[Resolved] Spyware>Malware>Virus Removal>Infections Removal (page 2)

This is 1 test result. My computer is so slow Download .96 Upload .36 Ping .45 Jitter 1ms I am thinking about changine service providers since it has been over 6 months and have continual people come out and no better results.

OTL logfile created on: 3/8/2010 5:28:15 PM - Run 3
OTL by OldTimer - Version 3.1.35.0 Folder = C:\Users\charlenereeves\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 37.00% Memory free
8.00 Gb Paging File | 5.00 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 596.13 Gb Total Space | 403.83 Gb Free Space | 67.74% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
Drive I: | 465.64 Gb Total Space | 258.12 Gb Free Space | 55.43% Space Free | Partition Type: FAT32

Computer Name: MYPUTER
Current User Name: charlenereeves
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\charlenereeves\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10e.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CNRpc.exe ()
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe (CinemaNow, Inc.)
PRC - C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowShell.exe (CinemaNow Inc.)
PRC - C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Program Files (x86)\FoxyTunes\FoxyTunesEngine\1.0.0.7271_{41D2243B-4ACB-421D-B1D3-EEF2467523E9}\FoxyTunesEngine.exe (FoxyTunes Ltd)
PRC - C:\Program Files (x86)\Upromise\UpromiseTray.exe ()
PRC - C:\Program Files (x86)\Nova Development\Greeting Card Factory Deluxe 8.0\ReminderApp.exe ()
PRC - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
PRC - C:\Program Files (x86)\Upromise\dca-ua.exe (Compete Inc)
PRC - C:\Program Files (x86)\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Internet Explorer\ieuser.exe (Microsoft Corporation)
PRC - C:\Windows\SysWOW64\atashost.exe (WebEx Communications, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()

========== Modules (SafeList) ==========

MOD - C:\Users\charlenereeves\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\comdlg32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (WAS) – C:\Windows\SysNative\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV:64bit: - (W3SVC) – C:\Windows\SysNative\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV:64bit: - (FontCache) – C:\Windows\SysNative\FntCache.dll (Microsoft Corporation)
SRV:64bit: - (AppHostSvc) – C:\Windows\SysNative\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV:64bit: - (wlidsvc) – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
SRV:64bit: - (Ati External Event Utility) – C:\Windows\SysNative\Ati2evxx.exe (ATI Technologies Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (N360) – C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\ccSvcHst.exe (Symantec Corporation)
SRV - (CinemaNow Service) – C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe (CinemaNow, Inc.)
SRV - (GoogleDesktopManager-110309-193829) – C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (WAS) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (ACDaemon) – C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (SeaPort) – C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (fsssvc) – C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (nmservice) – C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (Cisco Systems, Inc.)
SRV - (AppHostSvc) – C:\Windows\SysWOW64\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_64) – C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (atashost) – C:\Windows\SysWOW64\atashost.exe (WebEx Communications, Inc.)
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (SBSDWSCService) – C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (YahooAUService) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (Symantec RemoteAssist) – C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe (Symantec, Inc.)
SRV - (HPSLPSVC) – C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (AdobeActiveFileMonitor6.0) – C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
SRV - (MSDTC) – C:\Windows\SysWOW64\Msdtc [2006/11/02 05:34:14 | 000,000,000 | —D | M]
SRV - (vds) – C:\Windows\SysWOW64\wbem\vds.mof ()
SRV - (VSS) – C:\Windows\SysWOW64\wbem\vss.mof ()

