[Resolved] Spyware>Malware>Virus Removal>Infections Removal

Deleted Member Topic Starter

Post #1March 1, 2010, 10:31 PM UTC

Hi I am Charlene and have, I feel, been tossed to and fro. I have a continious chiming like some hitting a trip wire along with flashing on my screen. I had IE8 and now have IE7 with the update wanting to go through. Help Please I have Windows Vista 64 bit

LDTate

Post #2March 1, 2010, 11:47 PM UTC last edited March 1, 2010, 11:49 PM UTC

Welcome Back.

If you still have MBAM run a new scan and post the results.

If you don't.

Please download Malwarebytes' Anti-Malware to your desktop.

Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
[external image: Posted Image]
When the scan is complete, click OK, then Show Results to view the results.
[external image: Posted Image]
Then click Remove Selected .
When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

Also please describe how your computer behaves at the moment.

Please don't attach the scans / logs, use "copy/paste". .

Deleted Member

Post #3March 2, 2010, 3:53 PM UTC

Attached is my log Charlene

Attachments:

📎mbam_log_2010_03_02__10_49_34_.txt

Deleted Member

Post #4March 2, 2010, 4:53 PM UTC

I was looking around in my computer this am and found Ioperable Hardware notice Device Type USB HB-CF Card Delivery Status Failure VxD loader Code 19 WPDBUSENUM ROOT/UMB/277&37C186B&0&STORAGE#VOLUMNE#1&19F7E59C#DISK&VEN_TEAC&PR (plug and play) These were the errors. Charlene Hope this helps.

Deleted Member

Post #5March 8, 2010, 12:00 PM UTC

This is my log

Attachments:

📎mbam_log_2010_03_08__06_58_54_.txt

LDTate

Post #6March 8, 2010, 12:32 PM UTC

I don't see any infections there.

We can try combofix.

Download ComboFix from one of these locations:

Link 1
Link 2 If using this link, Right Click and select Save As.

* IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : Protective Programs
Double click on ComboFix.exe & follow the prompts.

Notes: Combofix will run without the Recovery Console installed. Skip the Recovery Console part if you're running Vista or Windows 7.

Note: If you have SP3, use the SP2 package.If Vista or Windows 7, skip the Recovery Console part
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt using Copy / Paste in your next reply.

Notes:

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Give it atleast 20-30 minutes to finish if needed.

Also please describe how your computer behaves at the moment.

Deleted Member

Post #7March 8, 2010, 12:55 PM UTC

Need Windows Vista 64 version

LDTate

Post #8March 8, 2010, 5:26 PM UTC

Need Windows Vista 64 version

It doesn't run on 64bit.

Please download DDS and save it to your desktop.

Disable any script blocking protection
Double click dds.scr to run the tool.
When done, DDS.txt will open.
Click Yes at the next prompt for Optional Scan.
Save both reports to your desktop.

—————————————————

Please include the contents of the following in your next reply:

DDS.txt

Please attach the second file; Attach.txt. To attach a file, do the following:

Under the reply panel is the Attachments Panel
Browse for the attachment file you want to upload, then click the green Upload button
Once it has uploaded, click the Manage Current Attachments drop down box
Click on [external image: Posted Image] to insert the attachment into your post

Deleted Member

Post #9March 8, 2010, 5:29 PM UTC

"It doesn't work on my system".

LDTate

Post #10March 8, 2010, 5:34 PM UTC

OTL:

Download OTL to your desktop.
Double click on OTL.exe to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output
Check the boxes beside LOP Check and Purity Check.
Copy and paste the following bold text into the box under Custom Scan

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
/md5stop
CREATERESTOREPOINT
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.

Please copy (Edit->Select All, Edit->Copy) the contents of the OTL.txt and post it with your next reply along with the OTL fix log.

Deleted Member

Post #11March 8, 2010, 6:19 PM UTC

OTL logfile created on: 3/8/2010 12:56:10 PM - Run 2
OTL by OldTimer - Version 3.1.35.0 Folder = C:\Users\charlenereeves\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 41.00% Memory free
8.00 Gb Paging File | 5.00 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 596.13 Gb Total Space | 403.98 Gb Free Space | 67.77% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
Drive I: | 465.64 Gb Total Space | 258.12 Gb Free Space | 55.43% Space Free | Partition Type: FAT32

Computer Name: MYPUTER
Current User Name: charlenereeves
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\charlenereeves\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10e.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CNRpc.exe ()
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe (CinemaNow, Inc.)
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowShell.exe (CinemaNow Inc.)
PRC - C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Program Files (x86)\FoxyTunes\FoxyTunesEngine\1.0.0.7271_{41D2243B-4ACB-421D-B1D3-EEF2467523E9}\FoxyTunesEngine.exe (FoxyTunes Ltd)
PRC - C:\Program Files (x86)\Upromise\UpromiseTray.exe ()
PRC - C:\Program Files (x86)\Nova Development\Greeting Card Factory Deluxe 8.0\ReminderApp.exe ()
PRC - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Upromise\dca-ua.exe (Compete Inc)
PRC - C:\Program Files (x86)\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Internet Explorer\ieuser.exe (Microsoft Corporation)
PRC - C:\Windows\SysWOW64\atashost.exe (WebEx Communications, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()

========== Modules (SafeList) ==========

MOD - C:\Users\charlenereeves\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\wpdshext.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\fontext.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\comdlg32.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396
ca17ae07\GdiPlus.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (WAS) – C:\Windows\SysNative\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV:64bit: - (W3SVC) – C:\Windows\SysNative\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV:64bit: - (FontCache) – C:\Windows\SysNative\FntCache.dll (Microsoft Corporation)
SRV:64bit: - (AppHostSvc) – C:\Windows\SysNative\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV:64bit: - (wlidsvc) – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
SRV:64bit: - (Ati External Event Utility) – C:\Windows\SysNative\Ati2evxx.exe (ATI Technologies Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (N360) – C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe (Symantec Corporation)
SRV - (CinemaNow Service) – C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe (CinemaNow, Inc.)
SRV - (GoogleDesktopManager-110309-193829) – C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (WAS) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (ACDaemon) – C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (SeaPort) – C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (fsssvc) – C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (nmservice) – C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
SRV - (AppHostSvc) – C:\Windows\SysWOW64\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_64) – C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (atashost) – C:\Windows\SysWOW64\atashost.exe (WebEx Communications, Inc.)
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (SBSDWSCService) – C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (YahooAUService) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (Symantec RemoteAssist) – C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe (Symantec, Inc.)
SRV - (HPSLPSVC) – C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (AdobeActiveFileMonitor6.0) – C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
SRV - (MSDTC) – C:\Windows\SysWOW64\Msdtc [2006/11/02 05:34:14 | 000,000,000 | —D | M]
SRV - (vds) – C:\Windows\SysWOW64\wbem\vds.mof ()
SRV - (VSS) – C:\Windows\SysWOW64\wbem\vss.mof ()

========== Driver Services (SafeList) ==========

DRV:64bit: - (SymEvent) – C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (ccHP) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\ccHPx64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SRTSP64.SYS (Symantec Corporation)
DRV:64bit: - (SymEFA) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SYMEFA64.SYS (Symantec Corporation)
DRV:64bit: - (SYMTDI) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMTDI.SYS (Symantec Corporation)
DRV:64bit: - (SYMFW) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMFW.SYS (Symantec Corporation)
DRV:64bit: - (SYMNDISV) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMNDISV.SYS (Symantec Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SRTSPX64.SYS (Symantec Corporation)
DRV:64bit: - (SymIM) – C:\Windows\SysNative\DRIVERS\SymIMv.sys (Symantec Corporation)
DRV:64bit: - (BHDrvx64) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\BHDrvx64.sys (Symantec Corporation)
DRV:64bit: - (RTL8169) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek )
DRV:64bit: - (fssfltr) – C:\Windows\SysNative\DRIVERS\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (purendis) – C:\Windows\SysNative\DRIVERS\purendis.sys (Cisco Systems, Inc.)
DRV:64bit: - (pnarp) – C:\Windows\SysNative\DRIVERS\pnarp.sys (Cisco Systems, Inc.)
DRV:64bit: - (HdAudAddService) – C:\Windows\SysNative\drivers\HdAudio.sys (Microsoft Corporation)
DRV:64bit: - (usbaudio) USB Audio Driver (WDM) – C:\Windows\SysNative\drivers\usbaudio.sys (Microsoft Corporation)
DRV:64bit: - (FTDIBUS) – C:\Windows\SysNative\drivers\ftdibus.sys (FTDI Ltd.)
DRV:64bit: - (FTSER2K) – C:\Windows\SysNative\drivers\ftser2k.sys (FTDI Ltd.)
DRV:64bit: - (BVRPMPR5a64) – C:\Windows\SysNative\drivers\BVRPMPR5a64.SYS (Avanquest Software)
DRV:64bit: - (atikmdag) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (VST64_DPV) – C:\Windows\SysNative\DRIVERS\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (winachsf) – C:\Windows\SysNative\DRIVERS\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (VST64HWBS2) – C:\Windows\SysNative\DRIVERS\VSTBS26.SYS (Conexant Systems, Inc.)
DRV:64bit: - (AtiPcie) ATI PCI Express (3GIO) – C:\Windows\SysNative\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100307.022\ex64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100307.022\eng64.sys (Symantec Corporation)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20100224.002\IDSviA64.sys (Symantec Corporation)
DRV - (PCD5SRVC{048DBD20-445E8C82-05040104}) – C:\Program Files (x86)\Dell Support Center\HWDiag\bin\pcd5srvc_x64.pkms (PC-Doctor, Inc.)
DRV - (Tcpip) – C:\Windows\SysWOW64\wbem\tcpip.mof ()
DRV - (mpsdrv) – C:\Windows\SysWOW64\wbem\mpsdrv.mof ()
DRV - (pfc) – C:\Windows\SysWOW64\drivers\pfc.sys (Padus, Inc.)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{400F0BDB-6C49-43A4-BE1F-76D7327A604D}: C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\Mozilla [2009/12/26 13:38:11 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2009/12/31 04:54:13 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/02/21 08:30:51 | 000,000,000 | —D | M]

O1 HOSTS File: ([2010/03/02 06:53:22 | 000,380,280 | R— | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 13103 more lines…
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg64.dll (Google Inc.)
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\yt.dll (Yahoo! Inc.)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Download Manager Browser Helper Object) - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\XEBDLHelper.dll (Protect Software GmbH)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.)
O2 - BHO: (DCA BHO) - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - C:\Program Files (x86)\Upromise\dca-bho.dll (Compete, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (Upromise TurboSaver) - {EDC0F17F-F4B7-47e4-B73E-887FAEB376FA} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\YTSingleInstance.dll (Yahoo! Inc)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Upromise TurboSaver) - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3:64bit: - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [dellsupportcenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [nmctxth] C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
O4 - HKLM..\Run: [ReminderApp] C:\Program Files (x86)\Nova Development\Greeting Card Factory Deluxe 8.0\ReminderApp.exe ()
O4 - HKLM..\Run: [YMailAdvisor] C:\Program Files (x86)\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000..\Run: [Upromise Tray] C:\Program Files (x86)\Upromise\UpromiseTray.exe ()
O4 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000..\Run: [Upromise Update] C:\Program Files (x86)\Upromise\dca-ua.exe (Compete Inc)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O9 - Extra Button: Upromise TurboSaver - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O9 - Extra 'Tools' menuitem : Upromise TurboSaver - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe File not found
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: cinemanow.com ([]http in Trusted sites)
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: cinemanow.com ([]https in Trusted sites)
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: comcast.com ([www] * in Trusted sites)
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: comcast.net ([www] * in Trusted sites)
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: yahoo.com ([www] * in Trusted sites)
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: yahoo.com ([www] http in Local intranet)
O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} https://www-secure.symantec.com/techsupp/as…abs/tgctlcm.cab (Symantec Configuration Class)
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} https://support.dell.com/systemprofiler/SysProExe.CAB (WMI Class)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab (GMNRev Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (Reg Error: Value error.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\jpip {B92DD248-E3D5-4A92-B311-C9B841681455} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\amd64\puresp4.dll (Cisco Systems, Inc.)
O18:64bit: - Protocol\Handler\sidlet {B92DD248-E3D5-4A92-B311-C9B841681455} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\jpip {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\Express View\expressview.dll (Lizardtech Software)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
O18 - Protocol\Handler\sidlet {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\Express View\expressview.dll (Lizardtech Software)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~2\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img18.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img18.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/01 14:12:10 | 000,000,071 | -H– | M] () - I:\AUTORUN.INF – [ FAT32 ]
O32 - AutoRun File - [2008/11/05 13:19:36 | 000,000,052 | RHS- | M] () - I:\AUTORUN.FCB – [ FAT32 ]
O32 - AutoRun File - [2009/01/23 15:01:08 | 000,000,000 | —D | M] - I:\autorun – [ FAT32 ]
O33 - MountPoints2\{3bef2efd-d94f-11de-b010-00219b2dadd9}\Shell\AutoRun\command - "" = I:\setupSNK.exe – [2008/01/20 19:47:36 | 000,013,312 | —- | M] (Microsoft Corporation)
O33 - MountPoints2\{558571f3-efc8-11de-bd2e-00219b2dadd9}\Shell\AutoRun\command - "" = J:\setupSNK.exe – File not found
O33 - MountPoints2\{558571f8-efc8-11de-bd2e-00219b2dadd9}\Shell - "" = AutoRun
O33 - MountPoints2\{558571f8-efc8-11de-bd2e-00219b2dadd9}\Shell\AutoRun\command - "" = K:\LaunchU3.exe – File not found
O33 - MountPoints2\{7fd79b20-feb7-11de-91a5-00219b2dadd9}\Shell\AutoRun\command - "" = J:\setupSNK.exe – File not found
O33 - MountPoints2\{7fd79b23-feb7-11de-91a5-00219b2dadd9}\Shell - "" = AutoRun
O33 - MountPoints2\{7fd79b23-feb7-11de-91a5-00219b2dadd9}\Shell\AutoRun\command - "" = K:\LaunchU3.exe – File not found
O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\setupSNK.exe – [2008/01/20 19:47:36 | 000,013,312 | —- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*

NetSvcs:64bit: Ias - C:\Windows\SysNative\ias [2008/01/20 19:06:38 | 000,000,000 | —D | M]
NetSvcs:64bit: Irmon - C:\Windows\SysNative\irmon.dll (Microsoft Corporation)
NetSvcs:64bit: Wmi - C:\Windows\SysNative\wmi.dll (Microsoft Corporation)
NetSvcs: Ias - C:\Windows\SysWOW64\ias [2008/01/20 19:08:35 | 000,000,000 | —D | M]
NetSvcs: Wmi - C:\Windows\SysWOW64\wmi.dll (Microsoft Corporation)

NetSvcs:64bit: Ias - C:\Windows\SysNative\ias [2008/01/20 19:06:38 | 000,000,000 | —D | M]
NetSvcs:64bit: Irmon - C:\Windows\SysNative\irmon.dll (Microsoft Corporation)
NetSvcs:64bit: Wmi - C:\Windows\SysNative\wmi.dll (Microsoft Corporation)
NetSvcs: Ias - C:\Windows\SysWOW64\ias [2008/01/20 19:08:35 | 000,000,000 | —D | M]
NetSvcs: Wmi - C:\Windows\SysWOW64\wmi.dll (Microsoft Corporation)
OTL cannot create restorepoints on Vista OSs!

