 00,006,080 | —- | C] () – C:\Users\Jack\AppData\Local\d3d9caps.dat
[2009/04/16 00:04:44 | 00,096,256 | —- | C] () – C:\Users\Jack\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/04/15 20:04:08 | 00,069,632 | —- | C] () – C:\Windows\System32\xmltok.dll
[2009/04/15 20:04:08 | 00,036,864 | —- | C] () – C:\Windows\System32\xmlparse.dll
[2009/04/14 22:09:06 | 00,024,206 | —- | C] () – C:\Users\Jack\AppData\Roaming\UserTile.png
[2008/12/20 20:44:52 | 00,147,456 | —- | C] () – C:\Windows\System32\igfxCoIn_v1527.dll
[2008/12/20 20:13:23 | 00,001,694 | —- | C] () – C:\Windows\RtDefLvl.ini
[2008/05/15 05:47:54 | 00,001,024 | RH– | C] () – C:\Windows\System32\NTIOFM4.dll
[2008/05/15 05:47:54 | 00,001,024 | RH– | C] () – C:\Windows\System32\NTIBUN5.dll
[2008/05/14 12:48:18 | 01,060,424 | —- | C] () – C:\Windows\System32\WdfCoInstaller01000.dll
[2008/05/14 12:48:14 | 00,872,448 | —- | C] () – C:\Windows\iconv.dll
[2008/05/14 12:48:14 | 00,743,424 | —- | C] () – C:\Windows\libxml2.dll
[2008/05/14 12:48:13 | 00,000,042 | —- | C] () – C:\Windows\Prelaunch.ini
[2007/11/06 20:19:28 | 00,053,299 | —- | C] () – C:\Windows\System32\pthreadVC.dll
[2006/11/02 07:40:29 | 00,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2003/09/11 20:11:22 | 00,000,000 | —- | C] () – C:\Windows\System32\px.ini
[2001/12/26 23:12:30 | 00,065,536 | —- | C] () – C:\Windows\System32\multiplex_vcd.dll
[2001/09/04 06:46:38 | 00,110,592 | —- | C] () – C:\Windows\System32\Hmpg12.dll
[2001/07/30 23:33:56 | 00,118,784 | —- | C] () – C:\Windows\System32\HMPV2_ENC.dll
[2001/07/24 05:04:36 | 00,118,784 | —- | C] () – C:\Windows\System32\HMPV2_ENC_MMX.dll
[1996/04/03 19:33:26 | 00,005,248 | —- | C] () – C:\Windows\System32\giveio.sys

========== LOP Check ==========

[2008/05/15 05:46:38 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Acer GameZone Console
[2009/07/01 15:27:40 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Azureus
[2009/04/27 10:28:09 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Big Fish Games
[2009/08/13 12:13:48 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\BraCa_Soft
[2009/08/26 13:06:12 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Clone2Go DVD Ripper
[2009/07/29 20:44:52 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\DAEMON Tools Pro
[2009/10/11 22:03:19 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\EA
[2009/04/14 18:40:06 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\eSobi
[2009/04/14 23:36:30 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\FloodLightGames
[2009/09/11 16:02:17 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\GetRightToGo
[2009/05/17 16:59:07 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\InterTrust
[2009/08/09 15:05:38 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Jasc
[2009/07/18 20:54:52 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\JPEGsnoop
[2009/11/30 19:29:21 | 00,000,000 | -HSD | M] – C:\Users\Jack\AppData\Roaming\lowsec
[2009/05/04 15:07:54 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\MessengerGadget
[2009/06/10 18:40:59 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\NavNet Solutions
[2009/04/14 22:09:06 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\PeerNetworking
[2009/09/27 19:05:17 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\play2p
[2009/06/29 14:51:11 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\PowerCinema
[2009/08/27 20:04:32 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\proDAD
[2009/04/23 23:18:00 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Publish Providers
[2009/08/31 15:30:52 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\River Past G5
[2009/08/27 21:20:45 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Sony
[2009/10/30 20:11:57 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Sports Interactive
[2009/12/08 21:13:24 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Spotify
[2009/08/26 17:05:21 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\TeamViewer
[2009/08/28 10:30:30 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Unity
[2009/09/30 12:04:29 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\vghd
[2009/12/11 20:13:54 | 00,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Vso
[2009/12/15 00:05:34 | 00,032,624 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 99 bytes -> C:\ProgramData\TEMP:861A898F
@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:8AB6C1D7
@Alternate Data Stream - 196 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 159 bytes -> C:\ProgramData\TEMP:B623B5B8
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:443E07A5
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:FEBEC560
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:A8ADE5D8
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:4CF61E54
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86
< End of report >

LDTate

Post #43December 15, 2009, 12:42 PM UTC

Try this link for the online scan
http://www.kaspersky.com/kos/eng/partner/d…n=1260845459009

jack2059

Post #44December 15, 2009, 6:53 PM UTC

Kaspersky found nothing at all. The svchost things have stopped coming up, now its \GLOBAL??\C2CAD972#4079#4fd3#A68D#AD34CC121074\\L\max++.00.x86 Win32.Malware-gen. Cant move to chest as its being used.

LDTate

Post #45December 16, 2009, 12:51 AM UTC

Please download ad13's win32ksys to your desktop

Double click to run it
A black window will appear, let this run
On completion a log will appear on your desktop called Win32kDiag.txt please post this in your next reply.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Resolved] Redirects

✨ Ask AI

Ask AI