========== Driver Services (SafeList) ==========

DRV:64bit: - (SymEvent) – C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (ccHP) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\ccHPx64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SRTSP64.SYS (Symantec Corporation)
DRV:64bit: - (SymEFA) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SYMEFA64.SYS (Symantec Corporation)
DRV:64bit: - (SYMTDI) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMTDI.SYS (Symantec Corporation)
DRV:64bit: - (SYMFW) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMFW.SYS (Symantec Corporation)
DRV:64bit: - (SYMNDISV) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\SYMNDISV.SYS (Symantec Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SRTSPX64.SYS (Symantec Corporation)
DRV:64bit: - (SymIM) – C:\Windows\SysNative\DRIVERS\SymIMv.sys (Symantec Corporation)
DRV:64bit: - (BHDrvx64) – C:\Windows\SysNative\Drivers\N360x64\0308000.029\BHDrvx64.sys (Symantec Corporation)
DRV:64bit: - (RTL8169) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek )
DRV:64bit: - (fssfltr) – C:\Windows\SysNative\DRIVERS\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (purendis) – C:\Windows\SysNative\DRIVERS\purendis.sys (Cisco Systems, Inc.)
DRV:64bit: - (pnarp) – C:\Windows\SysNative\DRIVERS\pnarp.sys (Cisco Systems, Inc.)
DRV:64bit: - (HdAudAddService) – C:\Windows\SysNative\drivers\HdAudio.sys (Microsoft Corporation)
DRV:64bit: - (usbaudio) USB Audio Driver (WDM) – C:\Windows\SysNative\drivers\usbaudio.sys (Microsoft Corporation)
DRV:64bit: - (FTDIBUS) – C:\Windows\SysNative\drivers\ftdibus.sys (FTDI Ltd.)
DRV:64bit: - (FTSER2K) – C:\Windows\SysNative\drivers\ftser2k.sys (FTDI Ltd.)
DRV:64bit: - (BVRPMPR5a64) – C:\Windows\SysNative\drivers\BVRPMPR5a64.SYS (Avanquest Software)
DRV:64bit: - (atikmdag) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (VST64_DPV) – C:\Windows\SysNative\DRIVERS\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (winachsf) – C:\Windows\SysNative\DRIVERS\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (VST64HWBS2) – C:\Windows\SysNative\DRIVERS\VSTBS26.SYS (Conexant Systems, Inc.)
DRV:64bit: - (AtiPcie) ATI PCI Express (3GIO) – C:\Windows\SysNative\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100308.003\EX64.SYS (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20100308.003\ENG64.SYS (Symantec Corporation)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20100224.002\IDSviA64.sys (Symantec Corporation)
DRV - (PCD5SRVC{048DBD20-445E8C82-05040104}) – C:\Program Files (x86)\Dell Support Center\HWDiag\bin\pcd5srvc_x64.pkms (PC-Doctor, Inc.)
DRV - (Tcpip) – C:\Windows\SysWOW64\wbem\tcpip.mof ()
DRV - (mpsdrv) – C:\Windows\SysWOW64\wbem\mpsdrv.mof ()
DRV - (pfc) – C:\Windows\SysWOW64\drivers\pfc.sys (Padus, Inc.)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{400F0BDB-6C49-43A4-BE1F-76D7327A604D}: C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\Mozilla [2009/12/26 13:38:11 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2009/12/31 04:54:13 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/02/21 08:30:51 | 000,000,000 | —D | M]