========== Files/Folders - Created Within 30 Days ==========

[2010/03/08 12:36:11 | 000,554,496 | —- | C] (OldTimer Tools) – C:\Users\charlenereeves\Desktop\OTL.exe
[2010/03/08 12:32:06 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\SP_BuyMyStore-COUPON-CODES[2]
[2010/03/08 12:20:03 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\SP_BuyMyStore-COUPON-CODES[1]
[2010/03/08 07:41:48 | 000,000,000 | —D | C] – C:\32788R22FWJFW
[2010/03/08 00:12:57 | 000,278,576 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symtdi.sys
[2010/03/08 00:12:56 | 000,402,992 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.sys
[2010/03/08 00:12:56 | 000,120,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symfw.sys
[2010/03/08 00:12:56 | 000,056,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndisv.sys
[2010/03/08 00:12:56 | 000,044,080 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndis.sys
[2010/03/08 00:12:56 | 000,043,568 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symids.sys
[2010/03/08 00:12:56 | 000,032,304 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.sys
[2010/03/08 00:12:55 | 000,583,296 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\cchpx64.sys
[2010/03/08 00:12:55 | 000,476,720 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.sys
[2010/03/08 00:12:55 | 000,334,384 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.sys
[2010/03/08 00:11:29 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64\0308000.029
[2010/03/07 21:09:00 | 000,126,312 | R— | C] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2010/03/07 21:09:00 | 000,107,368 | R— | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2010/03/07 21:08:59 | 000,034,152 | R— | C] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010/03/07 21:08:56 | 000,031,280 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\SymIMV.sys
[2010/03/07 21:08:51 | 000,172,592 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/03/07 21:08:22 | 000,583,296 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\cchpx64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symtdi.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symfw.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndisv.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndis.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symids.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.sys
[2010/03/07 21:07:58 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64
[2010/03/07 21:07:58 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64\0305020.00B
[2010/03/07 21:07:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Norton Security Suite
[2010/03/07 13:04:41 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\upromise
[2010/03/07 13:04:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\Upromise
[2010/03/07 06:35:48 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Cards
[2010/03/06 10:16:43 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\MemoriesOnTV
[2010/03/04 21:02:00 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\NISx64\1105000.07F
[2010/03/04 13:19:52 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Symantec Shared
[2010/03/04 13:19:52 | 000,000,000 | —D | C] – C:\Program Files\Symantec
[2010/03/04 13:19:15 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\NISx64
[2010/03/04 07:43:19 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\Picaboo
[2010/03/04 07:42:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Picaboo
[2010/03/03 14:13:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\Hewlett-Packard
[2010/03/03 14:12:52 | 000,235,008 | —- | C] (Hewlett Packard Corporation) – C:\Windows\SysWow64\hpzc35mu.dll
[2010/03/03 14:09:31 | 000,944,128 | —- | C] (Hewlett-Packard) – C:\Windows\SysNative\hpwwiax4.dll
[2010/03/03 14:09:31 | 000,359,256 | —- | C] (Hewlett-Packard) – C:\Windows\SysNative\hpzids40.dll
[2010/03/03 14:09:30 | 000,740,864 | —- | C] (Hewlett-Packard Co.) – C:\Windows\SysNative\hpwtscl3.dll
[2010/03/03 14:09:29 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\difxapi.dll
[2010/03/03 14:09:29 | 000,488,960 | —- | C] (Hewlett-Packard Co.) – C:\Windows\SysNative\hpovst11.dll
[2010/03/03 12:05:19 | 000,000,000 | —D | C] – C:\Windows\Downloaded Installations
[2010/02/28 21:10:41 | 001,032,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wininet.dll
[2010/02/28 21:10:38 | 000,834,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wininet.dll
[2010/02/28 21:10:26 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2010/02/28 21:10:22 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2010/02/28 21:10:21 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2010/02/28 21:10:19 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieencode.dll
[2010/02/28 21:10:19 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieencode.dll
[2010/02/28 21:10:09 | 000,422,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2010/02/28 21:10:08 | 000,380,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2010/02/28 20:28:19 | 000,000,000 | —D | C] – C:\inetpub
[2010/02/26 15:03:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\FoxyTunes
[2010/02/26 13:56:07 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\skypePM
[2010/02/26 13:51:59 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\Skype
[2010/02/26 13:51:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2010/02/26 13:51:16 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2010/02/26 13:51:10 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2010/02/25 19:13:44 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\The Journal Volumes
[2010/02/25 18:36:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\MSSoap
[2010/02/24 21:18:51 | 000,000,000 | —D | C] – C:\Windows\vbSkinner
[2010/02/24 09:43:15 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2010/02/24 09:43:13 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2010/02/24 09:41:21 | 000,153,376 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2010/02/24 09:41:21 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2010/02/24 09:41:21 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2010/02/24 06:37:23 | 000,286,720 | —- | C] (Indigo Rose Corporation) – C:\Windows\iun506.exe
[2010/02/24 06:37:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Family Picture Calendar
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\The Journal 5
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\The Journal 5
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\ProgramData\The Journal
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\DavidRM Software
[2010/02/24 06:09:12 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\MudCreek
[2010/02/24 06:09:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\MudCreek
[2010/02/24 06:01:32 | 000,000,000 | —D | C] – C:\GenDB
[2010/02/24 06:01:32 | 000,000,000 | —D | C] – C:\Program Files\CemeterySystemFiles
[2010/02/24 06:01:19 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\GenDB2[1]
[2010/02/24 05:54:41 | 000,115,920 | —- | C] (Microsoft Corporation) – C:\Windows\msinet.ocx
[2010/02/24 05:54:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\Protasm
[2010/02/23 21:14:58 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2010/02/23 21:14:58 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2010/02/23 21:14:58 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2010/02/23 21:14:57 | 000,539,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2010/02/23 21:14:55 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2010/02/23 21:14:55 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2010/02/23 21:14:55 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2010/02/23 21:14:54 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2010/02/23 21:14:53 | 000,526,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2010/02/23 21:14:53 | 000,518,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2010/02/23 21:14:53 | 000,347,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2010/02/23 21:14:53 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2010/02/23 21:14:53 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2010/02/23 21:14:53 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2010/02/23 21:14:52 | 000,460,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2010/02/23 21:14:52 | 000,152,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2010/02/23 21:14:52 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2010/02/23 21:14:51 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdrm.dll
[2010/02/23 21:13:02 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2010/02/23 21:13:02 | 001,696,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2010/02/23 21:13:01 | 000,032,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Apphlpdm.dll
[2010/02/23 21:13:01 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Apphlpdm.dll
[2010/02/23 21:13:00 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\SysWow64\GameUXLegacyGDFs.dll
[2010/02/23 21:13:00 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\SysNative\GameUXLegacyGDFs.dll
[2010/02/23 19:48:30 | 000,000,000 | —D | C] – C:\Windows\BDOSCAN8
[2010/02/23 07:46:29 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\New Folder
[2010/02/21 07:53:12 | 000,000,000 | —D | C] – C:\ProgramData\HP Product Assistant
[2010/02/20 17:27:41 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\a
[2010/02/16 20:23:56 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Desktop\Hummie
[2010/02/16 10:15:29 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\DID
[2010/02/15 07:54:56 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Smart Art Cards
[2010/02/14 16:29:05 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Apple Computer
[2010/02/14 16:27:04 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Apple
[2010/02/13 17:56:01 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Tift
[2010/02/13 17:49:11 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Tuts - Copy
[2010/02/13 17:45:45 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Animals
[2010/02/13 17:38:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Linda
[2010/02/13 17:26:57 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Frames
[2010/02/13 17:19:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Sayings
[2010/02/13 17:17:43 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Embellishments
[2010/02/13 17:11:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Flowers
[2010/02/13 17:01:39 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Picture Embellishments
[2010/02/13 17:01:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Papers
[2010/02/13 10:58:03 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Adobe
[2010/02/12 14:46:47 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\ICS
[2010/02/12 14:32:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Symantec Shared
[2010/02/12 14:13:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\NortonInstaller
[2010/02/11 18:33:22 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2010/02/11 18:29:10 | 000,021,504 | —- | C] (Doug Knox) – C:\Users\charlenereeves\Desktop\SysRestorePoint.exe
[2010/02/10 11:30:00 | 001,570,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2010/02/10 11:29:59 | 001,314,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2010/02/10 11:29:59 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iyuv_32.dll
[2010/02/10 11:29:59 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvidc32.dll
[2010/02/10 11:29:59 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msyuv.dll
[2010/02/10 11:29:59 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrle32.dll
[2010/02/10 11:29:59 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsbyuv.dll
[2010/02/10 11:29:58 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2010/02/10 11:29:58 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2010/02/10 11:29:58 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2010/02/10 11:29:39 | 004,698,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2010/02/09 13:27:38 | 000,000,000 | —D | C] – C:\ProgramData\Caspedia
[2010/02/06 16:42:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\Trend Micro
[2010/02/06 15:50:54 | 000,000,000 | —D | C] – C:\Program Files\ThreatExpert Memory Scanner

========== Files - Modified Within 30 Days ==========

[2010/03/08 13:00:14 | 000,000,452 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{E5D3F2D6-36AB-4812-A910-8EE432F78A3A}.job
[2010/03/08 12:59:41 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/03/08 12:58:53 | 009,699,328 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT
[2010/03/08 12:38:34 | 000,000,254 | —- | M] () – C:\Users\charlenereeves\Desktop\SpywareMalwareVirus RemovalInfections Removal.url
[2010/03/08 12:36:16 | 000,554,496 | —- | M] (OldTimer Tools) – C:\Users\charlenereeves\Desktop\OTL.exe
[2010/03/08 12:27:30 | 000,359,929 | —- | M] () – C:\Users\charlenereeves\Desktop\dds.scr
[2010/03/08 12:23:31 | 001,674,990 | —- | M] () – C:\Users\charlenereeves\Desktop\SP_BuyMyStore-COUPON-CODES.zip
[2010/03/08 12:10:31 | 000,003,840 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/03/08 12:10:31 | 000,003,840 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/03/08 10:22:42 | 000,997,338 | —- | M] () – C:\Users\charlenereeves\Documents\ww2-participation.pdf
[2010/03/08 07:38:48 | 003,882,377 | —- | M] () – C:\Users\charlenereeves\Desktop\ComboFix.exe
[2010/03/08 06:50:01 | 000,000,808 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/03/08 06:13:27 | 002,152,562 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\Cat.DB
[2010/03/08 06:11:13 | 000,002,287 | —- | M] () – C:\Users\Public\Desktop\Norton Security Suite.lnk
[2010/03/08 06:11:00 | 000,065,536 | —- | M] () – C:\Windows\SysNative\Ikeext.etl
[2010/03/08 06:10:37 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/03/08 06:10:33 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/03/08 06:10:28 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/03/08 06:08:29 | 000,524,288 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT{528e1bda-0b48-11df-b30d-00219b2dadd9}.TMContainer00000000000000000001.regtrans-ms
[2010/03/08 06:08:29 | 000,065,536 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT{528e1bda-0b48-11df-b30d-00219b2dadd9}.TM.blf
[2010/03/08 06:08:17 | 002,891,551 | -H– | M] () – C:\Users\charlenereeves\AppData\Local\IconCache.db
[2010/03/08 02:36:19 | 002,152,562 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\Cat.DB
[2010/03/08 00:11:30 | 000,000,172 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\isolate.ini
[2010/03/07 21:08:42 | 000,172,592 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/03/07 21:08:42 | 000,007,440 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/03/07 21:08:42 | 000,000,855 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/03/07 21:08:22 | 000,583,296 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\cchpx64.sys
[2010/03/07 21:08:22 | 000,583,296 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\cchpx64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symtdi.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symtdi.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symfw.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symfw.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndisv.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndisv.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndis.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndis.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symids.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symids.sys
[2010/03/07 21:08:22 | 000,034,152 | R— | M] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.sys
[2010/03/07 21:08:22 | 000,031,280 | R— | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SymIMV.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.sys
[2010/03/07 21:08:16 | 000,126,312 | R— | M] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2010/03/07 21:08:16 | 000,107,368 | R— | M] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2010/03/07 21:08:10 | 000,003,373 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA.inf
[2010/03/07 21:08:10 | 000,003,373 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,172 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\isolate.ini
[2010/03/07 21:07:58 | 000,009,415 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.cat
[2010/03/07 21:07:58 | 000,009,415 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\symnetv.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symnetv.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,362 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.CAT
[2010/03/07 21:07:58 | 000,007,362 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\bhdrvx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.cat
[2010/03/07 19:00:43 | 002,152,318 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1105000.07F\Cat.DB
[2010/03/07 06:13:46 | 000,002,761 | —- | M] () – C:\Users\Public\Desktop\Greeting Card Factory Deluxe.lnk
[2010/03/06 10:52:18 | 000,000,198 | —- | M] () – C:\Users\charlenereeves\Desktop\Yahoo! Mail (charlenereeves2004).url
[2010/03/06 08:26:36 | 000,434,448 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/03/05 08:46:48 | 000,003,223 | —- | M] () – C:\Users\charlenereeves\Desktop\Bible Study Pro.lnk
[2010/03/05 08:06:55 | 000,130,992 | —- | M] () – C:\Users\charlenereeves\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/03/05 07:30:35 | 000,002,064 | —- | M] () – C:\Users\Public\Desktop\MemoriesOnTV.lnk
[2010/03/04 15:18:50 | 000,022,755 | —- | M] () – C:\Windows\hpqins15.dat
[2010/03/04 14:57:31 | 000,177,755 | —- | M] () – C:\Windows\hpwins20.dat
[2010/03/04 08:57:08 | 000,000,896 | —- | M] () – C:\Users\Public\Desktop\HP Photo Creations.lnk
[2010/03/04 08:50:10 | 000,019,529 | —- | M] () – C:\Windows\hpqins13.dat
[2010/03/04 08:49:14 | 000,002,030 | —- | M] () – C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2010/03/04 07:43:01 | 000,001,860 | —- | M] () – C:\Users\Public\Desktop\Picaboo.lnk
[2010/03/03 14:16:53 | 000,000,179 | —- | M] () – C:\Windows\win.ini
[2010/03/02 06:53:22 | 000,380,280 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2010/03/02 06:49:41 | 000,007,620 | —- | M] () – C:\Users\charlenereeves\AppData\Local\d3d9caps.dat
[2010/03/01 18:18:40 | 000,055,808 | —- | M] () – C:\Users\charlenereeves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/01 12:23:23 | 000,160,650 | —- | M] () – C:\Windows\hphins33.dat
[2010/02/28 20:44:06 | 000,807,962 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/02/28 20:44:06 | 000,691,546 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/02/28 20:44:06 | 000,136,268 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/02/28 19:34:04 | 000,000,212 | —- | M] () – C:\Users\charlenereeves\Desktop\Replying in IE8 getting 404 errors - What the Tech.url
[2010/02/27 21:55:34 | 000,088,064 | —- | M] () – C:\Users\charlenereeves\Documents\Untitled Slide Show.sss
[2010/02/27 08:09:59 | 000,000,191 | —- | M] () – C:\Users\charlenereeves\Desktop\How to determine and to recover from Winsock2 corruption in Windows Server 2003, in Windows XP, and in Windows Vista.url
[2010/02/26 13:56:09 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2010/02/26 01:48:52 | 000,001,684 | —- | M] () – C:\Users\charlenereeves\Desktop\CCleaner.lnk
[2010/02/26 01:39:25 | 000,000,418 | —- | M] () – C:\Windows\tasks\EasyShare Registration Task.job
[2010/02/25 18:37:27 | 000,001,960 | —- | M] () – C:\Users\Public\Desktop\Kodak EasyShare.lnk
[2010/02/24 06:36:57 | 000,286,720 | —- | M] (Indigo Rose Corporation) – C:\Windows\iun506.exe
[2010/02/24 06:25:34 | 000,001,024 | —- | M] () – C:\Users\Public\Desktop\The Journal 5.lnk
[2010/02/24 05:49:34 | 000,000,002 | —- | M] () – C:\Windows\SysWow64\MedMemoryDrive.ini
[2010/02/21 19:48:23 | 000,001,877 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/02/21 08:31:17 | 000,023,145 | —- | M] () – C:\Windows\hpqins15.dat.temp
[2010/02/21 07:53:00 | 000,001,178 | —- | M] () – C:\Users\Public\Desktop\HP Solution Center.lnk
[2010/02/17 09:50:29 | 000,380,176 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts.20100302-065322.backup
[2010/02/13 19:01:23 | 000,001,460 | —- | M] () – C:\Users\charlenereeves\AppData\Local\d3d9caps64.dat
[2010/02/13 09:35:12 | 000,019,529 | —- | M] () – C:\Windows\hpqins13.dat.temp
[2010/02/12 13:50:42 | 000,002,560 | —- | M] () – C:\Windows\_MSRSTRT.EXE
[2010/02/12 13:39:42 | 000,001,908 | —- | M] () – C:\Users\Public\Desktop\HP Print Diagnostic Utility.lnk
[2010/02/11 18:29:10 | 000,021,504 | —- | M] (Doug Knox) – C:\Users\charlenereeves\Desktop\SysRestorePoint.exe
[2010/02/10 22:00:14 | 000,378,474 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts.20100217-095029.backup
[2010/02/06 16:04:38 | 000,000,787 | —- | M] () – C:\Users\charlenereeves\Desktop\MyArtSpaceTV - Shortcut.lnk
[2010/02/06 16:04:28 | 000,000,812 | —- | M] () – C:\Users\charlenereeves\Desktop\photomail_cp_install - Shortcut.lnk
[2010/02/06 15:50:55 | 000,000,838 | —- | M] () – C:\Users\Public\Desktop\ThreatExpert Memory Scanner.lnk

========== Files Created - No Company Name ==========

[2010/03/08 12:38:33 | 000,000,254 | —- | C] () – C:\Users\charlenereeves\Desktop\SpywareMalwareVirus RemovalInfections Removal.url
[2010/03/08 12:27:27 | 000,359,929 | —- | C] () – C:\Users\charlenereeves\Desktop\dds.scr
[2010/03/08 12:23:18 | 001,674,990 | —- | C] () – C:\Users\charlenereeves\Desktop\SP_BuyMyStore-COUPON-CODES.zip
[2010/03/08 10:22:40 | 000,997,338 | —- | C] () – C:\Users\charlenereeves\Documents\ww2-participation.pdf
[2010/03/08 07:38:42 | 003,882,377 | —- | C] () – C:\Users\charlenereeves\Desktop\ComboFix.exe
[2010/03/08 06:11:33 | 002,152,562 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\Cat.DB
[2010/03/08 00:12:57 | 000,009,412 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\symnetv.cat
[2010/03/08 00:12:57 | 000,001,481 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNetV.inf
[2010/03/08 00:12:56 | 000,009,415 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.cat
[2010/03/08 00:12:56 | 000,007,401 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.cat
[2010/03/08 00:12:56 | 000,007,399 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.cat
[2010/03/08 00:12:56 | 000,003,373 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA.inf
[2010/03/08 00:12:56 | 000,001,480 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.inf
[2010/03/08 00:12:56 | 000,001,421 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.inf
[2010/03/08 00:12:55 | 000,007,410 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.cat
[2010/03/08 00:12:55 | 000,007,345 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.cat
[2010/03/08 00:12:55 | 000,001,836 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.inf
[2010/03/08 00:12:55 | 000,001,437 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.inf
[2010/03/08 00:12:55 | 000,000,640 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.inf
[2010/03/08 00:12:54 | 000,007,362 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.CAT
[2010/03/08 00:11:29 | 000,000,172 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\isolate.ini
[2010/03/07 21:09:25 | 002,152,562 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\Cat.DB
[2010/03/07 21:08:51 | 000,007,440 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/03/07 21:08:51 | 000,000,855 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/03/07 21:08:34 | 000,002,287 | —- | C] () – C:\Users\Public\Desktop\Norton Security Suite.lnk
[2010/03/07 21:08:10 | 000,003,373 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,172 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\isolate.ini
[2010/03/07 21:07:58 | 000,009,415 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symnetv.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,362 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\bhdrvx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.cat
[2010/03/06 10:52:18 | 000,000,198 | —- | C] () – C:\Users\charlenereeves\Desktop\Yahoo! Mail (charlenereeves2004).url
[2010/03/05 07:30:34 | 000,002,064 | —- | C] () – C:\Users\Public\Desktop\MemoriesOnTV.lnk
[2010/03/05 07:27:21 | 000,002,761 | —- | C] () – C:\Users\Public\Desktop\Greeting Card Factory Deluxe.lnk
[2010/03/05 06:48:58 | 002,152,318 | —- | C] () – C:\Windows\SysNative\drivers\NISx64\1105000.07F\Cat.DB
[2010/03/04 08:49:14 | 000,002,030 | —- | C] () – C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2010/03/04 07:43:01 | 000,001,860 | —- | C] () – C:\Users\Public\Desktop\Picaboo.lnk
[2010/03/03 14:09:48 | 000,177,755 | —- | C] () – C:\Windows\hpwins20.dat
[2010/03/03 14:09:48 | 000,002,428 | —- | C] () – C:\Windows\hpwmdl20.dat
[2010/02/28 19:34:03 | 000,000,212 | —- | C] () – C:\Users\charlenereeves\Desktop\Replying in IE8 getting 404 errors - What the Tech.url
[2010/02/27 21:55:34 | 000,088,064 | —- | C] () – C:\Users\charlenereeves\Documents\Untitled Slide Show.sss
[2010/02/27 08:09:59 | 000,000,191 | —- | C] () – C:\Users\charlenereeves\Desktop\How to determine and to recover from Winsock2 corruption in Windows Server 2003, in Windows XP, and in Windows Vista.url
[2010/02/26 13:56:09 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/02/25 18:33:11 | 000,000,418 | —- | C] () – C:\Windows\tasks\EasyShare Registration Task.job
[2010/02/24 06:25:34 | 000,001,024 | —- | C] () – C:\Users\Public\Desktop\The Journal 5.lnk
[2010/02/24 05:44:20 | 000,000,002 | —- | C] () – C:\Windows\SysWow64\MedMemoryDrive.ini
[2010/02/21 07:53:00 | 000,001,178 | —- | C] () – C:\Users\Public\Desktop\HP Solution Center.lnk
[2010/02/21 07:40:42 | 000,160,650 | —- | C] () – C:\Windows\hphins33.dat
[2010/02/13 08:28:20 | 000,160,685 | —- | C] () – C:\Windows\hphins33.dat.temp
[2010/02/12 13:50:41 | 000,002,560 | —- | C] () – C:\Windows\_MSRSTRT.EXE
[2010/02/12 13:39:42 | 000,001,908 | —- | C] () – C:\Users\Public\Desktop\HP Print Diagnostic Utility.lnk
[2010/02/11 18:03:06 | 000,003,223 | —- | C] () – C:\Users\charlenereeves\Desktop\Bible Study Pro.lnk
[2010/02/06 16:04:38 | 000,000,787 | —- | C] () – C:\Users\charlenereeves\Desktop\MyArtSpaceTV - Shortcut.lnk
[2010/02/06 16:04:27 | 000,000,812 | —- | C] () – C:\Users\charlenereeves\Desktop\photomail_cp_install - Shortcut.lnk
[2010/02/06 15:50:55 | 000,000,838 | —- | C] () – C:\Users\Public\Desktop\ThreatExpert Memory Scanner.lnk
[2010/02/05 15:46:58 | 000,070,966 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vcredistUI05EA.txt
[2010/02/05 15:46:27 | 000,070,966 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vcredistUI0585.txt
[2010/02/02 14:13:42 | 000,000,036 | —- | C] () – C:\Users\charlenereeves\AppData\Local\housecall.guid.cache
[2010/01/31 18:41:57 | 000,029,216 | —- | C] () – C:\Users\charlenereeves\AppData\Roaming\UserTile.png
[2010/01/16 08:58:59 | 000,000,426 | —- | C] () – C:\Windows\BRWMARK.INI
[2010/01/16 08:57:58 | 000,000,000 | —- | C] () – C:\Windows\brmx2001.ini
[2010/01/16 08:57:57 | 000,000,114 | —- | C] () – C:\Windows\SysWow64\brlmw03a.ini
[2010/01/16 08:57:57 | 000,000,011 | —- | C] () – C:\Windows\BRVIDEO.INI
[2010/01/16 08:57:20 | 000,000,356 | —- | C] () – C:\Windows\Brownie.ini
[2010/01/12 16:03:31 | 008,673,792 | —- | C] () – C:\ProgramData\atscie.msi
[2009/12/30 07:27:38 | 000,890,268 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vsto_ret20MSI3CC8.txt
[2009/12/30 07:27:35 | 000,012,152 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vsto_ret20UI3CC8.txt
[2009/12/26 13:45:52 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\mfc45.dll
[2009/12/02 07:50:39 | 000,000,000 | —- | C] () – C:\Windows\Scrapbook MAX!.INI
[2009/11/29 21:49:58 | 000,000,139 | —- | C] () – C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2009/11/29 08:46:13 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/11/29 08:44:48 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/11/25 12:32:26 | 000,524,288 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TMContainer00000000000000000002.regtrans-ms
[2009/11/25 12:32:26 | 000,524,288 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TMContainer00000000000000000001.regtrans-ms
[2009/11/25 12:32:26 | 000,262,144 | —- | C] () – C:\ProgramData\ntuser.dat
[2009/11/25 12:32:26 | 000,065,536 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TM.blf
[2009/11/25 12:32:26 | 000,005,120 | -H– | C] () – C:\ProgramData\ntuser.dat.LOG1
[2009/11/25 12:32:26 | 000,000,000 | -H– | C] () – C:\ProgramData\ntuser.dat.LOG2
[2009/11/25 12:11:40 | 000,039,701 | —- | C] () – C:\ProgramData\hpzinstall.log
[2009/11/25 07:43:25 | 001,880,934 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_NET_Framework35_x64_MSI1A3F.txt
[2009/11/25 07:42:49 | 000,175,881 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
[2009/11/25 07:42:43 | 000,136,426 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_dotnetfx35install.txt
[2009/11/25 07:42:43 | 000,007,906 | —- | C] () – C:\Users\charlenereeves\AppData\Local\uxeventlog.txt
[2009/11/25 07:42:43 | 000,000,002 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_dotnetfx35error.txt
[2009/11/25 07:37:29 | 000,786,440 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2009/11/25 06:51:02 | 000,021,504 | —- | C] () – C:\Windows\SysWow64\WBCustomizer.dll
[2009/11/25 06:35:29 | 000,000,000 | —- | C] () – C:\Users\charlenereeves\AppData\Roaming\wklnhst.dat
[2009/11/24 23:08:37 | 000,000,171 | —- | C] () – C:\Windows\QUICKEN.INI
[2009/11/24 17:40:06 | 000,007,620 | —- | C] () – C:\Users\charlenereeves\AppData\Local\d3d9caps.dat
[2009/11/24 16:38:21 | 000,020,992 | —- | C] () – C:\Windows\jestertb.dll
[2009/11/24 16:19:58 | 000,001,460 | —- | C] () – C:\Users\charlenereeves\AppData\Local\d3d9caps64.dat
[2009/11/24 15:38:24 | 000,055,808 | —- | C] () – C:\Users\charlenereeves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/01/20 18:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini

========== LOP Check ==========

[2009/12/11 19:55:43 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Avery
[2009/11/25 07:50:37 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Caspedia
[2009/11/27 06:58:16 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2009/11/25 05:58:46 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\IndigoRose
[2009/12/24 08:04:45 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\IObit
[2009/12/26 13:45:45 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\iolo
[2010/01/13 13:26:40 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Memeo
[2010/02/24 06:09:53 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\MudCreek
[2010/01/03 05:20:24 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Optimism
[2010/02/01 07:38:47 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\OverDrive
[2010/01/31 18:41:57 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\PeerNetworking
[2010/03/04 07:43:34 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Picaboo
[2009/11/24 23:56:18 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Quicken WillMaker
[2009/12/08 07:21:14 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Skinux
[2010/02/27 19:43:25 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Smilebox
[2009/11/25 06:35:55 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Template
[2010/02/25 19:15:12 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\The Journal 5
[2009/12/01 05:34:52 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Tific
[2010/03/07 13:04:41 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\upromise
[2009/12/21 10:51:45 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Windows Live Writer
[2010/02/26 01:39:25 | 000,000,418 | —- | M] () – C:\Windows\Tasks\EasyShare Registration Task.job
[2010/03/08 06:08:22 | 000,032,574 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2010/03/08 13:00:14 | 000,000,452 | -H– | M] () – C:\Windows\Tasks\User_Feed_Synchronization-{E5D3F2D6-36AB-4812-A910-8EE432F78A3A}.job

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >

< MD5 for: AGP440.SYS >
[2008/01/20 18:46:51 | 000,064,568 | —- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_163188bf770e4ab0\AGP440.sys
[2008/01/20 18:46:51 | 000,064,568 | —- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_163188bf770e4ab0\AGP440.sys
[2008/01/20 18:46:51 | 000,064,568 | —- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_181d01cb743015fc\AGP440.sys
[2008/01/20 18:46:51 | 000,064,568 | —- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_181d01cb743015fc\AGP440.sys

< MD5 for: ATAPI.SYS >
[2008/01/20 18:46:50 | 000,022,584 | —- | M] (Microsoft Corporation) MD5=1898FAE8E07D97F2F6C2D5326C633FAC – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_3956c39dd9e73fd2\atapi.sys
[2008/01/20 18:46:50 | 000,022,584 | —- | M] (Microsoft Corporation) MD5=1898FAE8E07D97F2F6C2D5326C633FAC – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_3956c39dd9e73fd2\atapi.sys
[2009/04/10 23:15:00 | 000,020,952 | —- | M] (Microsoft Corporation) MD5=E68D9B3A3905619732F7FE039466A623 – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_3b423ca9d7090b1e\atapi.sys
[2009/04/10 23:15:00 | 000,020,952 | —- | M] (Microsoft Corporation) MD5=E68D9B3A3905619732F7FE039466A623 – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_3b423ca9d7090b1e\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2006/11/02 03:16:48 | 000,014,848 | —- | M] (Microsoft Corporation) MD5=21322B1A2AD337C579F4A65EA0D25193 – C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_424bc4aceb06de1c\cngaudit.dll
[2006/11/02 03:16:48 | 000,014,848 | —- | M] (Microsoft Corporation) MD5=21322B1A2AD337C579F4A65EA0D25193 – C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_424bc4aceb06de1c\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\SysWOW64\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\SysWOW64\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\SysWOW64\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\SysWOW64\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll

< MD5 for: IASTORV.SYS >
[2008/01/20 18:46:59 | 000,290,872 | —- | M] (Intel Corporation) MD5=3E3BF3627D886736D0B4E90054F929F6 – C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_0b2fedfc40256bc5\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2008/01/20 18:51:03 | 000,716,800 | —- | M] (Microsoft Corporation) MD5=5D0A4891F8CD0E9E64FF57A6A34044F5 – C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_59d652c6f057598d\netlogon.dll
[2008/01/20 18:51:03 | 000,716,800 | —- | M] (Microsoft Corporation) MD5=5D0A4891F8CD0E9E64FF57A6A34044F5 – C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_59d652c6f057598d\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\SysWOW64\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\SysWOW64\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\SysWOW64\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\SysWOW64\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_6616762521d9e6d4\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_6616762521d9e6d4\netlogon.dll
[2009/04/10 23:11:16 | 000,717,312 | —- | M] (Microsoft Corporation) MD5=A3F1B171702CA04744EE514243B45BFB – C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_5bc1cbd2ed7924d9\netlogon.dll
[2009/04/10 23:11:16 | 000,717,312 | —- | M] (Microsoft Corporation) MD5=A3F1B171702CA04744EE514243B45BFB – C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_5bc1cbd2ed7924d9\netlogon.dll
[2008/01/20 18:48:28 | 000,592,384 | —- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F – C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_642afd1924b81b88\netlogon.dll
[2008/01/20 18:48:28 | 000,592,384 | —- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F – C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_642afd1924b81b88\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2008/01/20 18:46:54 | 000,054,328 | —- | M] (NVIDIA Corporation) MD5=F7EA0FE82842D05EDA3EFDD376DBFDBA – C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_95f95eab775c159d\nvstor.sys
[2008/01/20 18:46:54 | 000,054,328 | —- | M] (NVIDIA Corporation) MD5=F7EA0FE82842D05EDA3EFDD376DBFDBA – C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_95f95eab775c159d\nvstor.sys

< MD5 for: SCECLI.DLL >
[2008/01/20 18:50:28 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 – C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_9e812831c5d9a243\scecli.dll
[2008/01/20 18:50:28 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 – C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_9e812831c5d9a243\scecli.dll
[2008/01/20 18:49:49 | 000,235,520 | —- | M] (Microsoft Corporation) MD5=35F1DD99F9903BC267C2AF16B09F9BF7 – C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_942c7ddf9178e048\scecli.dll
[2008/01/20 18:49:49 | 000,235,520 | —- | M] (Microsoft Corporation) MD5=35F1DD99F9903BC267C2AF16B09F9BF7 – C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_942c7ddf9178e048\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\SysWOW64\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\SysWOW64\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\SysWOW64\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\SysWOW64\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_a06ca13dc2fb6d8f\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_a06ca13dc2fb6d8f\scecli.dll
[2009/04/10 23:11:23 | 000,235,520 | —- | M] (Microsoft Corporation) MD5=9922ADB6DCA8F0F5EA038BEFF339C08B – C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_9617f6eb8e9aab94\scecli.dll
[2009/04/10 23:11:23 | 000,235,520 | —- | M] (Microsoft Corporation) MD5=9922ADB6DCA8F0F5EA038BEFF339C08B – C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_9617f6eb8e9aab94\scecli.dll

< >

< >

< iastorv.sys >

========== Alternate Data Streams ==========

@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:5D432CE3
< End of report >

Deleted Member

Post #12March 8, 2010, 6:29 PM UTC

OTL logfile created on: 3/8/2010 12:56:10 PM - Run 2
OTL by OldTimer - Version 3.1.35.0 Folder = C:\Users\charlenereeves\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 41.00% Memory free
8.00 Gb Paging File | 5.00 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 596.13 Gb Total Space | 403.98 Gb Free Space | 67.77% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
Drive I: | 465.64 Gb Total Space | 258.12 Gb Free Space | 55.43% Space Free | Partition Type: FAT32