O1 HOSTS File: ([2010/03/02 06:53:22 | 000,380,280 | R— | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 13103 more lines…
O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg64.dll (Google Inc.)
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\yt.dll (Yahoo! Inc.)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Download Manager Browser Helper Object) - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\XEBDLHelper.dll (Protect Software GmbH)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Google Inc.)
O2 - BHO: (DCA BHO) - {B49699FC-1665-4414-A1CB-C4A2A4A13EEC} - C:\Program Files (x86)\Upromise\dca-bho.dll (Compete, Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (Upromise TurboSaver) - {EDC0F17F-F4B7-47e4-B73E-887FAEB376FA} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\YTSingleInstance.dll (Yahoo! Inc)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Upromise TurboSaver) - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn9\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [dellsupportcenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [nmctxth] C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe (Cisco Systems, Inc.)
O4 - HKLM..\Run: [ReminderApp] C:\Program Files (x86)\Nova Development\Greeting Card Factory Deluxe 8.0\ReminderApp.exe ()
O4 - HKLM..\Run: [YMailAdvisor] C:\Program Files (x86)\Yahoo!\Common\YMailAdvisor.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [Upromise Tray] C:\Program Files (x86)\Upromise\UpromiseTray.exe ()
O4 - HKCU..\Run: [Upromise Update] C:\Program Files (x86)\Upromise\dca-ua.exe (Compete Inc)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O9 - Extra Button: Upromise TurboSaver - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O9 - Extra 'Tools' menuitem : Upromise TurboSaver - {06E58E5E-F8CB-4049-991E-A41C03BD419E} - C:\Program Files (x86)\Upromise\upromisetoolbar.dll (Upromise, Inc.)
O9 - Extra Button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra 'Tools' menuitem : ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files (x86)\ieSpell\iespell.dll (Red Egg Software)
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe File not found
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: cinemanow.com ([]http in Trusted sites)
O15 - HKCU\..Trusted Domains: cinemanow.com ([]https in Trusted sites)
O15 - HKCU\..Trusted Domains: comcast.com ([www] * in Trusted sites)
O15 - HKCU\..Trusted Domains: comcast.net ([www] * in Trusted sites)
O15 - HKCU\..Trusted Domains: yahoo.com ([www] * in Trusted sites)
O15 - HKCU\..Trusted Domains: yahoo.com ([www] http in Local intranet)
O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} https://www-secure.symantec.com/techsupp/as…abs/tgctlcm.cab (Symantec Configuration Class)
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} https://support.dell.com/systemprofiler/SysProExe.CAB (WMI Class)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab (GMNRev Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (Reg Error: Value error.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\jpip {B92DD248-E3D5-4A92-B311-C9B841681455} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\amd64\puresp4.dll (Cisco Systems, Inc.)
O18:64bit: - Protocol\Handler\sidlet {B92DD248-E3D5-4A92-B311-C9B841681455} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\jpip {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\Express View\expressview.dll (Lizardtech Software)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\pure-go {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\puresp4.dll (Cisco Systems, Inc.)
O18 - Protocol\Handler\sidlet {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files (x86)\LizardTech\Express View\expressview.dll (Lizardtech Software)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program Files (x86)\Norton Security Suite\Engine\3.8.0.41\CoIEPlg.dll (Symantec Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~2\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img18.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img18.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/01 14:12:10 | 000,000,071 | -H– | M] () - I:\AUTORUN.INF – [ FAT32 ]
O32 - AutoRun File - [2008/11/05 13:19:36 | 000,000,052 | RHS- | M] () - I:\AUTORUN.FCB – [ FAT32 ]
O32 - AutoRun File - [2009/01/23 15:01:08 | 000,000,000 | —D | M] - I:\autorun – [ FAT32 ]
O33 - MountPoints2\{3bef2efd-d94f-11de-b010-00219b2dadd9}\Shell\AutoRun\command - "" = I:\setupSNK.exe – [2008/01/20 19:47:36 | 000,013,312 | —- | M] (Microsoft Corporation)
O33 - MountPoints2\{558571f3-efc8-11de-bd2e-00219b2dadd9}\Shell\AutoRun\command - "" = J:\setupSNK.exe – File not found
O33 - MountPoints2\{558571f8-efc8-11de-bd2e-00219b2dadd9}\Shell - "" = AutoRun
O33 - MountPoints2\{558571f8-efc8-11de-bd2e-00219b2dadd9}\Shell\AutoRun\command - "" = K:\LaunchU3.exe – File not found
O33 - MountPoints2\{7fd79b20-feb7-11de-91a5-00219b2dadd9}\Shell\AutoRun\command - "" = J:\setupSNK.exe – File not found
O33 - MountPoints2\{7fd79b23-feb7-11de-91a5-00219b2dadd9}\Shell - "" = AutoRun
O33 - MountPoints2\{7fd79b23-feb7-11de-91a5-00219b2dadd9}\Shell\AutoRun\command - "" = K:\LaunchU3.exe – File not found
O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\setupSNK.exe – [2008/01/20 19:47:36 | 000,013,312 | —- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/03/08 13:30:39 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\HPAppData
[2010/03/08 12:36:11 | 000,554,496 | —- | C] (OldTimer Tools) – C:\Users\charlenereeves\Desktop\OTL.exe
[2010/03/08 12:32:06 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\SP_BuyMyStore-COUPON-CODES[2]
[2010/03/08 12:20:03 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\SP_BuyMyStore-COUPON-CODES[1]
[2010/03/08 07:41:48 | 000,000,000 | —D | C] – C:\32788R22FWJFW
[2010/03/08 00:12:57 | 000,278,576 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symtdi.sys