Computer Name: MYPUTER
Current User Name: charlenereeves
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\charlenereeves\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10e.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CNRpc.exe ()
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe (CinemaNow, Inc.)
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowShell.exe (CinemaNow Inc.)
PRC - C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Program Files (x86)\FoxyTunes\FoxyTunesEngine\1.0.0.7271_{41D2243B-4ACB-421D-B1D3-EEF2467523E9}\FoxyTunesEngine.exe (FoxyTunes Ltd)
PRC - C:\Program Files (x86)\Upromise\UpromiseTray.exe ()
PRC - C:\Program Files (x86)\Nova Development\Greeting Card Factory Deluxe 8.0\ReminderApp.exe ()
PRC - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Upromise\dca-ua.exe (Compete Inc)
PRC - C:\Program Files (x86)\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Internet Explorer\ieuser.exe (Microsoft Corporation)
PRC - C:\Windows\SysWOW64\atashost.exe (WebEx Communications, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()

========== Modules (SafeList) ==========

MOD - C:\Users\charlenereeves\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\wpdshext.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\fontext.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\comdlg32.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396
ca17ae07\GdiPlus.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (WAS) – C:\Windows\SysNative\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV:64bit: - (W3SVC) – C:\Windows\SysNative\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV:64bit: - (FontCache) – C:\Windows\SysNative\FntCache.dll (Microsoft Corporation)
SRV:64bit: - (AppHostSvc) – C:\Windows\SysNative\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV:64bit: - (wlidsvc) – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
SRV:64bit: - (Ati External Event Utility) – C:\Windows\SysNative\Ati2evxx.exe (ATI Technologies Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (N360) – C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe (Symantec Corporation)
SRV - (CinemaNow Service) – C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe (CinemaNow, Inc.)
SRV - (GoogleDesktopManager-110309-193829) – C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (WAS) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (ACDaemon) – C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (SeaPort) – C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (fsssvc) – C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (nmservice) – C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
SRV - (AppHostSvc) – C:\Windows\SysWOW64\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_64) – C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (atashost) – C:\Windows\SysWOW64\atashost.exe (WebEx Communications, Inc.)
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (SBSDWSCService) – C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (YahooAUService) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (Symantec RemoteAssist) – C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe (Symantec, Inc.)
SRV - (HPSLPSVC) – C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (AdobeActiveFileMonitor6.0) – C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
SRV - (MSDTC) – C:\Windows\SysWOW64\Msdtc [2006/11/02 05:34:14 | 000,000,000 | —D | M]
SRV - (vds) – C:\Windows\SysWOW64\wbem\vds.mof ()
SRV - (VSS) – C:\Windows\SysWOW64\wbem\vss.mof ()

========== Driver Services (SafeList) ==========

DRV:64bit: - (SymEvent) – C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (ccHP) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\ccHPx64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SRTSP64.SYS (Symantec Corporation)
DRV:64bit: - (SymEFA) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SYMEFA64.SYS (Symantec Corporation)
DRV:64bit: - (SYMTDI) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMTDI.SYS (Symantec Corporation)
DRV:64bit: - (SYMFW) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMFW.SYS (Symantec Corporation)
DRV:64bit: - (SYMNDISV) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMNDISV.SYS (Symantec Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SRTSPX64.SYS (Symantec Corporation)
DRV:64bit: - (SymIM) – C:\Windows\SysNative\DRIVERS\SymIMv.sys (Symantec Corporation)
DRV:64bit: - (BHDrvx64) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\BHDrvx64.sys (Symantec Corporation)
DRV:64bit: - (RTL8169) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek )
DRV:64bit: - (fssfltr) – C:\Windows\SysNative\DRIVERS\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (purendis) – C:\Windows\SysNative\DRIVERS\purendis.sys (Cisco Systems, Inc.)
DRV:64bit: - (pnarp) – C:\Windows\SysNative\DRIVERS\pnarp.sys (Cisco Systems, Inc.)
DRV:64bit: - (HdAudAddService) – C:\Windows\SysNative\drivers\HdAudio.sys (Microsoft Corporation)
DRV:64bit: - (usbaudio) USB Audio Driver (WDM) – C:\Windows\SysNative\drivers\usbaudio.sys (Microsoft Corporation)
DRV:64bit: - (FTDIBUS) – C:\Windows\SysNative\drivers\ftdibus.sys (FTDI Ltd.)
DRV:64bit: - (FTSER2K) – C:\Windows\SysNative\drivers\ftser2k.sys (FTDI Ltd.)
DRV:64bit: - (BVRPMPR5a64) – C:\Windows\SysNative\drivers\BVRPMPR5a64.SYS (Avanquest Software)
DRV:64bit: - (atikmdag) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (VST64_DPV) – C:\Windows\SysNative\DRIVERS\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (winachsf) – C:\Windows\SysNative\DRIVERS\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (VST64HWBS2) – C:\Windows\SysNative\DRIVERS\VSTBS26.SYS (Conexant Systems, Inc.)
DRV:64bit: - (AtiPcie) ATI PCI Express (3GIO) – C:\Windows\SysNative\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100307.022\ex64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100307.022\eng64.sys (Symantec Corporation)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20100224.002\IDSviA64.sys (Symantec Corporation)
DRV - (PCD5SRVC{048DBD20-445E8C82-05040104}) – C:\Program Files (x86)\Dell Support Center\HWDiag\bin\pcd5srvc_x64.pkms (PC-Doctor, Inc.)
DRV - (Tcpip) – C:\Windows\SysWOW64\wbem\tcpip.mof ()
DRV - (mpsdrv) – C:\Windows\SysWOW64\wbem\mpsdrv.mof ()
DRV - (pfc) – C:\Windows\SysWOW64\drivers\pfc.sys (Padus, Inc.)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{400F0BDB-6C49-43A4-BE1F-76D7327A604D}: C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\Mozilla [2009/12/26 13:38:11 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2009/12/31 04:54:13 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/02/21 08:30:51 | 000,000,000 | —D | M]

O1 HOSTS File: ([2010/03/02 06:53:22 | 000,380,280 | R— | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 13103 more lines…
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg64.dll (Google Inc.)
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\yt.dll (Yahoo! Inc.)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Download Manager Browser Helper Object) - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\XEBDLHelper.dll (Protect Software GmbH)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.)
O2 - BHO: (DCA BHO) - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - C:\Program Files (x86)\Upromise\dca-bho.dll (Compete, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (Upromise TurboSaver) - {EDC0F17F-F4B7-47e4-B73E-887FAEB376FA} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\YTSingleInstance.dll (Yahoo! Inc)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Upromise TurboSaver) - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3:64bit: - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [dellsupportcenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [nmctxth] C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
O4 - HKLM..\Run: [ReminderApp] C:\Program Files (x86)\Nova Development\Greeting Card Factory Deluxe 8.0\ReminderApp.exe ()
O4 - HKLM..\Run: [YMailAdvisor] C:\Program Files (x86)\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000..\Run: [Upromise Tray] C:\Program Files (x86)\Upromise\UpromiseTray.exe ()
O4 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000..\Run: [Upromise Update] C:\Program Files (x86)\Upromise\dca-ua.exe (Compete Inc)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O9 - Extra Button: Upromise TurboSaver - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O9 - Extra 'Tools' menuitem : Upromise TurboSaver - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe File not found
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: cinemanow.com ([]http in Trusted sites)
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: cinemanow.com ([]https in Trusted sites)
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: comcast.com ([www] * in Trusted sites)
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: comcast.net ([www] * in Trusted sites)
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: yahoo.com ([www] * in Trusted sites)
O15 - HKU\S-1-5-21-2137779107-592716130-3574352362-1000\..Trusted Domains: yahoo.com ([www] http in Local intranet)
O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} https://www-secure.symantec.com/techsupp/as…abs/tgctlcm.cab (Symantec Configuration Class)
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} https://support.dell.com/systemprofiler/SysProExe.CAB (WMI Class)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab (GMNRev Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (Reg Error: Value error.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\jpip {B92DD248-E3D5-4A92-B311-C9B841681455} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\amd64\puresp4.dll (Cisco Systems, Inc.)
O18:64bit: - Protocol\Handler\sidlet {B92DD248-E3D5-4A92-B311-C9B841681455} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\jpip {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\Express View\expressview.dll (Lizardtech Software)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
O18 - Protocol\Handler\sidlet {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\Express View\expressview.dll (Lizardtech Software)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~2\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img18.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img18.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/01 14:12:10 | 000,000,071 | -H– | M] () - I:\AUTORUN.INF – [ FAT32 ]
O32 - AutoRun File - [2008/11/05 13:19:36 | 000,000,052 | RHS- | M] () - I:\AUTORUN.FCB – [ FAT32 ]
O32 - AutoRun File - [2009/01/23 15:01:08 | 000,000,000 | —D | M] - I:\autorun – [ FAT32 ]
O33 - MountPoints2\{3bef2efd-d94f-11de-b010-00219b2dadd9}\Shell\AutoRun\command - "" = I:\setupSNK.exe – [2008/01/20 19:47:36 | 000,013,312 | —- | M] (Microsoft Corporation)
O33 - MountPoints2\{558571f3-efc8-11de-bd2e-00219b2dadd9}\Shell\AutoRun\command - "" = J:\setupSNK.exe – File not found
O33 - MountPoints2\{558571f8-efc8-11de-bd2e-00219b2dadd9}\Shell - "" = AutoRun
O33 - MountPoints2\{558571f8-efc8-11de-bd2e-00219b2dadd9}\Shell\AutoRun\command - "" = K:\LaunchU3.exe – File not found
O33 - MountPoints2\{7fd79b20-feb7-11de-91a5-00219b2dadd9}\Shell\AutoRun\command - "" = J:\setupSNK.exe – File not found
O33 - MountPoints2\{7fd79b23-feb7-11de-91a5-00219b2dadd9}\Shell - "" = AutoRun
O33 - MountPoints2\{7fd79b23-feb7-11de-91a5-00219b2dadd9}\Shell\AutoRun\command - "" = K:\LaunchU3.exe – File not found
O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\setupSNK.exe – [2008/01/20 19:47:36 | 000,013,312 | —- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*

NetSvcs:64bit: Ias - C:\Windows\SysNative\ias [2008/01/20 19:06:38 | 000,000,000 | —D | M]
NetSvcs:64bit: Irmon - C:\Windows\SysNative\irmon.dll (Microsoft Corporation)
NetSvcs:64bit: Wmi - C:\Windows\SysNative\wmi.dll (Microsoft Corporation)
NetSvcs: Ias - C:\Windows\SysWOW64\ias [2008/01/20 19:08:35 | 000,000,000 | —D | M]
NetSvcs: Wmi - C:\Windows\SysWOW64\wmi.dll (Microsoft Corporation)

NetSvcs:64bit: Ias - C:\Windows\SysNative\ias [2008/01/20 19:06:38 | 000,000,000 | —D | M]
NetSvcs:64bit: Irmon - C:\Windows\SysNative\irmon.dll (Microsoft Corporation)
NetSvcs:64bit: Wmi - C:\Windows\SysNative\wmi.dll (Microsoft Corporation)
NetSvcs: Ias - C:\Windows\SysWOW64\ias [2008/01/20 19:08:35 | 000,000,000 | —D | M]
NetSvcs: Wmi - C:\Windows\SysWOW64\wmi.dll (Microsoft Corporation)
OTL cannot create restorepoints on Vista OSs!

========== Files/Folders - Created Within 30 Days ==========

[2010/03/08 12:36:11 | 000,554,496 | —- | C] (OldTimer Tools) – C:\Users\charlenereeves\Desktop\OTL.exe
[2010/03/08 12:32:06 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\SP_BuyMyStore-COUPON-CODES[2]
[2010/03/08 12:20:03 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\SP_BuyMyStore-COUPON-CODES[1]
[2010/03/08 07:41:48 | 000,000,000 | —D | C] – C:\32788R22FWJFW
[2010/03/08 00:12:57 | 000,278,576 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symtdi.sys
[2010/03/08 00:12:56 | 000,402,992 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.sys
[2010/03/08 00:12:56 | 000,120,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symfw.sys
[2010/03/08 00:12:56 | 000,056,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndisv.sys
[2010/03/08 00:12:56 | 000,044,080 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndis.sys
[2010/03/08 00:12:56 | 000,043,568 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symids.sys
[2010/03/08 00:12:56 | 000,032,304 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.sys
[2010/03/08 00:12:55 | 000,583,296 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\cchpx64.sys
[2010/03/08 00:12:55 | 000,476,720 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.sys
[2010/03/08 00:12:55 | 000,334,384 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.sys
[2010/03/08 00:11:29 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64\0308000.029
[2010/03/07 21:09:00 | 000,126,312 | R— | C] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2010/03/07 21:09:00 | 000,107,368 | R— | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2010/03/07 21:08:59 | 000,034,152 | R— | C] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010/03/07 21:08:56 | 000,031,280 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\SymIMV.sys
[2010/03/07 21:08:51 | 000,172,592 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/03/07 21:08:22 | 000,583,296 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\cchpx64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symtdi.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symfw.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndisv.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndis.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symids.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.sys
[2010/03/07 21:07:58 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64
[2010/03/07 21:07:58 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64\0305020.00B
[2010/03/07 21:07:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Norton Security Suite
[2010/03/07 13:04:41 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\upromise
[2010/03/07 13:04:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\Upromise
[2010/03/07 06:35:48 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Cards
[2010/03/06 10:16:43 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\MemoriesOnTV
[2010/03/04 21:02:00 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\NISx64\1105000.07F
[2010/03/04 13:19:52 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Symantec Shared
[2010/03/04 13:19:52 | 000,000,000 | —D | C] – C:\Program Files\Symantec
[2010/03/04 13:19:15 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\NISx64
[2010/03/04 07:43:19 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\Picaboo
[2010/03/04 07:42:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Picaboo
[2010/03/03 14:13:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\Hewlett-Packard
[2010/03/03 14:12:52 | 000,235,008 | —- | C] (Hewlett Packard Corporation) – C:\Windows\SysWow64\hpzc35mu.dll
[2010/03/03 14:09:31 | 000,944,128 | —- | C] (Hewlett-Packard) – C:\Windows\SysNative\hpwwiax4.dll
[2010/03/03 14:09:31 | 000,359,256 | —- | C] (Hewlett-Packard) – C:\Windows\SysNative\hpzids40.dll
[2010/03/03 14:09:30 | 000,740,864 | —- | C] (Hewlett-Packard Co.) – C:\Windows\SysNative\hpwtscl3.dll
[2010/03/03 14:09:29 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\difxapi.dll
[2010/03/03 14:09:29 | 000,488,960 | —- | C] (Hewlett-Packard Co.) – C:\Windows\SysNative\hpovst11.dll
[2010/03/03 12:05:19 | 000,000,000 | —D | C] – C:\Windows\Downloaded Installations
[2010/02/28 21:10:41 | 001,032,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wininet.dll
[2010/02/28 21:10:38 | 000,834,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wininet.dll
[2010/02/28 21:10:26 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2010/02/28 21:10:22 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2010/02/28 21:10:21 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2010/02/28 21:10:19 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieencode.dll
[2010/02/28 21:10:19 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieencode.dll
[2010/02/28 21:10:09 | 000,422,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2010/02/28 21:10:08 | 000,380,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2010/02/28 20:28:19 | 000,000,000 | —D | C] – C:\inetpub
[2010/02/26 15:03:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\FoxyTunes
[2010/02/26 13:56:07 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\skypePM
[2010/02/26 13:51:59 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\Skype
[2010/02/26 13:51:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2010/02/26 13:51:16 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2010/02/26 13:51:10 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2010/02/25 19:13:44 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\The Journal Volumes
[2010/02/25 18:36:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\MSSoap
[2010/02/24 21:18:51 | 000,000,000 | —D | C] – C:\Windows\vbSkinner
[2010/02/24 09:43:15 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2010/02/24 09:43:13 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2010/02/24 09:41:21 | 000,153,376 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2010/02/24 09:41:21 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2010/02/24 09:41:21 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2010/02/24 06:37:23 | 000,286,720 | —- | C] (Indigo Rose Corporation) – C:\Windows\iun506.exe
[2010/02/24 06:37:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Family Picture Calendar
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\The Journal 5
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\The Journal 5
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\ProgramData\The Journal
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\DavidRM Software
[2010/02/24 06:09:12 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\MudCreek
[2010/02/24 06:09:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\MudCreek
[2010/02/24 06:01:32 | 000,000,000 | —D | C] – C:\GenDB
[2010/02/24 06:01:32 | 000,000,000 | —D | C] – C:\Program Files\CemeterySystemFiles
[2010/02/24 06:01:19 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\GenDB2[1]
[2010/02/24 05:54:41 | 000,115,920 | —- | C] (Microsoft Corporation) – C:\Windows\msinet.ocx
[2010/02/24 05:54:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\Protasm
[2010/02/23 21:14:58 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2010/02/23 21:14:58 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2010/02/23 21:14:58 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2010/02/23 21:14:57 | 000,539,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2010/02/23 21:14:55 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2010/02/23 21:14:55 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2010/02/23 21:14:55 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2010/02/23 21:14:54 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2010/02/23 21:14:53 | 000,526,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2010/02/23 21:14:53 | 000,518,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2010/02/23 21:14:53 | 000,347,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2010/02/23 21:14:53 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2010/02/23 21:14:53 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2010/02/23 21:14:53 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2010/02/23 21:14:52 | 000,460,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2010/02/23 21:14:52 | 000,152,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2010/02/23 21:14:52 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2010/02/23 21:14:51 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdrm.dll
[2010/02/23 21:13:02 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2010/02/23 21:13:02 | 001,696,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2010/02/23 21:13:01 | 000,032,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Apphlpdm.dll
[2010/02/23 21:13:01 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Apphlpdm.dll
[2010/02/23 21:13:00 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\SysWow64\GameUXLegacyGDFs.dll
[2010/02/23 21:13:00 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\SysNative\GameUXLegacyGDFs.dll
[2010/02/23 19:48:30 | 000,000,000 | —D | C] – C:\Windows\BDOSCAN8
[2010/02/23 07:46:29 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\New Folder
[2010/02/21 07:53:12 | 000,000,000 | —D | C] – C:\ProgramData\HP Product Assistant
[2010/02/20 17:27:41 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\a
[2010/02/16 20:23:56 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Desktop\Hummie
[2010/02/16 10:15:29 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\DID
[2010/02/15 07:54:56 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Smart Art Cards
[2010/02/14 16:29:05 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Apple Computer
[2010/02/14 16:27:04 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Apple
[2010/02/13 17:56:01 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Tift
[2010/02/13 17:49:11 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Tuts - Copy
[2010/02/13 17:45:45 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Animals
[2010/02/13 17:38:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Linda
[2010/02/13 17:26:57 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Frames
[2010/02/13 17:19:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Sayings
[2010/02/13 17:17:43 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Embellishments
[2010/02/13 17:11:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Flowers
[2010/02/13 17:01:39 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Picture Embellishments
[2010/02/13 17:01:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Papers
[2010/02/13 10:58:03 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Adobe
[2010/02/12 14:46:47 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\ICS
[2010/02/12 14:32:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Symantec Shared
[2010/02/12 14:13:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\NortonInstaller
[2010/02/11 18:33:22 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2010/02/11 18:29:10 | 000,021,504 | —- | C] (Doug Knox) – C:\Users\charlenereeves\Desktop\SysRestorePoint.exe
[2010/02/10 11:30:00 | 001,570,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2010/02/10 11:29:59 | 001,314,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2010/02/10 11:29:59 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iyuv_32.dll
[2010/02/10 11:29:59 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvidc32.dll
[2010/02/10 11:29:59 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msyuv.dll
[2010/02/10 11:29:59 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrle32.dll
[2010/02/10 11:29:59 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsbyuv.dll
[2010/02/10 11:29:58 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2010/02/10 11:29:58 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2010/02/10 11:29:58 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2010/02/10 11:29:39 | 004,698,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2010/02/09 13:27:38 | 000,000,000 | —D | C] – C:\ProgramData\Caspedia
[2010/02/06 16:42:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\Trend Micro
[2010/02/06 15:50:54 | 000,000,000 | —D | C] – C:\Program Files\ThreatExpert Memory Scanner

========== Files - Modified Within 30 Days ==========

[2010/03/08 13:00:14 | 000,000,452 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{E5D3F2D6-36AB-4812-A910-8EE432F78A3A}.job
[2010/03/08 12:59:41 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/03/08 12:58:53 | 009,699,328 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT
[2010/03/08 12:38:34 | 000,000,254 | —- | M] () – C:\Users\charlenereeves\Desktop\SpywareMalwareVirus RemovalInfections Removal.url
[2010/03/08 12:36:16 | 000,554,496 | —- | M] (OldTimer Tools) – C:\Users\charlenereeves\Desktop\OTL.exe
[2010/03/08 12:27:30 | 000,359,929 | —- | M] () – C:\Users\charlenereeves\Desktop\dds.scr
[2010/03/08 12:23:31 | 001,674,990 | —- | M] () – C:\Users\charlenereeves\Desktop\SP_BuyMyStore-COUPON-CODES.zip
[2010/03/08 12:10:31 | 000,003,840 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/03/08 12:10:31 | 000,003,840 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/03/08 10:22:42 | 000,997,338 | —- | M] () – C:\Users\charlenereeves\Documents\ww2-participation.pdf
[2010/03/08 07:38:48 | 003,882,377 | —- | M] () – C:\Users\charlenereeves\Desktop\ComboFix.exe
[2010/03/08 06:50:01 | 000,000,808 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/03/08 06:13:27 | 002,152,562 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\Cat.DB
[2010/03/08 06:11:13 | 000,002,287 | —- | M] () – C:\Users\Public\Desktop\Norton Security Suite.lnk
[2010/03/08 06:11:00 | 000,065,536 | —- | M] () – C:\Windows\SysNative\Ikeext.etl
[2010/03/08 06:10:37 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/03/08 06:10:33 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/03/08 06:10:28 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/03/08 06:08:29 | 000,524,288 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT{528e1bda-0b48-11df-b30d-00219b2dadd9}.TMContainer00000000000000000001.regtrans-ms
[2010/03/08 06:08:29 | 000,065,536 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT{528e1bda-0b48-11df-b30d-00219b2dadd9}.TM.blf
[2010/03/08 06:08:17 | 002,891,551 | -H– | M] () – C:\Users\charlenereeves\AppData\Local\IconCache.db
[2010/03/08 02:36:19 | 002,152,562 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\Cat.DB
[2010/03/08 00:11:30 | 000,000,172 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\isolate.ini
[2010/03/07 21:08:42 | 000,172,592 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/03/07 21:08:42 | 000,007,440 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/03/07 21:08:42 | 000,000,855 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/03/07 21:08:22 | 000,583,296 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\cchpx64.sys
[2010/03/07 21:08:22 | 000,583,296 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\cchpx64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symtdi.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symtdi.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symfw.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symfw.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndisv.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndisv.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndis.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndis.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symids.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symids.sys
[2010/03/07 21:08:22 | 000,034,152 | R— | M] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.sys
[2010/03/07 21:08:22 | 000,031,280 | R— | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SymIMV.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.sys
[2010/03/07 21:08:16 | 000,126,312 | R— | M] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2010/03/07 21:08:16 | 000,107,368 | R— | M] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2010/03/07 21:08:10 | 000,003,373 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA.inf
[2010/03/07 21:08:10 | 000,003,373 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,172 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\isolate.ini
[2010/03/07 21:07:58 | 000,009,415 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.cat
[2010/03/07 21:07:58 | 000,009,415 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\symnetv.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symnetv.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,362 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.CAT
[2010/03/07 21:07:58 | 000,007,362 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\bhdrvx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.cat
[2010/03/07 19:00:43 | 002,152,318 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1105000.07F\Cat.DB
[2010/03/07 06:13:46 | 000,002,761 | —- | M] () – C:\Users\Public\Desktop\Greeting Card Factory Deluxe.lnk
[2010/03/06 10:52:18 | 000,000,198 | —- | M] () – C:\Users\charlenereeves\Desktop\Yahoo! Mail (charlenereeves2004).url
[2010/03/06 08:26:36 | 000,434,448 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/03/05 08:46:48 | 000,003,223 | —- | M] () – C:\Users\charlenereeves\Desktop\Bible Study Pro.lnk
[2010/03/05 08:06:55 | 000,130,992 | —- | M] () – C:\Users\charlenereeves\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/03/05 07:30:35 | 000,002,064 | —- | M] () – C:\Users\Public\Desktop\MemoriesOnTV.lnk
[2010/03/04 15:18:50 | 000,022,755 | —- | M] () – C:\Windows\hpqins15.dat
[2010/03/04 14:57:31 | 000,177,755 | —- | M] () – C:\Windows\hpwins20.dat
[2010/03/04 08:57:08 | 000,000,896 | —- | M] () – C:\Users\Public\Desktop\HP Photo Creations.lnk
[2010/03/04 08:50:10 | 000,019,529 | —- | M] () – C:\Windows\hpqins13.dat
[2010/03/04 08:49:14 | 000,002,030 | —- | M] () – C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2010/03/04 07:43:01 | 000,001,860 | —- | M] () – C:\Users\Public\Desktop\Picaboo.lnk
[2010/03/03 14:16:53 | 000,000,179 | —- | M] () – C:\Windows\win.ini
[2010/03/02 06:53:22 | 000,380,280 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2010/03/02 06:49:41 | 000,007,620 | —- | M] () – C:\Users\charlenereeves\AppData\Local\d3d9caps.dat
[2010/03/01 18:18:40 | 000,055,808 | —- | M] () – C:\Users\charlenereeves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/01 12:23:23 | 000,160,650 | —- | M] () – C:\Windows\hphins33.dat
[2010/02/28 20:44:06 | 000,807,962 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/02/28 20:44:06 | 000,691,546 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/02/28 20:44:06 | 000,136,268 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/02/28 19:34:04 | 000,000,212 | —- | M] () – C:\Users\charlenereeves\Desktop\Replying in IE8 getting 404 errors - What the Tech.url
[2010/02/27 21:55:34 | 000,088,064 | —- | M] () – C:\Users\charlenereeves\Documents\Untitled Slide Show.sss
[2010/02/27 08:09:59 | 000,000,191 | —- | M] () – C:\Users\charlenereeves\Desktop\How to determine and to recover from Winsock2 corruption in Windows Server 2003, in Windows XP, and in Windows Vista.url
[2010/02/26 13:56:09 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2010/02/26 01:48:52 | 000,001,684 | —- | M] () – C:\Users\charlenereeves\Desktop\CCleaner.lnk
[2010/02/26 01:39:25 | 000,000,418 | —- | M] () – C:\Windows\tasks\EasyShare Registration Task.job
[2010/02/25 18:37:27 | 000,001,960 | —- | M] () – C:\Users\Public\Desktop\Kodak EasyShare.lnk
[2010/02/24 06:36:57 | 000,286,720 | —- | M] (Indigo Rose Corporation) – C:\Windows\iun506.exe
[2010/02/24 06:25:34 | 000,001,024 | —- | M] () – C:\Users\Public\Desktop\The Journal 5.lnk
[2010/02/24 05:49:34 | 000,000,002 | —- | M] () – C:\Windows\SysWow64\MedMemoryDrive.ini
[2010/02/21 19:48:23 | 000,001,877 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/02/21 08:31:17 | 000,023,145 | —- | M] () – C:\Windows\hpqins15.dat.temp
[2010/02/21 07:53:00 | 000,001,178 | —- | M] () – C:\Users\Public\Desktop\HP Solution Center.lnk
[2010/02/17 09:50:29 | 000,380,176 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts.20100302-065322.backup
[2010/02/13 19:01:23 | 000,001,460 | —- | M] () – C:\Users\charlenereeves\AppData\Local\d3d9caps64.dat
[2010/02/13 09:35:12 | 000,019,529 | —- | M] () – C:\Windows\hpqins13.dat.temp
[2010/02/12 13:50:42 | 000,002,560 | —- | M] () – C:\Windows\_MSRSTRT.EXE
[2010/02/12 13:39:42 | 000,001,908 | —- | M] () – C:\Users\Public\Desktop\HP Print Diagnostic Utility.lnk
[2010/02/11 18:29:10 | 000,021,504 | —- | M] (Doug Knox) – C:\Users\charlenereeves\Desktop\SysRestorePoint.exe
[2010/02/10 22:00:14 | 000,378,474 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts.20100217-095029.backup
[2010/02/06 16:04:38 | 000,000,787 | —- | M] () – C:\Users\charlenereeves\Desktop\MyArtSpaceTV - Shortcut.lnk
[2010/02/06 16:04:28 | 000,000,812 | —- | M] () – C:\Users\charlenereeves\Desktop\photomail_cp_install - Shortcut.lnk
[2010/02/06 15:50:55 | 000,000,838 | —- | M] () – C:\Users\Public\Desktop\ThreatExpert Memory Scanner.lnk