[2010/03/08 00:12:56 | 000,402,992 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.sys
[2010/03/08 00:12:56 | 000,120,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symfw.sys
[2010/03/08 00:12:56 | 000,056,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndisv.sys
[2010/03/08 00:12:56 | 000,044,080 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndis.sys
[2010/03/08 00:12:56 | 000,043,568 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symids.sys
[2010/03/08 00:12:56 | 000,032,304 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.sys
[2010/03/08 00:12:55 | 000,583,296 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\cchpx64.sys
[2010/03/08 00:12:55 | 000,476,720 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.sys
[2010/03/08 00:12:55 | 000,334,384 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.sys
[2010/03/08 00:11:29 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64\0308000.029
[2010/03/07 21:09:00 | 000,126,312 | R— | C] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2010/03/07 21:09:00 | 000,107,368 | R— | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2010/03/07 21:08:59 | 000,034,152 | R— | C] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010/03/07 21:08:56 | 000,031,280 | R— | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\SymIMV.sys
[2010/03/07 21:08:51 | 000,172,592 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/03/07 21:08:22 | 000,583,296 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\cchpx64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symtdi.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symfw.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndisv.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndis.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symids.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.sys
[2010/03/07 21:07:58 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64
[2010/03/07 21:07:58 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\N360x64\0305020.00B
[2010/03/07 21:07:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Norton Security Suite
[2010/03/07 13:04:41 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\upromise
[2010/03/07 13:04:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\Upromise
[2010/03/07 06:35:48 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Cards
[2010/03/06 10:16:43 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\MemoriesOnTV
[2010/03/04 21:02:00 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\NISx64\1105000.07F
[2010/03/04 13:19:52 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Symantec Shared
[2010/03/04 13:19:52 | 000,000,000 | —D | C] – C:\Program Files\Symantec
[2010/03/04 13:19:15 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\NISx64
[2010/03/04 07:43:19 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\Picaboo
[2010/03/04 07:42:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Picaboo
[2010/03/03 14:13:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\Hewlett-Packard
[2010/03/03 14:12:52 | 000,235,008 | —- | C] (Hewlett Packard Corporation) – C:\Windows\SysWow64\hpzc35mu.dll
[2010/03/03 14:09:31 | 000,944,128 | —- | C] (Hewlett-Packard) – C:\Windows\SysNative\hpwwiax4.dll
[2010/03/03 14:09:31 | 000,359,256 | —- | C] (Hewlett-Packard) – C:\Windows\SysNative\hpzids40.dll
[2010/03/03 14:09:30 | 000,740,864 | —- | C] (Hewlett-Packard Co.) – C:\Windows\SysNative\hpwtscl3.dll
[2010/03/03 14:09:29 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\difxapi.dll
[2010/03/03 14:09:29 | 000,488,960 | —- | C] (Hewlett-Packard Co.) – C:\Windows\SysNative\hpovst11.dll
[2010/03/03 12:05:19 | 000,000,000 | —D | C] – C:\Windows\Downloaded Installations
[2010/02/28 21:10:41 | 001,032,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wininet.dll
[2010/02/28 21:10:38 | 000,834,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wininet.dll
[2010/02/28 21:10:26 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2010/02/28 21:10:22 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2010/02/28 21:10:21 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2010/02/28 21:10:19 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieencode.dll
[2010/02/28 21:10:19 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieencode.dll
[2010/02/28 21:10:09 | 000,422,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2010/02/28 21:10:08 | 000,380,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2010/02/28 20:28:19 | 000,000,000 | —D | C] – C:\inetpub
[2010/02/26 15:03:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\FoxyTunes
[2010/02/26 13:56:07 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\skypePM
[2010/02/26 13:51:59 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\Skype
[2010/02/26 13:51:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2010/02/26 13:51:16 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2010/02/26 13:51:10 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2010/02/25 19:13:44 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\The Journal Volumes
[2010/02/25 18:36:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\MSSoap
[2010/02/24 21:18:51 | 000,000,000 | —D | C] – C:\Windows\vbSkinner
[2010/02/24 09:43:15 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2010/02/24 09:43:13 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2010/02/24 09:41:21 | 000,153,376 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2010/02/24 09:41:21 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2010/02/24 09:41:21 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2010/02/24 06:37:23 | 000,286,720 | —- | C] (Indigo Rose Corporation) – C:\Windows\iun506.exe
[2010/02/24 06:37:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Family Picture Calendar