========== Files Created - No Company Name ==========

[2010/03/08 12:38:33 | 000,000,254 | —- | C] () – C:\Users\charlenereeves\Desktop\SpywareMalwareVirus RemovalInfections Removal.url
[2010/03/08 12:27:27 | 000,359,929 | —- | C] () – C:\Users\charlenereeves\Desktop\dds.scr
[2010/03/08 12:23:18 | 001,674,990 | —- | C] () – C:\Users\charlenereeves\Desktop\SP_BuyMyStore-COUPON-CODES.zip
[2010/03/08 10:22:40 | 000,997,338 | —- | C] () – C:\Users\charlenereeves\Documents\ww2-participation.pdf
[2010/03/08 07:38:42 | 003,882,377 | —- | C] () – C:\Users\charlenereeves\Desktop\ComboFix.exe
[2010/03/08 06:11:33 | 002,152,562 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\Cat.DB
[2010/03/08 00:12:57 | 000,009,412 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\symnetv.cat
[2010/03/08 00:12:57 | 000,001,481 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNetV.inf
[2010/03/08 00:12:56 | 000,009,415 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.cat
[2010/03/08 00:12:56 | 000,007,401 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.cat
[2010/03/08 00:12:56 | 000,007,399 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.cat
[2010/03/08 00:12:56 | 000,003,373 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA.inf
[2010/03/08 00:12:56 | 000,001,480 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.inf
[2010/03/08 00:12:56 | 000,001,421 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.inf
[2010/03/08 00:12:55 | 000,007,410 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.cat
[2010/03/08 00:12:55 | 000,007,345 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.cat
[2010/03/08 00:12:55 | 000,001,836 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.inf
[2010/03/08 00:12:55 | 000,001,437 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.inf
[2010/03/08 00:12:55 | 000,000,640 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.inf
[2010/03/08 00:12:54 | 000,007,362 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.CAT
[2010/03/08 00:11:29 | 000,000,172 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\isolate.ini
[2010/03/07 21:09:25 | 002,152,562 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\Cat.DB
[2010/03/07 21:08:51 | 000,007,440 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/03/07 21:08:51 | 000,000,855 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/03/07 21:08:34 | 000,002,287 | —- | C] () – C:\Users\Public\Desktop\Norton Security Suite.lnk
[2010/03/07 21:08:10 | 000,003,373 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,172 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\isolate.ini
[2010/03/07 21:07:58 | 000,009,415 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symnetv.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,362 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\bhdrvx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.cat
[2010/03/06 10:52:18 | 000,000,198 | —- | C] () – C:\Users\charlenereeves\Desktop\Yahoo! Mail (charlenereeves2004).url
[2010/03/05 07:30:34 | 000,002,064 | —- | C] () – C:\Users\Public\Desktop\MemoriesOnTV.lnk
[2010/03/05 07:27:21 | 000,002,761 | —- | C] () – C:\Users\Public\Desktop\Greeting Card Factory Deluxe.lnk
[2010/03/05 06:48:58 | 002,152,318 | —- | C] () – C:\Windows\SysNative\drivers\NISx64\1105000.07F\Cat.DB
[2010/03/04 08:49:14 | 000,002,030 | —- | C] () – C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2010/03/04 07:43:01 | 000,001,860 | —- | C] () – C:\Users\Public\Desktop\Picaboo.lnk
[2010/03/03 14:09:48 | 000,177,755 | —- | C] () – C:\Windows\hpwins20.dat
[2010/03/03 14:09:48 | 000,002,428 | —- | C] () – C:\Windows\hpwmdl20.dat
[2010/02/28 19:34:03 | 000,000,212 | —- | C] () – C:\Users\charlenereeves\Desktop\Replying in IE8 getting 404 errors - What the Tech.url
[2010/02/27 21:55:34 | 000,088,064 | —- | C] () – C:\Users\charlenereeves\Documents\Untitled Slide Show.sss
[2010/02/27 08:09:59 | 000,000,191 | —- | C] () – C:\Users\charlenereeves\Desktop\How to determine and to recover from Winsock2 corruption in Windows Server 2003, in Windows XP, and in Windows Vista.url
[2010/02/26 13:56:09 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/02/25 18:33:11 | 000,000,418 | —- | C] () – C:\Windows\tasks\EasyShare Registration Task.job
[2010/02/24 06:25:34 | 000,001,024 | —- | C] () – C:\Users\Public\Desktop\The Journal 5.lnk
[2010/02/24 05:44:20 | 000,000,002 | —- | C] () – C:\Windows\SysWow64\MedMemoryDrive.ini
[2010/02/21 07:53:00 | 000,001,178 | —- | C] () – C:\Users\Public\Desktop\HP Solution Center.lnk
[2010/02/21 07:40:42 | 000,160,650 | —- | C] () – C:\Windows\hphins33.dat
[2010/02/13 08:28:20 | 000,160,685 | —- | C] () – C:\Windows\hphins33.dat.temp
[2010/02/12 13:50:41 | 000,002,560 | —- | C] () – C:\Windows\_MSRSTRT.EXE
[2010/02/12 13:39:42 | 000,001,908 | —- | C] () – C:\Users\Public\Desktop\HP Print Diagnostic Utility.lnk
[2010/02/11 18:03:06 | 000,003,223 | —- | C] () – C:\Users\charlenereeves\Desktop\Bible Study Pro.lnk
[2010/02/06 16:04:38 | 000,000,787 | —- | C] () – C:\Users\charlenereeves\Desktop\MyArtSpaceTV - Shortcut.lnk
[2010/02/06 16:04:27 | 000,000,812 | —- | C] () – C:\Users\charlenereeves\Desktop\photomail_cp_install - Shortcut.lnk
[2010/02/06 15:50:55 | 000,000,838 | —- | C] () – C:\Users\Public\Desktop\ThreatExpert Memory Scanner.lnk
[2010/02/05 15:46:58 | 000,070,966 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vcredistUI05EA.txt
[2010/02/05 15:46:27 | 000,070,966 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vcredistUI0585.txt
[2010/02/02 14:13:42 | 000,000,036 | —- | C] () – C:\Users\charlenereeves\AppData\Local\housecall.guid.cache
[2010/01/31 18:41:57 | 000,029,216 | —- | C] () – C:\Users\charlenereeves\AppData\Roaming\UserTile.png
[2010/01/16 08:58:59 | 000,000,426 | —- | C] () – C:\Windows\BRWMARK.INI
[2010/01/16 08:57:58 | 000,000,000 | —- | C] () – C:\Windows\brmx2001.ini
[2010/01/16 08:57:57 | 000,000,114 | —- | C] () – C:\Windows\SysWow64\brlmw03a.ini
[2010/01/16 08:57:57 | 000,000,011 | —- | C] () – C:\Windows\BRVIDEO.INI
[2010/01/16 08:57:20 | 000,000,356 | —- | C] () – C:\Windows\Brownie.ini
[2010/01/12 16:03:31 | 008,673,792 | —- | C] () – C:\ProgramData\atscie.msi
[2009/12/30 07:27:38 | 000,890,268 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vsto_ret20MSI3CC8.txt
[2009/12/30 07:27:35 | 000,012,152 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vsto_ret20UI3CC8.txt
[2009/12/26 13:45:52 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\mfc45.dll
[2009/12/02 07:50:39 | 000,000,000 | —- | C] () – C:\Windows\Scrapbook MAX!.INI
[2009/11/29 21:49:58 | 000,000,139 | —- | C] () – C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2009/11/29 08:46:13 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/11/29 08:44:48 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/11/25 12:32:26 | 000,524,288 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TMContainer00000000000000000002.regtrans-ms
[2009/11/25 12:32:26 | 000,524,288 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TMContainer00000000000000000001.regtrans-ms
[2009/11/25 12:32:26 | 000,262,144 | —- | C] () – C:\ProgramData\ntuser.dat
[2009/11/25 12:32:26 | 000,065,536 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TM.blf
[2009/11/25 12:32:26 | 000,005,120 | -H– | C] () – C:\ProgramData\ntuser.dat.LOG1
[2009/11/25 12:32:26 | 000,000,000 | -H– | C] () – C:\ProgramData\ntuser.dat.LOG2
[2009/11/25 12:11:40 | 000,039,701 | —- | C] () – C:\ProgramData\hpzinstall.log
[2009/11/25 07:43:25 | 001,880,934 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_NET_Framework35_x64_MSI1A3F.txt
[2009/11/25 07:42:49 | 000,175,881 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
[2009/11/25 07:42:43 | 000,136,426 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_dotnetfx35install.txt
[2009/11/25 07:42:43 | 000,007,906 | —- | C] () – C:\Users\charlenereeves\AppData\Local\uxeventlog.txt
[2009/11/25 07:42:43 | 000,000,002 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_dotnetfx35error.txt
[2009/11/25 07:37:29 | 000,786,440 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2009/11/25 06:51:02 | 000,021,504 | —- | C] () – C:\Windows\SysWow64\WBCustomizer.dll
[2009/11/25 06:35:29 | 000,000,000 | —- | C] () – C:\Users\charlenereeves\AppData\Roaming\wklnhst.dat
[2009/11/24 23:08:37 | 000,000,171 | —- | C] () – C:\Windows\QUICKEN.INI
[2009/11/24 17:40:06 | 000,007,620 | —- | C] () – C:\Users\charlenereeves\AppData\Local\d3d9caps.dat
[2009/11/24 16:38:21 | 000,020,992 | —- | C] () – C:\Windows\jestertb.dll
[2009/11/24 16:19:58 | 000,001,460 | —- | C] () – C:\Users\charlenereeves\AppData\Local\d3d9caps64.dat
[2009/11/24 15:38:24 | 000,055,808 | —- | C] () – C:\Users\charlenereeves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/01/20 18:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini

========== LOP Check ==========

[2009/12/11 19:55:43 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Avery
[2009/11/25 07:50:37 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Caspedia
[2009/11/27 06:58:16 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2009/11/25 05:58:46 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\IndigoRose
[2009/12/24 08:04:45 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\IObit
[2009/12/26 13:45:45 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\iolo
[2010/01/13 13:26:40 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Memeo
[2010/02/24 06:09:53 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\MudCreek
[2010/01/03 05:20:24 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Optimism
[2010/02/01 07:38:47 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\OverDrive
[2010/01/31 18:41:57 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\PeerNetworking
[2010/03/04 07:43:34 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Picaboo
[2009/11/24 23:56:18 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Quicken WillMaker
[2009/12/08 07:21:14 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Skinux
[2010/02/27 19:43:25 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Smilebox
[2009/11/25 06:35:55 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Template
[2010/02/25 19:15:12 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\The Journal 5
[2009/12/01 05:34:52 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Tific
[2010/03/07 13:04:41 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\upromise
[2009/12/21 10:51:45 | 000,000,000 | —D | M] – C:\Users\charlenereeves\AppData\Roaming\Windows Live Writer
[2010/02/26 01:39:25 | 000,000,418 | —- | M] () – C:\Windows\Tasks\EasyShare Registration Task.job
[2010/03/08 06:08:22 | 000,032,574 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2010/03/08 13:00:14 | 000,000,452 | -H– | M] () – C:\Windows\Tasks\User_Feed_Synchronization-{E5D3F2D6-36AB-4812-A910-8EE432F78A3A}.job

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >

< MD5 for: AGP440.SYS >
[2008/01/20 18:46:51 | 000,064,568 | —- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_163188bf770e4ab0\AGP440.sys
[2008/01/20 18:46:51 | 000,064,568 | —- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_163188bf770e4ab0\AGP440.sys
[2008/01/20 18:46:51 | 000,064,568 | —- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_181d01cb743015fc\AGP440.sys
[2008/01/20 18:46:51 | 000,064,568 | —- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_181d01cb743015fc\AGP440.sys

< MD5 for: ATAPI.SYS >
[2008/01/20 18:46:50 | 000,022,584 | —- | M] (Microsoft Corporation) MD5=1898FAE8E07D97F2F6C2D5326C633FAC – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_3956c39dd9e73fd2\atapi.sys
[2008/01/20 18:46:50 | 000,022,584 | —- | M] (Microsoft Corporation) MD5=1898FAE8E07D97F2F6C2D5326C633FAC – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_3956c39dd9e73fd2\atapi.sys
[2009/04/10 23:15:00 | 000,020,952 | —- | M] (Microsoft Corporation) MD5=E68D9B3A3905619732F7FE039466A623 – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_3b423ca9d7090b1e\atapi.sys
[2009/04/10 23:15:00 | 000,020,952 | —- | M] (Microsoft Corporation) MD5=E68D9B3A3905619732F7FE039466A623 – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_3b423ca9d7090b1e\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2006/11/02 03:16:48 | 000,014,848 | —- | M] (Microsoft Corporation) MD5=21322B1A2AD337C579F4A65EA0D25193 – C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_424bc4aceb06de1c\cngaudit.dll
[2006/11/02 03:16:48 | 000,014,848 | —- | M] (Microsoft Corporation) MD5=21322B1A2AD337C579F4A65EA0D25193 – C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_424bc4aceb06de1c\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\SysWOW64\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\SysWOW64\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\SysWOW64\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\SysWOW64\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
[2006/11/02 01:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll

< MD5 for: IASTORV.SYS >
[2008/01/20 18:46:59 | 000,290,872 | —- | M] (Intel Corporation) MD5=3E3BF3627D886736D0B4E90054F929F6 – C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_0b2fedfc40256bc5\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2008/01/20 18:51:03 | 000,716,800 | —- | M] (Microsoft Corporation) MD5=5D0A4891F8CD0E9E64FF57A6A34044F5 – C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_59d652c6f057598d\netlogon.dll
[2008/01/20 18:51:03 | 000,716,800 | —- | M] (Microsoft Corporation) MD5=5D0A4891F8CD0E9E64FF57A6A34044F5 – C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_59d652c6f057598d\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\SysWOW64\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\SysWOW64\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\SysWOW64\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\SysWOW64\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_6616762521d9e6d4\netlogon.dll
[2009/04/10 22:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_6616762521d9e6d4\netlogon.dll
[2009/04/10 23:11:16 | 000,717,312 | —- | M] (Microsoft Corporation) MD5=A3F1B171702CA04744EE514243B45BFB – C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_5bc1cbd2ed7924d9\netlogon.dll
[2009/04/10 23:11:16 | 000,717,312 | —- | M] (Microsoft Corporation) MD5=A3F1B171702CA04744EE514243B45BFB – C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_5bc1cbd2ed7924d9\netlogon.dll
[2008/01/20 18:48:28 | 000,592,384 | —- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F – C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_642afd1924b81b88\netlogon.dll
[2008/01/20 18:48:28 | 000,592,384 | —- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F – C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_642afd1924b81b88\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2008/01/20 18:46:54 | 000,054,328 | —- | M] (NVIDIA Corporation) MD5=F7EA0FE82842D05EDA3EFDD376DBFDBA – C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_95f95eab775c159d\nvstor.sys
[2008/01/20 18:46:54 | 000,054,328 | —- | M] (NVIDIA Corporation) MD5=F7EA0FE82842D05EDA3EFDD376DBFDBA – C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_95f95eab775c159d\nvstor.sys

< MD5 for: SCECLI.DLL >
[2008/01/20 18:50:28 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 – C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_9e812831c5d9a243\scecli.dll
[2008/01/20 18:50:28 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 – C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_9e812831c5d9a243\scecli.dll
[2008/01/20 18:49:49 | 000,235,520 | —- | M] (Microsoft Corporation) MD5=35F1DD99F9903BC267C2AF16B09F9BF7 – C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_942c7ddf9178e048\scecli.dll
[2008/01/20 18:49:49 | 000,235,520 | —- | M] (Microsoft Corporation) MD5=35F1DD99F9903BC267C2AF16B09F9BF7 – C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_942c7ddf9178e048\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\SysWOW64\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\SysWOW64\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\SysWOW64\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\SysWOW64\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_a06ca13dc2fb6d8f\scecli.dll
[2009/04/10 22:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_a06ca13dc2fb6d8f\scecli.dll
[2009/04/10 23:11:23 | 000,235,520 | —- | M] (Microsoft Corporation) MD5=9922ADB6DCA8F0F5EA038BEFF339C08B – C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_9617f6eb8e9aab94\scecli.dll
[2009/04/10 23:11:23 | 000,235,520 | —- | M] (Microsoft Corporation) MD5=9922ADB6DCA8F0F5EA038BEFF339C08B – C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_9617f6eb8e9aab94\scecli.dll

< >

< >

< iastorv.sys >

========== Alternate Data Streams ==========

@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:5D432CE3
< End of report >

LDTate

Post #13March 8, 2010, 9:31 PM UTC

Double click on the OTL.exe icon to run it. Make sure all other windows are closed and to let it run uninterrupted.

Under the Custom Scan box paste this in

:Processes
explorer.exe

:Services

:Reg

:Files


:Commands
[RESETHOSTS] 
[purity]
[emptytemp]
[start explorer]
[Reboot]

Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
o When the scan completes, it will open a notepad windows. OTL.Txt . This will saved in the same location as OTL.
o Please copy (Edit->Select All, Edit->Copy) the content of the files back here.

Deleted Member

Post #14March 8, 2010, 10:36 PM UTC

OTL logfile created on: 3/8/2010 5:28:15 PM - Run 3
OTL by OldTimer - Version 3.1.35.0 Folder = C:\Users\charlenereeves\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 37.00% Memory free
8.00 Gb Paging File | 5.00 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 596.13 Gb Total Space | 403.83 Gb Free Space | 67.74% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
Drive I: | 465.64 Gb Total Space | 258.12 Gb Free Space | 55.43% Space Free | Partition Type: FAT32

Computer Name: MYPUTER
Current User Name: charlenereeves
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\charlenereeves\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10e.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CNRpc.exe ()
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe (CinemaNow, Inc.)
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowShell.exe (CinemaNow Inc.)
PRC - C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Program Files (x86)\FoxyTunes\FoxyTunesEngine\1.0.0.7271_{41D2243B-4ACB-421D-B1D3-EEF2467523E9}\FoxyTunesEngine.exe (FoxyTunes Ltd)
PRC - C:\Program Files (x86)\Upromise\UpromiseTray.exe ()
PRC - C:\Program Files (x86)\Nova Development\Greeting Card Factory Deluxe 8.0\ReminderApp.exe ()
PRC - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Upromise\dca-ua.exe (Compete Inc)
PRC - C:\Program Files (x86)\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Internet Explorer\ieuser.exe (Microsoft Corporation)
PRC - C:\Windows\SysWOW64\atashost.exe (WebEx Communications, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()

========== Modules (SafeList) ==========

MOD - C:\Users\charlenereeves\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\comdlg32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (WAS) – C:\Windows\SysNative\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV:64bit: - (W3SVC) – C:\Windows\SysNative\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV:64bit: - (FontCache) – C:\Windows\SysNative\FntCache.dll (Microsoft Corporation)
SRV:64bit: - (AppHostSvc) – C:\Windows\SysNative\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV:64bit: - (wlidsvc) – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
SRV:64bit: - (Ati External Event Utility) – C:\Windows\SysNative\Ati2evxx.exe (ATI Technologies Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (N360) – C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe (Symantec Corporation)
SRV - (CinemaNow Service) – C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe (CinemaNow, Inc.)
SRV - (GoogleDesktopManager-110309-193829) – C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (WAS) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (ACDaemon) – C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (SeaPort) – C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (fsssvc) – C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (nmservice) – C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
SRV - (AppHostSvc) – C:\Windows\SysWOW64\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_64) – C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (atashost) – C:\Windows\SysWOW64\atashost.exe (WebEx Communications, Inc.)
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (SBSDWSCService) – C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (YahooAUService) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (Symantec RemoteAssist) – C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe (Symantec, Inc.)
SRV - (HPSLPSVC) – C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (AdobeActiveFileMonitor6.0) – C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
SRV - (MSDTC) – C:\Windows\SysWOW64\Msdtc [2006/11/02 05:34:14 | 000,000,000 | —D | M]
SRV - (vds) – C:\Windows\SysWOW64\wbem\vds.mof ()
SRV - (VSS) – C:\Windows\SysWOW64\wbem\vss.mof ()

========== Driver Services (SafeList) ==========

DRV:64bit: - (SymEvent) – C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (ccHP) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\ccHPx64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SRTSP64.SYS (Symantec Corporation)
DRV:64bit: - (SymEFA) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SYMEFA64.SYS (Symantec Corporation)
DRV:64bit: - (SYMTDI) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMTDI.SYS (Symantec Corporation)
DRV:64bit: - (SYMFW) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMFW.SYS (Symantec Corporation)
DRV:64bit: - (SYMNDISV) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMNDISV.SYS (Symantec Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SRTSPX64.SYS (Symantec Corporation)
DRV:64bit: - (SymIM) – C:\Windows\SysNative\DRIVERS\SymIMv.sys (Symantec Corporation)
DRV:64bit: - (BHDrvx64) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\BHDrvx64.sys (Symantec Corporation)
DRV:64bit: - (RTL8169) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek )
DRV:64bit: - (fssfltr) – C:\Windows\SysNative\DRIVERS\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (purendis) – C:\Windows\SysNative\DRIVERS\purendis.sys (Cisco Systems, Inc.)
DRV:64bit: - (pnarp) – C:\Windows\SysNative\DRIVERS\pnarp.sys (Cisco Systems, Inc.)
DRV:64bit: - (HdAudAddService) – C:\Windows\SysNative\drivers\HdAudio.sys (Microsoft Corporation)
DRV:64bit: - (usbaudio) USB Audio Driver (WDM) – C:\Windows\SysNative\drivers\usbaudio.sys (Microsoft Corporation)
DRV:64bit: - (FTDIBUS) – C:\Windows\SysNative\drivers\ftdibus.sys (FTDI Ltd.)
DRV:64bit: - (FTSER2K) – C:\Windows\SysNative\drivers\ftser2k.sys (FTDI Ltd.)
DRV:64bit: - (BVRPMPR5a64) – C:\Windows\SysNative\drivers\BVRPMPR5a64.SYS (Avanquest Software)
DRV:64bit: - (atikmdag) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (VST64_DPV) – C:\Windows\SysNative\DRIVERS\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (winachsf) – C:\Windows\SysNative\DRIVERS\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (VST64HWBS2) – C:\Windows\SysNative\DRIVERS\VSTBS26.SYS (Conexant Systems, Inc.)
DRV:64bit: - (AtiPcie) ATI PCI Express (3GIO) – C:\Windows\SysNative\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100308.003\EX64.SYS (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100308.003\ENG64.SYS (Symantec Corporation)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20100224.002\IDSviA64.sys (Symantec Corporation)
DRV - (PCD5SRVC{048DBD20-445E8C82-05040104}) – C:\Program Files (x86)\Dell Support Center\HWDiag\bin\pcd5srvc_x64.pkms (PC-Doctor, Inc.)
DRV - (Tcpip) – C:\Windows\SysWOW64\wbem\tcpip.mof ()
DRV - (mpsdrv) – C:\Windows\SysWOW64\wbem\mpsdrv.mof ()
DRV - (pfc) – C:\Windows\SysWOW64\drivers\pfc.sys (Padus, Inc.)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{400F0BDB-6C49-43A4-BE1F-76D7327A604D}: C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\Mozilla [2009/12/26 13:38:11 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2009/12/31 04:54:13 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/02/21 08:30:51 | 000,000,000 | —D | M]

O1 HOSTS File: ([2010/03/02 06:53:22 | 000,380,280 | R— | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 13103 more lines…
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg64.dll (Google Inc.)
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\yt.dll (Yahoo! Inc.)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Download Manager Browser Helper Object) - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\XEBDLHelper.dll (Protect Software GmbH)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.)
O2 - BHO: (DCA BHO) - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - C:\Program Files (x86)\Upromise\dca-bho.dll (Compete, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (Upromise TurboSaver) - {EDC0F17F-F4B7-47e4-B73E-887FAEB376FA} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\YTSingleInstance.dll (Yahoo! Inc)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Upromise TurboSaver) - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [dellsupportcenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [nmctxth] C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
O4 - HKLM..\Run: [ReminderApp] C:\Program Files (x86)\Nova Development\Greeting Card Factory Deluxe 8.0\ReminderApp.exe ()
O4 - HKLM..\Run: [YMailAdvisor] C:\Program Files (x86)\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [Upromise Tray] C:\Program Files (x86)\Upromise\UpromiseTray.exe ()
O4 - HKCU..\Run: [Upromise Update] C:\Program Files (x86)\Upromise\dca-ua.exe (Compete Inc)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O9 - Extra Button: Upromise TurboSaver - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O9 - Extra 'Tools' menuitem : Upromise TurboSaver - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe File not found
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: cinemanow.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: cinemanow.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: comcast.com ([www] * in Trusted sites)
O15 - HKCU\..Trusted Domains: comcast.net ([www] * in Trusted sites)
O15 - HKCU\..Trusted Domains: yahoo.com ([www] * in Trusted sites)
O15 - HKCU\..Trusted Domains: yahoo.com ([www] http in Local intranet)
O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} https://www-secure.symantec.com/techsupp/as…abs/tgctlcm.cab (Symantec Configuration Class)
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} https://support.dell.com/systemprofiler/SysProExe.CAB (WMI Class)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab (GMNRev Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (Reg Error: Value error.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\jpip {B92DD248-E3D5-4A92-B311-C9B841681455} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\amd64\puresp4.dll (Cisco Systems, Inc.)
O18:64bit: - Protocol\Handler\sidlet {B92DD248-E3D5-4A92-B311-C9B841681455} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\jpip {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\Express View\expressview.dll (Lizardtech Software)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
O18 - Protocol\Handler\sidlet {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\Express View\expressview.dll (Lizardtech Software)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~2\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img18.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img18.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/01 14:12:10 | 000,000,071 | -H– | M] () - I:\AUTORUN.INF – [ FAT32 ]
O32 - AutoRun File - [2008/11/05 13:19:36 | 000,000,052 | RHS- | M] () - I:\AUTORUN.FCB – [ FAT32 ]
O32 - AutoRun File - [2009/01/23 15:01:08 | 000,000,000 | —D | M] - I:\autorun – [ FAT32 ]
O33 - MountPoints2\{3bef2efd-d94f-11de-b010-00219b2dadd9}\Shell\AutoRun\command - "" = I:\setupSNK.exe – [2008/01/20 19:47:36 | 000,013,312 | —- | M] (Microsoft Corporation)
O33 - MountPoints2\{558571f3-efc8-11de-bd2e-00219b2dadd9}\Shell\AutoRun\command - "" = J:\setupSNK.exe – File not found
O33 - MountPoints2\{558571f8-efc8-11de-bd2e-00219b2dadd9}\Shell - "" = AutoRun
O33 - MountPoints2\{558571f8-efc8-11de-bd2e-00219b2dadd9}\Shell\AutoRun\command - "" = K:\LaunchU3.exe – File not found
O33 - MountPoints2\{7fd79b20-feb7-11de-91a5-00219b2dadd9}\Shell\AutoRun\command - "" = J:\setupSNK.exe – File not found
O33 - MountPoints2\{7fd79b23-feb7-11de-91a5-00219b2dadd9}\Shell - "" = AutoRun
O33 - MountPoints2\{7fd79b23-feb7-11de-91a5-00219b2dadd9}\Shell\AutoRun\command - "" = K:\LaunchU3.exe – File not found
O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\setupSNK.exe – [2008/01/20 19:47:36 | 000,013,312 | —- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/03/08 13:30:39 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\HPAppData
[2010/03/08 12:36:11 | 000,554,496 | —- | C] (OldTimer Tools) – C:\Users\charlenereeves\Desktop\OTL.exe
[2010/03/08 12:32:06 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\SP_BuyMyStore-COUPON-CODES[2]
[2010/03/08 12:20:03 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\SP_BuyMyStore-COUPON-CODES[1]
[2010/03/08 07:41:48 | 000,000,000 | —D | C] – C:\32788R22FWJFW
[2010/03/08 00:12:57 | 000,278,576 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symtdi.sys
[2010/03/08 00:12:56 | 000,402,992 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.sys
[2010/03/08 00:12:56 | 000,120,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symfw.sys
[2010/03/08 00:12:56 | 000,056,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndisv.sys
[2010/03/08 00:12:56 | 000,044,080 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndis.sys
[2010/03/08 00:12:56 | 000,043,568 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symids.sys
[2010/03/08 00:12:56 | 000,032,304 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.sys
[2010/03/08 00:12:55 | 000,583,296 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\cchpx64.sys
[2010/03/08 00:12:55 | 000,476,720 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.sys
[2010/03/08 00:12:55 | 000,334,384 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.sys
[2010/03/08 00:11:29 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64\0308000.029
[2010/03/07 21:09:00 | 000,126,312 | R— | C] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2010/03/07 21:09:00 | 000,107,368 | R— | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2010/03/07 21:08:59 | 000,034,152 | R— | C] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010/03/07 21:08:56 | 000,031,280 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\SymIMV.sys
[2010/03/07 21:08:51 | 000,172,592 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/03/07 21:08:22 | 000,583,296 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\cchpx64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symtdi.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symfw.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndisv.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndis.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symids.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.sys
[2010/03/07 21:07:58 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64
[2010/03/07 21:07:58 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64\0305020.00B
[2010/03/07 21:07:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Norton Security Suite
[2010/03/07 13:04:41 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\upromise
[2010/03/07 13:04:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\Upromise
[2010/03/07 06:35:48 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Cards
[2010/03/06 10:16:43 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\MemoriesOnTV
[2010/03/04 21:02:00 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\NISx64\1105000.07F
[2010/03/04 13:19:52 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Symantec Shared
[2010/03/04 13:19:52 | 000,000,000 | —D | C] – C:\Program Files\Symantec
[2010/03/04 13:19:15 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\NISx64
[2010/03/04 07:43:19 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\Picaboo
[2010/03/04 07:42:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Picaboo
[2010/03/03 14:13:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\Hewlett-Packard
[2010/03/03 14:12:52 | 000,235,008 | —- | C] (Hewlett Packard Corporation) – C:\Windows\SysWow64\hpzc35mu.dll
[2010/03/03 14:09:31 | 000,944,128 | —- | C] (Hewlett-Packard) – C:\Windows\SysNative\hpwwiax4.dll
[2010/03/03 14:09:31 | 000,359,256 | —- | C] (Hewlett-Packard) – C:\Windows\SysNative\hpzids40.dll
[2010/03/03 14:09:30 | 000,740,864 | —- | C] (Hewlett-Packard Co.) – C:\Windows\SysNative\hpwtscl3.dll
[2010/03/03 14:09:29 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\difxapi.dll
[2010/03/03 14:09:29 | 000,488,960 | —- | C] (Hewlett-Packard Co.) – C:\Windows\SysNative\hpovst11.dll
[2010/03/03 12:05:19 | 000,000,000 | —D | C] – C:\Windows\Downloaded Installations
[2010/02/28 21:10:41 | 001,032,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wininet.dll
[2010/02/28 21:10:38 | 000,834,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wininet.dll
[2010/02/28 21:10:26 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2010/02/28 21:10:22 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2010/02/28 21:10:21 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2010/02/28 21:10:19 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieencode.dll
[2010/02/28 21:10:19 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieencode.dll
[2010/02/28 21:10:09 | 000,422,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2010/02/28 21:10:08 | 000,380,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2010/02/28 20:28:19 | 000,000,000 | —D | C] – C:\inetpub
[2010/02/26 15:03:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\FoxyTunes
[2010/02/26 13:56:07 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\skypePM
[2010/02/26 13:51:59 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\Skype
[2010/02/26 13:51:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2010/02/26 13:51:16 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2010/02/26 13:51:10 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2010/02/25 19:13:44 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\The Journal Volumes
[2010/02/25 18:36:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\MSSoap
[2010/02/24 21:18:51 | 000,000,000 | —D | C] – C:\Windows\vbSkinner
[2010/02/24 09:43:15 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2010/02/24 09:43:13 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2010/02/24 09:41:21 | 000,153,376 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2010/02/24 09:41:21 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2010/02/24 09:41:21 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2010/02/24 06:37:23 | 000,286,720 | —- | C] (Indigo Rose Corporation) – C:\Windows\iun506.exe
[2010/02/24 06:37:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Family Picture Calendar
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\The Journal 5
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\The Journal 5
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\ProgramData\The Journal
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\DavidRM Software
[2010/02/24 06:09:12 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\MudCreek
[2010/02/24 06:09:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\MudCreek
[2010/02/24 06:01:32 | 000,000,000 | —D | C] – C:\GenDB
[2010/02/24 06:01:32 | 000,000,000 | —D | C] – C:\Program Files\CemeterySystemFiles
[2010/02/24 06:01:19 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\GenDB2[1]
[2010/02/24 05:54:41 | 000,115,920 | —- | C] (Microsoft Corporation) – C:\Windows\msinet.ocx
[2010/02/24 05:54:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\Protasm
[2010/02/23 21:14:58 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2010/02/23 21:14:58 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2010/02/23 21:14:58 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2010/02/23 21:14:57 | 000,539,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2010/02/23 21:14:55 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2010/02/23 21:14:55 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2010/02/23 21:14:55 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2010/02/23 21:14:54 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2010/02/23 21:14:53 | 000,526,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2010/02/23 21:14:53 | 000,518,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2010/02/23 21:14:53 | 000,347,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2010/02/23 21:14:53 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2010/02/23 21:14:53 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2010/02/23 21:14:53 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2010/02/23 21:14:52 | 000,460,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2010/02/23 21:14:52 | 000,152,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2010/02/23 21:14:52 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2010/02/23 21:14:51 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdrm.dll
[2010/02/23 21:13:02 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2010/02/23 21:13:02 | 001,696,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2010/02/23 21:13:01 | 000,032,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Apphlpdm.dll
[2010/02/23 21:13:01 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Apphlpdm.dll
[2010/02/23 21:13:00 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\SysWow64\GameUXLegacyGDFs.dll
[2010/02/23 21:13:00 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\SysNative\GameUXLegacyGDFs.dll
[2010/02/23 19:48:30 | 000,000,000 | —D | C] – C:\Windows\BDOSCAN8
[2010/02/23 07:46:29 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\New Folder
[2010/02/21 07:53:12 | 000,000,000 | —D | C] – C:\ProgramData\HP Product Assistant
[2010/02/20 17:27:41 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\a
[2010/02/16 20:23:56 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Desktop\Hummie
[2010/02/16 10:15:29 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\DID
[2010/02/15 07:54:56 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Smart Art Cards
[2010/02/14 16:29:05 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Apple Computer
[2010/02/14 16:27:04 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Apple
[2010/02/13 17:56:01 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Tift
[2010/02/13 17:49:11 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Tuts - Copy
[2010/02/13 17:45:45 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Animals
[2010/02/13 17:38:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Linda
[2010/02/13 17:26:57 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Frames
[2010/02/13 17:19:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Sayings
[2010/02/13 17:17:43 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Embellishments
[2010/02/13 17:11:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Flowers
[2010/02/13 17:01:39 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Picture Embellishments
[2010/02/13 17:01:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Papers
[2010/02/13 10:58:03 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Adobe
[2010/02/12 14:46:47 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\ICS
[2010/02/12 14:32:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Symantec Shared
[2010/02/12 14:13:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\NortonInstaller
[2010/02/11 18:33:22 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2010/02/11 18:29:10 | 000,021,504 | —- | C] (Doug Knox) – C:\Users\charlenereeves\Desktop\SysRestorePoint.exe
[2010/02/10 11:30:00 | 001,570,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2010/02/10 11:29:59 | 001,314,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2010/02/10 11:29:59 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iyuv_32.dll
[2010/02/10 11:29:59 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvidc32.dll
[2010/02/10 11:29:59 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msyuv.dll
[2010/02/10 11:29:59 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrle32.dll
[2010/02/10 11:29:59 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsbyuv.dll
[2010/02/10 11:29:58 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2010/02/10 11:29:58 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2010/02/10 11:29:58 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2010/02/10 11:29:39 | 004,698,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2010/02/09 13:27:38 | 000,000,000 | —D | C] – C:\ProgramData\Caspedia