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\The Journal 5
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\The Journal 5
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\ProgramData\The Journal
[2010/02/24 06:25:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\DavidRM Software
[2010/02/24 06:09:12 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Roaming\MudCreek
[2010/02/24 06:09:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\MudCreek
[2010/02/24 06:01:32 | 000,000,000 | —D | C] – C:\GenDB
[2010/02/24 06:01:32 | 000,000,000 | —D | C] – C:\Program Files\CemeterySystemFiles
[2010/02/24 06:01:19 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\GenDB2[1]
[2010/02/24 05:54:41 | 000,115,920 | —- | C] (Microsoft Corporation) – C:\Windows\msinet.ocx
[2010/02/24 05:54:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\Protasm
[2010/02/23 21:14:58 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2010/02/23 21:14:58 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2010/02/23 21:14:58 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2010/02/23 21:14:57 | 000,539,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2010/02/23 21:14:55 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2010/02/23 21:14:55 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2010/02/23 21:14:55 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2010/02/23 21:14:54 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2010/02/23 21:14:53 | 000,526,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2010/02/23 21:14:53 | 000,518,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2010/02/23 21:14:53 | 000,347,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2010/02/23 21:14:53 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2010/02/23 21:14:53 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2010/02/23 21:14:53 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2010/02/23 21:14:52 | 000,460,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2010/02/23 21:14:52 | 000,152,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2010/02/23 21:14:52 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2010/02/23 21:14:51 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdrm.dll
[2010/02/23 21:13:02 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2010/02/23 21:13:02 | 001,696,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2010/02/23 21:13:01 | 000,032,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Apphlpdm.dll
[2010/02/23 21:13:01 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Apphlpdm.dll
[2010/02/23 21:13:00 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\SysWow64\GameUXLegacyGDFs.dll
[2010/02/23 21:13:00 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\SysNative\GameUXLegacyGDFs.dll
[2010/02/23 19:48:30 | 000,000,000 | —D | C] – C:\Windows\BDOSCAN8
[2010/02/23 07:46:29 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\New Folder
[2010/02/21 07:53:12 | 000,000,000 | —D | C] – C:\ProgramData\HP Product Assistant
[2010/02/20 17:27:41 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\a
[2010/02/16 20:23:56 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Desktop\Hummie
[2010/02/16 10:15:29 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\DID
[2010/02/15 07:54:56 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Smart Art Cards
[2010/02/14 16:29:05 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Apple Computer
[2010/02/14 16:27:04 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Apple
[2010/02/13 17:56:01 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Tift
[2010/02/13 17:49:11 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Tuts - Copy
[2010/02/13 17:45:45 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Animals
[2010/02/13 17:38:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Linda
[2010/02/13 17:26:57 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Frames
[2010/02/13 17:19:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Sayings
[2010/02/13 17:17:43 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Embellishments
[2010/02/13 17:11:28 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Flowers
[2010/02/13 17:01:39 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Picture Embellishments
[2010/02/13 17:01:15 | 000,000,000 | —D | C] – C:\Users\charlenereeves\Documents\Papers
[2010/02/13 10:58:03 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\Adobe
[2010/02/12 14:46:47 | 000,000,000 | —D | C] – C:\Users\charlenereeves\AppData\Local\ICS
[2010/02/12 14:32:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Symantec Shared
[2010/02/12 14:13:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\NortonInstaller
[2010/02/11 18:33:22 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2010/02/11 18:29:10 | 000,021,504 | —- | C] (Doug Knox) – C:\Users\charlenereeves\Desktop\SysRestorePoint.exe
[2010/02/10 11:30:00 | 001,570,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2010/02/10 11:29:59 | 001,314,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2010/02/10 11:29:59 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iyuv_32.dll
[2010/02/10 11:29:59 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvidc32.dll
[2010/02/10 11:29:59 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msyuv.dll
[2010/02/10 11:29:59 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrle32.dll
[2010/02/10 11:29:59 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsbyuv.dll
[2010/02/10 11:29:58 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2010/02/10 11:29:58 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2010/02/10 11:29:58 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2010/02/10 11:29:39 | 004,698,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2010/02/09 13:27:38 | 000,000,000 | —D | C] – C:\ProgramData\Caspedia