========== Files - Modified Within 30 Days ==========

[2010/03/08 17:30:33 | 009,699,328 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT
[2010/03/08 17:24:18 | 000,000,452 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{E5D3F2D6-36AB-4812-A910-8EE432F78A3A}.job
[2010/03/08 16:54:18 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/03/08 16:10:32 | 000,003,840 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/03/08 16:10:32 | 000,003,840 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/03/08 15:40:00 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/03/08 12:38:34 | 000,000,254 | —- | M] () – C:\Users\charlenereeves\Desktop\SpywareMalwareVirus RemovalInfections Removal.url
[2010/03/08 12:36:16 | 000,554,496 | —- | M] (OldTimer Tools) – C:\Users\charlenereeves\Desktop\OTL.exe
[2010/03/08 12:23:31 | 001,674,990 | —- | M] () – C:\Users\charlenereeves\Desktop\SP_BuyMyStore-COUPON-CODES.zip
[2010/03/08 10:22:42 | 000,997,338 | —- | M] () – C:\Users\charlenereeves\Documents\ww2-participation.pdf
[2010/03/08 06:50:01 | 000,000,808 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/03/08 06:13:27 | 002,152,562 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\Cat.DB
[2010/03/08 06:11:13 | 000,002,287 | —- | M] () – C:\Users\Public\Desktop\Norton Security Suite.lnk
[2010/03/08 06:11:00 | 000,065,536 | —- | M] () – C:\Windows\SysNative\Ikeext.etl
[2010/03/08 06:10:33 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/03/08 06:10:28 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/03/08 06:08:29 | 000,524,288 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT{528e1bda-0b48-11df-b30d-00219b2dadd9}.TMContainer00000000000000000001.regtrans-ms
[2010/03/08 06:08:29 | 000,065,536 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT{528e1bda-0b48-11df-b30d-00219b2dadd9}.TM.blf
[2010/03/08 06:08:17 | 002,891,551 | -H– | M] () – C:\Users\charlenereeves\AppData\Local\IconCache.db
[2010/03/08 02:36:19 | 002,152,562 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\Cat.DB
[2010/03/08 00:11:30 | 000,000,172 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\isolate.ini
[2010/03/07 21:08:42 | 000,172,592 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/03/07 21:08:42 | 000,007,440 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/03/07 21:08:42 | 000,000,855 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/03/07 21:08:22 | 000,583,296 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\cchpx64.sys
[2010/03/07 21:08:22 | 000,583,296 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\cchpx64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symtdi.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symtdi.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symfw.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symfw.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndisv.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndisv.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndis.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndis.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symids.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symids.sys
[2010/03/07 21:08:22 | 000,034,152 | R— | M] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.sys
[2010/03/07 21:08:22 | 000,031,280 | R— | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SymIMV.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.sys
[2010/03/07 21:08:16 | 000,126,312 | R— | M] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2010/03/07 21:08:16 | 000,107,368 | R— | M] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2010/03/07 21:08:10 | 000,003,373 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA.inf
[2010/03/07 21:08:10 | 000,003,373 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,172 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\isolate.ini
[2010/03/07 21:07:58 | 000,009,415 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.cat
[2010/03/07 21:07:58 | 000,009,415 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\symnetv.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symnetv.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,362 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.CAT
[2010/03/07 21:07:58 | 000,007,362 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\bhdrvx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.cat
[2010/03/07 19:00:43 | 002,152,318 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1105000.07F\Cat.DB
[2010/03/07 06:13:46 | 000,002,761 | —- | M] () – C:\Users\Public\Desktop\Greeting Card Factory Deluxe.lnk
[2010/03/06 10:52:18 | 000,000,198 | —- | M] () – C:\Users\charlenereeves\Desktop\Yahoo! Mail (charlenereeves2004).url
[2010/03/06 08:26:36 | 000,434,448 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/03/05 08:46:48 | 000,003,223 | —- | M] () – C:\Users\charlenereeves\Desktop\Bible Study Pro.lnk
[2010/03/05 08:06:55 | 000,130,992 | —- | M] () – C:\Users\charlenereeves\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/03/05 07:30:35 | 000,002,064 | —- | M] () – C:\Users\Public\Desktop\MemoriesOnTV.lnk
[2010/03/04 15:18:50 | 000,022,755 | —- | M] () – C:\Windows\hpqins15.dat
[2010/03/04 14:57:31 | 000,177,755 | —- | M] () – C:\Windows\hpwins20.dat
[2010/03/04 08:57:08 | 000,000,896 | —- | M] () – C:\Users\Public\Desktop\HP Photo Creations.lnk
[2010/03/04 08:50:10 | 000,019,529 | —- | M] () – C:\Windows\hpqins13.dat
[2010/03/04 08:49:14 | 000,002,030 | —- | M] () – C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2010/03/04 07:43:01 | 000,001,860 | —- | M] () – C:\Users\Public\Desktop\Picaboo.lnk
[2010/03/03 14:16:53 | 000,000,179 | —- | M] () – C:\Windows\win.ini
[2010/03/02 06:53:22 | 000,380,280 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2010/03/02 06:49:41 | 000,007,620 | —- | M] () – C:\Users\charlenereeves\AppData\Local\d3d9caps.dat
[2010/03/01 18:18:40 | 000,055,808 | —- | M] () – C:\Users\charlenereeves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/01 12:23:23 | 000,160,650 | —- | M] () – C:\Windows\hphins33.dat
[2010/02/28 20:44:06 | 000,807,962 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/02/28 20:44:06 | 000,691,546 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/02/28 20:44:06 | 000,136,268 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/02/28 19:34:04 | 000,000,212 | —- | M] () – C:\Users\charlenereeves\Desktop\Replying in IE8 getting 404 errors - What the Tech.url
[2010/02/27 21:55:34 | 000,088,064 | —- | M] () – C:\Users\charlenereeves\Documents\Untitled Slide Show.sss
[2010/02/27 08:09:59 | 000,000,191 | —- | M] () – C:\Users\charlenereeves\Desktop\How to determine and to recover from Winsock2 corruption in Windows Server 2003, in Windows XP, and in Windows Vista.url
[2010/02/26 13:56:09 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2010/02/26 01:48:52 | 000,001,684 | —- | M] () – C:\Users\charlenereeves\Desktop\CCleaner.lnk
[2010/02/26 01:39:25 | 000,000,418 | —- | M] () – C:\Windows\tasks\EasyShare Registration Task.job
[2010/02/25 18:37:27 | 000,001,960 | —- | M] () – C:\Users\Public\Desktop\Kodak EasyShare.lnk
[2010/02/24 06:36:57 | 000,286,720 | —- | M] (Indigo Rose Corporation) – C:\Windows\iun506.exe
[2010/02/24 06:25:34 | 000,001,024 | —- | M] () – C:\Users\Public\Desktop\The Journal 5.lnk
[2010/02/24 05:49:34 | 000,000,002 | —- | M] () – C:\Windows\SysWow64\MedMemoryDrive.ini
[2010/02/21 19:48:23 | 000,001,877 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/02/21 08:31:17 | 000,023,145 | —- | M] () – C:\Windows\hpqins15.dat.temp
[2010/02/21 07:53:00 | 000,001,178 | —- | M] () – C:\Users\Public\Desktop\HP Solution Center.lnk
[2010/02/17 09:50:29 | 000,380,176 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts.20100302-065322.backup
[2010/02/13 19:01:23 | 000,001,460 | —- | M] () – C:\Users\charlenereeves\AppData\Local\d3d9caps64.dat
[2010/02/13 09:35:12 | 000,019,529 | —- | M] () – C:\Windows\hpqins13.dat.temp
[2010/02/12 13:50:42 | 000,002,560 | —- | M] () – C:\Windows\_MSRSTRT.EXE
[2010/02/12 13:39:42 | 000,001,908 | —- | M] () – C:\Users\Public\Desktop\HP Print Diagnostic Utility.lnk
[2010/02/11 18:29:10 | 000,021,504 | —- | M] (Doug Knox) – C:\Users\charlenereeves\Desktop\SysRestorePoint.exe
[2010/02/10 22:00:14 | 000,378,474 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts.20100217-095029.backup

========== Files Created - No Company Name ==========

[2010/03/08 12:38:33 | 000,000,254 | —- | C] () – C:\Users\charlenereeves\Desktop\SpywareMalwareVirus RemovalInfections Removal.url
[2010/03/08 12:23:18 | 001,674,990 | —- | C] () – C:\Users\charlenereeves\Desktop\SP_BuyMyStore-COUPON-CODES.zip
[2010/03/08 10:22:40 | 000,997,338 | —- | C] () – C:\Users\charlenereeves\Documents\ww2-participation.pdf
[2010/03/08 06:11:33 | 002,152,562 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\Cat.DB
[2010/03/08 00:12:57 | 000,009,412 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\symnetv.cat
[2010/03/08 00:12:57 | 000,001,481 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNetV.inf
[2010/03/08 00:12:56 | 000,009,415 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.cat
[2010/03/08 00:12:56 | 000,007,401 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.cat
[2010/03/08 00:12:56 | 000,007,399 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.cat
[2010/03/08 00:12:56 | 000,003,373 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA.inf
[2010/03/08 00:12:56 | 000,001,480 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.inf
[2010/03/08 00:12:56 | 000,001,421 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.inf
[2010/03/08 00:12:55 | 000,007,410 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.cat
[2010/03/08 00:12:55 | 000,007,345 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.cat
[2010/03/08 00:12:55 | 000,001,836 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.inf
[2010/03/08 00:12:55 | 000,001,437 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.inf
[2010/03/08 00:12:55 | 000,000,640 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.inf
[2010/03/08 00:12:54 | 000,007,362 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.CAT
[2010/03/08 00:11:29 | 000,000,172 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\isolate.ini
[2010/03/07 21:09:25 | 002,152,562 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\Cat.DB
[2010/03/07 21:08:51 | 000,007,440 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/03/07 21:08:51 | 000,000,855 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/03/07 21:08:34 | 000,002,287 | —- | C] () – C:\Users\Public\Desktop\Norton Security Suite.lnk
[2010/03/07 21:08:10 | 000,003,373 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,172 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\isolate.ini
[2010/03/07 21:07:58 | 000,009,415 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symnetv.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,362 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\bhdrvx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.cat
[2010/03/06 10:52:18 | 000,000,198 | —- | C] () – C:\Users\charlenereeves\Desktop\Yahoo! Mail (charlenereeves2004).url
[2010/03/05 07:30:34 | 000,002,064 | —- | C] () – C:\Users\Public\Desktop\MemoriesOnTV.lnk
[2010/03/05 07:27:21 | 000,002,761 | —- | C] () – C:\Users\Public\Desktop\Greeting Card Factory Deluxe.lnk
[2010/03/05 06:48:58 | 002,152,318 | —- | C] () – C:\Windows\SysNative\drivers\NISx64\1105000.07F\Cat.DB
[2010/03/04 08:49:14 | 000,002,030 | —- | C] () – C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2010/03/04 07:43:01 | 000,001,860 | —- | C] () – C:\Users\Public\Desktop\Picaboo.lnk
[2010/03/03 14:09:48 | 000,177,755 | —- | C] () – C:\Windows\hpwins20.dat
[2010/03/03 14:09:48 | 000,002,428 | —- | C] () – C:\Windows\hpwmdl20.dat
[2010/02/28 19:34:03 | 000,000,212 | —- | C] () – C:\Users\charlenereeves\Desktop\Replying in IE8 getting 404 errors - What the Tech.url
[2010/02/27 21:55:34 | 000,088,064 | —- | C] () – C:\Users\charlenereeves\Documents\Untitled Slide Show.sss
[2010/02/27 08:09:59 | 000,000,191 | —- | C] () – C:\Users\charlenereeves\Desktop\How to determine and to recover from Winsock2 corruption in Windows Server 2003, in Windows XP, and in Windows Vista.url
[2010/02/26 13:56:09 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/02/25 18:33:11 | 000,000,418 | —- | C] () – C:\Windows\tasks\EasyShare Registration Task.job
[2010/02/24 06:25:34 | 000,001,024 | —- | C] () – C:\Users\Public\Desktop\The Journal 5.lnk
[2010/02/24 05:44:20 | 000,000,002 | —- | C] () – C:\Windows\SysWow64\MedMemoryDrive.ini
[2010/02/21 07:53:00 | 000,001,178 | —- | C] () – C:\Users\Public\Desktop\HP Solution Center.lnk
[2010/02/21 07:40:42 | 000,160,650 | —- | C] () – C:\Windows\hphins33.dat
[2010/02/13 08:28:20 | 000,160,685 | —- | C] () – C:\Windows\hphins33.dat.temp
[2010/02/12 13:50:41 | 000,002,560 | —- | C] () – C:\Windows\_MSRSTRT.EXE
[2010/02/12 13:39:42 | 000,001,908 | —- | C] () – C:\Users\Public\Desktop\HP Print Diagnostic Utility.lnk
[2010/02/11 18:03:06 | 000,003,223 | —- | C] () – C:\Users\charlenereeves\Desktop\Bible Study Pro.lnk
[2010/02/05 15:46:58 | 000,070,966 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vcredistUI05EA.txt
[2010/02/05 15:46:27 | 000,070,966 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vcredistUI0585.txt
[2010/02/02 14:13:42 | 000,000,036 | —- | C] () – C:\Users\charlenereeves\AppData\Local\housecall.guid.cache
[2010/01/31 18:41:57 | 000,029,216 | —- | C] () – C:\Users\charlenereeves\AppData\Roaming\UserTile.png
[2010/01/16 08:58:59 | 000,000,426 | —- | C] () – C:\Windows\BRWMARK.INI
[2010/01/16 08:57:58 | 000,000,000 | —- | C] () – C:\Windows\brmx2001.ini
[2010/01/16 08:57:57 | 000,000,114 | —- | C] () – C:\Windows\SysWow64\brlmw03a.ini
[2010/01/16 08:57:57 | 000,000,011 | —- | C] () – C:\Windows\BRVIDEO.INI
[2010/01/16 08:57:20 | 000,000,356 | —- | C] () – C:\Windows\Brownie.ini
[2010/01/12 16:03:31 | 008,673,792 | —- | C] () – C:\ProgramData\atscie.msi
[2009/12/30 07:27:38 | 000,890,268 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vsto_ret20MSI3CC8.txt
[2009/12/30 07:27:35 | 000,012,152 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vsto_ret20UI3CC8.txt
[2009/12/26 13:45:52 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\mfc45.dll
[2009/12/02 07:50:39 | 000,000,000 | —- | C] () – C:\Windows\Scrapbook MAX!.INI
[2009/11/29 21:49:58 | 000,000,139 | —- | C] () – C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2009/11/29 08:46:13 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/11/29 08:44:48 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/11/25 12:32:26 | 000,524,288 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TMContainer00000000000000000002.regtrans-ms
[2009/11/25 12:32:26 | 000,524,288 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TMContainer00000000000000000001.regtrans-ms
[2009/11/25 12:32:26 | 000,262,144 | —- | C] () – C:\ProgramData\ntuser.dat
[2009/11/25 12:32:26 | 000,065,536 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TM.blf
[2009/11/25 12:32:26 | 000,005,120 | -H– | C] () – C:\ProgramData\ntuser.dat.LOG1
[2009/11/25 12:32:26 | 000,000,000 | -H– | C] () – C:\ProgramData\ntuser.dat.LOG2
[2009/11/25 12:11:40 | 000,039,701 | —- | C] () – C:\ProgramData\hpzinstall.log
[2009/11/25 07:43:25 | 001,880,934 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_NET_Framework35_x64_MSI1A3F.txt
[2009/11/25 07:42:49 | 000,175,881 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
[2009/11/25 07:42:43 | 000,136,426 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_dotnetfx35install.txt
[2009/11/25 07:42:43 | 000,007,906 | —- | C] () – C:\Users\charlenereeves\AppData\Local\uxeventlog.txt
[2009/11/25 07:42:43 | 000,000,002 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_dotnetfx35error.txt
[2009/11/25 07:37:29 | 000,786,440 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2009/11/25 06:51:02 | 000,021,504 | —- | C] () – C:\Windows\SysWow64\WBCustomizer.dll
[2009/11/25 06:35:29 | 000,000,000 | —- | C] () – C:\Users\charlenereeves\AppData\Roaming\wklnhst.dat
[2009/11/24 23:08:37 | 000,000,171 | —- | C] () – C:\Windows\QUICKEN.INI
[2009/11/24 17:40:06 | 000,007,620 | —- | C] () – C:\Users\charlenereeves\AppData\Local\d3d9caps.dat
[2009/11/24 16:38:21 | 000,020,992 | —- | C] () – C:\Windows\jestertb.dll
[2009/11/24 16:19:58 | 000,001,460 | —- | C] () – C:\Users\charlenereeves\AppData\Local\d3d9caps64.dat
[2009/11/24 15:38:24 | 000,055,808 | —- | C] () – C:\Users\charlenereeves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/01/20 18:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini

========== Custom Scans ==========

< Processes >

< explorer.exe >

< >

< :Services >

< >

< :Reg >

< >

< :Files >

< >

< >

< :Commands >

< [RESETHOSTS] >

< [purity] >

< [emptytemp] >

< [start explorer] >

< [Reboot] >

========== Alternate Data Streams ==========

@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:5D432CE3
< End of report >

LDTate

Post #15March 8, 2010, 10:47 PM UTC

Still not seeing the bad guy but will keep looking

By chance do you have a popup blocker that is set to play a sound when it blocks something?

🖼Click to load external image (Posted Image) Using Internet Explorer or Firefox, visit Kaspersky Online Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.

2. To optimize scanning time and produce a more sensible report for review:

Close any open programs
Important
Disable any script blocking protection (How to Disable your Security Programs)

3. Click Run at the Security prompt.

The program will then begin downloading and installing and will also update the database.
Please be patient as this can take quite a long time to download.

Once the update is complete, click on Settings.
Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
- Spyware, adware, dialers, and other riskware
- Archives
- E-mail databases
Click on My Computer under the green Scan bar to the left to start the scan.
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
Click View report… at the bottom.
Click the Save report… button.

[external image: Posted Image]
Change the Files of type dropdown box to Text file (.txt) and name the file KasReport.txt to save the file to your desktop so that you may post it in your next reply

Please include the following in your next post:

Kaspersky log

Let me know how your computer is running

[Resolved] Spyware>Malware>Virus Removal>Infections Removal

✨ Ask AI

Ask AI