========== Files - Modified Within 30 Days ==========

[2010/03/08 17:30:33 | 009,699,328 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT
[2010/03/08 17:24:18 | 000,000,452 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{E5D3F2D6-36AB-4812-A910-8EE432F78A3A}.job
[2010/03/08 16:54:18 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/03/08 16:10:32 | 000,003,840 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/03/08 16:10:32 | 000,003,840 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/03/08 15:40:00 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/03/08 12:38:34 | 000,000,254 | —- | M] () – C:\Users\charlenereeves\Desktop\SpywareMalwareVirus RemovalInfections Removal.url
[2010/03/08 12:36:16 | 000,554,496 | —- | M] (OldTimer Tools) – C:\Users\charlenereeves\Desktop\OTL.exe
[2010/03/08 12:23:31 | 001,674,990 | —- | M] () – C:\Users\charlenereeves\Desktop\SP_BuyMyStore-COUPON-CODES.zip
[2010/03/08 10:22:42 | 000,997,338 | —- | M] () – C:\Users\charlenereeves\Documents\ww2-participation.pdf
[2010/03/08 06:50:01 | 000,000,808 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/03/08 06:13:27 | 002,152,562 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\Cat.DB
[2010/03/08 06:11:13 | 000,002,287 | —- | M] () – C:\Users\Public\Desktop\Norton Security Suite.lnk
[2010/03/08 06:11:00 | 000,065,536 | —- | M] () – C:\Windows\SysNative\Ikeext.etl
[2010/03/08 06:10:33 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/03/08 06:10:28 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/03/08 06:08:29 | 000,524,288 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT{528e1bda-0b48-11df-b30d-00219b2dadd9}.TMContainer00000000000000000001.regtrans-ms
[2010/03/08 06:08:29 | 000,065,536 | -HS- | M] () – C:\Users\charlenereeves\NTUSER.DAT{528e1bda-0b48-11df-b30d-00219b2dadd9}.TM.blf
[2010/03/08 06:08:17 | 002,891,551 | -H– | M] () – C:\Users\charlenereeves\AppData\Local\IconCache.db
[2010/03/08 02:36:19 | 002,152,562 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\Cat.DB
[2010/03/08 00:11:30 | 000,000,172 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\isolate.ini
[2010/03/07 21:08:42 | 000,172,592 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/03/07 21:08:42 | 000,007,440 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/03/07 21:08:42 | 000,000,855 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/03/07 21:08:22 | 000,583,296 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\cchpx64.sys
[2010/03/07 21:08:22 | 000,583,296 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\cchpx64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.sys
[2010/03/07 21:08:22 | 000,476,720 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.sys
[2010/03/07 21:08:22 | 000,402,992 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symtdi.sys
[2010/03/07 21:08:22 | 000,278,576 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symtdi.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symfw.sys
[2010/03/07 21:08:22 | 000,120,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symfw.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndisv.sys
[2010/03/07 21:08:22 | 000,056,880 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndisv.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symndis.sys
[2010/03/07 21:08:22 | 000,044,080 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symndis.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\symids.sys
[2010/03/07 21:08:22 | 000,043,568 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symids.sys
[2010/03/07 21:08:22 | 000,034,152 | R— | M] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.sys
[2010/03/07 21:08:22 | 000,032,304 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.sys
[2010/03/07 21:08:22 | 000,031,280 | R— | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SymIMV.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.sys
[2010/03/07 21:08:21 | 000,334,384 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.sys
[2010/03/07 21:08:16 | 000,126,312 | R— | M] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2010/03/07 21:08:16 | 000,107,368 | R— | M] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2010/03/07 21:08:10 | 000,003,373 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA.inf
[2010/03/07 21:08:10 | 000,003,373 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,172 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\isolate.ini
[2010/03/07 21:07:58 | 000,009,415 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.cat
[2010/03/07 21:07:58 | 000,009,415 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\symnetv.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symnetv.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,362 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.CAT
[2010/03/07 21:07:58 | 000,007,362 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\bhdrvx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | M] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.cat
[2010/03/07 19:00:43 | 002,152,318 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1105000.07F\Cat.DB
[2010/03/07 06:13:46 | 000,002,761 | —- | M] () – C:\Users\Public\Desktop\Greeting Card Factory Deluxe.lnk
[2010/03/06 10:52:18 | 000,000,198 | —- | M] () – C:\Users\charlenereeves\Desktop\Yahoo! Mail (charlenereeves2004).url
[2010/03/06 08:26:36 | 000,434,448 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/03/05 08:46:48 | 000,003,223 | —- | M] () – C:\Users\charlenereeves\Desktop\Bible Study Pro.lnk
[2010/03/05 08:06:55 | 000,130,992 | —- | M] () – C:\Users\charlenereeves\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/03/05 07:30:35 | 000,002,064 | —- | M] () – C:\Users\Public\Desktop\MemoriesOnTV.lnk
[2010/03/04 15:18:50 | 000,022,755 | —- | M] () – C:\Windows\hpqins15.dat
[2010/03/04 14:57:31 | 000,177,755 | —- | M] () – C:\Windows\hpwins20.dat
[2010/03/04 08:57:08 | 000,000,896 | —- | M] () – C:\Users\Public\Desktop\HP Photo Creations.lnk
[2010/03/04 08:50:10 | 000,019,529 | —- | M] () – C:\Windows\hpqins13.dat
[2010/03/04 08:49:14 | 000,002,030 | —- | M] () – C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2010/03/04 07:43:01 | 000,001,860 | —- | M] () – C:\Users\Public\Desktop\Picaboo.lnk
[2010/03/03 14:16:53 | 000,000,179 | —- | M] () – C:\Windows\win.ini
[2010/03/02 06:53:22 | 000,380,280 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2010/03/02 06:49:41 | 000,007,620 | —- | M] () – C:\Users\charlenereeves\AppData\Local\d3d9caps.dat
[2010/03/01 18:18:40 | 000,055,808 | —- | M] () – C:\Users\charlenereeves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/01 12:23:23 | 000,160,650 | —- | M] () – C:\Windows\hphins33.dat
[2010/02/28 20:44:06 | 000,807,962 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/02/28 20:44:06 | 000,691,546 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/02/28 20:44:06 | 000,136,268 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/02/28 19:34:04 | 000,000,212 | —- | M] () – C:\Users\charlenereeves\Desktop\Replying in IE8 getting 404 errors - What the Tech.url
[2010/02/27 21:55:34 | 000,088,064 | —- | M] () – C:\Users\charlenereeves\Documents\Untitled Slide Show.sss
[2010/02/27 08:09:59 | 000,000,191 | —- | M] () – C:\Users\charlenereeves\Desktop\How to determine and to recover from Winsock2 corruption in Windows Server 2003, in Windows XP, and in Windows Vista.url
[2010/02/26 13:56:09 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2010/02/26 01:48:52 | 000,001,684 | —- | M] () – C:\Users\charlenereeves\Desktop\CCleaner.lnk
[2010/02/26 01:39:25 | 000,000,418 | —- | M] () – C:\Windows\tasks\EasyShare Registration Task.job
[2010/02/25 18:37:27 | 000,001,960 | —- | M] () – C:\Users\Public\Desktop\Kodak EasyShare.lnk
[2010/02/24 06:36:57 | 000,286,720 | —- | M] (Indigo Rose Corporation) – C:\Windows\iun506.exe
[2010/02/24 06:25:34 | 000,001,024 | —- | M] () – C:\Users\Public\Desktop\The Journal 5.lnk
[2010/02/24 05:49:34 | 000,000,002 | —- | M] () – C:\Windows\SysWow64\MedMemoryDrive.ini
[2010/02/21 19:48:23 | 000,001,877 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/02/21 08:31:17 | 000,023,145 | —- | M] () – C:\Windows\hpqins15.dat.temp
[2010/02/21 07:53:00 | 000,001,178 | —- | M] () – C:\Users\Public\Desktop\HP Solution Center.lnk
[2010/02/17 09:50:29 | 000,380,176 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts.20100302-065322.backup
[2010/02/13 19:01:23 | 000,001,460 | —- | M] () – C:\Users\charlenereeves\AppData\Local\d3d9caps64.dat
[2010/02/13 09:35:12 | 000,019,529 | —- | M] () – C:\Windows\hpqins13.dat.temp
[2010/02/12 13:50:42 | 000,002,560 | —- | M] () – C:\Windows\_MSRSTRT.EXE
[2010/02/12 13:39:42 | 000,001,908 | —- | M] () – C:\Users\Public\Desktop\HP Print Diagnostic Utility.lnk
[2010/02/11 18:29:10 | 000,021,504 | —- | M] (Doug Knox) – C:\Users\charlenereeves\Desktop\SysRestorePoint.exe
[2010/02/10 22:00:14 | 000,378,474 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts.20100217-095029.backup

========== Files Created - No Company Name ==========

[2010/03/08 12:38:33 | 000,000,254 | —- | C] () – C:\Users\charlenereeves\Desktop\SpywareMalwareVirus RemovalInfections Removal.url
[2010/03/08 12:23:18 | 001,674,990 | —- | C] () – C:\Users\charlenereeves\Desktop\SP_BuyMyStore-COUPON-CODES.zip
[2010/03/08 10:22:40 | 000,997,338 | —- | C] () – C:\Users\charlenereeves\Documents\ww2-participation.pdf
[2010/03/08 06:11:33 | 002,152,562 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\Cat.DB
[2010/03/08 00:12:57 | 000,009,412 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\symnetv.cat
[2010/03/08 00:12:57 | 000,001,481 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNetV.inf
[2010/03/08 00:12:56 | 000,009,415 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.cat
[2010/03/08 00:12:56 | 000,007,401 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.cat
[2010/03/08 00:12:56 | 000,007,399 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA64.cat
[2010/03/08 00:12:56 | 000,003,373 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymEFA.inf
[2010/03/08 00:12:56 | 000,001,480 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\SymNet.inf
[2010/03/08 00:12:56 | 000,001,421 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtspx64.inf
[2010/03/08 00:12:55 | 000,007,410 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.cat
[2010/03/08 00:12:55 | 000,007,345 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.cat
[2010/03/08 00:12:55 | 000,001,836 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\ccHPx64.inf
[2010/03/08 00:12:55 | 000,001,437 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\srtsp64.inf
[2010/03/08 00:12:55 | 000,000,640 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.inf
[2010/03/08 00:12:54 | 000,007,362 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\BHDrvx64.CAT
[2010/03/08 00:11:29 | 000,000,172 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0308000.029\isolate.ini
[2010/03/07 21:09:25 | 002,152,562 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\Cat.DB
[2010/03/07 21:08:51 | 000,007,440 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/03/07 21:08:51 | 000,000,855 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/03/07 21:08:34 | 000,002,287 | —- | C] () – C:\Users\Public\Desktop\Norton Security Suite.lnk
[2010/03/07 21:08:10 | 000,003,373 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA.inf
[2010/03/07 21:08:10 | 000,001,836 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.inf
[2010/03/07 21:08:10 | 000,001,481 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNetV.inf
[2010/03/07 21:08:10 | 000,001,480 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.inf
[2010/03/07 21:08:10 | 000,001,437 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.inf
[2010/03/07 21:08:10 | 000,001,421 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.inf
[2010/03/07 21:08:10 | 000,000,640 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\BHDrvx64.inf
[2010/03/07 21:08:10 | 000,000,172 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\isolate.ini
[2010/03/07 21:07:58 | 000,009,415 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymNet.cat
[2010/03/07 21:07:58 | 000,009,412 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\symnetv.cat
[2010/03/07 21:07:58 | 000,007,410 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtsp64.cat
[2010/03/07 21:07:58 | 000,007,401 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\srtspx64.cat
[2010/03/07 21:07:58 | 000,007,399 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\SymEFA64.cat
[2010/03/07 21:07:58 | 000,007,362 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\bhdrvx64.cat
[2010/03/07 21:07:58 | 000,007,345 | —- | C] () – C:\Windows\SysNative\drivers\N360x64\0305020.00B\ccHPx64.cat
[2010/03/06 10:52:18 | 000,000,198 | —- | C] () – C:\Users\charlenereeves\Desktop\Yahoo! Mail (charlenereeves2004).url
[2010/03/05 07:30:34 | 000,002,064 | —- | C] () – C:\Users\Public\Desktop\MemoriesOnTV.lnk
[2010/03/05 07:27:21 | 000,002,761 | —- | C] () – C:\Users\Public\Desktop\Greeting Card Factory Deluxe.lnk
[2010/03/05 06:48:58 | 002,152,318 | —- | C] () – C:\Windows\SysNative\drivers\NISx64\1105000.07F\Cat.DB
[2010/03/04 08:49:14 | 000,002,030 | —- | C] () – C:\Users\Public\Desktop\HP Photosmart Essential 3.5.lnk
[2010/03/04 07:43:01 | 000,001,860 | —- | C] () – C:\Users\Public\Desktop\Picaboo.lnk
[2010/03/03 14:09:48 | 000,177,755 | —- | C] () – C:\Windows\hpwins20.dat
[2010/03/03 14:09:48 | 000,002,428 | —- | C] () – C:\Windows\hpwmdl20.dat
[2010/02/28 19:34:03 | 000,000,212 | —- | C] () – C:\Users\charlenereeves\Desktop\Replying in IE8 getting 404 errors - What the Tech.url
[2010/02/27 21:55:34 | 000,088,064 | —- | C] () – C:\Users\charlenereeves\Documents\Untitled Slide Show.sss
[2010/02/27 08:09:59 | 000,000,191 | —- | C] () – C:\Users\charlenereeves\Desktop\How to determine and to recover from Winsock2 corruption in Windows Server 2003, in Windows XP, and in Windows Vista.url
[2010/02/26 13:56:09 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/02/25 18:33:11 | 000,000,418 | —- | C] () – C:\Windows\tasks\EasyShare Registration Task.job
[2010/02/24 06:25:34 | 000,001,024 | —- | C] () – C:\Users\Public\Desktop\The Journal 5.lnk
[2010/02/24 05:44:20 | 000,000,002 | —- | C] () – C:\Windows\SysWow64\MedMemoryDrive.ini
[2010/02/21 07:53:00 | 000,001,178 | —- | C] () – C:\Users\Public\Desktop\HP Solution Center.lnk
[2010/02/21 07:40:42 | 000,160,650 | —- | C] () – C:\Windows\hphins33.dat
[2010/02/13 08:28:20 | 000,160,685 | —- | C] () – C:\Windows\hphins33.dat.temp
[2010/02/12 13:50:41 | 000,002,560 | —- | C] () – C:\Windows\_MSRSTRT.EXE
[2010/02/12 13:39:42 | 000,001,908 | —- | C] () – C:\Users\Public\Desktop\HP Print Diagnostic Utility.lnk
[2010/02/11 18:03:06 | 000,003,223 | —- | C] () – C:\Users\charlenereeves\Desktop\Bible Study Pro.lnk
[2010/02/05 15:46:58 | 000,070,966 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vcredistUI05EA.txt
[2010/02/05 15:46:27 | 000,070,966 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vcredistUI0585.txt
[2010/02/02 14:13:42 | 000,000,036 | —- | C] () – C:\Users\charlenereeves\AppData\Local\housecall.guid.cache
[2010/01/31 18:41:57 | 000,029,216 | —- | C] () – C:\Users\charlenereeves\AppData\Roaming\UserTile.png
[2010/01/16 08:58:59 | 000,000,426 | —- | C] () – C:\Windows\BRWMARK.INI
[2010/01/16 08:57:58 | 000,000,000 | —- | C] () – C:\Windows\brmx2001.ini
[2010/01/16 08:57:57 | 000,000,114 | —- | C] () – C:\Windows\SysWow64\brlmw03a.ini
[2010/01/16 08:57:57 | 000,000,011 | —- | C] () – C:\Windows\BRVIDEO.INI
[2010/01/16 08:57:20 | 000,000,356 | —- | C] () – C:\Windows\Brownie.ini
[2010/01/12 16:03:31 | 008,673,792 | —- | C] () – C:\ProgramData\atscie.msi
[2009/12/30 07:27:38 | 000,890,268 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vsto_ret20MSI3CC8.txt
[2009/12/30 07:27:35 | 000,012,152 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_vsto_ret20UI3CC8.txt
[2009/12/26 13:45:52 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\mfc45.dll
[2009/12/02 07:50:39 | 000,000,000 | —- | C] () – C:\Windows\Scrapbook MAX!.INI
[2009/11/29 21:49:58 | 000,000,139 | —- | C] () – C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2009/11/29 08:46:13 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/11/29 08:44:48 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/11/25 12:32:26 | 000,524,288 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TMContainer00000000000000000002.regtrans-ms
[2009/11/25 12:32:26 | 000,524,288 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TMContainer00000000000000000001.regtrans-ms
[2009/11/25 12:32:26 | 000,262,144 | —- | C] () – C:\ProgramData\ntuser.dat
[2009/11/25 12:32:26 | 000,065,536 | -HS- | C] () – C:\ProgramData\ntuser.dat{ed8f3f55-d9c7-11de-af9e-00219b2dadd9}.TM.blf
[2009/11/25 12:32:26 | 000,005,120 | -H– | C] () – C:\ProgramData\ntuser.dat.LOG1
[2009/11/25 12:32:26 | 000,000,000 | -H– | C] () – C:\ProgramData\ntuser.dat.LOG2
[2009/11/25 12:11:40 | 000,039,701 | —- | C] () – C:\ProgramData\hpzinstall.log
[2009/11/25 07:43:25 | 001,880,934 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_NET_Framework35_x64_MSI1A3F.txt
[2009/11/25 07:42:49 | 000,175,881 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
[2009/11/25 07:42:43 | 000,136,426 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_dotnetfx35install.txt
[2009/11/25 07:42:43 | 000,007,906 | —- | C] () – C:\Users\charlenereeves\AppData\Local\uxeventlog.txt
[2009/11/25 07:42:43 | 000,000,002 | —- | C] () – C:\Users\charlenereeves\AppData\Local\dd_dotnetfx35error.txt
[2009/11/25 07:37:29 | 000,786,440 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2009/11/25 06:51:02 | 000,021,504 | —- | C] () – C:\Windows\SysWow64\WBCustomizer.dll
[2009/11/25 06:35:29 | 000,000,000 | —- | C] () – C:\Users\charlenereeves\AppData\Roaming\wklnhst.dat
[2009/11/24 23:08:37 | 000,000,171 | —- | C] () – C:\Windows\QUICKEN.INI
[2009/11/24 17:40:06 | 000,007,620 | —- | C] () – C:\Users\charlenereeves\AppData\Local\d3d9caps.dat
[2009/11/24 16:38:21 | 000,020,992 | —- | C] () – C:\Windows\jestertb.dll
[2009/11/24 16:19:58 | 000,001,460 | —- | C] () – C:\Users\charlenereeves\AppData\Local\d3d9caps64.dat
[2009/11/24 15:38:24 | 000,055,808 | —- | C] () – C:\Users\charlenereeves\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/01/20 18:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini

========== Custom Scans ==========

< Processes >

< explorer.exe >

< >

< :Services >

< >

< :Reg >

< >

< :Files >

< >

< >

< :Commands >

< [RESETHOSTS] >

< [purity] >

< [emptytemp] >

< [start explorer] >

< [Reboot] >

========== Alternate Data Streams ==========

@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:5D432CE3
< End of report >

Attachments:

📎OTL.Txt

[Resolved] Spyware>Malware>Virus Removal>Infections Removal

✨ Ask AI

Ask AI